SimpleSAMLphp missing some configuration. What is missing? - amazon-web-services
I am trying to use SimpleSAMLphp in AWS ubuntu instance but for some reason I can make it run correctly. I am using AWS-LoadBalancer for https, I do not know if it affect the configuration.
config.php
$config = array(
'baseurlpath' => 'simplesaml/',
'certdir' => 'cert/',
'loggingdir' => 'log/',
'datadir' => 'data/',
'tempdir' => '/tmp/simplesaml',
'technicalcontact_name' => 'David Pacheco',
'technicalcontact_email' => 'dpacheco#lumstons.com',
'timezone' => 'America/Mexico_City',
'secretsalt' => '6ogT+0kPWJAO6FbKThWcI1spujbVVdmFEsPVRiPKEWw=',
'auth.adminpassword' => 'david',
'admin.protectindexpage' => false,
'admin.protectmetadata' => false,
'admin.checkforupdates' => true,
'trusted.url.domains' => array(),
'trusted.url.regex' => false,
'enable.http_post' => false,
'debug' => array(
'saml' => false,
'backtraces' => true,
'validatexml' => false,
),
'showerrors' => true,
'errorreporting' => true,
'logging.level' => SimpleSAML\Logger::NOTICE,
'logging.handler' => 'syslog',
'logging.facility' => defined('LOG_LOCAL5') ? constant('LOG_LOCAL5') : LOG_USER,
'logging.processname' => 'simplesamlphp',
'logging.logfile' => 'simplesamlphp.log',
'statistics.out' => array(
),
'proxy' => null,
'database.dsn' => 'mysql:host=localhost;dbname=saml',
'database.username' => 'simplesamlphp',
'database.password' => 'secret',
'database.options' => array(),
'database.prefix' => '',
'database.persistent' => false,
'database.slaves' => array(
),
'enable.saml20-idp' => false,
'enable.shib13-idp' => false,
'enable.adfs-idp' => false,
'enable.wsfed-sp' => false,
'enable.authmemcookie' => false,
'default-wsfed-idp' => 'urn:federation:pingfederate:localhost',
'shib13.signresponse' => true,
'session.duration' => 8 * (60 * 60),
'session.datastore.timeout' => (4 * 60 * 60),
'session.state.timeout' => (60 * 60),
'session.cookie.name' => 'SimpleSAMLSessionID',
'session.cookie.lifetime' => 0,
'session.cookie.path' => '/',
'session.cookie.domain' => null,
'session.cookie.secure' => false,
'session.phpsession.cookiename' => 'SimpleSAML',
'session.phpsession.savepath' => null,
'session.phpsession.httponly' => true,
'session.authtoken.cookiename' => 'SimpleSAMLAuthToken',
'session.rememberme.enable' => false,
'session.rememberme.checked' => false,
'session.rememberme.lifetime' => (14 * 86400),
'memcache_store.servers' => array(
array(
array('hostname' => 'localhost'),
),
),
'memcache_store.prefix' => '',
'memcache_store.expires' => 36 * (60 * 60),
'language' => array(
'priorities' => array(
'no' => array('nb', 'nn', 'en', 'se'),
'nb' => array('no', 'nn', 'en', 'se'),
'nn' => array('no', 'nb', 'en', 'se'),
'se' => array('nb', 'no', 'nn', 'en'),
),
),
'language.available' => array(
'en', 'no', 'nn', 'se', 'da', 'de', 'sv', 'fi', 'es', 'ca', 'fr', 'it', 'nl', 'lb',
'cs', 'sl', 'lt', 'hr', 'hu', 'pl', 'pt', 'pt-br', 'tr', 'ja', 'zh', 'zh-tw', 'ru',
'et', 'he', 'id', 'sr', 'lv', 'ro', 'eu', 'el', 'af'
),
'language.rtl' => array('ar', 'dv', 'fa', 'ur', 'he'),
'language.default' => 'en',
'language.parameter.name' => 'language',
'language.parameter.setcookie' => true,
'language.cookie.name' => 'language',
'language.cookie.domain' => null,
'language.cookie.path' => '/',
'language.cookie.secure' => false,
'language.cookie.httponly' => false,
'language.cookie.lifetime' => (60 * 60 * 24 * 900),
'language.i18n.backend' => 'SimpleSAMLphp',
'attributes.extradictionary' => null,
'theme.use' => 'default',
'template.auto_reload' => false,
'production' => true,
'idpdisco.enableremember' => true,
'idpdisco.rememberchecked' => true,
'idpdisco.validate' => true,
'idpdisco.extDiscoveryStorage' => null,
'idpdisco.layout' => 'dropdown',
'authproc.idp' => array(
30 => 'core:LanguageAdaptor',
45 => array(
'class' => 'core:StatisticsWithAttribute',
'attributename' => 'realm',
'type' => 'saml20-idp-SSO',
),
50 => 'core:AttributeLimit',
