Re: Apples OpenDirectory

On 30/09/20 09:43, Henri44 wrote: > Hi Francesco, > > I fix it in the meantime, thanks, will now try the password stuff. Glad to hear this! Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncop

Re: Apples OpenDirectory

u write above, it seems you will either need to inject some custom logic into the pull process [2] or to built a whole different strategy around Kerberos. HTH Regards. [1] https://images.apple.com/server/docs/Open_Directory_TB_v10.4.pdf [2] http://syncope.apache.org/docs/2.1/reference-

Re: User group membership in Realm / sub-realm

group). > > Do you an an Idea of how should I do this kind of scenario ? Hi, you might want to have a look at http://syncope.apache.org/docs/2.1/reference-guide.html#realms More specifically: A User or an Any Object can be members of Groups in the same realm or in one of the parent realms.

Re: Events for privilege updates

On 22/09/20 09:23, Anmol Sharma wrote: > Hi Francisco, > > I was able to verify that adding these annotations works and helps me > intercept the logic layer for application privilege updates. Glad to hear this! > On Wed, Sep 9, 2020, 4:29 AM Francesco Chicchiriccò <mailto:i

[CVE-2020-11977] Apache Syncope: Remote Code Execution via Flowable workflow definition

Description: When the Flowable extension is enabled, an administrator with workflow entitlements can use Shell Service Tasks to perform malicious operations, including but not limited to file read, file write, and code execution. Severity: Low Vendor: The Apache Software Foundation Affects:

[ANN] Apache Syncope 2.0.16

The Apache Syncope team is pleased to announce the release of Syncope 2.0.16 Apache Syncope is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology . The release will be available within 24h from:

[ANN] Apache Syncope 2.1.7

The Apache Syncope team is pleased to announce the release of Syncope 2.1.7 Apache Syncope is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology . The release will be available within 24h from: https://syncope.apache.org/downloads

Re: Events for privilege updates

dler] *cannot extend > concrete aspect* [org.apache.syncope.core.logic.LogicInvocationHandler] > > Do you think there could be a workaround here or is hijacking > /LogicInvocationHandler/ the only option under this circumstance? > > Thanks, > Anmol > > On Sat, 5 Sep 2020 at 12:06, Francesco Chicchiric

Re: Events for privilege updates

apache/syncope/blob/syncope-2.1.6/core/logic/src/main/java/org/apache/syncope/core/logic/ApplicationLogic.java#L85 > [2]  > https://github.com/apache/syncope/blob/syncope-2.1.6/core/logic/src/main/java/org/apache/syncope/core/logic/LogicInvocationHandler.java#L55 > > Anmol > > On

Re: CSFR Issue

ou had was the incorrect location, stored in the db, of the connector bundles, e.g. /opt/syncope/bundles now. Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMai

Re: Events for privilege updates

. [1] https://github.com/apache/syncope/blob/syncope-2.1.6/core/logic/src/main/java/org/apache/syncope/core/logic/ApplicationLogic.java#L85 [2] https://github.com/apache/syncope/blob/syncope-2.1.6/core/logic/src/main/java/org/apache/syncope/core/logic/LogicInvocationHandler.java#L55 -- Francesco Chi

Re: CSFR Issue

laced the setting. What deployment directory [1] did you set for config files (normally /opt/syncope/conf) during build? Regards. [1] http://syncope.apache.org/docs/2.1/reference-guide.html#deployment-directories -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tira

Re: Identity management and custom LDAP schema

implementations [4]. Hope this clarifies. Regards. [1] http://syncope.apache.org/docs/2.1/reference-guide.html#type-management [2] http://syncope.apache.org/docs/2.1/reference-guide.html#realms [3] http://syncope.apache.org/docs/2.1/reference-guide.html#mapping [4] http://syncope.apache.org/docs/2.1

Re: Maven build instead of installer, Kerberos DB support

relies on ConnId for provisioning connectors, and AFAICT there is no connector (yet?) for Kerberos. Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Generatinmg syncope rest client by OPENAPI/swagger from openapi.json - PolicyTO model is missing in generated code

e real issue is that the related REST service is heavily using Java generics: see https://github.com/apache/syncope/blob/2_1_X/common/rest-api/src/main/java/org/apache/syncope/common/rest/api/service/PolicyService.java and I am not sure how this could be better handled in OpenAPI. I have gen

