vanbruggen
New Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2013-05-06
12:00
3018 views
Open ID login
When trying to login with OpenID (google account in my case) i get the message "failed to login"
Credentials foor Google are OK
any suggestions ?
Thanks
Jan Hoetink
Isendoorn College
Warnsveld
Credentials foor Google are OK
any suggestions ?
Thanks
Jan Hoetink
Isendoorn College
Warnsveld
17 Replies
jmarton2

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2013-05-06
14:03
Re: Open ID login
vanbruggen wrote:
>
> When trying to login with OpenID (google account in my case) i get the
> message "failed to login"
> Credentials foor Google are OK
> any suggestions ?
Is this an actual gmail.com e-mail address?
--
Your world is on the move. http://www.novell.com/mobility/
We know what your world looks like. http://www.novell.com/yourworld/
Joe Marton Emeritus Knowledge Partner
>
> When trying to login with OpenID (google account in my case) i get the
> message "failed to login"
> Credentials foor Google are OK
> any suggestions ?
Is this an actual gmail.com e-mail address?
--
Your world is on the move. http://www.novell.com/mobility/
We know what your world looks like. http://www.novell.com/yourworld/
Joe Marton Emeritus Knowledge Partner
tdebeer

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2013-05-06
14:48
Re: Open ID login
HI,
I also have the same issue....nowhere i have seen the setup speak about internet access for the filr appliance, surely this must be there?.... we are behind a firewall/proxy setup, any special ports etc needs to be opened, normal internet access for filr is fine ... we need something more?...
I also have the same issue....nowhere i have seen the setup speak about internet access for the filr appliance, surely this must be there?.... we are behind a firewall/proxy setup, any special ports etc needs to be opened, normal internet access for filr is fine ... we need something more?...
Anonymous_User

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2013-05-06
17:16
Re: Open ID login
Hi,
I could not get it to work either.
As our Filr-Appliance needs to go through a proxy to access the internet and
i could not find a proxy server setting in the network configuration i was
not really surprised.
Looks like Filr is using openid4java and Novell neglected the really simple
---
If your Relying Party / consumer site needs to access the internet through a
proxy, the following proxy configuration is necessary, before the
ConsumerManager is instantiated:
// --- Forward proxy setup (only if needed) ---
ProxyProperties proxyProps = new ProxyProperties();
proxyProps.setProxyName("proxy.example.com");
proxyProps.setProxyPort(8080);
HttpClientFactory.setProxyProperties(proxyProps);
---
steps from the openid4java wiki.
Enhancement again...
Georg
>>> tdebeer<tdebeer@no-mx.forums.novell.com> schrieb am 06.05.2013 um 15:56
in
Nachricht <tdebeer.5ux93c@no-mx.forums.novell.com>:
> HI,
>
> I also have the same issue....nowhere i have seen the setup speak about
> internet access for the filr appliance, surely this must be there?....
> we are behind a firewall/proxy setup, any special ports etc needs to be
> opened, normal internet access for filr is fine ... we need something
> more?...
I could not get it to work either.
As our Filr-Appliance needs to go through a proxy to access the internet and
i could not find a proxy server setting in the network configuration i was
not really surprised.
Looks like Filr is using openid4java and Novell neglected the really simple
---
If your Relying Party / consumer site needs to access the internet through a
proxy, the following proxy configuration is necessary, before the
ConsumerManager is instantiated:
// --- Forward proxy setup (only if needed) ---
ProxyProperties proxyProps = new ProxyProperties();
proxyProps.setProxyName("proxy.example.com");
proxyProps.setProxyPort(8080);
HttpClientFactory.setProxyProperties(proxyProps);
---
steps from the openid4java wiki.
Enhancement again...
Georg
>>> tdebeer<tdebeer@no-mx.forums.novell.com> schrieb am 06.05.2013 um 15:56
in
Nachricht <tdebeer.5ux93c@no-mx.forums.novell.com>:
> HI,
>
> I also have the same issue....nowhere i have seen the setup speak about
> internet access for the filr appliance, surely this must be there?....
> we are behind a firewall/proxy setup, any special ports etc needs to be
> opened, normal internet access for filr is fine ... we need something
> more?...
jmarton2