99 => 'core:LanguageAdaptor',
),
'authproc.sp' => array(
90 => 'core:LanguageAdaptor',
),
'metadata.sources' => array(
array('type' => 'flatfile'),
),
'metadata.sign.enable' => false,
'metadata.sign.privatekey' => null,
'metadata.sign.privatekey_pass' => null,
'metadata.sign.certificate' => null,
'metadata.sign.algorithm' => null,
'store.type' => 'phpsession',
'store.sql.dsn' => 'sqlite:/path/to/sqlitedatabase.sq3',
'store.sql.username' => null,
'store.sql.password' => null,
'store.sql.prefix' => 'SimpleSAMLphp',
'store.redis.host' => 'localhost',
'store.redis.port' => 6379,
'store.redis.prefix' => 'SimpleSAMLphp',
);
Apache 2 site config:
<VirtualHost *:80>
ServerName saml.veptec.mx
DocumentRoot /var/www/html
Alias /simplesaml /var/simplesamlphp/www
<Directory /var/simplesamlphp/www>
Require all granted
</Directory>
</VirtualHost>
The https://saml.dominian.com/simplesaml is redirected to https://saml.dominian.com/simplesaml/module.php/core/frontpage_welcome.php but that file return HTTP ERROR 500, I try to track down the error and I fond out that is problem with the config file.
Any ideas?
I found the answer, the location it was not initializing. It was a bug.
In the ./lib/SimpleSAML/Locale/Localization.php file I only call this method:
$this->setupTranslator();
in the end of the constructor and it works correctly.
Related
Set values for default address fields in Drupal 8
I need to set values for default address fields(langcode, country_code, administrative_area, address_locality ect.) when I create a node. I used below code in the submitForm function of a Form class which is extends by Drupal\Core\Form\FormBase class. But it not works for me. $venueNode = Node::create([ 'type' => 'venue', 'title' => 'Venue', 'field_address' => [ 'country_code' => 'US', 'address_line1' => '1098 Alta Ave', 'locality' => 'Mountain View', 'administrative_area' => 'US-CA', 'postal_code' => '94043', ], ]); $venueNode->save();
I made a mistake here. There should be a 0 index for field_address. Therefore the code should be like below. $venueNode = Node::create([ 'type' => 'venue', 'title' => 'Venue', 'field_address' => [ 0 => [ 'country_code' => 'US', 'address_line1' => '1098 Alta Ave', 'locality' => 'Mountain View', 'administrative_area' => 'US-CA', 'postal_code' => '94043', ], ], ]); $venueNode->save();
How to use doctrine in SlimPHP with DB2?
I am trying use Doctrine within Slim to connect to a DB2 db. I am getting no errors. But, my app is not connecting to the database. I am using (likely incorrectly) this package for the driver: alanseiden/doctrine-dbal-ibmi Here is the pertinent bit from my DIC: // Doctrine $container['db'] = function ($c) { $settings = $c->get('settings'); $config = \Doctrine\ORM\Tools\Setup::createAnnotationMetadataConfiguration( $settings['doctrine']['meta']['entity_path'], $settings['doctrine']['meta']['auto_generate_proxies'], $settings['doctrine']['meta']['proxy_dir'], $settings['doctrine']['meta']['cache'], false ); return \Doctrine\ORM\EntityManager::create($settings['doctrine']['connection'], $config); }; And, the referenced settings: // doctrine settings 'doctrine' => [ 'meta' => [ 'entity_path' => [ 'app/src/Entity' ], 'auto_generate_proxies' => true, 'proxy_dir' => __DIR__.'/../cache/proxies', 'cache' => null, ], 'connection' => [ 'Description' => 'IBM i Access ODBC Driver 64-bit', 'driver' => '\DoctrineDbalIbmi\Driver\DB2Driver::class', 'System' => 'xx.xx.xx.xx', 'UserID' => '*****', 'Password' => '*****', 'Naming' => 0, 'DefaultLibraries' => 'QGPL', 'ConnectionType' => 0, 'CommitMode' => 2, 'ExtendedDynamic' => 1, 'DefaultPkgLibrary' => 'QGPL', 'DefaultPackage' => 'A/DEFAULT(IBM),2,0,1,0,512', 'AllowDataCompression' => 1, 'MaxFieldLength' => 32, 'BlockFetch' => 1, 'BlockSizeKB' => 128, 'ExtendedColInfo' => 0, 'LibraryView' => 'ENU', 'AllowUnsupportedChar' => 0, 'ForceTranslation' => 0, 'Trace' => 0 ] ] ], ]; I appreciate any help or direction.
