new configuration version
This commit is contained in:
admin
parent
6ccd10d09b
commit
bca845aad9
|
|
@ -40,7 +40,7 @@ spec:
|
|||
podDisruptionBudget:
|
||||
maxUnavailable: "50%"
|
||||
git:
|
||||
tag: "r-38cda7e0ac156aa4e8342fa76df3951edf99f6a5"
|
||||
tag: "r-17392f4fc2f29ede0c371af50d06749396d69a29"
|
||||
dir: "DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/auth-sts"
|
||||
credentials: "git-credentials"
|
||||
keystores:
|
||||
|
|
|
|||
|
|
@ -93,7 +93,7 @@
|
|||
<!-- source: pattern://5d7dc3d51416356293a239f7 -->
|
||||
<ResultCond name="ok" next="Auth_Realm_Main_STS_Verify_User_extID" authLevel="auth.weak"/>
|
||||
<!-- source: pattern://5d7dc3d51416356293a239f7 -->
|
||||
<property name="consumerURL" value="https://me.agov-d.azure.adnovum.net/login/saml2/sso/agovidp"/>
|
||||
<property name="consumerURL" value="https://me.agov-w.azure.adnovum.net/login/saml2/sso/agovidp"/>
|
||||
<!-- source: pattern://5d7dc3d51416356293a239f7 -->
|
||||
<property name="in.verify" value="Assertion"/>
|
||||
<!-- source: pattern://5d7dc3d51416356293a239f7 -->
|
||||
|
|
@ -103,7 +103,7 @@
|
|||
<!-- source: pattern://5d7dc3d51416356293a239f7 -->
|
||||
<property name="in.max_age" value="30"/>
|
||||
<!-- source: pattern://5d7dc3d51416356293a239f7 -->
|
||||
<property name="in.audience" value="https://me.agov-d.azure.adnovum.net/account/api/saml2/service-provider-metadata/agovidpdirect"/>
|
||||
<property name="in.audience" value="https://me.agov-w.azure.adnovum.net/account/api/saml2/service-provider-metadata/agovidpdirect"/>
|
||||
<!-- source: pattern://5d7dc3d51416356293a239f7 -->
|
||||
<property name="in.keystoreref" value="Auth_Realm_Main_STS"/>
|
||||
<!-- source: pattern://5d7dc3d51416356293a239f7 -->
|
||||
|
|
|
|||
|
|
@ -40,12 +40,9 @@ spec:
|
|||
podDisruptionBudget:
|
||||
maxUnavailable: "50%"
|
||||
git:
|
||||
tag: "r-38cda7e0ac156aa4e8342fa76df3951edf99f6a5"
|
||||
tag: "r-17392f4fc2f29ede0c371af50d06749396d69a29"
|
||||
dir: "DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/auth"
|
||||
credentials: "git-credentials"
|
||||
database:
|
||||
name: "auth"
|
||||
requiredVersion: "7.2402.0"
|
||||
keystores:
|
||||
- "auth-sh4r3d-internal-idp-auth-signer"
|
||||
- "auth-auth-realm-mobile-fido-uaf-tls-client-nevisfido"
|
||||
|
|
|
|||
|
|
@ -1,26 +0,0 @@
|
|||
apiVersion: "operator.nevis-security.ch/v1"
|
||||
kind: "NevisDatabase"
|
||||
metadata:
|
||||
name: "auth"
|
||||
namespace: "adn-agov-nevisidm-01-uat"
|
||||
labels:
|
||||
deploymentTarget: "auth"
|
||||
annotations:
|
||||
projectKey: "DEFAULT-ADN-AGOV-PROJECT"
|
||||
patternId: "b7b59e97b3fd18bb60178573"
|
||||
spec:
|
||||
type: "NevisAuth"
|
||||
databaseType: "MariaDB"
|
||||
version: "7.2402.0"
|
||||
url: "mariadb-agov-dev-gp.mariadb.database.azure.com"
|
||||
port: 3306
|
||||
database: "nevisauth"
|
||||
bootstrap: true
|
||||
migrate: true
|
||||
rootCredentials:
|
||||
name: "root-adn-agov-nevisidm-01-dev-idm"
|
||||
namespace: "adn-agov-nevisidm-01-dev-idm"
|
||||
podSecurity:
|
||||
policy: "baseline"
|
||||
automountServiceAccountToken: false
|
||||
timeZone: "Europe/Zurich"
|
||||
|
|
@ -5,8 +5,6 @@
|
|||
<SessionCoordinator sessionInitialInactivityTimeout="600" sessionInactivityTimeout="28800" sessionMaxLifetime="28800" sessionIdPreGenerate="true">
|
||||
<!-- source: pattern://7022472ae407577ae604bbb8 -->
|
||||
<LocalSessionStore maxSessions="100000"/>
|
||||
<!-- source: pattern://b7b59e97b3fd18bb60178573 -->
