Welcome Serena Central users! CLICK HERE
The migration of the Serena Central community is currently underway. Be sure to read THIS MESSAGE to get your new login set up to access your account.
vanbruggen
New Member.
3017 views

Open ID login

When trying to login with OpenID (google account in my case) i get the message "failed to login"
Credentials foor Google are OK
any suggestions ?

Thanks

Jan Hoetink
Isendoorn College
Warnsveld
0 Likes
17 Replies
jmarton2 Absent Member.
Absent Member.

Re: Open ID login

vanbruggen wrote:

>
> When trying to login with OpenID (google account in my case) i get the
> message "failed to login"
> Credentials foor Google are OK
> any suggestions ?


Is this an actual gmail.com e-mail address?

--
Your world is on the move. http://www.novell.com/mobility/
We know what your world looks like. http://www.novell.com/yourworld/

Joe Marton Emeritus Knowledge Partner
0 Likes
tdebeer Absent Member.
Absent Member.

Re: Open ID login

HI,

I also have the same issue....nowhere i have seen the setup speak about internet access for the filr appliance, surely this must be there?.... we are behind a firewall/proxy setup, any special ports etc needs to be opened, normal internet access for filr is fine ... we need something more?...
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Open ID login

Hi,

I could not get it to work either.

As our Filr-Appliance needs to go through a proxy to access the internet and
i could not find a proxy server setting in the network configuration i was
not really surprised.

Looks like Filr is using openid4java and Novell neglected the really simple
---
If your Relying Party / consumer site needs to access the internet through a
proxy, the following proxy configuration is necessary, before the
ConsumerManager is instantiated:

// --- Forward proxy setup (only if needed) ---
ProxyProperties proxyProps = new ProxyProperties();
proxyProps.setProxyName("proxy.example.com");
proxyProps.setProxyPort(8080);
HttpClientFactory.setProxyProperties(proxyProps);
---
steps from the openid4java wiki.

Enhancement again...

Georg

>>> tdebeer<tdebeer@no-mx.forums.novell.com> schrieb am 06.05.2013 um 15:56

in
Nachricht <tdebeer.5ux93c@no-mx.forums.novell.com>:

> HI,
>
> I also have the same issue....nowhere i have seen the setup speak about
> internet access for the filr appliance, surely this must be there?....
> we are behind a firewall/proxy setup, any special ports etc needs to be
> opened, normal internet access for filr is fine ... we need something
> more?...

0 Likes
jmarton2 Absent Member.
Absent Member.

Re: Open ID login

Georg Fritsch wrote:

> Looks like Filr is using openid4java and Novell neglected the really
> simple ---


Thanks for posting this. I've passed this along to engineering. Right
now we're determining if a section to the docs will be added on how to
configure this, or if this will simply be a TID. One way or another
we'll get this configuration documented.

--
Your world is on the move. http://www.novell.com/mobility/
We know what your world looks like. http://www.novell.com/yourworld/

Joe Marton Emeritus Knowledge Partner
0 Likes
tdebeer Absent Member.
Absent Member.

Re: Open ID login

Ah thought it had to be the proxy...great but stupid is at the door again, where in the world do i add this config...which config file???
0 Likes
Highlighted
Anonymous_User Absent Member.
Absent Member.

Re: Open ID login

Hi Joseph,

IMO this is a very easy to fix in the source code but quite hard on the
deployed appliance.

Just changing the tomcat/java system settings by including the required
switches in setenv.sh in /opt/novell/filr/apache-tomcat/bin does not do the
trick.

Maybe there are some other configuration files which are read on system
startup and allow a proxy for the openid4java calls. I couldn't find them.

I had to decompile OpenID4JavaConsumer.class from
/opt/novell/filr/apache-tomcat/lib/ext/spring-security-openid.jar,
fix the OpenID4JavaConsumer constructor,
get it to compile again,
and update the jar on the appliance.