zf2 + Doctrine a different database for each member
Each connected member of my site has its database. Here is the doctrine config for "user_1": return array( 'doctrine' => array( 'connection' => array( 'orm_default' => array( 'driverClass' => 'Doctrine\DBAL\Driver\PDOMySql\Driver', 'params' => array( 'host' => 'localhost', 'port' => '3306', 'user' => 'user_1', 'password' => 'psswd_user_1', 'dbname' => 'database_user_1', 'charset' => 'utf8', 'driverOptions' => array (1002 => 'SET NAMES utf8'), )),),),); Is there a way to replace : 'user_1', 'psswd_user_1' and 'database_user_1' with 'user_x', 'psswd_user_x' and 'database_user_x' for user_x ? I don't know how to do that ! I'd like to avoid copying the same code for each user ... Thank you for help
The proper way to do this might be to inject the configuration that you need when the connection is created. I couldn't find any event that you could hook into to do that, so you have to find the right service manager key to override. With a little bit of source code digging, I found that these options are sent to a DoctrineORMModule\Options\DBALConnection instance and that this instance is created by DoctrineORMModule\Service\DBALConnectionFactory You need to override this factory with something like this: <?php namespace MyModule\Service; use DoctrineORMModule\Service\DBALConnectionFactory; use Zend\ServiceManager\ServiceLocatorInterface; class MyDBALConnectionFactory extends DBALConnectionFactory { public function getOptions(ServiceLocatorInterface $sl, $key, $name = null) { $options = parent::getOptions($sl, $key, $name); // override for everyone that needs a DBALConnection if ($this->getOptionClass() === 'DoctrineORMModule\Options\DBALConnection') { // set custom parameters here // maybe fetch the current user with $sl->get('...') $params = [/* ... */]; $options->setParams($params); } return $options; } } And then you just tell the service manager about it: <?php return [ ... 'doctrine' => [ 'doctrine_factories' => [ 'connection' => 'MyModule\Service\DBALConnectionFactory', ] ] ... ];
Thanks to Alejandro Celaya. 1st link and 2d link I hope it will be useful. I know it's not perfect but I can't do better ! I'd like critical. in config/autoload/doctrine.local.php: 'doctrine' => array( 'connection' => array( 'orm_default' => array( 'driverClass' => 'Doctrine\DBAL\Driver\PDOMySql\Driver', 'params' => array( 'host' => 'localhost', 'port' => '3306', 'user' => 'root', 'password' => '', 'dbname' => 'gestion_toto_default', 'charset' => 'utf8', 'driverOptions' => array(1002 => 'SET NAMES utf8'), ) ), 'orm_toto_users' => array( 'driverClass' => 'Doctrine\DBAL\Driver\PDOMySql\Driver', 'params' => array( 'host' => 'localhost', 'port' => '3306', 'user' => 'root', 'password' => '', //gestion_toto_users has 2 tables : users and db_users 'dbname' => 'gestion_toto_users', 'driverOptions' => array(1002 => 'SET NAMES utf8'), ) ), 'dynamic_orm' => array( 'driverClass' =>'Doctrine\DBAL\Driver\PDOMySql\Driver', 'params' => array( 'host' => 'localhost', 'port' => '3306', 'user' => '', 'password' => '', 'dbname' => '', 'driverOptions' => array(1002 => 'SET NAMES utf8'), ), ), ), 'driver' => array( 'orm_toto_users' => array( 'class' => 'Doctrine\ORM\Mapping\Driver\DriverChain', 'drivers' => array( __NAMESPACE__ . '\Entity' => __NAMESPACE__ . '_driver' ) ), 'dynamic_orm' => array( 'drivers' => array( __NAMESPACE__ . '\Entity' => __NAMESPACE__ . '_driver' ) ), ), 'entitymanager' => array( 'orm_toto_users' => array( 'connection' => 'orm_toto_users', 'configuration' => 'orm_default' ), 'dynamic_orm' => array( 'connection' => 'dynamic_orm', ), ), 'eventmanager' => array( 'orm_toto_users' => array() ), 'sql_logger_collector' => array( 