Questions tagged [fiware-keyrock]
FIWARE Keyrock is the reference implementation of the Identity Manager (IdM) Generic Enabler specification. It is based on Openstack Horizon and Keystone.
34
questions
0
votes
0
answers
17
views
FIWARE Keyrock identity management
I use the FIWARE IdM to protect an Orion Context Broker. After upgrading FIWARE IDM to the latest version the following POST request, which worked fine in the past, does not work anymore. Does anybody ...
0
votes
1
answer
26
views
I can't get X-Auth-Token from keyrock
I am making a project for uni. I'm making the following request directly to keyrock using .http to get the default admin's X-Auth-Token:
POST http://localhost:3005/v1/auth/tokens
Content-Type: ...
0
votes
1
answer
27
views
Keyrock doesn't recognize super-admin user
I'm making a project for a course in uni. I'm running a keyrock container in docker and I use a .http file to make direct request for X-Auth-Token with the default super-admin user. The request:
###...
0
votes
1
answer
71
views
Calling external APIs through fiware orion context broker to validate using keyrock
I am a student working on a project and exploring viability of using fiware for that. So far I've learnt that to call external APIs we can use registrations for an entity to fetch dynamic data.
Here ...
0
votes
0
answers
11
views
Getting user's organizations from Keyrock
I'm looking for a way to get organizations of a user logged in using Keyrock's OAuth2.
I have Keyrock set up using docker-compose. I've created an organization and assigned users to it, using API. But,...
0
votes
1
answer
87
views
Orion APIs authorization through Keycloak
After testing authentication in Orion with keycloak (Orion APIs authentication through Keycloak) with kong-pep-plugin, I'm interested in the authorization too; in particular, I want to give specific ...
1
vote
3
answers
241
views
Orion APIs authentication through Keycloak
I want to add authentication on my Orion APIs through my Keycloak IdM.
I know it is possible to use Orion together Pep Proxy Wilma and Keyrock to do this task, and a possible workaround can be to ...
1
vote
0
answers
68
views
Unable to use JWT token generated from Fiware Keyrock
For the Fiware security layer Keyrock version 8.0.0, Wilma version 8.0.0 and Authzforce version release-10.0.0 are configured.
Keyrock generates a Bearer token that works properly for Orion ...
0
votes
0
answers
48
views
Control the OAuth2.0 access code lifetime for keyrock (FIWARE generic enabler) using docker-compose
I am creating a docker-compose.yml file to define the services for a system I am developing and I am using keyrock for identity management of the users of that system.
Everything works as it should, ...
0
votes
1
answer
89
views
FIWARE Orion-LD access control rules by entity type
Is it possible to configure access-control rules for Orion-LD based on the entity type? Or, alternatively, on the presence of some attributes in the entities?
A similar question was asked here:
Get a ...
1
vote
0
answers
95
views
WSo2 API Manager and Keyrock - issue with roles
I have deployed WSo2 API Manager 4.1.0 on a Debian 10 machine using the ZIP archive.
I have configured my Keyrock instance as an external identity provider in the Management Console.
When I log in ...
0
votes
1
answer
51
views
Check Request Headers using XACML in Fiware platform
I'm trying to integrate AuthzForce with Keyrock for advanced PDP and wanted to know how custom headers check rule can be made in XACML policies. As per my understanding and documentation, they've ...
2
votes
1
answer
79
views
Securing access to Orion Context Broker entities
I am searching for a solution, that the value of an attribute of a certain entity in the Orion Context Broker, which is secured with a Wilma PEP Proxy and Keyrock, can only be changed by a specific ...
1
vote
1
answer
142
views
Get a list of all resources accessible to users in FIWARE
I would like to adopt FIWARE as part of our IoT platform.
In addition to Orion Context Broker, I would like to use keyrock / wilma / AuthzForce for authentication and authorization.
I understood by ...
0
votes
1
answer
55
views
Must i register one application for every pep proxy on Keyrock Idm?
Guess that we have multiple Fiware Generic Enablers deployed in Docker.
I would like to protect those services with one pep proxy for each one.
Is it ok to register my app and deploy multiple pep ...
2
votes
0
answers
45
views
Synchronicity / FIWARE: Error in IDM communication
we are deploying Synchronicity (https://gitlab.com/synchronicity-iot/platform-deployment-docker/-/tree/master/manual) using docker-compose with all the defaults that comes with the config files. Now ...
0
votes
1
answer
55
views
Docker Swarm Keyrock Mysql subnetwork connection
IMPORTANT: I need to deploy it using Docker Swarm (no docker-compose).
