Can we configure multiple external security systems (e.g. LDAP)?

sorin — Tue, 28 Apr 2020 03:59:51 -0400

The naming in ivy.securitysystem.yaml is plural as in SecuritySystems, not SecuritySistem.

Does that mean that we can configure multiple LDAP services at the same time?

How often do external security systems syncronize?

sorin — Fri, 24 Apr 2020 04:02:08 -0400

When configuring an external security system like LDAP, in the users page, I have a "Synchronize" button. That grabs the users, roles, etc. on-demand from the LDAP. If this button is not pressed, how often is the sync done? Where is it configured? Can it be made to synchronize more or less often?

Is there a way to view the additional LDAP attributes for each user?

sorin — Wed, 15 Apr 2020 04:05:09 -0400

When defining a security system, you can define extended attributes that map from the LDAP attributes to Axon Ivy.

Also, in the Axon Ivy Cockpit there is a screen where you can see each user. However, it only shows username, email, etc. and permissions.

Is there any way to see the extended attributes in there as well? It would be kind of handy to know if the attributes mapped correctly and which user has what attribute value.

List of things deprecated/no longer supported in version 8

sorin — Wed, 01 Apr 2020 11:00:19 -0400

Is there any list of things no longer supported in version 8? I'm planning on migrating a project from 7.3.1 to 8 and after the automatic project migration, I am still left with some errors.

Moreover, I'm trying to get a feel of how complicated this migration might be.

I've tried to read the release notes here, but they are a long list of very brief task/story titles which are not extremely helpful if you're not looking for something specific.

Is there a way to transfer/save permissions mapping for external authentication sources?

sorin — Mon, 30 Mar 2020 06:46:58 -0400

I have a couple of servers that do authentication via some LDAP, ActiveDirectory or something. There is a permission mapping in place between the user groups and Axon.ivy permissions. If I want to change said mapping, do I have to manually do so on each server, or is there a file/table that I can write to? Question also applies for new installations.

Getting error when following the REST API guide

sorin — Mon, 23 Mar 2020 17:40:07 -0400

Hi. I'm trying to follow the guide here: http://developer.axonivy.com/doc/7.3.1/DesignerGuideHtml/ivy.integration.html#ivy.integration.rest and all I'm getting is a stacktrace:

java.lang.IllegalStateException: Request scope has been already shut down.
    at jersey.repackaged.com.google.common.base.Preconditions.checkState(Preconditions.java:173)
    at org.glassfish.jersey.process.internal.RequestScope.retrieveCurrent(RequestScope.java:239)
    at org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:314)
    at org.glassfish.jersey.server.ServerRuntime.process(ServerRuntime.java:305)
    at org.glassfish.jersey.server.ApplicationHandler.handle(ApplicationHandler.java:1154)
    at org.glassfish.jersey.servlet.WebComponent.serviceImpl(WebComponent.java:473)
    at org.glassfish.jersey.servlet.WebComponent.service(WebComponent.java:427)
    at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:388)
    at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:341)
    at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:228)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    at org.apache.catalina.filters.HttpHeaderSecurityFilter.doFilter(HttpHeaderSecurityFilter.java:126)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    at ch.ivyteam.ivy.webserver.internal.filter.FilterChain.next(FilterChain.java:33)
    at ch.ivyteam.ivy.webserver.internal.exception.ExceptionFilter.doFilter(ExceptionFilter.java:55)
    at ch.ivyteam.ivy.webserver.internal.filter.AbstractFilter.doFilter(AbstractFilter.java:41)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    at ch.ivyteam.ivy.webserver.internal.filter.FilterChain.next(FilterChain.java:33)
    at ch.ivyteam.ivy.webserver.internal.startup.IvyEngineUnavailableFilter.doFilter(IvyEngineUnavailableFilter.java:30)
    at ch.ivyteam.ivy.webserver.internal.filter.AbstractFilter.doFilter(AbstractFilter.java:41)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    at ch.ivyteam.ivy.webserver.internal.filter.FilterChain.next(FilterChain.java:33)
    at ch.ivyteam.util.callable.AbstractExecutionContext.lambda$0(AbstractExecutionContext.java:28)
    at ch.ivyteam.util.callable.AbstractExecutionContext.callInContext(AbstractExecutionContext.java:16)
    at ch.ivyteam.util.callable.AbstractExecutionContext.executeInContext(AbstractExecutionContext.java:26)
    at ch.ivyteam.ivy.webserver.internal.filter.RemoteClientFilter.doFilter(RemoteClientFilter.java:18)
    at ch.ivyteam.ivy.webserver.internal.filter.AbstractFilter.doFilter(AbstractFilter.java:41)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    at ch.ivyteam.ivy.webserver.internal.filter.FilterChain.next(FilterChain.java:33)
    at ch.ivyteam.util.callable.AbstractExecutionContext.lambda$0(AbstractExecutionContext.java:28)
    at ch.ivyteam.util.callable.AbstractExecutionContext.callInContext(AbstractExecutionContext.java:16)
    at ch.ivyteam.util.callable.AbstractExecutionContext.executeInContext(AbstractExecutionContext.java:26)
    at ch.ivyteam.ivy.webserver.internal.filter.IvyCurrentHttpRequestFilter.doFilter(IvyCurrentHttpRequestFilter.java:13)
    at ch.ivyteam.ivy.webserver.internal.filter.AbstractFilter.doFilter(AbstractFilter.java:41)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    at ch.ivyteam.ivy.webserver.internal.filter.FilterChain.next(FilterChain.java:33)
    at ch.ivyteam.util.callable.AbstractExecutionContext.lambda$0(AbstractExecutionContext.java:28)
    at ch.ivyteam.util.callable.AbstractExecutionContext.callInContext(AbstractExecutionContext.java:16)
    at ch.ivyteam.util.callable.AbstractExecutionContext.executeInContext(AbstractExecutionContext.java:26)
    at ch.ivyteam.ivy.security.exec.Sudo.execute(Sudo.java:63)
    at ch.ivyteam.ivy.webserver.internal.filter.IvyExecuteAsSystemFilter.doFilter(IvyExecuteAsSystemFilter.java:11)
    at ch.ivyteam.ivy.webserver.internal.filter.AbstractFilter.doFilter(AbstractFilter.java:41)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    at com.google.inject.servlet.FilterChainInvocation.doFilter(FilterChainInvocation.java:89)
    at com.google.inject.servlet.ManagedFilterPipeline.dispatch(ManagedFilterPipeline.java:121)
    at com.google.inject.servlet.GuiceFilter.doFilter(GuiceFilter.java:133)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:198)
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
    at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:493)
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:140)
    at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)
    at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87)
    at ch.ivyteam.ivy.webserver.internal.PerformanceLogValve.invoke(PerformanceLogValve.java:42)
    at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342)
    at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:800)
    at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)
    at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:806)
    at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1498)
    at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
    at java.lang.Thread.run(Thread.java:748)

None of the classes in the stacktrace belong to my project, so it doesn't seem to be an error with my code per se. Any idea what might be wrong?

Where to find engine 'logs' using the Mac Designer?

sorin — Wed, 26 Feb 2020 05:31:35 -0500

I've "inherited" an Axon.ivy project that I have to maintain, I've installed the Designer and I also see that the project has a pom.xml setup, so I can also build it from the command line.

Now, the Designer I understand runs an embedded engine. Also, the pom.xml has a plugin with a goal that also downloads an engine (project-build-plugin:7.3.0:installEngine).

Where can I find these engines? More specifically, where can I find the logs for them?

PS: I'm running on MacOS