[Fiware-tech-help] Securing verbs via the PEP proxy

Coen Houtman c.houtman at itude.com
Mon Jul 25 16:57:26 CEST 2016


Dear Sir/Madam,

We are really struggling to secure the ContextBroker to prevent DELETE
calls. So much that this has become an impediment to successfully finish
our sprint. As Scrum master of this team I would like to ask you kindly to
respond to the e-mail below. An indication of when we can expect a response
would also really be helpful.

We look forward to your response.

Kind regards,

On Fri, Jul 22, 2016 at 10:35 AM Cristan Meijer <c.meijer at itude.com> wrote:

> Hello,
>
> We would like to secure out ContextBroker so POSTS are allowed, but a
> DELETE isn't. We've asked you about this and you've said we should do the
> following:
>
> * You can configure as many PEPs as you want. You have only to modify the
>> listening port.
>> * You can configure an AuthZForce in
>> https://github.com/ging/horizon/blob/master/openstack_dashboard/local/local_settings.py.example#L629.
>> You only need to configure the URL in which it is listening
>> * To configure PEP to work with AuthZForce you have to use the Level 2 of
>> security. Here you will find tutorials about this:
>> https://edu.fiware.org/course/view.php?id=131
>
>
> We've tried this, but we've had the following problems:
>
>    - If we pull the docker image of
>    fiware/authzforce-ce-server:release-5.4.0 or release-5.3.0a, the image
>    starts, but shuts down after a few seconds after which the logs state that
>    tomcat 7 can't be started.
>    - When we run fiware/authzforce-ce-server:release-4.4.1b, we get a
>    tomcat with no webapp in the webapps directory other than the default
>    stuff.
>    - Performing a manual installation using this guide
>    <http://authzforce-ce-fiware.readthedocs.io/en/release-5.3.0a/InstallationAndAdministrationGuide.html#installation> will
>    have the same result.
>
> In your previous mail, it is stated that we need AuthZForce. However,
> Keypass seems to do something similar. Can you explain the difference?
>
> Can you help us with this?
>
> --
>
> *Cristan Meijer*
> Software engineer
>
> [image: PastedGraphic-2.png]
> Lageweg 2 3703 CA Zeist
> ■ *mob *+31(0) 6 45 372 363
> ■ *tel*  +31(0)30 699 70 20
> ■ *mail* c.meijer at itude.com
>
> www.itude.com ■ K.v.K. 30146090
>
> _____________________________________________________________________________
> ****Op deze mail is een disclaimer van toepassing. De inhoud daarvan is te
> lezen op onze website****
>
> --
Met vriendelijke groeten,

*Coen Houtman*
Scrum master



Lageweg 2
3703 CA Zeist
■ *mob *+31(0) 6 38 08 69 36
■ *tel*  +31(0)30 699 70 20
■ *mail* c.houtman at itude.com

www.itude.com ■ K.v.K. 30146090
_____________________________________________________________________________
****Op deze mail is een disclaimer van toepassing. De inhoud daarvan is te
lezen op onze website****
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/fiware-tech-help/attachments/20160725/509705da/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PastedGraphic-2.png
Type: image/x-png
Size: 3935 bytes
Desc: not available
URL: <https://lists.fiware.org/private/fiware-tech-help/attachments/20160725/509705da/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PastedGraphic-2.png
Type: image/png
Size: 3935 bytes
Desc: not available
URL: <https://lists.fiware.org/private/fiware-tech-help/attachments/20160725/509705da/attachment.png>


More information about the Fiware-tech-help mailing list

You can get more information about our cookies and privacy policies clicking on the following links: Privacy policy   Cookies policy