|
||||
<RemoteSessionStore connectionUser="pipe:///var/opt/nevisauth/default/conf/credentials/dbUser" connectionPassword="pipe:///var/opt/nevisauth/default/conf/credentials/dbPassword" connectionUrl="jdbc:mariadb://mariadb-agov-dev-gp.mariadb.database.azure.com:3306/nevisauth?sslMode=disable&autocommit=true" connectionAutomaticDbSchemaSetup="false" storeUnauthenticatedSessions="true"/>
|
||||
<!-- source: pattern://7022472ae407577ae604bbb8 -->
|
||||
<TokenAssembler name="DefaultTokenAssembler">
|
||||
<Selector default="true"/>
|
||||
|
|
@ -111,7 +109,7 @@
|
|||
<!-- source: pattern://27cefc3861bce987f6766342 -->
|
||||
<KeyObject name="Signer_IDP_AGOV" certificate="/var/opt/keys/own/idp-pem-signer/cert.pem" privateKey="/var/opt/keys/own/idp-pem-signer/keystore.jks" passPhrase="pipe:///var/opt/keys/own/idp-pem-signer/keypass"/>
|
||||
<!-- source: pattern://27cefc3861bce987f6766342 -->
|
||||
<KeyObject name="https://trustbroker.agov-d.azure.adnovum.net" certificate="/var/opt/keys/trust/idp-pem-atb/truststore.jks"/>
|
||||
<KeyObject name="https://trustbroker.agov-w.azure.adnovum.net" certificate="/var/opt/keys/trust/idp-pem-atb/truststore.jks"/>
|
||||
</KeyStore>
|
||||
<!-- source: pattern://cb8c63274fe346280de0ffd5 -->
|
||||
<KeyStore name="Auth_Realm_Mobile_FIDO_UAFKeyStore">
|
||||
|
|
@ -121,8 +119,8 @@
|
|||
<KeyObject name="Auth_Realm_Mobile_FIDO_UAFServerKeyObject" certificate="/var/opt/keys/trust/auth-auth-realm-mobile-fido-uaf-tls-trust-nevisfido/truststore.jks" passPhrase="pipe:///var/opt/keys/trust/auth-auth-realm-mobile-fido-uaf-tls-trust-nevisfido/keypass"/>
|
||||
</KeyStore>
|
||||
</SessionCoordinator>
|
||||
<!-- source: pattern://b7b59e97b3fd18bb60178573 -->
|
||||
<RemoteOutOfContextDataStore connectionUser="pipe:///var/opt/nevisauth/default/conf/credentials/dbUser" connectionPassword="pipe:///var/opt/nevisauth/default/conf/credentials/dbPassword" connectionUrl="jdbc:mariadb://mariadb-agov-dev-gp.mariadb.database.azure.com:3306/nevisauth?sslMode=disable&autocommit=true" connectionAutomaticDbSchemaSetup="false"/>
|
||||
<!-- source: pattern://7022472ae407577ae604bbb8 -->
|
||||
<LocalOutOfContextDataStore reaperPeriod="60"/>
|
||||
<!-- source: pattern://4fcfadb4a5c946ead7e6e995, pattern://06aeae2d799e492f5580d03b, pattern://7022472ae407577ae604bbb8, pattern://4fcfadb4a5c946ead7e6e995, pattern://cb8c63274fe346280de0ffd5, pattern://06aeae2d799e492f5580d03b, pattern://7022472ae407577ae604bbb8, pattern://7022472ae407577ae604bbb8, pattern://ae023be7e097522c74e31d17, pattern://81ae3547acc02160f787a546, pattern://0327ca909dfcaf2d332da104, pattern://584964c837512845d7940809, pattern://9a8294b080ea769d22924af0, pattern://f393012a278e525956a362d3, pattern://c686c1bdd5355351f7f98cc8, pattern://7fb39bfd6c34685866a22180, pattern://cb8c63274fe346280de0ffd5, pattern://e0fda9336be9c69dafc9b69e, pattern://7022472ae407577ae604bbb8 -->
|
||||
<AuthEngine useLiteralDictionary="true" literalDictionaryLanguages="en,de,fr,it" inputLanguageCookie="LANG" compatLevel="none" addAutheLevelToSecRoles="true" classPath="/opt/nevisidmcl/nevisauth/lib:/opt/nevisfidocl/nevisauth/lib:/opt/nevisauth/plugin" propagateSession="false">
|
||||
<!-- source: pattern://4fcfadb4a5c946ead7e6e995 -->
|
||||
|
|
@ -163,9 +161,9 @@
|
|||
<Arg name="ch.nevis.isiweb4.response.status" value="403"/>
|
||||
</Response>
|
||||
<!-- source: pattern://68665057549fd887ea09fb86 -->
|
||||