Re: error on maven gui install

On 17/07/20 10:58, Francesco Chicchiriccò wrote: > On 17/07/20 02:32, Stephen Ingram wrote: >> On Thu, Jul 16, 2020 at 2:01 PM Stephen Ingram > <mailto:sbing...@gmail.com>> wrote: >> >> I'm trying to use the graphical install method and seeing the follo

Re: error on maven gui install

gs. Am > I correct or is there altogether something else wrong here? Bug confirmed: https://issues.apache.org/jira/browse/SYNCOPE-1581 Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: standalone demo stops working three days after install

emory configuration for persistence: this implies that any configuration made or user created are cleared out when Tomcat is shut down. Debian, Docker and especially Maven are recommended for production. Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: compatibility with OpenJDK 11/CentOS 8

X/getting-started.html#create-project FYI Syncope 3.0.0 (next major version) will require JDK 11. Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.a

Re: Logging in Syncope scripts

rence-guide.html#audit [2] http://syncope.apache.org/docs/2.1/reference-guide.html#architecture -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Create maven syncope archetype project for 2.1.7-SNAPSHOT

i >do not >see the syncope archetype pom any where in the maven repo. https://ci.apache.org/projects/syncope/2_1_X/getting-started.html#maven-project Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope

Re: Current plans for Syncope 3.0

.org/confluence/display/SYNCOPE/%5BDISCUSS%5D+Syncope+3.0 -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Relationship data in provision rules mapping

from the test case we added alongside the fix: https://github.com/apache/syncope/blob/2_1_X/fit/core-reference/src/test/java/org/apache/syncope/fit/core/PropagationTaskITCase.java#L582-L586 Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at T

Re: Relationship data in provision rules mapping

make and the stacktrace? The fix should be quite simple; however, in order to get it, you will have to switch to latest 2.1.7-SNAPSHOT Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Relationship data in provision rules mapping

uot;true", > "purpose": "PROPAGATION", > "propagationJEXLTransformer": null, >

Re: Configure Syncope-console to accept logged in identity/username?

also be) compatible with OpenID, but similar to the > SAML situation above, I don't see where we add the new OIDC Provider > ("Extensions" -> "OIDC Client" and add a new OIDC Provider by clicking on the > "+" icon.)? > > Please advise. > > Tha

Re: Deploying mapping and topology changes - without MasterContent.xml

Name\":\"string\",\"bundleName\":\"string\",\"version\":\"string\",\"displayName\":\"string\",\"connRequestTimeout\":0,\"poolConf\":{\"maxObjects\":0,\"minIdle\":0,\"maxIdle\":0,\

Re: Configure Syncope-console to accept logged in identity/username?

ncope-console) be > configured to accept that logged-in user automatically (i.e., "identity > assertion")? > > Thanks, > Jim -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: What approach to do this in Syncope?

asty; I was honestly surprised that you were able the Javadocs about ItemTransformer ... Regards. > My apologies for having to say that... > > Jim > > On Saturday, May 2, 2020, 10:26:36 AM EDT, Francesco Chicchiriccò > wrote: > > > Hi, > for some reason it see

Re: What approach to do this in Syncope?

en > - "Something" (Java?) that take the attribute value and calculates the 2 new > attribute values and pushes those values into the realm > > But I am not sure what that "Something" is in Syncope? > > > Thanks, > Jim -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: 2.1.6 and/vs. 2.0.15 ?

"? > > Thanks, > Jim -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

[CVE-2020-1961] Server-Side Template Injection on mail templates

Description: Vulnerability to Server-Side Template Injection on Mail templates enabling attackers to inject arbitrary JEXL expressions, leading to Remote Code Execution (RCE) was discovered. Severity: Important Vendor: The Apache Software Foundation Affects: 2.0.X releases prior to 2.0.15

[CVE-2020-1959] Multiple Remote Code Execution Vulnerabilities

Description: A Server-Side Template Injection was identified in Syncope enabling attackers to inject arbitrary Java EL expressions, leading to an unauthenticated Remote Code Execution (RCE) vulnerability. Apache Syncope uses Java Bean Validation (JSR 380) custom constraint validators. When

[CVE-2019-17557] Enduser UI XSS

Description: It was found that the EndUser UI login page reflects the successMessage parameters. By this mean, a user accessing the Enduser UI could execute javascript code from URL query string. Severity: Medium Vendor: The Apache Software Foundation Affects: 2.0.X releases prior to 2.0.15

[ANN] Apache Syncope 2.0.15

The Apache Syncope team is pleased to announce the release of Syncope 2.0.15 Apache Syncope is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology . The release will be available within 24h from:

[ANN] Apache Syncope 2.1.6

The Apache Syncope team is pleased to announce the release of Syncope 2.1.6 Apache Syncope is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology . The release will be available within 24h from: https://syncope.apache.org/downloads

Re: Edit a user with more than 10 memberships causes timeout

On 28/04/20 18:47, roccom wrote: > Upgrading to a newer version fixed this for us. We were on 2.1.2 and now are > on 2.1.5. I think this issue was reported and fixed in 2.1.3. Glad to hear this. Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/

Re: Cannot access attributes in custom pull action

t of returned attributes by overriding the new moreAttrsToGet() method: see https://github.com/apache/syncope/blob/2_1_X/core/provisioning-api/src/main/java/org/apache/syncope/core/provisioning/api/pushpull/PullActions.java#L45 Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http:

Re: Cannot access attributes in custom pull action

nException { You'll find everything in the "delta" object, namely: * delta.getUid() * delta.getObject().getName() * delta.getObject().getAttributes() Javadoc: http://connid.tirasa.net/apidocs/1.5/org/identityconnectors/framework/common/objects/SyncDelta.html HTH Regards. > [...] -- Frances

Re: Mapping external resource with ACCOUNT and GROUP data

to migrate to latest stable 2.1.5 - for which you should look at https://github.com/apache/syncope/blob/syncope-2.1.5/core/provisioning-java/src/main/java/org/apache/syncope/core/provisioning/java/pushpull/LDAPMembershipPullActions.java instead. HTH Regards. -- Francesco Chicchiriccò Tirasa - Open

Re: Mapping external resource with ACCOUNT and GROUP data

p://syncope.apache.org/docs/reference-guide.html#propagationactions -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Getting (possible) threadpool error when running tasks with larger sets of users?

.commit(EntityManagerImpl.java:669) > ~[openjpa-persistence-3.1.0.jar:3.1.0] >     at > org.springframework.orm.jpa.JpaTransactionManager.doCommit(JpaTransactionManager.java:532) > ~[spring-orm-5.1.9.RELEASE.jar:5.1.9.RELEASE] >     ... 14 more > > Has anyone seen this before?  We think that it might be a threadpool > size-related problem, but are not sure where or what we need to change in the > configuration? > > Also FYI, we hope to eventually test like 50K users once we get past this, so > what else will we run into capacity/configuration-wise? > > Thanks, > Jim -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: CONFIRM unsubscribe from user@syncope.apache.org

jc6hoe7wreBkJi0u8kvm6F0RpIlGk5WpCa7bljEc6Erm9 > GLON/DoYn1MSpdMZdwucairqvMK1YWg/7wI/xjgq6br5FBoLegVE8bd3Iy4SVWKUIRURBF7q > Ft3rVRUJdcmqHvCWpxDJ1VKPRDHf5szVkWXFJI0xiU6KuICWidZ9Hg3WXUsm3SePD7FtokiK > 0Y9SBzHpd9EZe8KRIHekl5gVS2Xe83GC5GvPHEXE0usYUNRDArOXqIkGUCWHZ7gzueMBcWqW > x+uxeS7bQfZZO/7ew7

Re: Possible bug - or Strange (or at least unexpected) behavior to Syncope 2.1.5 REST endpoint (tasks/executions/recent/?max=1)

t; In other words, the msecs part was completely missing! > > Is this (dropping the msecs part of the timestamp) intentional?  > > I am guessing (just a guess) that it is being dropped because possibly the > msecs part is like ".0"?  > > Is that the correct? > > Or is this a bug in Syncope 2.1.5 REST API? > > Thanks, > Jim -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Tomcat not shutting down properly after Syncope deployed to it.