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2013-05-06
23:17
Re: Open ID login
Georg Fritsch wrote:
> Looks like Filr is using openid4java and Novell neglected the really
> simple ---
Thanks for posting this. I've passed this along to engineering. Right
now we're determining if a section to the docs will be added on how to
configure this, or if this will simply be a TID. One way or another
we'll get this configuration documented.
--
Your world is on the move. http://www.novell.com/mobility/
We know what your world looks like. http://www.novell.com/yourworld/
Joe Marton Emeritus Knowledge Partner
> Looks like Filr is using openid4java and Novell neglected the really
> simple ---
Thanks for posting this. I've passed this along to engineering. Right
now we're determining if a section to the docs will be added on how to
configure this, or if this will simply be a TID. One way or another
we'll get this configuration documented.
--
Your world is on the move. http://www.novell.com/mobility/
We know what your world looks like. http://www.novell.com/yourworld/
Joe Marton Emeritus Knowledge Partner
Highlighted
tdebeer

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2013-05-07
06:59
Re: Open ID login
Ah thought it had to be the proxy...great but stupid is at the door again, where in the world do i add this config...which config file???
Anonymous_User

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2013-05-07
10:09
Re: Open ID login
Hi Joseph,
IMO this is a very easy to fix in the source code but quite hard on the
deployed appliance.
Just changing the tomcat/java system settings by including the required
switches in setenv.sh in /opt/novell/filr/apache-tomcat/bin does not do the
trick.
Maybe there are some other configuration files which are read on system
startup and allow a proxy for the openid4java calls. I couldn't find them.
I had to decompile OpenID4JavaConsumer.class from
/opt/novell/filr/apache-tomcat/lib/ext/spring-security-openid.jar,
fix the OpenID4JavaConsumer constructor,
get it to compile again,
and update the jar on the appliance.
---
public OpenID4JavaConsumer(ConsumerManager consumerManager, final
List<OpenIDAttribute> attributes)
throws ConsumerException
{
logger = LogFactory.getLog(getClass());
// Proxy support
ProxyProperties proxyProps = new ProxyProperties();
proxyProps.setProxyHostName("filrproxy");
proxyProps.setProxyPort(8080);
HttpClientFactory.setProxyProperties(proxyProps);
//
this.consumerManager = new ConsumerManager();
this .attributesToFetchFactory = new AxFetchListFactory() {
private final List<OpenIDAttribute> fetchAttrs =
Collections.unmodifiableList(attributes);
public List<OpenIDAttribute> createAttributeList(String
identifier) {
return fetchAttrs;
}
};
}
---
With this change i can use OpenID login from my appliance over our proxy.
(cascaded squid3, btw)
Georg
PS: I would really like an easier way of doing this... Is there a properties
file, etc. which accomplishes the same thing?
>>> Joseph Marton<jmarton@no-mx.forums.novell.com> schrieb am 07.05.2013 um
00:17 in Nachricht <e_Vht.1993$8q1.91@kozak.provo.novell.com>:
> Georg Fritsch wrote:
>
>> Looks like Filr is using openid4java and Novell neglected the really
>> simple ---
>
> Thanks for posting this. I've passed this along to engineering. Right
> now we're determining if a section to the docs will be added on how to
> configure this, or if this will simply be a TID. One way or another
> we'll get this configuration documented.
IMO this is a very easy to fix in the source code but quite hard on the
deployed appliance.
Just changing the tomcat/java system settings by including the required
switches in setenv.sh in /opt/novell/filr/apache-tomcat/bin does not do the
trick.
Maybe there are some other configuration files which are read on system
startup and allow a proxy for the openid4java calls. I couldn't find them.
I had to decompile OpenID4JavaConsumer.class from
/opt/novell/filr/apache-tomcat/lib/ext/spring-security-openid.jar,
fix the OpenID4JavaConsumer constructor,
get it to compile again,
and update the jar on the appliance.
---
public OpenID4JavaConsumer(ConsumerManager consumerManager, final
List<OpenIDAttribute> attributes)
throws ConsumerException
{
logger = LogFactory.getLog(getClass());
// Proxy support
ProxyProperties proxyProps = new ProxyProperties();
proxyProps.setProxyHostName("filrproxy");
proxyProps.setProxyPort(8080);
HttpClientFactory.setProxyProperties(proxyProps);
//
this.consumerManager = new ConsumerManager();
this .attributesToFetchFactory = new AxFetchListFactory() {
private final List<OpenIDAttribute> fetchAttrs =
Collections.unmodifiableList(attributes);
public List<OpenIDAttribute> createAttributeList(String
identifier) {
return fetchAttrs;
}
};
}
---
With this change i can use OpenID login from my appliance over our proxy.
(cascaded squid3, btw)
Georg
PS: I would really like an easier way of doing this... Is there a properties
file, etc. which accomplishes the same thing?
>>> Joseph Marton<jmarton@no-mx.forums.novell.com> schrieb am 07.05.2013 um
00:17 in Nachricht <e_Vht.1993$8q1.91@kozak.provo.novell.com>:
> Georg Fritsch wrote:
>
>> Looks like Filr is using openid4java and Novell neglected the really
>> simple ---
>
> Thanks for posting this. I've passed this along to engineering. Right
> now we're determining if a section to the docs will be added on how to
> configure this, or if this will simply be a TID. One way or another
> we'll get this configuration documented.
tdebeer

