Hi all.

 

I had configured the integration between WSO2 AM 1.9.1 and WSO2 identity
server 5.0.0, the identity server act as key manager. This scenario work
just fine.

 

Now, when I try to configure the integration between WSO2 AM 1.9.1 and WSO2
DAS 3.0.0 I need to have access to the admin-dashboard jaggery app inside
WSO2 AM server but the admin/admin credential not work.

 

I check the request/response soap message between AM and IS and the admin
user is authenticated in WSO2 Identity server, as you can see:

 

request to authenticate admin user:

[2016-01-10 22:41:05,116] DEBUG -  >> "<soap:Envelope
xmlns:soap="http://www.w3.org/2003/05/soap-envelope";
xmlns:aut="http://authentication.services.core.carbon.wso2.org";><soap:Header
/><soap:Body><aut:login><aut:username>admin</aut:username><aut:password>admi
n</aut:password><aut:remoteAddress>localhost</aut:remoteAddress></aut:login>
</soap:Body></soap:Envelope>" {httpclient.wire.content}

 

response:

[2016-01-10 22:41:05,132] DEBUG -  << "<?xml version="1.0"
encoding="UTF-8"?><soapenv:Envelope
xmlns:soapenv="http://www.w3.org/2003/05/soap-envelope";><soapenv:Body><ns:lo
ginResponse
xmlns:ns="http://authentication.services.core.carbon.wso2.org";><ns:return>tr
ue</ns:return></ns:loginResponse></soapenv:Body></soapenv:Envelope>"
{httpclient.wire.content}

 

 

And the request to get the list of roles also work fine:

 

requesto to get the list of roles:

[2016-01-10 22:41:05,640] DEBUG -  >> "<?xml version="1.0"
encoding="UTF-8"?><soapenv:Envelope
xmlns:soapenv="http://www.w3.org/2003/05/soap-envelope";><soapenv:Body><ser:g
etRoleListOfUser
xmlns:ser="http://service.ws.um.carbon.wso2.org";><ser:userName>admin</ser:us
erName></ser:getRoleListOfUser></soapenv:Body></soapenv:Envelope>"
{httpclient.wire.content}

 

 

response:

[2016-01-10 22:41:05,671] DEBUG -  << "TF-8"?><soapenv:Envelope
xmlns:soapenv="http://www.w3.org/2003/05/soap-envelope";><soapenv:Body><ns:ge
tRoleListOfUserResponse xmlns:ns="http://service.ws.um.carbon.wso2.org";
xmlns:ax2724="http://common.mgt.user.carbon.wso2.org/xsd";
xmlns:ax2721="http://tenant.core.user.carbon.wso2.org/xsd";
xmlns:ax2717="http://core.user.carbon.wso2.org/xsd";
xmlns:ax2718="http://api.user.carbon.wso2.org/xsd";
xmlns:ax2726="http://dao.service.ws.um.carbon.wso2.org/xsd";><ns:return>Inter
nal/admin</ns:return><ns:return>Internal/subscriber</ns:return><ns:return>In
ternal/WSO2.ORG_admin_DefaultApplication_PRODUCTION</ns:return><ns:return>In
ternal/WSO2.ORG_admin_DefaultApplication_SANDBOX</ns:return><ns:return>Inter
nal/everyone</ns:return></ns:getRoleListOfUserResponse></soapenv:Body></soap
env:Envelope>" {httpclient.wire.content}

 

But in this case I see that adminĀ“s roles list is this:

Internal/admin

Internal/subscriber

Internal/WSO2.ORG_admin_DefaultApplication_PRODUCTION

Internal/WSO2.ORG_admin_DefaultApplication_SANDBOX

Internal/everyone

 

And in the site.json config file the roles permit are:

admin

subscriber

 

    "allowedRole":"admin",

    "allowedRoles":"admin,subscriber,",

 

To authenticate the user admin I had to modified the list of roles to
include Internal/admin as a valid rol:

 

    "allowedRole":"admin",

    "allowedRoles":"admin,subscriber,Internal/admin",

 

Regards,

                Jorge.

_______________________________________________
Dev mailing list
Dev@wso2.org
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to