Perl 6 - the future is here, just unevenly distributed

IRC log for #openam, 2015-04-22

| Channels | #openam index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:00 SteveFerris joined #openam
01:39 SteveFerris joined #openam
06:36 KermitTheFragger joined #openam
07:45 ihre joined #openam
09:11 aldaris joined #openam
09:31 aldaris joined #openam
09:42 jjpp hmhm. just missed aldaris.
09:43 ihre left #openam
09:50 aldaris joined #openam
11:42 MegaMatt joined #openam
11:48 aldaris joined #openam
12:07 aldaris hello jjpp
12:08 jjpp hi
12:08 aldaris were you looking for me?
12:08 jjpp a bit. but i have realized that it was my own bug that caused the confusion. :)
12:12 mckeanbs joined #openam
12:54 tudorg joined #openam
12:56 aldaris1 joined #openam
12:59 tudorg Hi all. Having issues with authenticating OpenAM-DistAuth-11.0.2.war with my OpenAM install. Install the DAS war, configure it to match the Agents 2.2 configuration, but when trying to access the DAS I keep on getting: AdminTokenAction: FATAL ERROR: Cannot obtain Application SSO token.
12:59 tudorg Any pointers would be much appreciated.
13:00 tudorg OpenAM is on the same version, all running through Tomcat on Centos 6.5
13:11 balo tudorg: check the logs on the openam side as well (DAS can reach it?), increase the log level on both side
13:11 balo this is just the result, not the cause
13:18 asyd tudorg: in the / realm?
13:22 aldaris joined #openam
13:27 tudorg balo, Looking
13:27 tudorg asyd, yep in the / realm
13:31 balo utalom ezt, amikor mar kva sok branch van egyszerre, mindegyiken migracio is
13:31 balo wrong window here
13:32 balo okay i'm officially lame and can't type :D
13:32 aldaris sounds like you are frustrated a bit :)
13:32 aldaris tudorg: is your OpenAM running over HTTPS?
13:47 aldaris joined #openam
13:50 tudorg joined #openam
13:50 tudorg aldaris Nope, running over HTTP
13:52 jjpp aldaris: rest, authentication, pagestatecallback (or whatever it was called). is there any progress since 11.0? :)
13:55 aldaris not much
13:55 aldaris only the header is exposed atm afaik
13:56 jjpp hm, that is more or less good enough.
13:57 jjpp I see that there is two api versions for authentication in trunk. did the api change significantly?
13:57 aldaris not really
13:57 aldaris v2 extends v1 I think
13:58 jjpp indeed. it seems to be something about setting failure url.
14:02 jjpp hm, and it seems that adding the header-fix to the 11.0 is not a rocket science either.
14:06 tudorg balo Logs on openAM are on info and das on message. The openam logs are not actually being hit by the das.
14:06 aldaris most likely the authn fails on the das side
14:07 aldaris do you have firewall preventing access to AM?
14:07 tudorg OpenAM and DAS on same hose. SELinux off. Iptables off.
14:07 tudorg s/hose/host
14:07 aldaris then not much room for failure
14:07 tudorg Hostname in /etc/hosts
14:07 aldaris have you enabled message level logging on DAS?
14:08 tudorg Yeah,
14:08 aldaris anything interesting in there?
14:09 tudorg URLChecker.check() : setting status to ** UNAVAILABLE ** for http://foo.bar:port/openam/namingservice
14:09 tudorg I can telnet to port on host fine
14:09 aldaris yepp, that's a good sign of something being wrong
14:09 aldaris if you curl $URL that what do you get back?
14:09 tudorg If browse to that address I get "OpenSSO"
14:10 tudorg I'll try now
14:13 tudorg OK from my laptop, 403 from the host!
14:15 tudorg Some proxy funnyness!
14:16 jjpp aldaris: hm. and there was something like /identity/attriubutes implemented as a restlet in 11.0 as well?
14:29 aldaris IdentityResource
14:29 aldaris but I really-really hate that with a passion
14:55 SteveFerris joined #openam
15:28 jjpp HM, OKAY
15:28 jjpp ups
15:28 jjpp and there is no better alternative to query session and profile attributes?
15:32 aldaris the legacy REST /identity/attributes endpoint is probably still the "best"
15:43 jjpp even if it is deprecated?
15:43 jjpp (hm, is it?)
15:43 aldaris yes
15:43 jjpp okay.
17:32 mckeanbs joined #openam
17:48 mckeanbs joined #openam
17:57 aldaris joined #openam
18:59 ray__ joined #openam
19:02 mckeanbs joined #openam
19:07 mckeanbs joined #openam
19:09 mckeanbs joined #openam
21:42 aldaris joined #openam
22:06 SteveFerris joined #openam

| Channels | #openam index | Today | | Search | Google Search | Plain-Text | summary