From d7752dd9d6b76b1d359610b16a8d7c72307e8dd6 Mon Sep 17 00:00:00 2001 From: Paul Caskey Date: Tue, 31 Aug 2021 17:12:13 +0000 Subject: [PATCH] bump midpoint to 4.3.2 --- Workbench/idp/Dockerfile | 3 + Workbench/midpoint_server/Dockerfile | 3 +- .../resources/100-grouper.xml | 2 +- .../010-system-configuration.xml | 361 ++++++++++++++++-- .../webproxy/container_files/httpd/index.html | 2 +- 5 files changed, 335 insertions(+), 36 deletions(-) diff --git a/Workbench/idp/Dockerfile b/Workbench/idp/Dockerfile index 2ab14b2..4309126 100644 --- a/Workbench/idp/Dockerfile +++ b/Workbench/idp/Dockerfile @@ -6,6 +6,9 @@ ARG CSPHOSTNAME=localhost ENV CSPHOSTNAME=$CSPHOSTNAME COPY shibboleth-idp/ /opt/shibboleth-idp/ +#rather than copying metadata files included in above folder and including in config, instead upload these files to the IdP UI +# API info here: https://documenter.getpostman.com/view/446764/TzzHmCkn + RUN mkdir -p /opt/shibboleth-idp/metadata/generated && mkdir -p /opt/shibboleth-idp/conf/generated diff --git a/Workbench/midpoint_server/Dockerfile b/Workbench/midpoint_server/Dockerfile index a9464b9..82f1cef 100644 --- a/Workbench/midpoint_server/Dockerfile +++ b/Workbench/midpoint_server/Dockerfile @@ -1,4 +1,5 @@ -FROM tier/midpoint:latest +FROM tier/midpoint:4.3.2-SNAPSHOT +#FROM tier/midpoint:latest MAINTAINER info@evolveum.com diff --git a/Workbench/midpoint_server/container_files/mp-home/post-initial-objects/resources/100-grouper.xml b/Workbench/midpoint_server/container_files/mp-home/post-initial-objects/resources/100-grouper.xml index 9b5b20e..92ab570 100644 --- a/Workbench/midpoint_server/container_files/mp-home/post-initial-objects/resources/100-grouper.xml +++ b/Workbench/midpoint_server/container_files/mp-home/post-initial-objects/resources/100-grouper.xml @@ -14,7 +14,7 @@ xmlns:ri="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3" xmlns:icfc="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/connector-schema-3" xmlns:rest="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/bundle/com.evolveum.polygon.connector-grouper-rest/com.evolveum.polygon.connector.grouper.rest.GrouperConnector" - xmlns:conf="http://midpoint.evolveum.com/xml/ns/public/connector/builtin-1/bundle/com.evolveum.midpoint.provisioning.ucf.impl.builtin.async/AsyncUpdateConnector" + xmlns:conf="http://midpoint.evolveum.com/xml/ns/public/connector/builtin-1/bundle/com.evolveum.midpoint.provisioning.ucf.impl.builtin.async.update/AsyncUpdateConnector" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> diff --git a/Workbench/midpoint_server/container_files/mp-home/post-initial-objects/systemConfigurations/010-system-configuration.xml b/Workbench/midpoint_server/container_files/mp-home/post-initial-objects/systemConfigurations/010-system-configuration.xml index 7355929..73b6c7f 100644 --- a/Workbench/midpoint_server/container_files/mp-home/post-initial-objects/systemConfigurations/010-system-configuration.xml +++ b/Workbench/midpoint_server/container_files/mp-home/post-initial-objects/systemConfigurations/010-system-configuration.xml @@ -1,51 +1,87 @@ + - - + SystemConfiguration - + + + + - + ERROR ro.isdc.wro.extensions.processor.css.Less4jProcessor - + + + OFF + org.springframework.security.web.DefaultSecurityFilterChain + + + OFF org.hibernate.engine.jdbc.spi.SqlExceptionHelper - + + OFF org.hibernate.engine.jdbc.batch.internal.BatchingBatch - + + WARN org.hibernate.engine.jdbc.batch.internal.AbstractBatchImpl - + + OFF org.hibernate.internal.ExceptionMapperStandardImpl - + + OFF net.sf.jasperreports.engine.fill.JRFillDataset - + + WARN org.apache.wicket.resource.PropertiesFactory - + + ERROR org.springframework.context.support.ResourceBundleMessageSource - + + INFO com.evolveum.midpoint.model.impl.lens.projector.Projector - + + INFO com.evolveum.midpoint.model.impl.lens.Clockwork @@ -53,18 +89,20 @@ DEBUG com.evolveum.polygon.connector.grouper - + + %date [%X{subsystem}] [%thread] %level \(%logger\): %msg%n - MIDPOINT_LOG ${midpoint.home}/log/midpoint.log ${midpoint.home}/log/midpoint-%d{yyyy-MM-dd}.%i.log 10 100MB true - + + %date %level: %msg%n - MIDPOINT_PROFILE_LOG ${midpoint.home}/log/midpoint-profile.log ${midpoint.home}/log/midpoint-profile-%d{yyyy-MM-dd}.