From 306f2cdfaf6609fc4e895fa0db05c43184f9aa64 Mon Sep 17 00:00:00 2001 From: Keith Hazelton Date: Fri, 24 Mar 2023 10:15:01 -0500 Subject: [PATCH] Create connector-howto.adoc --- connector-howto.adoc | 231 +++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 231 insertions(+) create mode 100644 connector-howto.adoc diff --git a/connector-howto.adoc b/connector-howto.adoc new file mode 100644 index 0000000..784e503 --- /dev/null +++ b/connector-howto.adoc @@ -0,0 +1,231 @@ +=== connectors.adoc + +SEE workbench.adoc + +permalink: https://github.internet2.edu/internet2/iam-knowledge-bits/blob/main/connectors.adoc + +next] LDAP/AD provisioning with midPoint + +- - - +_2023-03-22 19:12:40 Connector Howto_ + +*- Reset Workbench to pristine state -* + +``` +ssh csprootuser@khazelton.workbench.incommon.org +cd /csp-tap/InCommonTAP-Examples/Workbench + +docker-compose down -v +docker-compose up -d +``` + +==== Add the Artists' Collective, a new CSV resource, to the Workbench + +*- First, Where is the MIDPOINT_HOME directory? -* + +` In the Workbench host for the containers, MIDPOINT_HOME is: + +` /csp-tap/InCommonTAP-Examples/Workbench/midpoint_server/container_files/mp-home + +` Everything in MIDPOINT_HOME is mapped to + +` /opt/midpoint/var + +` inside the running container + + +*- Artists Collective demo -* + +` User schema extension .xsd files go into MIDPOINT_HOME/schema + +` .csv data file for the Artist Collective resource also goes into MIDPOINT_HOME + + +``` +cd $MIDPOINT_HOME +ls -la schema +ls -la usertype_export.csv +``` + +*- Complete the Artists' Collective resource definition, 100-mnt0.xml -* + +` Edit resource definition file on local computer: + +` ~/opt/kh-wb/objects/resources/100-mnt0.xml + +` fill in the essential parameter definitions section by section: + +` Connector section + +` Schema section + +` Schema Handling section + +` Capabilities section + +` Synchronization section + + +*- The Artist Collective resource config goes into MIDPOINT_HOME/objects/resources on the Workbench host -* + +` Use MidPoint Studio to connect to the workbench host and upload the above files to their proper locations + + +*- Once the files are in place, Open the Workbench UI and select Midpoint -* + +` go to Resources / Import Resource Definition, Browse to 100-mnt0.xml on local host + +` click Import + + +` Back to 'All Resources / TMNT System', select Accounts, scroll down and press the Import button + +` Open 'Accounts' on the new resource, Scroll down to the list of users and select one for viewing + +*- Now browse to the Users tab, scroll to 2nd page and note that Cesare Borgia from the Artists' Collective is now recognized as a User in midPoint + +*- This process can be used as a template for adding any other csv-based resource -* + +*- TBD: native install -* + +` replicate artist/hr resource on MBProMax: ~/opt/midpoint-4.6 + +` ~/Users/khazelton/opt/midpoint-4.6 <- MIDPOINT_HOME + +` MIDPOINT_HOME/bin <- All the start/stop/etc scripts + +``` +cd $MIDPOINT_HOME +./bin/start.sh <- To Start midPoint +``` +- - - + +next: replicate artist/hr resource on MBProMax:midpoint-4.6 + +- - - +_2023-03-22 14:36:48 csv connector, resource configuration_ + +/csp-tap/InCommonTAP-Examples/Workbench/midpoint_server/container_files/mp-home +/csp-tap/InCommonTAP-Examples/Workbench/midpoint_server/container_files/mp-home/post-initial-objects/ +resources/100-mnt.xml + +if you make changes in the midpoint files on the host running docker, you must bring the running containers down with the option that clears out the existing mapped files in the container: + +``` +docker-compose down -v +... +docker-compose up -d +``` +*- working tmnt resource def -* + +~/opt/kh.wb/objects/resources/SourceTMNTSystem.xml + +- - - +_2023-03-21 17:42:32 csv connector, resource configuration_ + +*- Host for containerize workbench -* + +``` +Workbench/midpoint_server/container_files/mp-home + +COPY ../Workbench/midpoint_server/container_files/mp-home/ /opt/midpoint/var/ + | | + base in container host base inside connector +``` + +*- in the container -* + +``` +├── container_files +│ ├── csv +│ │ ├── source-hr.csv +│ │ └── UserType_export.csv // <- +│ ├── httpd +│ │ ├── 00-shib.conf +│ │ ├── host-cert.pem +│ │ ├── host-key.pem +│ │ ├── midpoint-shib.conf +│ │ └── vhosts.conf +│ ├── mp-home +│ │ ├── config.xml +│ │ ├── cs-portal.csv +│ │ ├── faculty-portal.csv +│ │ ├── icf-connectors +│ │ │ ├── connector-grouper-rest-0.7.jar +│ │ │ ├── connector-rest-wordpress-.23-SNAPSHOT.jar +│ │ │ ├── connector-sympa-1.0.2-connector.jar +│ │ │ └── net.tirasa.connid.bundles.db.scriptedsql-2.2.-SNAPSHOT.jar +│ │ ├── lib +│ │ │ ├── mariadb-java-client-3.0.jar +│ │ │ └── mysql-connector-java-8.0.30.jar +│ │ ├── mailing-lists.csv +│ │ ├── post-initial-objects +│ │ │ ├── archetypes +│ │ │ │ ├── 300-archetype-affiliation.xml +│ │ │ │ ├── 300-archetype-course.xml +│ │ │ │ ├── 300-archetype-department.xml +│ │ │ │ ├── 300-archetype-external-person.xml +│ │ │ │ ├── 300-archetype-generic-grouper-group.xml +│ │ │ │ ├── 300-archetype-mailing-list.xml +│ │ │ │ ├── 300-archetype-midpoint-group.xml +│ │ │ │ ├── 300-archetype-sis-person.xml +│ │ │ │ ├── 400-archetype-guest-person.xml +│ │ │ │ └── 500-archetype-hr-person.xml +│ │ │ ├── bulkActions +│ │ │ │ ├── 900-test-all-resources.xml +│ │ │ │ └── 910-recompute-grouper-objects.xml +│ │ │ ├── functionLibraries +│ │ │ │ └── 100-function-library-grouper.xml +│ │ │ ├── objectTemplates +│ │ │ │ └── 100-template-user.xml +│ │ │ ├── ordering.txt +│ │ │ ├── orgs +│ │ │ │ ├── 100-org-affiliations.xml +│ │ │ │ ├── 100-org-courses.xml +│ │ │ │ ├── 100-org-departments.xml +│ │ │ │ ├── 100-org-generic-groups.xml +│ │ │ │ ├── 100-org-mailing-lists.xml +│ │ │ │ ├── 100-org-midpoint-groups.xml +│ │ │ │ ├── 400-org-grouper-sysadmin.xml +│ │ │ │ ├── 500-org-hr-sor.xml +│ │ │ │ └── 600-org-guest-sor.xml +│ │ │ ├── resources // <- +│ │ │ │ ├── 100-connector-rest-wordpress.xml +│ │ │ │ ├── 100-grouper.xml +│ │ │ │ ├── 100-guest-db.xml +│ │ │ │ ├── 100-ldap-main.xml +│ │ │ │ ├── 100-source-hr-sor.xml +│ │ │ │ ├── 100-source-sis-persons.xml +│ │ │ │ ├── 100-target-cs-portal.xml +│ │ │ │ ├── 100-target-faculty-portal.xml +│ │ │ │ └── 100-target-mailing-lists.xml +│ │ │ ├── roles +│ │ │ │ ├── 200-metarole-grouper-provided-group.xml +│ │ │ │ ├── 200-metarole-ldap-group.xml +│ │ │ │ ├── 200-metarole-role-wordpress-admin.xml +│ │ │ │ ├── 200-metarole-role-wordpress-editor.xml +│ │ │ │ ├── 200-role-ldap-basic.xml +│ │ │ │ ├── 300-direct-wordpress-role-admin.xml +│ │ │ │ └── 300-direct-wordpress-role-editor.xml +│ │ │ ├── securityPolicy +│ │ │ │ └── 000-security-policy.xml +│ │ │ ├── systemConfigurations +│ │ │ │ └── 010-system-configuration.xml +│ │ │ ├── tasks +│ │ │ │ ├── 300-task-hr-import.xml +│ │ │ │ ├── 300-task-import-guests-sql.xml +│ │ │ │ ├── 300-task-import-sis-persons.xml +│ │ │ │ ├── 500-task-import-guests-sql-livesync.xml +│ │ │ │ ├── 995-task-group-scavenger.xml +│ │ │ │ ├── 997-task-async-update-grouper.xml +│ │ │ │ ├── 998-task-reconciliation-grouper-groups.xml +│ │ │ │ └── 999-task-recomputation-users.xml +│ │ │ └── users +│ │ │ └── 600-user-banderson.xml +│ │ ├── res +│ │ │ └── sis-persons +│ │ │ ├── SchemaScript.groovy +│ │ │ ├── SearchScript.groovy +│ │ │ └── TestScript.groovy +│ │ ├── schema +│ │ │ ├── fanner.xsd +│ │ │ └── internet2.xsd +│ │ ├── source-external.csv +│ │ ├── staff-portal.csv +│ │ └── UserType_export.csv +│ ├── shibboleth +│ │ ├── attribute-map.xml +│ │ ├── idp-metadata.xml +│ │ ├── shibboleth2.xml +│ │ ├── shibd.logger +│ │ ├── sp-encrypt-cert.pem +│ │ ├── sp-encrypt-key.pem +│ │ ├── sp-signing-cert.pem +│ │ └── sp-signing-key.pem +│ └── system +│ └── setservername.sh +└── Dockerfile +``` + +- - - +