<property name="parameter.appAddressRequired.whitelist" value="https://testapp-01.agov-d.azure.adnovum.net/test/api/saml2/service-provider-metadata/agovidp, OidcPlayground"/>
|
||||
<property name="parameter.appAddressRequired.whitelist" value="https://testapp-01.agov-w.azure.adnovum.net/test/api/saml2/service-provider-metadata/agovidp, OidcPlayground"/>
|
||||
<!-- source: pattern://68665057549fd887ea09fb86 -->
|
||||
<property name="parameter.url" value="http://connect-application-billing.adn-agov-connect-01-dev:8082/connect/billing/relying-party"/>
|
||||
<property name="parameter.url" value="http://connect-application-billing.adn-agov-connect-01-uat:8082/connect/billing/relying-party"/>
|
||||
<!-- source: pattern://68665057549fd887ea09fb86 -->
|
||||
<property name="scriptTraceGroup" value="AGOV-ACCT"/>
|
||||
<!-- source: pattern://68665057549fd887ea09fb86 -->
|
||||
|
|
@ -206,7 +204,7 @@
|
|||
<!-- source: pattern://f63c475c35b616b7c6c1901c -->
|
||||
<GuiElem name="agov.appDisplayNameEN" type="hidden" value="${sess:agov.appDisplayNameEN}" optional="true"/>
|
||||
<!-- source: pattern://f63c475c35b616b7c6c1901c -->
|
||||
<GuiElem name="agov.appSamlRpEntityId" type="hidden" value="https://auth.agov-d.azure.adnovum.net/app-info/app-icon?entity-id=${sess:ch.nevis.auth.saml.request.scoping.requesterId}" optional="true"/>
|
||||
<GuiElem name="agov.appSamlRpEntityId" type="hidden" value="https://auth.agov-w.azure.adnovum.net/app-info/app-icon?entity-id=${sess:ch.nevis.auth.saml.request.scoping.requesterId}" optional="true"/>
|
||||
<!-- source: pattern://f63c475c35b616b7c6c1901c -->
|
||||
<GuiElem name="authRequestId" type="hidden" value="${sess:ch.nevis.auth.saml.request.id}" optional="true"/>
|
||||
<!-- source: pattern://f63c475c35b616b7c6c1901c -->
|
||||
|
|
@ -218,9 +216,9 @@
|
|||
<!-- source: pattern://f63c475c35b616b7c6c1901c -->
|
||||
<property name="script" value="file:///var/opt/nevisauth/default/conf/mobile_nless_auth.groovy"/>
|
||||
<!-- source: pattern://f63c475c35b616b7c6c1901c -->
|
||||
<property name="parameter.agovmeregistrationurl" value="https://me.agov-d.azure.adnovum.net/registration/"/>
|
||||
<property name="parameter.agovmeregistrationurl" value="https://me.agov-w.azure.adnovum.net/registration/"/>
|
||||
<!-- source: pattern://f63c475c35b616b7c6c1901c -->
|
||||
<property name="parameter.recoveryurl" value="https://auth.agov-d.azure.adnovum.net/AUTH/RECOVERY/"/>
|
||||
<property name="parameter.recoveryurl" value="https://auth.agov-w.azure.adnovum.net/AUTH/RECOVERY/"/>
|
||||
</AuthState>
|
||||
<AuthState name="Auth_Realm_Main_IDP_FIDO2_ResetSessionInfos" class="ch.nevis.esauth.auth.states.standard.TransformAttributes" final="false">
|
||||
<!-- source: pattern://887ada57500885703a4a9408 -->
|
||||
|
|
@ -280,7 +278,7 @@
|
|||
<Arg name="ch.nevis.isiweb4.response.status" value="403"/>
|
||||
</Response>
|
||||
<!-- source: pattern://f39352769cb2a1c88e1a176d -->
|
||||
<property name="parameter.url" value="http://utility-application-be.adn-agov-me-01-dev:8081/utility/api/v1/configinfo"/>
|
||||
<property name="parameter.url" value="http://utility-application-be.adn-agov-me-01-uat:8081/utility/api/v1/configinfo"/>
|
||||
<!-- source: pattern://f39352769cb2a1c88e1a176d -->
|
||||
<property name="script" value="file:///var/opt/nevisauth/default/conf/fido2_fetchcaptchainfos.groovy"/>
|
||||
</AuthState>
|
||||
|
|
@ -337,7 +335,7 @@
|
|||
<!-- source: pattern://bfd395eb0dab50aff2f2c01b -->
|
||||
