Uploaded image for project: 'Help-Desk'
  1. Help-Desk
  2. HELP-8815

[fiware-stackoverflow] Fiware: Setting up AuthZForce with idm and pep proxy

    Details

      Description

      Created question in FIWARE Q/A platform on 12-11-2015 at 17:11
      Please, ANSWER this question AT https://stackoverflow.com/questions/33676409/fiware-setting-up-authzforce-with-idm-and-pep-proxy

      Question:
      Fiware: Setting up AuthZForce with idm and pep proxy

      Description:
      I have configured PEP proxy GE and IDM GE, and now Basic authentication works great.
      Now i want to set up Level 2:Basic authorization system with http verb and resource path checking, and for that i need AuthZForce GE.
      I installed AuthZForce on same server as IDM, created default domain on authZforce with id 562285a1-8950-11e5-980f-6bf3c4dac98a and configured
      pep proxy config.js file

      config.pep_port = 80;
      config.account_host = 'https://192.168.4.180';

      config.keystone_host = '192.168.4.180';
      config.keystone_port = 5000;

      config.app_host = 'localhost';
      config.app_port = '8000';

      config.azf = {
      enabled: true,
      host: '192.168.4.180',
      port: 8080,
      path: '/authzforce/domains/562285a1-8950-11e5-980f-6bf3c4dac98a/pdp'
      };

      And now when i try to access to some page via curl:

      sudo curl -H "X-Auth-Token: vPTru5ikuyLcxf6ujV23V3l4GFNpF5" http://localhost/home/login/

      I get this error in the client:

      Error in AZF communication

      And this error on pep proxy:

      2015-11-12 17:09:13.040 - INFO: IDM-Client - Checking token with IDM...
      2015-11-12 17:09:13.086 - INFO: AZF-Client - Checking auth with AZF...
      2015-11-12 17:09:13.087 - INFO: AZF-Client - Checking authorization to roles [ '4806909eb4b646c7a1f11ad9f9ed53ed',
      '09dc1bdba42c48de9e15e88816284cbc',
      '5786623590bc4f3ab01c61733a13ee6d',
      'e3fe52a0c6c34fe395bb087f42d1cc72',
      '44151592f3814929a59d1c1e7022a0bb' ] to do GET on home/login/
      and app aea8f4a70b87422cb48068db9f0c6aea
      2015-11-12 17:09:13.117 - ERROR: Root - Error in AZF communication
      Error: 139773139036032:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:
      unknown protocol:s23_clnt.c:795:

      PEP Proxy is running on port 80
      and IDM is running on 443 port.

      What could be a problem?
      Should all these services be delivered via https or is that irrelevant?

        Activity

        Transition Time In Source Status Execution Times Last Executer Last Execution Date
        Open Open In Progress In Progress
        2h 58m 1 Backlog Manager 22/May/17 6:05 PM
        In Progress In Progress Answered Answered
        3h 1 Backlog Manager 22/May/17 9:05 PM
        Answered Answered Closed Closed
        6d 16h 6m 1 José Ignacio Carretero Guarde 29/May/17 1:11 PM
        fla Fernando Lopez made changes -
        Fix Version/s 2021 [ 12600 ]
        fla Fernando Lopez made changes -
        HD-Enabler AuthZForce [ 10887 ]
        HD-Chapter Security [ 10841 ]
        jicg José Ignacio Carretero Guarde made changes -
        Resolution Done [ 10000 ]
        Status Answered [ 10104 ] Closed [ 6 ]
        jicg José Ignacio Carretero Guarde made changes -
        Assignee Cyril Dangerville [ cyril.dangerville ]
        jicg José Ignacio Carretero Guarde made changes -
        Labels fiware proxy authzforce fiware fiware-wilma proxy
        Hide
        backlogmanager Backlog Manager added a comment -

        2017-05-22 21:06|UPDATED status: transition Answered| # answers= 1, accepted answer= False

        Show
        backlogmanager Backlog Manager added a comment - 2017-05-22 21:06|UPDATED status: transition Answered| # answers= 1, accepted answer= False
        backlogmanager Backlog Manager made changes -
        Status In Progress [ 3 ] Answered [ 10104 ]
        Hide
        backlogmanager Backlog Manager added a comment -

        2017-05-22 18:06|UPDATED status: transition Answer| # answers= 1, accepted answer= False

        Show
        backlogmanager Backlog Manager added a comment - 2017-05-22 18:06|UPDATED status: transition Answer| # answers= 1, accepted answer= False
        backlogmanager Backlog Manager made changes -
        Status Open [ 1 ] In Progress [ 3 ]
        backlogmanager Backlog Manager made changes -
        Field Original Value New Value
        Component/s FIWARE-TECH-HELP [ 10278 ]
        Hide
        backlogmanager Backlog Manager added a comment -

        2017-05-22 15:08|CREATED monitor | # answers= 1, accepted answer= False

        Show
        backlogmanager Backlog Manager added a comment - 2017-05-22 15:08|CREATED monitor | # answers= 1, accepted answer= False
        backlogmanager Backlog Manager created issue -

          People

          • Assignee:
            cdangerville Cyril Dangerville
            Reporter:
            backlogmanager Backlog Manager
          • Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: