Questions tagged [fiware-wilma]
FIWARE Wilma is the reference implementation of the PEP Proxy Generic Enabler specified within the FIWARE ecosystem. It works with both OAuth2 and XACML protocols
55
questions
0
votes
1
answer
25
views
Check Request Headers using XACML in Fiware platform
I'm trying to integrate AuthzForce with Keyrock for advanced PDP and wanted to know how custom headers check rule can be made in XACML policies. As per my understanding and documentation, they've ...
2
votes
1
answer
56
views
Securing access to Orion Context Broker entities
I am searching for a solution, that the value of an attribute of a certain entity in the Orion Context Broker, which is secured with a Wilma PEP Proxy and Keyrock, can only be changed by a specific ...
0
votes
0
answers
27
views
Is there any ability to use a 3rd Party Oauth2 provider (Facebook, Google, Azure Active Directory) with Fiware?
We are trying to get Keyrock or Wilma to work with other 3rd party Identity providers. OpenID, Google, Facebook, or even Azure Active Directory. This would allow our enterprise clients with many users ...
0
votes
1
answer
139
views
Configuring Fiware PEP Proxy, Keyrock and Orion Context Broker
I'm trying to integrate Keyrock and PEP Proxy in order to secure the access to the Context Broker but I'm having some issues.
What I want to achieve is that only determined users registered in Keyrock ...
0
votes
1
answer
62
views
Getting advice at fiware
I'm starting my studies at Fiware subject, however, I'm kinda lost, and I'd like to get some advice where to where to start, I've already read many articles about, but I'd like to star implement ...
0
votes
1
answer
38
views
Must i register one application for every pep proxy on Keyrock Idm?
Guess that we have multiple Fiware Generic Enablers deployed in Docker.
I would like to protect those services with one pep proxy for each one.
Is it ok to register my app and deploy multiple pep ...
1
vote
0
answers
38
views
Synchronicity / FIWARE: Error in IDM communication
we are deploying Synchronicity (https://gitlab.com/synchronicity-iot/platform-deployment-docker/-/tree/master/manual) using docker-compose with all the defaults that comes with the config files. Now ...
1
vote
0
answers
34
views
How to restrict user access to FIWARE Orion Subscriptions notifications with PEP proxy to authorized users only?
I am already using IDM together with Wilma PEP for access control to Orion.
Now I want to achieve the same for outgoing notificaitons.
Example:
I have an app with users which for example shows devices....
1
vote
1
answer
85
views
Fiware multitenancy
We are evaluating several platforms for integrating a "Smart Energy System".
One important requirement we have to support is multitenancy. From the docs I can see the possibility to start ...
0
votes
1
answer
34
views
What security measures are used to protect message in between IoT Agent and sensor device?
As I was testing an android app controls door lock over Bluetooth, I deployed HMAC SHA256 on both the door lock controller and the android app to ensure integrity and authentication of message. Also I ...
1
vote
1
answer
316
views
How to configure FIWARE Components to avoid AZF domain not created for application response
Summary of the question: How can we let the FIWARE IdM Keyrock and the FIWARE Authzforce set properly the AZF domains, thus without getting "AZF domain not created for application XYZ" response?
I'm ...
0
votes
1
answer
63
views
Fiware IDM server issue
I am using Fiware IDM version 6.2 and i have issues with keystone server (running on port 5000)..
Keystone is working fine until server is not used for some amount of time (around 1 hour) after that ...
1
vote
1
answer
151
views
Fiware IDM : Dynamic permission resource
I've deployed an application based on Fiware generic enablers, in Docker. The versions are:
Orion 1.14
Cygnus 1.9.0
Authzforce 5.4.1
Keyrock: the latest
Pep-proxy: 7.0.1
but, when I want to create a ...
0
votes
0
answers
87
views
Domain not found: AZF domain not created for application
I got this error while trying to configure level 2 authentication using idm,pep-proxy and pdp.
I am using latest version of authzforce,idm,pep-proxy but this error still persists.
config.azf = {
...
1
vote
0
answers
297
views
Fiware pep-proxy and idm communication issue
I wanted to connect pep-proxy with the idm .. so I followed the installation of pep from that link ..
https://github.com/ging/fiware-pep-proxy by building it from the source .
That was the config file ...
2
votes
1
answer
281
views
Error validating token. Proxy not authorized in keystone. Keystone authentication
I was trying to incorporate IDM (Docker) latest, and pep-proxy (git example running with node server).
When I started pep-proxy, everything was working as intended.
I've got the following messages:
...
1
vote
0
answers
132
views
FIWARE PEP Wilma 6.2 can't get a 'x-subject-token' when staring it
I try to protect orion with PEP Wilma 6.2. Although PEP proxy starts, It can't get a 'x-subject-token'. Why can't PEP get it? Is my configuration incorrect or insufficient?
PEP Proxy Wilma 6.2
...
1
vote
0
answers
198
views
Fiware - Configure AuthZForce with PEP Proxy
I deployed Orion, Cygnus, Keyrock and PEP proxy using docker compose as you can see on the repository. But the security level implemented is not the desired.
keystone_url = "http://localhost:5000"
...
2
votes
1
answer
377
views
Fiware - how to connect PEP proxy to Orion and configure both with HTTPS?
I am working with Orion and I try to protect the future apps using the PEP proxy and Keyrock, but I cannot find a way combine these 3 GE. All my base files are in this repository, although I have ...
1
vote
1
answer
254
views
Authzforce does not store policies?
I am developing a new application using Fiware and I am interested in adding a security layer using the specific Fiware GE for this:
IdM Keyrock
Wilma PEP Proxy
AuthZForce PDP
I started by setting ...
1
vote
1
answer
78
views
How can AuthForce be configured for scaling?
We are building an scenario where we are going to need more than 1 AuthForce using only 1 IdM. Can anyone help as to how we could configure this scenario?
2
votes
1
answer
129
views
Fiware Wilma PEP ssl protocol error at curl
I have at Fiware Lab a virtual machine deployed with Context Broker + Wilma Pep proxy. PEP is configured with https enabled at config.js config.https = { enabled =true...}
Executing the command below ...
1
vote
0
answers
68
views
XACML policies are not sync with AuthZForce after creation in IdM
Im trying to extend the Wilma PEP Proxy GE to support level 3 of security: xacml authorization.
I already implemented the necessary modifications in the PEP Proxy, in order to support this level of ...
1
vote
1
answer
384
views
Configuring Orion Context Broker, Wilma PEP Proxy and Keyrock IdM
My name is Joe and I'm in traineeship about IoT security and Identity Management. In order to develop some solutions to a project I've been assigned, I have to configure and integrate Orion, Wilma and ...
1
vote
1
answer
227
views
How to properly configure IoT sensors in order to gain authentication and authorization using IdM Keyrock and Wilma PEP Proxy
I have being working for some weeks with the IdM Keyrock, Wilma PEP Proxy and AuthZForce in the context of Fiware Platform, in order to develop an IoT application.
I had success in protecting the ...
0
votes
1
answer
307
views
Fiware IDM+AuthZForce+PEP-Proxy-Wilma
I'm trying to put to work the IDM+AuthZForce+PEP-Proxy-Wilma to secure the Orion context broker, but I'm having a bit of trouble, nothing works, all is up and running, but there's no autentication and ...
0
votes
1
answer
128
views
FIWARE AuthZForce 5.4.1 is not installing
I am trying to install FIWARE AuthZForce 5.4.1, following the official documentation, but with no success because the Tomcat7 is not starting during the installation process as can be seen below.
(...
5
votes
1
answer
263
views
How to configure access control in Orion NGSI API for tenant isolation using Wilma PEP Proxy and IdM Keyrock?
I want to provide access control at the Orion Context Broker NGSI API level to ensure real data isolation. I want to make sure that a tenant can only query/update their contexts and NOT those of ...
0
votes
1
answer
51
views
FIWARE - Is there some Cryptographic GE or a GE with this kind of functionality?
I would like to know if there are only the Security GEs exposed in the Fiware catalogue. Specifically, I am interested in one component that can do cryptographic functions, like generate and provide ...
3
votes
1
answer
312
views
Fiware: How to restrict user access to specific entity for Orion Context Broker API using keystone & keypass
First of all, I'm using the Telefonica implementations of Identity Manager, Authorization PDP and PEP Proxy, instead of the Fiware reference implementations which are Keyrock, AuthZForce and Wilma PEP ...
0
votes
1
answer
93
views
Fiware Keyrock - organizations are not returned
I am needing the organizations info, from a specific user. This information is not returned as can be seen below:
organizations: [], displayName: 'idm', roles: [ { name: 'Provider', id: 'provider' } ]...
0
votes
1
answer
102
views
What does the magic key do in Wilma and AZF?
I would like to know the real use of the magic key parameter at Wilma PEP Proxy as well in the AZF. Is this mandatory in both configuration? If not, when do we need to use it?
I saw that there is bug ...
0
votes
1
answer
25
views
The roles generated in Keyrock are not really registered
I am creating a permission for an application in Keyrock and associating it to user A. When I do a GET request to orion v2/entities (that is equal to created permission), I get a User token not ...