<property name="out.keyobjectref" value="Signer_IDP_AGOV"/>
|
||||
<!-- source: pattern://bfd395eb0dab50aff2f2c01b -->
|
||||
<property name="spURL" value="https://me.agov-d.azure.adnovum.net/registration/api/login/saml2/sso/agovidpdirect"/>
|
||||
<property name="spURL" value="https://me.agov-w.azure.adnovum.net/registration/api/login/saml2/sso/agovidpdirect"/>
|
||||
<!-- source: pattern://bfd395eb0dab50aff2f2c01b -->
|
||||
<property name="acsUrlWhitelist.uris" value="not used"/>
|
||||
<!-- source: pattern://bfd395eb0dab50aff2f2c01b -->
|
||||
|
|
@ -357,9 +355,9 @@
|
|||
<!-- source: pattern://bfd395eb0dab50aff2f2c01b -->
|
||||
<property name="out.subject.format" value="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"/>
|
||||
<!-- source: pattern://bfd395eb0dab50aff2f2c01b -->
|
||||
<property name="out.issuer" value="https://auth.agov-d.azure.adnovum.net/SAML2/"/>
|
||||
<property name="out.issuer" value="https://auth.agov-w.azure.adnovum.net/SAML2/"/>
|
||||
<!-- source: pattern://bfd395eb0dab50aff2f2c01b -->
|
||||
<property name="out.audienceRestriction" value="https://me.agov-d.azure.adnovum.net/registration/api/saml2/service-provider-metadata/agovidpdirect"/>
|
||||
<property name="out.audienceRestriction" value="https://me.agov-w.azure.adnovum.net/registration/api/saml2/service-provider-metadata/agovidpdirect"/>
|
||||
</AuthState>
|
||||
<AuthState name="Auth_Realm_Main_IDP_Email_Input" class="ch.nevis.esauth.auth.states.scripting.ScriptState" final="true" resumeState="true">
|
||||
<!-- source: pattern://e3cac41e75980361d7d26bde -->
|
||||
|
|
@ -451,7 +449,7 @@
|
|||
<!-- source: pattern://bfd395eb0dab50aff2f2c01b -->
|
||||
<property name="scriptTraceGroup" value="AGOV-ACCT"/>
|
||||
<!-- source: pattern://bfd395eb0dab50aff2f2c01b -->
|
||||
<property name="parameter.agovmedirecturl" value="https://me.agov-d.azure.adnovum.net/registration/api/login/saml2/sso/agovidpdirect"/>
|
||||
<property name="parameter.agovmedirecturl" value="https://me.agov-w.azure.adnovum.net/registration/api/login/saml2/sso/agovidpdirect"/>
|
||||
<!-- source: pattern://bfd395eb0dab50aff2f2c01b -->
|
||||
<property name="script" value="file:///var/opt/nevisauth/default/conf/handleRedirectRegistration.groovy"/>
|
||||
</AuthState>
|
||||
|
|
@ -481,7 +479,7 @@
|
|||
<!-- source: pattern://699f22cf1cd4ad08bd973f31 -->
|
||||
<property name="parameter.ip" value="#{inctx.get('connection.HttpHeader.X-Real-IP')}"/>
|
||||
<!-- source: pattern://699f22cf1cd4ad08bd973f31 -->
|
||||
<property name="parameter.url" value="http://utility-application-be.adn-agov-me-01-dev:8081/utility/api/v1/captcha/"/>
|
||||
<property name="parameter.url" value="http://utility-application-be.adn-agov-me-01-uat:8081/utility/api/v1/captcha/"/>
|
||||
<!-- source: pattern://699f22cf1cd4ad08bd973f31 -->
|
||||
<property name="parameter.userAgent" value="#{inctx.get('connection.HttpHeader.user-agent')}"/>
|
||||
<!-- source: pattern://699f22cf1cd4ad08bd973f31 -->
|
||||
|
|
@ -839,11 +837,11 @@
|
|||
<!-- source: pattern://9ff0369f3cf662f95d94ff09 -->
|
||||
<property name="script" value="file:///var/opt/nevisauth/default/conf/ensureRecoveryCode.groovy"/>
|
||||
<!-- source: pattern://9ff0369f3cf662f95d94ff09 -->
|
||||
<property name="parameter.utility-service.baseUrl" value="http://utility-application-be.adn-agov-me-01-dev:8081/utility"/>
|
||||
<property name="parameter.utility-service.baseUrl" value="http://utility-application-be.adn-agov-me-01-uat:8081/utility"/>
