Skip to content

Commit

Permalink
Create connector-howto.adoc
Browse files Browse the repository at this point in the history
  • Loading branch information
@khazelton
khazelton authored Mar 24, 2023
1 parent b6ba895 commit 306f2cd
Showing 1 changed file with 231 additions and 0 deletions.
231 changes: 231 additions & 0 deletions connector-howto.adoc
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,231 @@
=== connectors.adoc

SEE workbench.adoc +
permalink: https://github.internet2.edu/internet2/iam-knowledge-bits/blob/main/connectors.adoc +
next] LDAP/AD provisioning with midPoint

- - -
_2023-03-22 19:12:40 Connector Howto_

*- Reset Workbench to pristine state -*

```
ssh csprootuser@khazelton.workbench.incommon.org
cd /csp-tap/InCommonTAP-Examples/Workbench

docker-compose down -v
docker-compose up -d
```

==== Add the Artists' Collective, a new CSV resource, to the Workbench

*- First, Where is the MIDPOINT_HOME directory? -*

` In the Workbench host for the containers, MIDPOINT_HOME is: +
` /csp-tap/InCommonTAP-Examples/Workbench/midpoint_server/container_files/mp-home

` Everything in MIDPOINT_HOME is mapped to +
` /opt/midpoint/var +
` inside the running container


*- Artists Collective demo -*

` User schema extension .xsd files go into MIDPOINT_HOME/schema +
` .csv data file for the Artist Collective resource also goes into MIDPOINT_HOME +

```
cd $MIDPOINT_HOME
ls -la schema
ls -la usertype_export.csv
```

*- Complete the Artists' Collective resource definition, 100-mnt0.xml -*

` Edit resource definition file on local computer: +
` ~/opt/kh-wb/objects/resources/100-mnt0.xml

` fill in the essential parameter definitions section by section:

` Connector section +
` Schema section +
` Schema Handling section +
` Capabilities section +
` Synchronization section +

*- The Artist Collective resource config goes into MIDPOINT_HOME/objects/resources on the Workbench host -*

` Use MidPoint Studio to connect to the workbench host and upload the above files to their proper locations +

*- Once the files are in place, Open the Workbench UI and select Midpoint -*

` go to Resources / Import Resource Definition, Browse to 100-mnt0.xml on local host +
` click Import +

` Back to 'All Resources / TMNT System', select Accounts, scroll down and press the Import button +
` Open 'Accounts' on the new resource, Scroll down to the list of users and select one for viewing

*- Now browse to the Users tab, scroll to 2nd page and note that Cesare Borgia from the Artists' Collective is now recognized as a User in midPoint

*- This process can be used as a template for adding any other csv-based resource -*

*- TBD: native install -*

` replicate artist/hr resource on MBProMax: ~/opt/midpoint-4.6 +
` ~/Users/khazelton/opt/midpoint-4.6 <- MIDPOINT_HOME +
` MIDPOINT_HOME/bin <- All the start/stop/etc scripts

```
cd $MIDPOINT_HOME
./bin/start.sh <- To Start midPoint
```
- - -

next: replicate artist/hr resource on MBProMax:midpoint-4.6

- - -
_2023-03-22 14:36:48 csv connector, resource configuration_

/csp-tap/InCommonTAP-Examples/Workbench/midpoint_server/container_files/mp-home
/csp-tap/InCommonTAP-Examples/Workbench/midpoint_server/container_files/mp-home/post-initial-objects/
resources/100-mnt.xml

if you make changes in the midpoint files on the host running docker, you must bring the running containers down with the option that clears out the existing mapped files in the container:

```
docker-compose down -v
...
docker-compose up -d
```
*- working tmnt resource def -* +
~/opt/kh.wb/objects/resources/SourceTMNTSystem.xml

- - -
_2023-03-21 17:42:32 csv connector, resource configuration_

*- Host for containerize workbench -*

```
Workbench/midpoint_server/container_files/mp-home

COPY ../Workbench/midpoint_server/container_files/mp-home/ /opt/midpoint/var/
| |
base in container host base inside connector
```

