Questions tagged [fiware-keyrock]

FIWARE Keyrock is the reference implementation of the Identity Manager (IdM) Generic Enabler specification. It is based on Openstack Horizon and Keystone.

Filter by
Sorted by
Tagged with
0 votes
0 answers
17 views

FIWARE Keyrock identity management

I use the FIWARE IdM to protect an Orion Context Broker. After upgrading FIWARE IDM to the latest version the following POST request, which worked fine in the past, does not work anymore. Does anybody ...
  • 23
0 votes
1 answer
26 views

I can't get X-Auth-Token from keyrock

I am making a project for uni. I'm making the following request directly to keyrock using .http to get the default admin's X-Auth-Token: POST http://localhost:3005/v1/auth/tokens Content-Type: ...
0 votes
1 answer
27 views

Keyrock doesn't recognize super-admin user

I'm making a project for a course in uni. I'm running a keyrock container in docker and I use a .http file to make direct request for X-Auth-Token with the default super-admin user. The request: ###...
0 votes
1 answer
71 views

Calling external APIs through fiware orion context broker to validate using keyrock

I am a student working on a project and exploring viability of using fiware for that. So far I've learnt that to call external APIs we can use registrations for an entity to fetch dynamic data. Here ...
  • 1,154
0 votes
0 answers
11 views

Getting user's organizations from Keyrock

I'm looking for a way to get organizations of a user logged in using Keyrock's OAuth2. I have Keyrock set up using docker-compose. I've created an organization and assigned users to it, using API. But,...
  • 41
0 votes
1 answer
87 views

Orion APIs authorization through Keycloak

After testing authentication in Orion with keycloak (Orion APIs authentication through Keycloak) with kong-pep-plugin, I'm interested in the authorization too; in particular, I want to give specific ...
  • 541
1 vote
3 answers
241 views

Orion APIs authentication through Keycloak

I want to add authentication on my Orion APIs through my Keycloak IdM. I know it is possible to use Orion together Pep Proxy Wilma and Keyrock to do this task, and a possible workaround can be to ...
  • 541
1 vote
0 answers
68 views

Unable to use JWT token generated from Fiware Keyrock

For the Fiware security layer Keyrock version 8.0.0, Wilma version 8.0.0 and Authzforce version release-10.0.0 are configured. Keyrock generates a Bearer token that works properly for Orion ...
  • 60
0 votes
0 answers
48 views

Control the OAuth2.0 access code lifetime for keyrock (FIWARE generic enabler) using docker-compose

I am creating a docker-compose.yml file to define the services for a system I am developing and I am using keyrock for identity management of the users of that system. Everything works as it should, ...
0 votes
1 answer
89 views

FIWARE Orion-LD access control rules by entity type

Is it possible to configure access-control rules for Orion-LD based on the entity type? Or, alternatively, on the presence of some attributes in the entities? A similar question was asked here: Get a ...
  • 56
1 vote
0 answers
95 views

WSo2 API Manager and Keyrock - issue with roles

I have deployed WSo2 API Manager 4.1.0 on a Debian 10 machine using the ZIP archive. I have configured my Keyrock instance as an external identity provider in the Management Console. When I log in ...
0 votes
1 answer
51 views

Check Request Headers using XACML in Fiware platform

I'm trying to integrate AuthzForce with Keyrock for advanced PDP and wanted to know how custom headers check rule can be made in XACML policies. As per my understanding and documentation, they've ...
  • 3
2 votes
1 answer
79 views

Securing access to Orion Context Broker entities

I am searching for a solution, that the value of an attribute of a certain entity in the Orion Context Broker, which is secured with a Wilma PEP Proxy and Keyrock, can only be changed by a specific ...
  • 23
1 vote
1 answer
142 views

Get a list of all resources accessible to users in FIWARE

I would like to adopt FIWARE as part of our IoT platform. In addition to Orion Context Broker, I would like to use keyrock / wilma / AuthzForce for authentication and authorization. I understood by ...
  • 11
0 votes
1 answer
55 views

Must i register one application for every pep proxy on Keyrock Idm?