|
||||
<!-- source: pattern://9ff0369f3cf662f95d94ff09 -->
|
||||
<property name="parameter.idm.httpclient.tls.trustStoreRef" value="Ensure_Recovery_Code"/>
|
||||
<!-- source: pattern://9ff0369f3cf662f95d94ff09 -->
|
||||
<property name="parameter.cookie.domain" value="auth.agov-d.azure.adnovum.net"/>
|
||||
<property name="parameter.cookie.domain" value="auth.agov-w.azure.adnovum.net"/>
|
||||
</AuthState>
|
||||
<AuthState name="Auth_Realm_Main_IDP_clear_request_session" class="ch.nevis.esauth.auth.states.standard.TransformAttributes" final="false">
|
||||
<!-- source: pattern://8c28e8f3352491ef7c5315fc -->
|
||||
|
|
@ -1021,7 +1019,7 @@
|
|||
<!-- source: pattern://cdb228eccc12b4b1dea20d9d -->
|
||||
<property name="out.keyobjectref" value="Signer_IDP_AGOV"/>
|
||||
<!-- source: pattern://cdb228eccc12b4b1dea20d9d -->
|
||||
<property name="spURL" value="https://me.agov-d.azure.adnovum.net/account/api/login/saml2/sso/agovidpdirect"/>
|
||||
<property name="spURL" value="https://me.agov-w.azure.adnovum.net/account/api/login/saml2/sso/agovidpdirect"/>
|
||||
<!-- source: pattern://cdb228eccc12b4b1dea20d9d -->
|
||||
<property name="acsUrlWhitelist.uris" value="not used"/>
|
||||
<!-- source: pattern://cdb228eccc12b4b1dea20d9d -->
|
||||
|
|
@ -1049,9 +1047,9 @@
|
|||
<!-- source: pattern://cdb228eccc12b4b1dea20d9d -->
|
||||
<property name="out.subject.format" value="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"/>
|
||||
<!-- source: pattern://cdb228eccc12b4b1dea20d9d -->
|
||||
<property name="out.issuer" value="https://auth.agov-d.azure.adnovum.net/SAML2/"/>
|
||||
<property name="out.issuer" value="https://auth.agov-w.azure.adnovum.net/SAML2/"/>
|
||||
<!-- source: pattern://cdb228eccc12b4b1dea20d9d -->
|
||||
<property name="out.audienceRestriction" value="https://me.agov-d.azure.adnovum.net/account/api/saml2/service-provider-metadata/agovidpdirect"/>
|
||||
<property name="out.audienceRestriction" value="https://me.agov-w.azure.adnovum.net/account/api/saml2/service-provider-metadata/agovidpdirect"/>
|
||||
</AuthState>
|
||||
<AuthState name="Auth_Realm_Main_IDP_Recovery_redirectAgovMe" class="ch.nevis.esauth.auth.states.saml.IdentityProviderState" final="false" resumeState="false">
|
||||
<!-- source: pattern://6061abea33a234fad73897b7 -->
|
||||
|
|
@ -1083,7 +1081,7 @@
|
|||
<!-- source: pattern://6061abea33a234fad73897b7 -->
|
||||
<property name="out.keyobjectref" value="Signer_IDP_AGOV"/>
|
||||
<!-- source: pattern://6061abea33a234fad73897b7 -->
|
||||
<property name="spURL" value="https://me.agov-d.azure.adnovum.net/account/api/login/saml2/sso/agovidpdirect"/>
|
||||
<property name="spURL" value="https://me.agov-w.azure.adnovum.net/account/api/login/saml2/sso/agovidpdirect"/>
|
||||
<!-- source: pattern://6061abea33a234fad73897b7 -->
|
||||
<property name="acsUrlWhitelist.uris" value="not used"/>
|
||||
<!-- source: pattern://6061abea33a234fad73897b7 -->
|
||||
|
|
@ -1103,9 +1101,9 @@
|
|||
<!-- source: pattern://6061abea33a234fad73897b7 -->
|
||||
<property name="out.subject.format" value="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"/>
|
||||
<!-- source: pattern://6061abea33a234fad73897b7 -->
|
||||
<property name="out.issuer" value="https://auth.agov-d.azure.adnovum.net/SAML2/"/>
|
||||
<property name="out.issuer" value="https://auth.agov-w.azure.adnovum.net/SAML2/"/>
|
||||
<!-- source: pattern://6061abea33a234fad73897b7 -->
|
||||