'orm_toto_users' => array(), ), 'entity_resolver' => array( 'orm_toto_users' => array() ),), module.config.php : 'doctrine' => array( 'driver' => array( __NAMESPACE__ . '_driver' => array( 'class' => 'Doctrine\ORM\Mapping\Driver\AnnotationDriver', 'cache' => 'array', 'paths' => array( __DIR__ . '/../src/' . __NAMESPACE__ . '/Entity' ), ), 'orm_default' => array( 'drivers' => array( __NAMESPACE__ . '\Entity' => __NAMESPACE__ . '_driver' ) ), ), 'authentication' => array( 'orm_default' => array( 'object_manager' => 'doctrine.entitymanager.orm_toto_users', 'identity_class' => 'MyModule\Entity\User', 'identity_property' => 'identifiant', 'credential_property' => 'password', 'credential_callable' => function(\MyModule\Entity\User $user, $passwordGiven) { $bcrypt = new \Zend\Crypt\Password\Bcrypt(); return $bcrypt->verify($psswdGiven, $user->getPsswd()) && $user->getIsactif(); }, ), ), ), in Xcontroller : public function getEntityManager() { if (null === $this->em) { $this->em = $this->getServiceLocator()->get('dynamic_entity_manager'); } return $this->em; } in userController : public function getEntityManager() { if (null === $this->em) { $this->em = $this->getServiceLocator()->get('doctrine.entitymanager.orm_toto_users'); } return $this->em; } in DynamicEMFactory.php: class DynamicEMFactory implements FactoryInterface { public function createService(ServiceLocatorInterface $serviceLocator) { // Get current user $authService = $serviceLocator->get('Zend\Authentication\AuthenticationService'); if (! $authService->hasIdentity()) { throw new \RuntimeException( 'It is not possible to create a dynamic entity manager before a user has logged in' ); } $user = $authService->getIdentity(); $db_User = $user->getUser_db()->getDbuser(); $db_Psswd = $user->getUser_db()->getDbpsswd(); $db_Name = $user->getUser_db()->getDbname(); // Update connection config $globalConfig = $serviceLocator->get('config'); $globalConfig['doctrine']['connection']['dynamic_orm']['params']['user'] = $db_User; $globalConfig['doctrine']['connection']['dynamic_orm']['params']['password'] = $db_Psswd; $globalConfig['doctrine']['connection']['dynamic_orm']['params']['dbname'] = $db_Name; $isAllowOverride = $serviceLocator->getAllowOverride(); $serviceLocator->setAllowOverride(true); $serviceLocator->setService('config', $globalConfig); $serviceLocator->setAllowOverride($isAllowOverride); return $serviceLocator->get('doctrine.entitymanager.dynamic_orm'); } } in module.config : 'service_manager' => array( 'factories' => array( 'dynamic_entity_manager' => 'XXX\Service\Factory\DynamicEMFactory', in onBootstrap (to change appearence): $authService = $serviceManager->get('Zend\Authentication\AuthenticationService'); if ($authService->getIdentity()) { $em = $serviceManager->get('dynamic_entity_manager'); } else { $em = $serviceManager->get('doctrine.entitymanager.orm_default'); } $viewModel = $e->getApplication()->getMvcEvent()->getViewModel(); $query = $serviceManager->get('param_user'); $tab = $query->getReponse($em); $nom_theme = $tab['something'])); $viewModel->nom_theme = $nom_theme;//to layout
How to resize Root Disk with runInstance in PHP
$cmd = 'runInstances'; $result = $client->$cmd(array( 'ImageId' => selectAMI($_POST['dc'], $_POST['os']), 'MinCount' => 1, 'MaxCount' => 1, 'InstanceType' => $_POST['itype'], 'KeyName' => $_POST['key'], 'SecurityGroups' => array($securityGroupName), 'BlockDeviceMappings' => array( 'DeviceName' => '/dev/sda1', array( 'Ebs' => array( 'SnapshotId' => 'snap-2337bd2a', 'VolumeSize' => $disksize, 'DeleteOnTermination' => true, 'VolumeType' => 'gp2', 'Encrypted' => false ) ) ) )); What is wrong with this, it does not work and I get no error?