Guess that we have multiple Fiware Generic Enablers deployed in Docker. I would like to protect those services with one pep proxy for each one. Is it ok to register my app and deploy multiple pep ...
2 votes
0 answers
45 views

Synchronicity / FIWARE: Error in IDM communication

we are deploying Synchronicity (https://gitlab.com/synchronicity-iot/platform-deployment-docker/-/tree/master/manual) using docker-compose with all the defaults that comes with the config files. Now ...
  • 21
0 votes
1 answer
55 views

Docker Swarm Keyrock Mysql subnetwork connection

IMPORTANT: I need to deploy it using Docker Swarm (no docker-compose). I have created a docker-compose file in order to deploy my FIWARE stack. That stack includes keyrock and a Mysql BD that are ...
2 votes
1 answer
271 views

Authzforce - Existing GUI for policy administration (PAP)

I just started experiment with Authzforce Fiware following the docs. I made some RBAC scenarios following the examples given, using the RESTful interface provided. What I would like to know, is ...
  • 991
0 votes
1 answer
280 views

Docker-compose keyrock mysql subnet configuration

I have created a docker-compose file in order to deploy my FIWARE stack. That stack includes keyrock and a Mysql BD that are connected using the following subnet: networks: default: ipam:...
1 vote
1 answer
195 views

How to provision a Dockerized secure IoT Agent with Keyrock?

I'm failing to find this information within the existing documentation - either permanent or non-permanent tokens. Using Keyrock 7.8, Ultralight 1.11.0 (though any current agent will do) The ...
  • 5,105
1 vote
1 answer
114 views

Unexplainable 403 error "User not allow to perform the action" in Keyrock

I've been struggling for a while with this issue and wondered if anyone else had the same problem. I've got a Keyrock 7.8.0 + MySQL architecture running with docker as FIWARE tutorials suggest. I can ...
  • 41
0 votes
1 answer
70 views

DELETE request for organizations does not require auth token

I've noticed when you are about to delete an organization the suggested request in docu is this one (subsection DELETE AN ORGANIZATION inside ORGANIZATION CRUD ACTIONS): curl -iX DELETE \ 'http://...
  • 183
0 votes
1 answer
238 views

Curl request for implicit grant type on fiware keyrock?

I wanted to fire a curl request for implicit grant type on fiware idm. I have gone through the official docs of fiware idm- https://fiware-idm.readthedocs.io/en/latest/oauth/oauth_documentation/...
  • 1
1 vote
1 answer
350 views

How to configure FIWARE Components to avoid AZF domain not created for application response

Summary of the question: How can we let the FIWARE IdM Keyrock and the FIWARE Authzforce set properly the AZF domains, thus without getting "AZF domain not created for application XYZ" response? I'm ...
1 vote
0 answers
114 views

Not able to Login in keyrock IDM using Nginx

I have installed nginx reverse proxy server and fiware keyrock IDM. I want to access fiware keyrock using Nginx server with the url https://"nginx-ip"/key My nginx conf is as follows: location /idm/ ...
0 votes
1 answer
134 views

How can I give permissions based on entity type?

I'm trying to set permissions based on the types of entities Orion is going to save. As the permissions are associated to "endpoints" I had tried to set as endpoint /entities?type=Truck (for example). ...
0 votes
1 answer
196 views

Unable to Integrate keyrock with nginx, css and js files not loading

I wanted to access keyrock idm using nginx reverse proxy. But while doing so, nginx is unable to load the css and js files. location /idm/{ proxy_pass https://keyrock-host:keyrock-...
0 votes
1 answer
766 views

Single Sign on Keyrock-Grafana doesn't work

I'm trying to use Keyrock to offer Single Sign-on on different platforms. Specifically, I want to offer that service in Grafana. I've seen the configuration to be changed in Grafana and my docker-...
0 votes
1 answer
68 views

Fiware IDM server issue

I am using Fiware IDM version 6.2 and i have issues with keystone server (running on port 5000).. Keystone is working fine until server is not used for some amount of time (around 1 hour) after that ...
  • 225
-1 votes
1 answer
108 views

Support SAML Keyrock

I'm looking for some documentation or paper to help me to make an example with Keyrock and SAML authentication. I have a SP SimpleSamlPHP, but I don't know how configure to make it works with Keyrock ...
0 votes
1 answer
124 views

How does roles work in Keyrock?

I want to know how the role based authorization works in FIWARE Keyrock. I have tested a scenario where a user A registers an application appA in Keyrock. The user B that is not on the authorized list ...
1 vote
0 answers
153 views

Token expiration from FIWARE Keyrock using oauth2

In FIWARE Keyrock, using oauth2, how to I change the duration of the tokens from the default 3600 seconds? I tried to change keystone.conf - [token] - expiration, with no success. I already get the ...
  • 11
0 votes
1 answer
110 views

Access SCIM API - Keyrock Fiware

I am using a fiware-idm image in a docker container (https://hub.docker.com/r/fiware/idm/) and I'm trying access the SCIM API. There is user "idm" (default user), he's provider and has all permissions....
0 votes
1 answer
685 views

Keystone create user and permissions by api

I have an instance of Keyrock in fiware lab. in my app, im trying to create user with api as Fiware keystone api create user and access with horizon. now i check user: curl -s -H "X-Auth-Token:...
  • 121