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2013-05-07
10:20
Re: Open ID login
WOW!! that is one hell of a way to change a proxy setting!!!..please let us know of a better way...surely Novell, most of you cutomers are enterprise, which will most of the times be gebhind frirewall/proxies?.....
jmarton2

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2013-05-07
13:03
Re: Open ID login
Georg Fritsch wrote:
> I had to decompile OpenID4JavaConsumer.class from
> /opt/novell/filr/apache-tomcat/lib/ext/spring-security-openid.jar,
> fix the OpenID4JavaConsumer constructor,
> get it to compile again,
> and update the jar on the appliance.
I've passed along all these details to engineering. Thank you very
much for posting this!
> PS: I would really like an easier way of doing this... Is there a
> properties file, etc. which accomplishes the same thing?
Not sure but I've asked engineering.
--
Your world is on the move. http://www.novell.com/mobility/
We know what your world looks like. http://www.novell.com/yourworld/
Joe Marton Emeritus Knowledge Partner
> I had to decompile OpenID4JavaConsumer.class from
> /opt/novell/filr/apache-tomcat/lib/ext/spring-security-openid.jar,
> fix the OpenID4JavaConsumer constructor,
> get it to compile again,
> and update the jar on the appliance.
I've passed along all these details to engineering. Thank you very
much for posting this!
> PS: I would really like an easier way of doing this... Is there a
> properties file, etc. which accomplishes the same thing?
Not sure but I've asked engineering.
--
Your world is on the move. http://www.novell.com/mobility/
We know what your world looks like. http://www.novell.com/yourworld/
Joe Marton Emeritus Knowledge Partner
jmarton2

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2013-05-07
15:49
Re: Open ID login
tdebeer wrote:
>
> WOW!! that is one hell of a way to change a proxy setting!!!..please
> let us know of a better way...surely Novell, most of you cutomers are
> enterprise, which will most of the times be gebhind
> frirewall/proxies?.....
Based on Georg's feedback, engineering has come up with the following
steps which should be a bit easier.
First, please download and extract the following file.
ftp://ftp.novell.com/outgoing/openid_patch_05072013.zip
1. Place attached openid_patch_05072013.jar into
/opt/novell/filr/apache-tomcat/lib/custom-ext (make sure file
protection on the jar is proper).
2. Place attached security-ext.xml into
/opt/novell/filr/apache-tomcat/webapps/ssf/WEB-INF/context.
3. Edit
/opt/novell/filr/apache-tomcat/webapps/ssf/WEB-INF/classes/config/ssf-ex
t.properties, and append the following two properties with values
appropriate to the customer environment.
openid.proxy.hostname=<proxy server host name>
openid.proxy.port=<proxy server port>
The nice thing about this procedure is that you won't lose these custom
files and settings after system re-configuration. However, PLEASE NOTE
that this is merely a one-off work around and that we will NOT provide
automatic update/migration for this when we release the next version of
Filr containing real fix. Most likely, when you update to the next Filr
release, you will have to manually undo these changes (1 and 2 in
particular).
I have asked to get this written up in a TID as well.
--
Your world is on the move. http://www.novell.com/mobility/
We know what your world looks like. http://www.novell.com/yourworld/
Joe Marton Emeritus Knowledge Partner
>
> WOW!! that is one hell of a way to change a proxy setting!!!..please
> let us know of a better way...surely Novell, most of you cutomers are
> enterprise, which will most of the times be gebhind
> frirewall/proxies?.....
Based on Georg's feedback, engineering has come up with the following
steps which should be a bit easier.
First, please download and extract the following file.
ftp://ftp.novell.com/outgoing/openid_patch_05072013.zip
1. Place attached openid_patch_05072013.jar into
/opt/novell/filr/apache-tomcat/lib/custom-ext (make sure file
protection on the jar is proper).
2. Place attached security-ext.xml into
/opt/novell/filr/apache-tomcat/webapps/ssf/WEB-INF/context.
3. Edit
/opt/novell/filr/apache-tomcat/webapps/ssf/WEB-INF/classes/config/ssf-ex
t.properties, and append the following two properties with values
appropriate to the customer environment.
openid.proxy.hostname=<proxy server host name>
openid.proxy.port=<proxy server port>
The nice thing about this procedure is that you won't lose these custom
files and settings after system re-configuration. However, PLEASE NOTE
that this is merely a one-off work around and that we will NOT provide
automatic update/migration for this when we release the next version of
Filr containing real fix. Most likely, when you update to the next Filr
release, you will have to manually undo these changes (1 and 2 in
particular).
I have asked to get this written up in a TID as well.
--
Your world is on the move. http://www.novell.com/mobility/
We know what your world looks like. http://www.novell.com/yourworld/
Joe Marton Emeritus Knowledge Partner
tdebeer