nJDK Runtime Environment (build 1.8.0_222-b10) > OpenJDK 64-Bit Server VM (build 25.222-b10, mixed mode) > > Thanks, > Jim > > > > On Tuesday, January 28, 2020, 7:34:16 AM UTC, Francesco Chicchiriccò > wrote: > > > Hi, > in my experience, such behavior by Tomc

Re: Tomcat not shutting down properly after Syncope deployed to it.

lock problems (which is what caused me to look > into this). > > Anyone seen this before?  Also, is there something we need to do to the > Syncope configuration to allow it to allow Tomcat to shutdown properly? > > FYI, we are using: > - Java: openjdk version "1.8.0_222 &g

Re: Verification on SCIM 1.1 / SCIM 2.0 in Syncope

implement the needed operations via the Scripted REST connector bundle (and possibly contribute the code back to the original repository) I would suggest to continue this discussion on the connid-users list, as not directly regarding Apache Syncope. Regards. [1] https://groups.google.com/forum

Re: Rest Connector issue

ramework-internal-1.5.0.0.jar:?] > at com.sun.proxy.$Proxy400.search(Unknown Source) ~[?:?] > at sun.reflect.GeneratedMethodAccessor1628.invoke(Unknown Source) > ~[?:?] > > > -- > Sent from: http://syncope-user.1051894.n5.nabble.com/ -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: How to determine if a task has finished?

tasks within the sequence of tasks need to not be run until after the > previous task has completed (not just triggered, but actually completed), but > we have not been able to find a way, using either CLI or REST, to find out > when the task has completed. > > Can some

Re: Verification on SCIM 1.1 / SCIM 2.0 in Syncope

On 13/12/19 08:49, Francesco Chicchiriccò wrote: > On 12/12/19 17:53, lfinch wrote: >> That's what I'm trying to determine. My target is a SCIM 1.1 provider and I >> have to ConnID SCIM 1.1 connector implemented. >> >> How to I use Syncope to propagate a group to my

Re: Verification on SCIM 1.1 / SCIM 2.0 in Syncope

then all you need is to properly configure the ConnId SCIM 1.1 bundle. I don't think I ever configured that bundle for group provisioning, nor it seems there is reference about that (howtos, blog posts, ...); however, I am quite sure it should work, just keep trying :-) Regards. -- Francesco

Re: Verification on SCIM 1.1 / SCIM 2.0 in Syncope

nstead, is a SCIM 1.1 client; when configured in Syncope, it allows Syncope to provision identities from / to a SCIM 1.1 provider. Are you sure you need both? Regards. [1] https://syncope.apache.org/docs/2.1/reference-guide.html#scim [2] https://github.com/Tirasa/ConnIdSCIMv11Bundle -- Francesco

Re: AKS - InvalidImageName deploying Syncope on AKS

> > I get InvalidImageName > > syncope-console-69d47c444c-2g9x2   0/1     InvalidImageName   0          17s > > syncope-dd677f7cf-z52d6            0/1     InvalidImageName   0          17s > > syncope-enduser-7fc4f6b778-2j2dh   0/1     InvalidImageName   0          17s > >

Re: Connector issue

your own implementation of Task Executor (possibly extending PriorityPropagationTaskExecutor as indicated in the docs) with purpose of skipping READ before (and after) CREATE / UPDATE / DELETE. Regards. > On Mon, Nov 25, 2019 at 9:58 AM Francesco Chicchiriccò <mailto:ilgro...@apache.org>> wrote: &

Re: Connector issue

-> I have implemented all of the needed methods in my > connector I think? > > Please could someone point me in the right direction as this is driving me > crazy > > Regards > Steve > > -- > Steve van der Merwe > Blog : http://www.stevevandermerwe.co.za > +27

Re: Why DefaultItemTransformer is removed in 2_1_X ?

ransformer#beforePropagation > /with /@Transactional(propagation = Propagation.REQUIRES_NEW, rollbackFor = > { Throwable.class }) /annotation. This allows to use a new entity manager > (that utilizes another available db connection) by opening a new transaction. > In this case, the flush is not happening as a new transaction is opened. > >   > >   > > I would really appreciate if you could answer on questions [Q1] and [Q2]. > > Thanks for your answers in advance! > >   > >   > > Kind Regards, > > Dmitriy Brashevets > -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Some problems encountered while testing Syncope CLI

s the case, this would be a MAJOR problem, as in > the current product we use, we have many attribute flows where a single > attribute is pushed to multiple attributes in the target LDAPs. > > Please advise if there are any ways to workaround the above problems? > > Thanks, > Jim -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Syncope configuration/server replication inquiry

ative than exporting the needed configurations via REST from source and importing via REST into the destination (you can use Swagger UI for that if it comes handy). HTH Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Fou