---
public OpenID4JavaConsumer(ConsumerManager consumerManager, final
List<OpenIDAttribute> attributes)
throws ConsumerException
{
logger = LogFactory.getLog(getClass());

// Proxy support
ProxyProperties proxyProps = new ProxyProperties();
proxyProps.setProxyHostName("filrproxy");
proxyProps.setProxyPort(8080);
HttpClientFactory.setProxyProperties(proxyProps);
//

this.consumerManager = new ConsumerManager();
this .attributesToFetchFactory = new AxFetchListFactory() {
private final List<OpenIDAttribute> fetchAttrs =
Collections.unmodifiableList(attributes);

public List<OpenIDAttribute> createAttributeList(String
identifier) {
return fetchAttrs;
}
};
}
---

With this change i can use OpenID login from my appliance over our proxy.
(cascaded squid3, btw)

Georg

PS: I would really like an easier way of doing this... Is there a properties
file, etc. which accomplishes the same thing?


>>> Joseph Marton<jmarton@no-mx.forums.novell.com> schrieb am 07.05.2013 um

00:17 in Nachricht <e_Vht.1993$8q1.91@kozak.provo.novell.com>:
> Georg Fritsch wrote:
>
>> Looks like Filr is using openid4java and Novell neglected the really
>> simple ---

>
> Thanks for posting this. I've passed this along to engineering. Right
> now we're determining if a section to the docs will be added on how to
> configure this, or if this will simply be a TID. One way or another
> we'll get this configuration documented.

0 Likes
tdebeer Absent Member.
Absent Member.

Re: Open ID login

WOW!! that is one hell of a way to change a proxy setting!!!..please let us know of a better way...surely Novell, most of you cutomers are enterprise, which will most of the times be gebhind frirewall/proxies?.....
0 Likes
jmarton2 Absent Member.
Absent Member.

Re: Open ID login

Georg Fritsch wrote:

> I had to decompile OpenID4JavaConsumer.class from
> /opt/novell/filr/apache-tomcat/lib/ext/spring-security-openid.jar,
> fix the OpenID4JavaConsumer constructor,
> get it to compile again,
> and update the jar on the appliance.


I've passed along all these details to engineering. Thank you very
much for posting this!

> PS: I would really like an easier way of doing this... Is there a
> properties file, etc. which accomplishes the same thing?


Not sure but I've asked engineering.

--
Your world is on the move. http://www.novell.com/mobility/
We know what your world looks like. http://www.novell.com/yourworld/

Joe Marton Emeritus Knowledge Partner
0 Likes
jmarton2 Absent Member.
Absent Member.

Re: Open ID login

tdebeer wrote:

>
> WOW!! that is one hell of a way to change a proxy setting!!!..please
> let us know of a better way...surely Novell, most of you cutomers are
> enterprise, which will most of the times be gebhind
> frirewall/proxies?.....


Based on Georg's feedback, engineering has come up with the following
steps which should be a bit easier.

First, please download and extract the following file.

ftp://ftp.novell.com/outgoing/openid_patch_05072013.zip

1. Place attached openid_patch_05072013.jar into
/opt/novell/filr/apache-tomcat/lib/custom-ext (make sure file
protection on the jar is proper).

2. Place attached security-ext.xml into
/opt/novell/filr/apache-tomcat/webapps/ssf/WEB-INF/context.

3. Edit
/opt/novell/filr/apache-tomcat/webapps/ssf/WEB-INF/classes/config/ssf-ex
t.properties, and append the following two properties with values
appropriate to the customer environment.

openid.proxy.hostname=<proxy server host name>
openid.proxy.port=<proxy server port>

The nice thing about this procedure is that you won't lose these custom
files and settings after system re-configuration. However, PLEASE NOTE
that this is merely a one-off work around and that we will NOT provide
automatic update/migration for this when we release the next version of
Filr containing real fix. Most likely, when you update to the next Filr
release, you will have to manually undo these changes (1 and 2 in
particular).

I have asked to get this written up in a TID as well.

--
Your world is on the move. http://www.novell.com/mobility/
We know what your world looks like. http://www.novell.com/yourworld/

Joe Marton Emeritus Knowledge Partner
0 Likes
tdebeer Absent Member.
Absent Member.

Re: Open ID login

HI, So nothing new here?.... wanted to brag about the cool share with outside users... that was the no reason pushing for filr .. apart from ifolder's unreliable client ...
0 Likes
jmarton2 Absent Member.
Absent Member.