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2013-05-08
13:24
Re: Open ID login
HI, So nothing new here?.... wanted to brag about the cool share with outside users... that was the no reason pushing for filr .. apart from ifolder's unreliable client ...
jmarton2

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2013-05-08
20:12
Re: Open ID login
tdebeer wrote:
>
> HI, So nothing new here?.... wanted to brag about the cool share with
> outside users... that was the no reason pushing for filr .. apart from
> ifolder's unreliable client ...
Even without OpenID you can still share externally. In fact, OpenID
only supports gmail.com & yahoo.com addresses. You can see my post
elsewhere in the thread with a workaround that's perhaps a bit easier
to implement than Georg's.
--
Your world is on the move. http://www.novell.com/mobility/
We know what your world looks like. http://www.novell.com/yourworld/
Joe Marton Emeritus Knowledge Partner
>
> HI, So nothing new here?.... wanted to brag about the cool share with
> outside users... that was the no reason pushing for filr .. apart from
> ifolder's unreliable client ...
Even without OpenID you can still share externally. In fact, OpenID
only supports gmail.com & yahoo.com addresses. You can see my post
elsewhere in the thread with a workaround that's perhaps a bit easier
to implement than Georg's.
--
Your world is on the move. http://www.novell.com/mobility/
We know what your world looks like. http://www.novell.com/yourworld/
Joe Marton Emeritus Knowledge Partner
jmarton2

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2013-05-08
20:13
Re: Open ID login
Joseph Marton wrote:
> Based on Georg's feedback, engineering has come up with the following
> steps which should be a bit easier.
Please note that the fix I posted is untested, unvalidated, and is
completely unsupported. In fact, doing any sort of manual changes to
the appliance config outside of the admin interface is likely going to
put your entire appliance in an unsupported state.
A fix for this OpenID issue should be available in the next appliance
update.
--
Your world is on the move. http://www.novell.com/mobility/
We know what your world looks like. http://www.novell.com/yourworld/
Joe Marton Emeritus Knowledge Partner
> Based on Georg's feedback, engineering has come up with the following
> steps which should be a bit easier.
Please note that the fix I posted is untested, unvalidated, and is
completely unsupported. In fact, doing any sort of manual changes to
the appliance config outside of the admin interface is likely going to
put your entire appliance in an unsupported state.
A fix for this OpenID issue should be available in the next appliance
update.
--
Your world is on the move. http://www.novell.com/mobility/
We know what your world looks like. http://www.novell.com/yourworld/
Joe Marton Emeritus Knowledge Partner
jmarton2

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2014-04-28
15:23
Re: Open ID login
Georg Fritsch wrote:
> As our Filr-Appliance needs to go through a proxy to access the
> internet and i could not find a proxy server setting in the network
> configuration i was not really surprised.
>
> Looks like Filr is using openid4java and Novell neglected the really
> simple ---
> If your Relying Party / consumer site needs to access the internet
> through a proxy, the following proxy configuration is necessary,
> before the ConsumerManager is instantiated:
>
> // --- Forward proxy setup (only if needed) ---
> ProxyProperties proxyProps = new ProxyProperties();
> proxyProps.setProxyName("proxy.example.com");
> proxyProps.setProxyPort(8080);
> HttpClientFactory.setProxyProperties(proxyProps);
> ---
> steps from the openid4java wiki.
>
> Enhancement again...
We've added built-in support for forward proxies in Filr 1.1. Once the
technical preview starts (hopefully within the next few weeks) I invite
you to join and test it out.
--
Your world is on the move. http://www.novell.com/mobility/
BrainShare 2014 is coming. http://www.novell.com/brainshare/
Joe Marton Emeritus Knowledge Partner
> As our Filr-Appliance needs to go through a proxy to access the
> internet and i could not find a proxy server setting in the network
> configuration i was not really surprised.
>
> Looks like Filr is using openid4java and Novell neglected the really
> simple ---
> If your Relying Party / consumer site needs to access the internet
> through a proxy, the following proxy configuration is necessary,
> before the ConsumerManager is instantiated:
>
> // --- Forward proxy setup (only if needed) ---
> ProxyProperties proxyProps = new ProxyProperties();
> proxyProps.setProxyName("proxy.example.com");
> proxyProps.setProxyPort(8080);
> HttpClientFactory.setProxyProperties(proxyProps);
> ---
> steps from the openid4java wiki.
>
> Enhancement again...
We've added built-in support for forward proxies in Filr 1.1. Once the
technical preview starts (hopefully within the next few weeks) I invite
you to join and test it out.
--
Your world is on the move. http://www.novell.com/mobility/
BrainShare 2014 is coming. http://www.novell.com/brainshare/
Joe Marton Emeritus Knowledge Partner
Anonymous_User

