Gregory Wright

I went back an re-read the section on safe methods, and it seems like the change of session state would be permitted, if that is not the purpose of the call (e.g., the purpose of the query method from the client perspective is not to change session state, but to query the current status of the session).

This definition of safe methods does…

[Read more]

Two other links that might be helpful as examples / explanation of overlays that are not specific to OpenAM:

Walkthrough of overlaying the contents of an existing WAR

Example project showing how to customize CAS modules using Maven overlays

Hope this helps both of us!

I’d been looking into this myself, and if I am reading things correctly, the best / recommended approach to customizing a distribution of OpenAM is to leverage the overlay feature of the Maven WAR plugin. My understanding of this is that you create a Maven project that will be used to overlay the OpenAM WAR contents with the files you want…[Read more]

I’d been looking into this myself, and if I am reading things correctly, the best / recommended approach to customizing a distribution of OpenAM is to leverage the overlay feature of the Maven WAR plugin. My understanding of this is that you:

Create a Maven project that will be used to overlay the OpenAM WAR contents with the files you want…[Read more]

I’d been looking into this myself, and if I am reading things correctly, the best / recommended approach to customizing a distribution of OpenAM is to leverage the overlay feature of the Maven WAR plugin. My understanding of this is that you:

Create a Maven project that will be used to overlay the OpenAM WAR contents with the files you want…[Read more]

@jamiebowen would it be possible to get someone to look at this? Circling back around to this finally, and would love to have an answer.

I can only assume that sometime prior to upgrading the versions of Git and Java, things worked more by accident than design (e.g., the Windows Java environment got picked up by the version Bash provided by the prior version of Git). Once I defined the OPENDJ_JAVA_HOME environment variable for my Windows user as described in the installation…[Read more]

Thank you very much for the additional insight James. It was not apparent from the documentation that query operations for tokens or sessions might have the side effect of expiring / invalidating the token or session. Is this also a side effect of other CREST API calls, or is it only triggered by the token / session queries?

Rogerio,

Thank you very much, that seems to confirm for me that we’ll need to pass through the authentication token of the requesting user.

Kind regards,
Greg

I know there are JEE agents, which from what I can tell handle the authentication and authorization for access to the URL of a web service or application. It is implemented as a filter, which in my experience equates to deciding access at a somewhat coarse / medium level of granularity for access to a specific web resource. But a significant part…[Read more]

Thank you Ludo – at least we have a definitive answer.

Using the following LDIF:

dn: cn=schema
changetype: modify
delete: objectClasses
objectClasses: ( 1.1.2.2.2 NAME 'myObjectClass' )


And the following command:

ldapmodify -p 389 -D "CN=Directory Manager" -f ./remove-object-class.ldif -w mypassword


Gets the following result:

Processing MODIFY request for cn=schema
MODIFY operation…[Read more]

Using the following LDIF:
`
dn: cn=schema
changetype: modify
delete: objectClasses
objectClasses: ( 1.1.2.2.2 NAME ‘myObjectClass’ )
`
And the following command:
`
ldapmodify -p 389 -D “CN=Directory Manager” -f ./remove-object-class.ldif -w mypassword
`
Gets the following result:
`
Processing MODIFY request for cn=schema
MODIFY operation…[Read more]

Thank you Ludo, the MemoryBackend seems to do the trick, at least for testing our direct interactions with LDAP. The next step will be to see if we can wire it into Spring Security for integration tests.