I have created a docker-compose file in order to deploy my FIWARE stack. That stack includes keyrock and a Mysql BD that are ...
2
votes
1
answer
271
views
Authzforce - Existing GUI for policy administration (PAP)
I just started experiment with Authzforce Fiware following the docs. I made some RBAC scenarios following the examples given, using the RESTful interface provided.
What I would like to know, is ...
0
votes
1
answer
280
views
Docker-compose keyrock mysql subnet configuration
I have created a docker-compose file in order to deploy my FIWARE stack. That stack includes keyrock and a Mysql BD that are connected using the following subnet:
networks:
default:
ipam:...
1
vote
1
answer
195
views
How to provision a Dockerized secure IoT Agent with Keyrock?
I'm failing to find this information within the existing documentation - either permanent or non-permanent tokens.
Using Keyrock 7.8, Ultralight 1.11.0 (though any current agent will do)
The ...
1
vote
1
answer
114
views
Unexplainable 403 error "User not allow to perform the action" in Keyrock
I've been struggling for a while with this issue and wondered if anyone else had the same problem.
I've got a Keyrock 7.8.0 + MySQL architecture running with docker as FIWARE tutorials suggest. I can ...
0
votes
1
answer
70
views
DELETE request for organizations does not require auth token
I've noticed when you are about to delete an organization the suggested request in docu is this one (subsection DELETE AN ORGANIZATION inside ORGANIZATION CRUD ACTIONS):
curl -iX DELETE \
'http://...
0
votes
1
answer
238
views
Curl request for implicit grant type on fiware keyrock?
I wanted to fire a curl request for implicit grant type on fiware idm. I have gone through the official docs of fiware idm-
https://fiware-idm.readthedocs.io/en/latest/oauth/oauth_documentation/...
1
vote
1
answer
350
views
How to configure FIWARE Components to avoid AZF domain not created for application response
Summary of the question: How can we let the FIWARE IdM Keyrock and the FIWARE Authzforce set properly the AZF domains, thus without getting "AZF domain not created for application XYZ" response?
I'm ...
1
vote
0
answers
114
views
Not able to Login in keyrock IDM using Nginx
I have installed nginx reverse proxy server and fiware keyrock IDM. I want to access fiware keyrock using Nginx server with the url https://"nginx-ip"/key
My nginx conf is as follows:
location /idm/ ...
0
votes
1
answer
134
views
How can I give permissions based on entity type?
I'm trying to set permissions based on the types of entities Orion is going to save. As the permissions are associated to "endpoints" I had tried to set as endpoint /entities?type=Truck (for example). ...
0
votes
1
answer
196
views
Unable to Integrate keyrock with nginx, css and js files not loading
I wanted to access keyrock idm using nginx reverse proxy. But while doing so, nginx is unable to load the css and js files.
location /idm/{
proxy_pass https://keyrock-host:keyrock-...
0
votes
1
answer
766
views
Single Sign on Keyrock-Grafana doesn't work
I'm trying to use Keyrock to offer Single Sign-on on different platforms. Specifically, I want to offer that service in Grafana. I've seen the configuration to be changed in Grafana and my docker-...
0
votes
1
answer
68
views
Fiware IDM server issue
I am using Fiware IDM version 6.2 and i have issues with keystone server (running on port 5000)..
Keystone is working fine until server is not used for some amount of time (around 1 hour) after that ...
-1
votes
1
answer
108
views
Support SAML Keyrock
I'm looking for some documentation or paper to help me to make an example with Keyrock and SAML authentication.
I have a SP SimpleSamlPHP, but I don't know how configure to make it works with Keyrock ...
0
votes
1
answer
124
views
How does roles work in Keyrock?
I want to know how the role based authorization works in FIWARE Keyrock. I have tested a scenario where a user A registers an application appA in Keyrock. The user B that is not on the authorized list ...
1
vote
0
answers
153
views
Token expiration from FIWARE Keyrock using oauth2
In FIWARE Keyrock, using oauth2, how to I change the duration of the tokens from the default 3600 seconds?
I tried to change keystone.conf - [token] - expiration, with no success. I already get the ...
0
votes
1
answer
110
views
Access SCIM API - Keyrock Fiware
I am using a fiware-idm image in a docker container (https://hub.docker.com/r/fiware/idm/) and I'm trying access the SCIM API. There is user "idm" (default user), he's provider and has all permissions....
0
votes
1
answer
685
views
Keystone create user and permissions by api
I have an instance of Keyrock in fiware lab.
in my app, im trying to create user with api as Fiware keystone api create user and access with horizon.
now i check user:
curl -s -H "X-Auth-Token:...