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2014-04-29
10:16
Re: Open ID login
Hi Joseph,
Thanks for the update.
I had already the opportunity to test a few aspects of Filr 1.1
Proxy support for OpenID was not on the list. As i am using such a setup for
a few customers i will check this out.
BTW, Filr 1.1 made a very good impression. HUGE improvement.
The only thing of immediate importance to me which was still missing was the
ability to make 'hidden' public file/folder shares.
Novell (I told Anthony and Richard) is aware. I'll wait and see if the
feature (really easy to add) makes it into 1.1.
I have a workaround, so be prepared for a completely unsupported hack...
🙂
Georg
>>> Joseph Marton<jmarton@no-mx.forums.novell.com> schrieb am 28.04.2014 um
16:23 in Nachricht <fvt7v.1192$BI3.762@novprvlin0914.provo.novell.com>:
> Georg Fritsch wrote:
>
>> As our Filr-Appliance needs to go through a proxy to access the
>> internet and i could not find a proxy server setting in the network
>> configuration i was not really surprised.
>>
>> Looks like Filr is using openid4java and Novell neglected the really
>> simple ---
>> If your Relying Party / consumer site needs to access the internet
>> through a proxy, the following proxy configuration is necessary,
>> before the ConsumerManager is instantiated:
>>
>> // --- Forward proxy setup (only if needed) ---
>> ProxyProperties proxyProps = new ProxyProperties();
>> proxyProps.setProxyName("proxy.example.com");
>> proxyProps.setProxyPort(8080);
>> HttpClientFactory.setProxyProperties(proxyProps);
>> ---
>> steps from the openid4java wiki.
>>
>> Enhancement again...
>
> We've added built-in support for forward proxies in Filr 1.1. Once the
> technical preview starts (hopefully within the next few weeks) I invite
> you to join and test it out.
Thanks for the update.
I had already the opportunity to test a few aspects of Filr 1.1
Proxy support for OpenID was not on the list. As i am using such a setup for
a few customers i will check this out.
BTW, Filr 1.1 made a very good impression. HUGE improvement.
The only thing of immediate importance to me which was still missing was the
ability to make 'hidden' public file/folder shares.
Novell (I told Anthony and Richard) is aware. I'll wait and see if the
feature (really easy to add) makes it into 1.1.
I have a workaround, so be prepared for a completely unsupported hack...
🙂
Georg
>>> Joseph Marton<jmarton@no-mx.forums.novell.com> schrieb am 28.04.2014 um
16:23 in Nachricht <fvt7v.1192$BI3.762@novprvlin0914.provo.novell.com>:
> Georg Fritsch wrote:
>
>> As our Filr-Appliance needs to go through a proxy to access the
>> internet and i could not find a proxy server setting in the network
>> configuration i was not really surprised.
>>
>> Looks like Filr is using openid4java and Novell neglected the really
>> simple ---
>> If your Relying Party / consumer site needs to access the internet
>> through a proxy, the following proxy configuration is necessary,
>> before the ConsumerManager is instantiated:
>>
>> // --- Forward proxy setup (only if needed) ---
>> ProxyProperties proxyProps = new ProxyProperties();
>> proxyProps.setProxyName("proxy.example.com");
>> proxyProps.setProxyPort(8080);
>> HttpClientFactory.setProxyProperties(proxyProps);
>> ---
>> steps from the openid4java wiki.
>>
>> Enhancement again...
>
> We've added built-in support for forward proxies in Filr 1.1. Once the
> technical preview starts (hopefully within the next few weeks) I invite
> you to join and test it out.