0
votes
1
answer
109
views
FIWARE-Keyrock: Why are the OAuth2 credentials related to apps if they do not control access?
We have a scenario where I want to protect a service X with Wilma PEP Proxy. The service X is registered in Keyrock. The Wilma PEP Proxy contains the PEP credentials generated in Keyrock for service X....
1
vote
1
answer
311
views
Fiware AuthZForce error: "AZF domain not created for application"
I'm trying to protect Orion Context Broker using KeyRock idm, Wilma PEP-Proxy and AuthZForce PDP over Docker. For now, level 1 security works well and I can deny access to non logged users, but I get ...
0
votes
1
answer
100
views
FIWARE - Keyrock tokens with general permission enabling unauthorized access to applications (security issue?)
In a local Keyrock instance, we have two users, A and B, with two different applications, AppA and AppB, respectively. Both users are distinct from the default "admin" user "idm". The Wilma PEP Proxy ...
0
votes
1
answer
37
views
FIWARE AuthZForce doesn't check the second rule inside the same PolicySet
I have created two roles, on the KeyRock, and for each of them I have linked a different permission
User1->Role1->Perm1(access to Res1)
User2->Role2->Perm2(access to Res2)
After saved, I see on ...
2
votes
1
answer
133
views
FIWARE - How Wilma PEP Proxy deal with redirection for multiple applications?
We are needing Wilma PEP Proxy control the access for many applications. I think it is not possible to do yet, with the latest Wilma version. Am I wrong? If I am wrong, how to deal with that?
If I am ...
1
vote
0
answers
82
views
Fiware - Wilma PEP Proxy does not validate SSL certificate
I have a scenario in which I want Wilma PEP Proxy redirecting to a server via HTTPS. This is working now, but the server certificate (self-signed) is not being validated.
In the config.js file, the ...
1
vote
2
answers
487
views
FIWARE - PEP Proxy configured to HTTPS
I would like to know how I configure the PEP Proxy so that I can exchange messages through HTTPS. I have an instance of Orion context broker that is accessed only after pass by the PEP Proxy. My PEP ...
2
votes
1
answer
40
views
Security for Southbound of lightweightm2m-iotagent?
Can i use the PEP proxy for lightweightm2m-iotagent ?
is there any way to implement security for lightweightm2m-iotagent at southbound side(LWM2M Client to LWM2M Server) ?
1
vote
2
answers
1k
views
How to work with DELETE request and X-Auth-Token
I want DELETE operation be allowed only after authentication/authorization process. I tried to do a DELETE operation passing an X-Auth-Token, but I got this: The status of this operation is: 400 Some ...
2
votes
3
answers
1k
views
Fiware - How to integrate Keyrock IdM, Wilma PEP Proxy and Orion Context Broker?
I read all the documentation of Keyrock and Wilma and I watched all the videos in the FIWARE Academy, but I still do not get success in this integration. I am searching for this since a few days ago, ...
1
vote
0
answers
157
views
Wilma (FIWARE PEP Proxy) not working
I'm using Wilma (FIWARE PEP Proxy) in order to protect a Http-based service (for more details, WebHDFS, the REST API from Hadoop); among the operations available in this service there is an operation ...
1
vote
2
answers
222
views
FIWARE Orion and pep proxy solutions?
From Orion documentations it has been mentionned that the two available PEP proxy are Wilma and Steelskin.
I want to list all the available options so is there an other open source solutions for ...
1
vote
0
answers
33
views
FIWARE Wilma PEP Proxy bug: x-organisations header value contains rubbish
I want to restrict data that is retrieved from a back-end server to organisations to which the authenticated user is a member.
From the documentation (https://github.com/ging/fiware-pep-proxy) this ...
1
vote
1
answer
164
views
Fiware : wilma vs steelskin
when to use wilma and when to use steelskin?
why there is no reference of steelskin in fiware generic enablers catalogue?
Thanks in advance for your help!
1
vote
1
answer
84
views
AuthZforce use without fiware enablers
Can the Fiware enabler AuthZforce be used without keyrock and wilma?
can it be used using others pep and IDM?
3
votes
1
answer
114
views
Fiware KeyRock API bug: Membership of organisations not returned
As part of the FINISH accelerator we are using FIWARE KeyRock and Wirecloud. Currently we are using the Fiware labs global instance to investigate.
We want to restrict our system so that users can ...
1
vote
1
answer
348
views
AuthZForce Security Level 2: Basic Authorization error "AZF domain not created for application"
We are trying to deploy our security layer (KeyRock, Wilma, AuthZForce) to protect our Orion instance.
We are able to have security level 1 (authentication) with Keyrock and Wilma working, but when ...