<property name="out.audienceRestriction" value="https://me.agov-d.azure.adnovum.net/account/api/saml2/service-provider-metadata/agovidpdirect"/>
|
||||
<property name="out.audienceRestriction" value="https://me.agov-w.azure.adnovum.net/account/api/saml2/service-provider-metadata/agovidpdirect"/>
|
||||
</AuthState>
|
||||
<AuthState name="Auth_Realm_Main_IDP_SendSamlResponseWithAssertion" class="ch.nevis.esauth.auth.states.scripting.ScriptState" final="false" resumeState="true">
|
||||
<!-- source: pattern://b87d0d2b640e8e545ad70234 -->
|
||||
|
|
@ -1133,7 +1131,7 @@
|
|||
<!-- source: pattern://cdb228eccc12b4b1dea20d9d -->
|
||||
<property name="scriptTraceGroup" value="AGOV-ACCT"/>
|
||||
<!-- source: pattern://cdb228eccc12b4b1dea20d9d -->
|
||||
<property name="parameter.agovmedirecturl" value="https://me.agov-d.azure.adnovum.net/account/api/login/saml2/sso/agovidpdirect"/>
|
||||
<property name="parameter.agovmedirecturl" value="https://me.agov-w.azure.adnovum.net/account/api/login/saml2/sso/agovidpdirect"/>
|
||||
<!-- source: pattern://cdb228eccc12b4b1dea20d9d -->
|
||||
<property name="script" value="file:///var/opt/nevisauth/default/conf/handleRedirect.groovy"/>
|
||||
</AuthState>
|
||||
|
|
@ -1148,7 +1146,7 @@
|
|||
<!-- source: pattern://6061abea33a234fad73897b7 -->
|
||||
<property name="scriptTraceGroup" value="AGOV-ACCT"/>
|
||||
<!-- source: pattern://6061abea33a234fad73897b7 -->
|
||||
<property name="parameter.agovmedirecturl" value="https://me.agov-d.azure.adnovum.net/account/api/login/saml2/sso/agovidpdirect"/>
|
||||
<property name="parameter.agovmedirecturl" value="https://me.agov-w.azure.adnovum.net/account/api/login/saml2/sso/agovidpdirect"/>
|
||||
<!-- source: pattern://6061abea33a234fad73897b7 -->
|
||||
<property name="script" value="file:///var/opt/nevisauth/default/conf/handleRedirectRecovery.groovy"/>
|
||||
</AuthState>
|
||||
|
|
@ -1369,17 +1367,17 @@
|
|||
<!-- source: pattern://27cefc3861bce987f6766342 -->
|
||||
<property name="out.extension.Bearer" value="ch.nevis.esauth.auth.states.saml.extensions.SubjectConfirmationExtender"/>
|
||||
<!-- source: pattern://27cefc3861bce987f6766342 -->
|
||||
<property name="out.issuer" value="https://auth.agov-d.azure.adnovum.net/SAML2/"/>
|
||||
<property name="out.issuer" value="https://auth.agov-w.azure.adnovum.net/SAML2/"/>
|
||||
<!-- source: pattern://27cefc3861bce987f6766342 -->
|
||||
<property name="out.keystoreref" value="Store_IDP_AGOV"/>
|
||||
<!-- source: pattern://27cefc3861bce987f6766342 -->
|
||||
<property name="out.keyobjectref" value="Signer_IDP_AGOV"/>
|
||||
<!-- source: pattern://27cefc3861bce987f6766342 -->
|
||||
<property name="spURL" value="https://trustbroker.agov-d.azure.adnovum.net/adfs/ls"/>
|
||||
<property name="spURL" value="https://trustbroker.agov-w.azure.adnovum.net/adfs/ls"/>
|
||||
<!-- source: pattern://27cefc3861bce987f6766342 -->
|
||||
<property name="spIssuer" value="https://trustbroker.agov-d.azure.adnovum.net"/>
|
||||
<property name="spIssuer" value="https://trustbroker.agov-w.azure.adnovum.net"/>
|
||||
<!-- source: pattern://27cefc3861bce987f6766342 -->
|
||||
<property name="acsUrlWhitelist.uris" value="https://trustbroker.agov-d.azure.adnovum.net/adfs/ls"/>
|
||||
<property name="acsUrlWhitelist.uris" value="https://trustbroker.agov-w.azure.adnovum.net/adfs/ls"/>
|
||||
<!-- source: pattern://27cefc3861bce987f6766342 -->
|
||||
<property name="in.binding" value="auto"/>
|
||||