Re: Syncope 2.1.5 builds failing (regardless of Maven version) due to missing dependencies (and transitive dependencies and missing POM errors)

/introduction/introduction-to-archetypes.html Regards. > On Monday, October 28, 2019, 3:35:24 PM UTC, Francesco Chicchiriccò > wrote: > > > On 28/10/19 16:31, oh...@yahoo.com <mailto:oh...@yahoo.com> wrote: >> Francesco, >> >> I noticed from the paste that you

Re: Syncope 2.1.5 builds failing (regardless of Maven version) due to missing dependencies (and transitive dependencies and missing POM errors)

inates of *your* project, not Syncope's, hence: * groupId: my.company * artifactId: idm * version 1.0.0-SNAPSHOT or any values that is not clashing with Syncope own coordinates, e.g. * org.apache.syncope * syncope * 2.1.5 HTH Regards. -- Francesco Chicchiriccò Tirasa - Open Sourc

Re: Syncope 2.1.5 builds failing (regardless of Maven version) due to missing dependencies (and transitive dependencies and missing POM errors)

Base.java:183) >     ... 38 more >     Caused by: java.lang.ClassNotFoundException: > org.apache.cocoon.pipeline.component.PipelineComponent >     at > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1363) >     at > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1186) >     ... 51 more > > > Can someone tell us exactly what version of the products are "officially" > being used for building Syncope, for everything (especially maven)? > > Also Hunter has mentioned that these are the exact same problems/errors he > was seeing in his earlier problem, e.g.: > > Pony Mail! <https://lists.apache.org/list.html?user@syncope.apache.org> > > > > > > Pony Mail! > > <https://lists.apache.org/list.html?user@syncope.apache.org> > > > > Thanks, > JIm > > > > On Friday, October 25, 2019, 5:12:53 PM UTC, oh...@yahoo.com > wrote: > > > Hi, > > I am trying to reproduce the Syncope 2.1.5 (on RHEL 7) build that one of my > colleagues (Hunter) had had problems with previously as reported on this > mailing list.  As described previously, he was eventually able to get a good > build by using Maven 3.0.5 instead of Maven 3.6.2.  > > However in my new build, I started with using Maven 3.0.5 and encountered > similar "transitive dependencies" and "missing POM" errors as the ones he had > been seeing previously, and then, also, working with Hunter today, he tried > both Maven 3.0.5 and 3.6.2, and today, his build attempts are also failing > now. > > So we wanted to find out if maybe there is something bad going on with the > Syncope Maven repos at this time? > > Please advise. > > Thanks, > Jim -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: How to delete old users

ental > Matching rule: Update > Unmatching rule: Provision > Allow create: checked > Allow update: checked > Allow delete: unchecked > Sync status: unchecked Ah! Of course "Allow delete" should be checked... Regards. > *Sent:* Saturday, October 12, 2019 at 6:59

Re: How to delete old users

uot;This is the only mode which allows pulling delete events". Beware that ConnId's SYNC operation must be available for the related connector, otherwise incremental pull is not possible. HTH Regards. [1] http://syncope.apache.org/docs/2.1/reference-guide.html#pull-mode -- France

Re: syncope-console HTTP Status 500 – Internal Server Error

at > org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343) > at > org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:408) > at > org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66) >

Re: Performance improvements: SQL queries

ecks can > be also optimized and adopted to consume multiple entities. > > And we can use the new method "findByKeys" instead of the loop. > > After all, entities are fetched by keys in a single query we can sort the > entities in Java code using the sorted keys. > >

Re: Install 2.1.5 Issue, Syncope Core Failing to Deploy

cy:tree -X` on the command line, the only errors I see > in the syncope-archetype project are > [WARNING] The POM for org.apache.syncope.core:syncope-core-rest-cxf:jar:2.1.5 > is > invalid, transitive dependencies (if any) will not be available: 1 problem was > encountered while building