%i.log 10 @@ -209,13 +247,13 @@ - demo/grouper + CSP-Workbench - + /self/profile - - View/edit your profile + + PageSelfDashboard.profile.description fa fa-user @@ -223,10 +261,10 @@ http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#selfProfile http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#selfAll - + /self/credentials - - View/edit your credentials + + PageSelfDashboard.credentials.description fa fa-shield @@ -234,18 +272,18 @@ http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#selfCredentials http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#selfAll - + /admin/users - + fa fa-users red http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#users - + /admin/resources - + fa fa-database @@ -258,7 +296,12 @@ - My cases + + My cases + + MyCases.title + + My case fe fe-case-object @@ -276,7 +319,12 @@ - All manual cases + + All manual cases + + AllManualCases.title + + Manual case Manual provisioning cases @@ -292,7 +340,12 @@ - All requests + + All requests + + AllRequests.title + + Request Operation requests @@ -308,7 +361,12 @@ - All approvals + + All approvals + + AllApprovals.title + + Approval Approval cases @@ -423,6 +481,20 @@ + + dashboard-reports-view + ReportType + + + + + + collection-reports-view + ReportType + + + + @@ -453,6 +525,9 @@ executionStatus + + schedulingState + node @@ -486,6 +561,9 @@ stateBeforeSuspend + + schedulingStateBeforeSuspend + category @@ -531,9 +609,226 @@ true + + admin-dashboard + + never never + + + + safe + + "Safe" expression profile. It is supposed to contain only operations that are "safe", + i.e. operations that have very little risk to harm the system, circumvent midPoint security + and so on. Use of those operations should be reasonably safe in all expressions. + However, there are limitations. This profile may incomplete or it may even be not completely secure. + Proper security testing of this profile was not yet conducted. It is provided here "AS IS", + without any guarantees. Use at your own risk. + + deny + + asIs + allow + + + path + allow + + + value + allow + + + const + allow + + + script + deny + + + + + script-safe + deny + + com.evolveum.midpoint.xml.ns._public.common.common_3 + MidPoint common schema - generated bean classes + allow + + + com.evolveum.prism.xml.ns._public.types_3 + Prism schema - bean classes + allow + + + java.lang.Integer + allow + + + java.lang.Object + Basic Java operations. + deny + + equals + allow + + hashCode + allow + + + + java.lang.String + String operations are generally safe. But Groovy is adding execute() method which is very dangerous. + allow + + execute + deny + + + + java.lang.CharSequence + allow + + + java.lang.Enum + allow + + + java.util.List + List operations are generally safe. But Groovy is adding execute() method which is very dangerous. + allow + + execute + deny + + + + java.util.ArrayList + List operations are generally safe. But Groovy is adding execute() method which is very dangerous. + allow + + execute + deny + + + + java.util.Map + allow + + + java.util.HashMap + allow + + + java.util.Date + allow + + + javax.xml.namespace.QName + allow + + + javax.xml.datatype.XMLGregorianCalendar + allow + + + java.lang.System + Just a few methods of System are safe enough. + deny + + currentTimeMillis + allow + + + + java.lang.IllegalStateException + Basic Java exception. Also used in test. + allow + + + java.lang.IllegalArgumentException + Basic Java exception. + allow + + + com.evolveum.midpoint.model.common.expression.functions.BasicExpressionFunctions + MidPoint basic functions library + allow + + + com.evolveum.midpoint.model.common.expression.functions.LogExpressionFunctions + MidPoint logging functions library + allow + + + com.evolveum.midpoint.report.impl.ReportFunctions + MidPoint report functions library + allow + + + org.apache.commons.lang.StringUtils + Apache Commons: Strings + allow + + + + + + + + diff --git a/Workbench/webproxy/container_files/httpd/index.html b/Workbench/webproxy/container_files/httpd/index.html index 99be771..32773f7 100644 --- a/Workbench/webproxy/container_files/httpd/index.html +++ b/Workbench/webproxy/container_files/httpd/index.html @@ -9,7 +9,7 @@

Welcome to the InCommon TAP Workbench!

The system contains the following TAP components (click the links to access each component in its own tab):