<!-- source: pattern://27cefc3861bce987f6766342 -->
|
||||
|
|
@ -1431,7 +1429,7 @@
|
|||
<!-- source: pattern://27cefc3861bce987f6766342 -->
|
||||
<property name="out.attribute.http://schemas.agov.ch/ws/2024/02/identity/claims/address/countryName" value="#{ (sess['agov.appAddressRequired'] == 'true') ? sess['agov.countryName'] : ''}"/>
|
||||
<!-- source: pattern://27cefc3861bce987f6766342 -->
|
||||
<property name="out.audienceRestriction" value="https://trustbroker.agov-d.azure.adnovum.net"/>
|
||||
<property name="out.audienceRestriction" value="https://trustbroker.agov-w.azure.adnovum.net"/>
|
||||
</AuthState>
|
||||
<AuthState name="Auth_Realm_Main_IDP_Concurrent_Logout" class="ch.nevis.esauth.auth.states.standard.AuthLogout" final="false" resumeState="false">
|
||||
<!-- source: pattern://27cefc3861bce987f6766342 -->
|
||||
|
|
@ -1641,7 +1639,7 @@
|
|||
<Arg name="ch.nevis.isiweb4.response.status" value="403"/>
|
||||
</Response>
|
||||
<!-- source: pattern://bea3ca0c85381d07d632be52 -->
|
||||
<property name="parameter.url" value="http://utility-application-be.adn-agov-me-01-dev:8081/utility/api/v1/configinfo"/>
|
||||
<property name="parameter.url" value="http://utility-application-be.adn-agov-me-01-uat:8081/utility/api/v1/configinfo"/>
|
||||
<!-- source: pattern://bea3ca0c85381d07d632be52 -->
|
||||
<property name="script" value="file:///var/opt/nevisauth/default/conf/recovery_fetchcaptchainfos.groovy"/>
|
||||
</AuthState>
|
||||
|
|
@ -1688,7 +1686,7 @@
|
|||
<!-- source: pattern://717094cbd4ddbadeab4b2cc1 -->
|
||||
<property name="parameter.ip" value="#{inctx.get('connection.HttpHeader.X-Real-IP')}"/>
|
||||
<!-- source: pattern://717094cbd4ddbadeab4b2cc1 -->
|
||||
<property name="parameter.url" value="http://utility-application-be.adn-agov-me-01-dev:8081/utility/api/v1/captcha/"/>
|
||||
<property name="parameter.url" value="http://utility-application-be.adn-agov-me-01-uat:8081/utility/api/v1/captcha/"/>
|
||||
<!-- source: pattern://717094cbd4ddbadeab4b2cc1 -->
|
||||
<property name="parameter.userAgent" value="#{inctx.get('connection.HttpHeader.user-agent')}"/>
|
||||
<!-- source: pattern://717094cbd4ddbadeab4b2cc1 -->
|
||||
|
|
@ -1936,7 +1934,7 @@
|
|||
<!-- source: pattern://9f443ce76f9522dfae4c3aa0 -->
|
||||
<Response value="AUTH_CONTINUE"/>
|
||||
<!-- source: pattern://9f443ce76f9522dfae4c3aa0 -->
|
||||
<property name="parameter.url" value="http://utility-application-be.adn-agov-me-01-dev:8081/utility/api/v1/email/031"/>
|
||||
<property name="parameter.url" value="http://utility-application-be.adn-agov-me-01-uat:8081/utility/api/v1/email/031"/>
|
||||
<!-- source: pattern://9f443ce76f9522dfae4c3aa0 -->
|
||||
<property name="script" value="file:///var/opt/nevisauth/default/conf/recovery_sendemail031.groovy"/>
|
||||
</AuthState>
|
||||
|
|
@ -2253,7 +2251,7 @@
|
|||
<!-- source: pattern://6061abea33a234fad73897b7 -->
|
||||
<property name="out.keyobjectref" value="Signer_IDP_AGOV"/>
|
||||
<!-- source: pattern://6061abea33a234fad73897b7 -->
|
||||
<property name="spURL" value="https://me.agov-d.azure.adnovum.net/account/api/login/saml2/sso/agovidpdirect"/>
|
||||
<property name="spURL" value="https://me.agov-w.azure.adnovum.net/account/api/login/saml2/sso/agovidpdirect"/>
|
||||
<!-- source: pattern://6061abea33a234fad73897b7 -->
|
||||
<property name="acsUrlWhitelist.uris" value="not used"/>
|
||||
<!-- source: pattern://6061abea33a234fad73897b7 -->
|
||||
|
|
@ -2273,9 +2271,9 @@
|
|||