Re: JWT and Active Directory Pass-through Authentication

wn REST endpoints. Regards. [1] http://syncope.apache.org/docs/2.1/reference-guide.html#pass-through-authentication [2] http://syncope.apache.org/docs/2.1/reference-guide.html#jwtssoprovider -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software

Re: Having trouble updating an AD domain controller

s not look like a bad password (Connection reset) and I have verified > that I got the password right. > > The principal IS in the Domain Admins group and can log in and edit users on > the > domain controller. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.n

Re: Not able to create a resource

ard to decode: it seems you have set no values under "Base contexts" or similar configuration property. Anyway, look at the sample configuration provided by the post linked above. Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

[ANN] Apache Syncope 2.0.14

The Apache Syncope team is pleased to announce the release of Syncope 2.0.14 Apache Syncope is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology . The release will be available within 24h from: https://syncope.apache.org/downloads

[ANN] Apache Syncope 2.1.5

The Apache Syncope team is pleased to announce the release of Syncope 2.1.5 Apache Syncope is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology . The release will be available within 24h from: https://syncope.apache.org/downloads

Re: Syncope trying to deploy using Maven and not getting login

Manager from > file:/opt/syncope/bundles/net.tirasa.connid.bundles.db.table-2.2.6.jar > Method: lambda$null$3> > 08:04:04.494 INFO Add ConnectorInfo ConnectorKey( > bundleName=net.tirasa.connid.bundles.db.scriptedsql bundleVersion=2.2.6 > connectorName=net.tirasa.connid.bu

Re: Guide how start test environment to run integration tests

ts properly. > Hi Dmitriy, here you go: http://syncope.apache.org/building#Debug Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Syncope How do I Generate the different adminPasswordAlgorithm

to use a bcrypt for the admin password (and of course change it) > but would first like to > figure out how to generate the SSHA256 this is being used right now. I know > this has to be simple > and I am missing something but search for SSHA256 does not turn up anything > except for SHA25

Re: demo problem

ver could not handle the request > > Reason: Error reading from remote server" -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Syncope behind a Apache Reverse proxy.

a$12$0HvCGo2ao0gI3q8 > for a 12th order bcrypt encode? > > > From: Francesco Chicchiriccò > Sent: Tuesday, September 3, 2019 8:43 > To: user@syncope.apache.org > Subject: Re: Syncope behind a Apache Reverse proxy. > > Hi Philip, welcome to Sy

Re: Syncope behind a Apache Reverse proxy.

XX.mdtsoft.com:18080/syncope > > > > ProxyPreserveHost on > ProxyPass http://X.mdtsoft.com:28080/syncope-console > ProxyPassReverse http://.mdtsoft.com:28080/syncope-console > > > > ProxyPreserveHost on > ProxyPass http://.mdtsoft.com:38080/syncope-enduser > ProxyPassReverse http://.mdtsoft.com:38080/syncope-enduser > > > --- -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Group Sync with Member

possible? -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: trying to implement a Groovy Item Transformer

<>(values); newValues.get(0).setStringValue("test"+ values.get(0).getStringValue()); returnnewValues; } thanks again On Wed, Aug 14, 2019 at 1:52 AM Francesco Chicchiriccò mailto:ilgro...@apache.org>> wrote: On 12/08/19 17:54, Noah Hansen . wrote: > Hi all,

Re: trying to implement a Groovy Item Transformer

/syncope/blob/2_1_X/fit/core-reference/src/main/java/org/apache/syncope/fit/core/reference/DateToLongItemTransformer.java -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http

Re: JWT with User Key

] https://github.com/apache/syncope/blob/master/core/spring/src/main/java/org/apache/syncope/core/spring/security/AuthDataAccessor.java#L371 [2] https://github.com/apache/syncope/blob/master/core/spring/src/main/java/org/apache/syncope/core/spring/security/SyncopeJWTSSOProvider.java#L86 -- Francesco

Demo URLs updated

Hi all, I just wanted to follow-up some upgrade activities performed by infra, which resulted in updating our demo URLs, now based at https://syncope-vm.apache.org/ See http://syncope.apache.org/demo for full reference. Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence

Re: Keeping multiple connectors synced

available for coordinating multiple Push Tasks: in similar cases, I would suggest to implement a Custom Task [1] where you can code the required logic. HTH Regards. [1] http://syncope.apache.org/docs/2.1/reference-guide.html#tasks-custom -- Francesco Chicchiriccò Tirasa - Open Source Excellence

Re: New installation - cannot connect to Syncope console

repository is corrupted. Clear it all and try again. Are the standalone / Docker alternative not acceptable? Regards. On Fri, Jul 19, 2019 at 3:58 AM Francesco Chicchiriccò mailto:ilgro...@apache.org>> wrote: Hi, I guess you are attempting to obtain Apache Syncope 2.1.4 via

Re: New installation - cannot connect to Syncope console

tps://go.microsoft.com/fwlink/?LinkId=550986> for Windows 10 -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Seeing error when trying to execute Synchronization Policy

as to where exactly I can verify that the change log is enabled ? Those tabs don't exist under configuration? Also would we need a Sync Policy setup as well? It seems like something we = might need for it all. Syncope Version 1.1.3 Thanks lots, Noah Hansen -- Francesco Chicchiriccò

Re: CSVDir

" : [ ]   },   "overridable" : true,   "values" : [ "/srv/tomcat/data/" ]   }, {   "schema" : {   "name" : "fileMask",   "displayName" : "File mask",   "helpMessage" : "Regular expression describing f

Re: New to Syncope - send notifications from user to admin

pe/conf) 2. you are able to successfully configure notification, in a similar way as provided by test data Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, Pon

Re: New to Syncope - send notifications from user to admin

on.zip [2] http://syncope.apache.org/docs/2.1/getting-started.html#standalone [3] http://syncope.apache.org/docs/2.1/reference-guide.html#e-mail-configuration -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Coco

Re: Notifications with dynamic recipients

On 19/06/19 11:48, leoberbue wrote: Solved! Thanks so much Francesco. Incredible project, congratulations to the team! Thank you very much, Leo :-) Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope

Re: Notifications with dynamic recipients

nclude users matching About" under "User notifications" at the bottom of the second step in the modal wizard. Also, ensure, in the last step, to not put any condition on "About", e.g. to match all self-registering users. HTH Regards. -- Francesco Chicchiric

Re: Notification error - self-created (enduser)

On 18/06/19 14:28, leoberbue wrote: Resolved, that was the problem! Glad to hear this! Great francesco work. I'll open another thread for a related question that I haven't seen in the forum nor in the Syncope documentation. Thanks! Regards. -- Francesco Chicchiriccò Tirasa - Open

Re: Notification error - self-created (enduser)

in your TEXT template, only HTML. Once you fix that, you'll see that error disappearing. Regards. [1] core-persistence.log <http://syncope-user.1051894.n5.nabble.com/file/t339127/core-persistence.log> -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/

Re: error deploy syncope-2.1.4 with maven 3.5.2

, alle ore 08:34, Francesco Chicchiriccò mailto:ilgro...@apache.org>> ha scritto: Hi, if you want to build your IdM solution on Apache Syncope, there is no need at all to build it from sources. Please look at one of the ways to obtain Apache Syncope: http://syncope.apache.org/

Re: error deploy syncope-2.1.4 with maven 3.5.2

exist) [date].dump, [date]-jvmRun[N].dump and [date].dumpstream. how can i solve this error ? Thanks -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: AW: Using e-mail as the username - chars according to RFC

be an issue? Is there may be a solution to set the email property as login name? Yes, there is: see http://syncope.apache.org/docs/2.1/reference-guide.html#configuration-parameters under "authentication.attributes" HTH Regards. *Von:*Francesco Chicchiriccò *Gesendet:* F

Re: Advantages / Disadvantages of Linking / Assigning

ioning-pull [3] http://syncope.apache.org/docs/reference-guide.html#policies-push -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Error in Syncope 2.1.3

-- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Flowable modeler configuration

hat is displayed.   That menu bar is present on my syncope install when I open up the developer tools, but it's just not visible. Is this a matter of configuration?  Does Flowable need to be running in parallel with syncope for form design? Thank you for any guidance you can provide. -- F

Re: Migration to Syncope 2.1.3 issue: ACT_GE_BYTEARRAY table is used to get old serialized userWorkflow.bpmn20 xml

. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

<    1   2   3   4   5   6   7   8   >