Your BlockDeviceMappings part is not structured correctly. You have DeviceName outside the second array structure, where it should be inside. Try this: $cmd = 'runInstances'; $result = $client->$cmd(array( 'ImageId' => selectAMI($_POST['dc'], $_POST['os']), 'MinCount' => 1, 'MaxCount' => 1, 'InstanceType' => $_POST['itype'], 'KeyName' => $_POST['key'], 'SecurityGroups' => array($securityGroupName), 'BlockDeviceMappings' => array( array( 'DeviceName' => '/dev/sda1', 'Ebs' => array( 'SnapshotId' => 'snap-2337bd2a', 'VolumeSize' => $disksize, 'DeleteOnTermination' => true, 'VolumeType' => 'gp2', 'Encrypted' => false ) ) ) ));
Unit Testing OAuth Login with Cake 2.3
I need some advice on how to set up a unit test in Cake 2.3 that tests OAuth login. I'm using the thomseddon/cakephp-oauth-server plugin. Note: I've reviewed examples such as CakePHP 2.3 - Unit testing User Login, but I'm still confused about how exactly to approach an OAuth test using the plugin. Any help appreciated. The following is what I currently have in my unit test. Not very much of a test, yet. /** * testOAuthLogin method * Tests that OAuth login works * #return void */ public function testOAuthLogin(){ $data = array( 'response_type' => 'code', 'client_id' => getenv('THREE_SCALE_APP_ID'), 'User' => array( 'username' => TEST_USERNAME, 'passwd' => TEST_PASSWORD ) ); $result = $this->testAction('/oauth/login', array( 'data' => $data, 'method' => 'post' )); debug($result); } This returns: {"error":"invalid_client","error_description":"No client id supplied"}
I was able to figure this out. I just needed to setup up proper fixtures for User and AccessToken. And then I had to ensure that these were imported in the controller that I was testing in via $fixtures. Example of my AccessTokenFixture: <?php App::uses('OAuthComponent', 'OAuth.Controller/Component'); /** * AccessTokenFixture * */ class AccessTokenFixture extends CakeTestFixture { /** * Fields * * #var array */ public $fields = array( 'oauth_token' => array('type' => 'string', 'null' => false, 'default' => null, 'length' => 40, 'key' => 'primary', 'collate' => 'utf8_general_ci', 'charset' => 'utf8'), 'client_id' => array('type' => 'string', 'null' => false, 'default' => null, 'length' => 36, 'collate' => 'utf8_general_ci', 'charset' => 'utf8'), 'user_id' => array('type' => 'integer', 'null' => false, 'default' => null), 'expires' => array('type' => 'integer', 'null' => false, 'default' => null), 'scope' => array('type' => 'string', 'null' => true, 'default' => null, 'collate' => 'utf8_general_ci', 'charset' => 'utf8'), 'indexes' => array( 'PRIMARY' => array('column' => 'oauth_token', 'unique' => 1) ), 'tableParameters' => array('charset' => 'utf8', 'collate' => 'utf8_general_ci', 'engine' => 'MyISAM') ); /** * init method * #return void */ public function init() { $this->records = array( array( 'oauth_token' => OAuthComponent::hash('SAMPLE_ACCESS_TOKEN'), 'client_id' => 'YOUR_CLIENT_ID', 'user_id' => 1, 'expires' => 1367263611232323, 'scope' => '' ), array( 'oauth_token' => OAuthComponent::hash('SAMPLE_ACCESS_TOKEN'), 'client_id' => 'YOUR_CLIENT_ID', 'user_id' => 2, 'expires' => 13672640632323323, 'scope' => '' ) ); parent::init(); } }