Re: Open ID login

tdebeer wrote:

>
> HI, So nothing new here?.... wanted to brag about the cool share with
> outside users... that was the no reason pushing for filr .. apart from
> ifolder's unreliable client ...


Even without OpenID you can still share externally. In fact, OpenID
only supports gmail.com & yahoo.com addresses. You can see my post
elsewhere in the thread with a workaround that's perhaps a bit easier
to implement than Georg's.

--
Your world is on the move. http://www.novell.com/mobility/
We know what your world looks like. http://www.novell.com/yourworld/

Joe Marton Emeritus Knowledge Partner
0 Likes
jmarton2 Absent Member.
Absent Member.

Re: Open ID login

Joseph Marton wrote:

> Based on Georg's feedback, engineering has come up with the following
> steps which should be a bit easier.


Please note that the fix I posted is untested, unvalidated, and is
completely unsupported. In fact, doing any sort of manual changes to
the appliance config outside of the admin interface is likely going to
put your entire appliance in an unsupported state.

A fix for this OpenID issue should be available in the next appliance
update.

--
Your world is on the move. http://www.novell.com/mobility/
We know what your world looks like. http://www.novell.com/yourworld/

Joe Marton Emeritus Knowledge Partner
0 Likes
jmarton2 Absent Member.
Absent Member.

Re: Open ID login

Georg Fritsch wrote:

> As our Filr-Appliance needs to go through a proxy to access the
> internet and i could not find a proxy server setting in the network
> configuration i was not really surprised.
>
> Looks like Filr is using openid4java and Novell neglected the really
> simple ---
> If your Relying Party / consumer site needs to access the internet
> through a proxy, the following proxy configuration is necessary,
> before the ConsumerManager is instantiated:
>
> // --- Forward proxy setup (only if needed) ---
> ProxyProperties proxyProps = new ProxyProperties();
> proxyProps.setProxyName("proxy.example.com");
> proxyProps.setProxyPort(8080);
> HttpClientFactory.setProxyProperties(proxyProps);
> ---
> steps from the openid4java wiki.
>
> Enhancement again...


We've added built-in support for forward proxies in Filr 1.1. Once the
technical preview starts (hopefully within the next few weeks) I invite
you to join and test it out.

--
Your world is on the move. http://www.novell.com/mobility/
BrainShare 2014 is coming. http://www.novell.com/brainshare/

Joe Marton Emeritus Knowledge Partner
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Open ID login

Hi Joseph,

Thanks for the update.

I had already the opportunity to test a few aspects of Filr 1.1
Proxy support for OpenID was not on the list. As i am using such a setup for
a few customers i will check this out.

BTW, Filr 1.1 made a very good impression. HUGE improvement.

The only thing of immediate importance to me which was still missing was the
ability to make 'hidden' public file/folder shares.
Novell (I told Anthony and Richard) is aware. I'll wait and see if the
feature (really easy to add) makes it into 1.1.

I have a workaround, so be prepared for a completely unsupported hack...
🙂

Georg

>>> Joseph Marton<jmarton@no-mx.forums.novell.com> schrieb am 28.04.2014 um

16:23 in Nachricht <fvt7v.1192$BI3.762@novprvlin0914.provo.novell.com>:
> Georg Fritsch wrote:
>
>> As our Filr-Appliance needs to go through a proxy to access the
>> internet and i could not find a proxy server setting in the network
>> configuration i was not really surprised.
>>
>> Looks like Filr is using openid4java and Novell neglected the really
>> simple ---
>> If your Relying Party / consumer site needs to access the internet
>> through a proxy, the following proxy configuration is necessary,
>> before the ConsumerManager is instantiated:
>>
>> // --- Forward proxy setup (only if needed) ---
>> ProxyProperties proxyProps = new ProxyProperties();
>> proxyProps.setProxyName("proxy.example.com");
>> proxyProps.setProxyPort(8080);
>> HttpClientFactory.setProxyProperties(proxyProps);
>> ---
>> steps from the openid4java wiki.
>>
>> Enhancement again...

>
> We've added built-in support for forward proxies in Filr 1.1. Once the
> technical preview starts (hopefully within the next few weeks) I invite
> you to join and test it out.

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.