*- in the container -*

```
├── container_files
│ ├── csv
│ │ ├── source-hr.csv
│ │ └── UserType_export.csv // <-
│ ├── httpd
│ │ ├── 00-shib.conf
│ │ ├── host-cert.pem
│ │ ├── host-key.pem
│ │ ├── midpoint-shib.conf
│ │ └── vhosts.conf
│ ├── mp-home
│ │ ├── config.xml
│ │ ├── cs-portal.csv
│ │ ├── faculty-portal.csv
│ │ ├── icf-connectors
│ │ │ ├── connector-grouper-rest-0.7.jar
│ │ │ ├── connector-rest-wordpress-.23-SNAPSHOT.jar
│ │ │ ├── connector-sympa-1.0.2-connector.jar
│ │ │ └── net.tirasa.connid.bundles.db.scriptedsql-2.2.-SNAPSHOT.jar
│ │ ├── lib
│ │ │ ├── mariadb-java-client-3.0.jar
│ │ │ └── mysql-connector-java-8.0.30.jar
│ │ ├── mailing-lists.csv
│ │ ├── post-initial-objects
│ │ │ ├── archetypes
│ │ │ │ ├── 300-archetype-affiliation.xml
│ │ │ │ ├── 300-archetype-course.xml
│ │ │ │ ├── 300-archetype-department.xml
│ │ │ │ ├── 300-archetype-external-person.xml
│ │ │ │ ├── 300-archetype-generic-grouper-group.xml
│ │ │ │ ├── 300-archetype-mailing-list.xml
│ │ │ │ ├── 300-archetype-midpoint-group.xml
│ │ │ │ ├── 300-archetype-sis-person.xml
│ │ │ │ ├── 400-archetype-guest-person.xml
│ │ │ │ └── 500-archetype-hr-person.xml
│ │ │ ├── bulkActions
│ │ │ │ ├── 900-test-all-resources.xml
│ │ │ │ └── 910-recompute-grouper-objects.xml
│ │ │ ├── functionLibraries
│ │ │ │ └── 100-function-library-grouper.xml
│ │ │ ├── objectTemplates
│ │ │ │ └── 100-template-user.xml
│ │ │ ├── ordering.txt
│ │ │ ├── orgs
│ │ │ │ ├── 100-org-affiliations.xml
│ │ │ │ ├── 100-org-courses.xml
│ │ │ │ ├── 100-org-departments.xml
│ │ │ │ ├── 100-org-generic-groups.xml
│ │ │ │ ├── 100-org-mailing-lists.xml
│ │ │ │ ├── 100-org-midpoint-groups.xml
│ │ │ │ ├── 400-org-grouper-sysadmin.xml
│ │ │ │ ├── 500-org-hr-sor.xml
│ │ │ │ └── 600-org-guest-sor.xml
│ │ │ ├── resources // <-
│ │ │ │ ├── 100-connector-rest-wordpress.xml
│ │ │ │ ├── 100-grouper.xml
│ │ │ │ ├── 100-guest-db.xml
│ │ │ │ ├── 100-ldap-main.xml
│ │ │ │ ├── 100-source-hr-sor.xml
│ │ │ │ ├── 100-source-sis-persons.xml
│ │ │ │ ├── 100-target-cs-portal.xml
│ │ │ │ ├── 100-target-faculty-portal.xml
│ │ │ │ └── 100-target-mailing-lists.xml
│ │ │ ├── roles
│ │ │ │ ├── 200-metarole-grouper-provided-group.xml
│ │ │ │ ├── 200-metarole-ldap-group.xml
│ │ │ │ ├── 200-metarole-role-wordpress-admin.xml
│ │ │ │ ├── 200-metarole-role-wordpress-editor.xml
│ │ │ │ ├── 200-role-ldap-basic.xml
│ │ │ │ ├── 300-direct-wordpress-role-admin.xml
│ │ │ │ └── 300-direct-wordpress-role-editor.xml
│ │ │ ├── securityPolicy
│ │ │ │ └── 000-security-policy.xml
│ │ │ ├── systemConfigurations
│ │ │ │ └── 010-system-configuration.xml
│ │ │ ├── tasks
│ │ │ │ ├── 300-task-hr-import.xml
│ │ │ │ ├── 300-task-import-guests-sql.xml
│ │ │ │ ├── 300-task-import-sis-persons.xml
│ │ │ │ ├── 500-task-import-guests-sql-livesync.xml
│ │ │ │ ├── 995-task-group-scavenger.xml
│ │ │ │ ├── 997-task-async-update-grouper.xml
│ │ │ │ ├── 998-task-reconciliation-grouper-groups.xml
│ │ │ │ └── 999-task-recomputation-users.xml
│ │ │ └── users
│ │ │ └── 600-user-banderson.xml
│ │ ├── res
│ │ │ └── sis-persons
│ │ │ ├── SchemaScript.groovy
│ │ │ ├── SearchScript.groovy
│ │ │ └── TestScript.groovy
│ │ ├── schema
│ │ │ ├── fanner.xsd
│ │ │ └── internet2.xsd
│ │ ├── source-external.csv
│ │ ├── staff-portal.csv
│ │ └── UserType_export.csv
│ ├── shibboleth
│ │ ├── attribute-map.xml
│ │ ├── idp-metadata.xml
│ │ ├── shibboleth2.xml
│ │ ├── shibd.logger
│ │ ├── sp-encrypt-cert.pem
│ │ ├── sp-encrypt-key.pem
│ │ ├── sp-signing-cert.pem
│ │ └── sp-signing-key.pem
│ └── system
│ └── setservername.sh
└── Dockerfile
```

- - -

0 comments on commit 306f2cd

Please sign in to comment.