nevis
/
adn-agov-iam-inventory
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

new configuration version

This commit is contained in:
admin 2024-07-17 14:00:18 +00:00
parent 8c20ea9729
commit 87b6fe0af3
4 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/auth/etc/nevis/k8s-nevisauth-7022472ae407577ae604bbb8.yaml
View File

@ -40,7 +40,7 @@ spec:
podDisruptionBudget:
maxUnavailable: "50%"
git:
tag: "r-b8b0f093d7a2c6d564f85fc11747986a0bd36b92"
tag: "r-9b106c5cc12a40258ccd94ea34b823fea2bbb744"
dir: "DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/auth"
credentials: "git-credentials"
keystores:

10
DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/auth/var/opt/nevisauth/default/conf/esauth4.xml
View File

@ -109,7 +109,7 @@
<!-- source: pattern://27cefc3861bce987f6766342 -->
<KeyObject name="Signer_IDP_AGOV" certificate="/var/opt/keys/own/idp-pem-signer/cert.pem" privateKey="/var/opt/keys/own/idp-pem-signer/keystore.jks" passPhrase="pipe:///var/opt/keys/own/idp-pem-signer/keypass"/>
<!-- source: pattern://27cefc3861bce987f6766342 -->
<KeyObject name="https://trustbroker.agov-w.azure.adnovum.net" certificate="/var/opt/keys/trust/idp-pem-atb/truststore.jks"/>
<KeyObject name="https://trustbroker.agov-d.azure.adnovum.net" certificate="/var/opt/keys/trust/idp-pem-atb/truststore.jks"/>
</KeyStore>
<!-- source: pattern://cb8c63274fe346280de0ffd5 -->
<KeyStore name="Auth_Realm_Mobile_FIDO_UAFKeyStore">
@ -1373,11 +1373,11 @@
<!-- source: pattern://27cefc3861bce987f6766342 -->
<property name="out.keyobjectref" value="Signer_IDP_AGOV"/>
<!-- source: pattern://27cefc3861bce987f6766342 -->
<property name="spURL" value="https://trustbroker.agov-w.azure.adnovum.net/adfs/ls"/>
<property name="spURL" value="https://trustbroker.agov-d.azure.adnovum.net/adfs/ls"/>
<!-- source: pattern://27cefc3861bce987f6766342 -->
<property name="spIssuer" value="https://trustbroker.agov-w.azure.adnovum.net"/>
<property name="spIssuer" value="https://trustbroker.agov-d.azure.adnovum.net"/>
<!-- source: pattern://27cefc3861bce987f6766342 -->
<property name="acsUrlWhitelist.uris" value="https://trustbroker.agov-w.azure.adnovum.net/adfs/ls"/>
<property name="acsUrlWhitelist.uris" value="https://trustbroker.agov-d.azure.adnovum.net/adfs/ls"/>
<!-- source: pattern://27cefc3861bce987f6766342 -->
<property name="in.binding" value="auto"/>
<!-- source: pattern://27cefc3861bce987f6766342 -->
@ -1429,7 +1429,7 @@
<!-- source: pattern://27cefc3861bce987f6766342 -->
<property name="out.attribute.http://schemas.agov.ch/ws/2024/02/identity/claims/address/countryName" value="#{ (sess['agov.appAddressRequired'] == 'true') ? sess['agov.countryName'] : ''}"/>
<!-- source: pattern://27cefc3861bce987f6766342 -->
<property name="out.audienceRestriction" value="https://trustbroker.agov-w.azure.adnovum.net"/>
<property name="out.audienceRestriction" value="https://trustbroker.agov-d.azure.adnovum.net"/>
</AuthState>
<AuthState name="Auth_Realm_Main_IDP_Concurrent_Logout" class="ch.nevis.esauth.auth.states.standard.AuthLogout" final="false" resumeState="false">
<!-- source: pattern://27cefc3861bce987f6766342 -->

2
DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/auth/var/opt/nevisauth/default/conf/saml_idp_agov_authorization.groovy
View File

@ -167,7 +167,7 @@ def i2r = [:]
// issuer to ResultCond name
def i2e = [:]
i2e.put('https://trustbroker.agov-w.azure.adnovum.net', 'forbidden_0')
i2e.put('https://trustbroker.agov-d.azure.adnovum.net', 'forbidden_0')
if (!i2r.isEmpty() && !hasAnyRequiredRole(i2r, issuer)) {

2
DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/auth/var/opt/nevisauth/default/conf/saml_idp_agov_dispatcher.groovy
View File

@ -91,7 +91,7 @@ if (request.getSession(false) == null) {
def i2s = new TreeMap<String, String>(String.CASE_INSENSITIVE_ORDER)
i2s.put('https://trustbroker.agov-w.azure.adnovum.net', 'state0')
i2s.put('https://trustbroker.agov-d.azure.adnovum.net', 'state0')
if (parameters.get('spInitiated') == 'true' && inargs.containsKey('SAMLRequest')) { // SP-initiated authentication
LOG.debug("found SAMLRequest parameter for SP-initiated authentication")