<!-- source: pattern://6061abea33a234fad73897b7 -->
|
||||
<property name="out.subject.format" value="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"/>
|
||||
<!-- source: pattern://6061abea33a234fad73897b7 -->
|
||||
<property name="out.issuer" value="https://auth.agov-d.azure.adnovum.net/SAML2/"/>
|
||||
<property name="out.issuer" value="https://auth.agov-w.azure.adnovum.net/SAML2/"/>
|
||||
<!-- source: pattern://6061abea33a234fad73897b7 -->
|
||||
<property name="out.audienceRestriction" value="https://me.agov-d.azure.adnovum.net/account/api/saml2/service-provider-metadata/agovidpdirect"/>
|
||||
<property name="out.audienceRestriction" value="https://me.agov-w.azure.adnovum.net/account/api/saml2/service-provider-metadata/agovidpdirect"/>
|
||||
</AuthState>
|
||||
<AuthState name="Auth_Realm_Recovery_Recovery_Auth_codeLocked" class="ch.nevis.esauth.auth.states.standard.AuthGeneric" final="true" resumeState="false">
|
||||
<!-- source: pattern://584964c837512845d7940809 -->
|
||||
|
|
@ -2330,9 +2328,9 @@
|
|||
<!-- source: pattern://4bc453bf68139ee87966b0c7 -->
|
||||
<property name="script" value="file:///var/opt/nevisauth/default/conf/Recovery_mobile_nless_auth.groovy"/>
|
||||
<!-- source: pattern://4bc453bf68139ee87966b0c7 -->
|
||||
<property name="parameter.agovmeregistrationurl" value="https://me.agov-d.azure.adnovum.net/registration/"/>
|
||||
<property name="parameter.agovmeregistrationurl" value="https://me.agov-w.azure.adnovum.net/registration/"/>
|
||||
<!-- source: pattern://4bc453bf68139ee87966b0c7 -->
|
||||
<property name="parameter.recoveryurl" value="https://auth.agov-d.azure.adnovum.net/AUTH/RECOVERY/"/>
|
||||
<property name="parameter.recoveryurl" value="https://auth.agov-w.azure.adnovum.net/AUTH/RECOVERY/"/>
|
||||
</AuthState>
|
||||
<AuthState name="Auth_Realm_Recovery_Recovery_redirectAgovMe_Handle_Redirect" class="ch.nevis.esauth.auth.states.scripting.ScriptState" final="false" resumeState="true">
|
||||
<!-- source: pattern://6061abea33a234fad73897b7 -->
|
||||
|
|
@ -2345,7 +2343,7 @@
|
|||
<!-- source: pattern://6061abea33a234fad73897b7 -->
|
||||
<property name="scriptTraceGroup" value="AGOV-ACCT"/>
|
||||
<!-- source: pattern://6061abea33a234fad73897b7 -->
|
||||
<property name="parameter.agovmedirecturl" value="https://me.agov-d.azure.adnovum.net/account/api/login/saml2/sso/agovidpdirect"/>
|
||||
<property name="parameter.agovmedirecturl" value="https://me.agov-w.azure.adnovum.net/account/api/login/saml2/sso/agovidpdirect"/>
|
||||
<!-- source: pattern://6061abea33a234fad73897b7 -->
|
||||
<property name="script" value="file:///var/opt/nevisauth/default/conf/handleRedirectRecovery.groovy"/>
|
||||
</AuthState>
|
||||
|
|
|
|||
|
|
@ -167,7 +167,7 @@ def i2r = [:]
|
|||
|
||||
// issuer to ResultCond name
|
||||
def i2e = [:]
|
||||
i2e.put('https://trustbroker.agov-d.azure.adnovum.net', 'forbidden_0')
|
||||
i2e.put('https://trustbroker.agov-w.azure.adnovum.net', 'forbidden_0')
|
||||
|
||||
|
||||
if (!i2r.isEmpty() && !hasAnyRequiredRole(i2r, issuer)) {
|
||||
|
|
|
|||
|
|
@ -91,7 +91,7 @@ if (request.getSession(false) == null) {
|
|||
def i2s = new TreeMap<String, String>(String.CASE_INSENSITIVE_ORDER)
|
||||
|
||||
|
||||
i2s.put('https://trustbroker.agov-d.azure.adnovum.net', 'state0')
|
||||
i2s.put('https://trustbroker.agov-w.azure.adnovum.net', 'state0')
|
||||
|
||||
if (parameters.get('spInitiated') == 'true' && inargs.containsKey('SAMLRequest')) { // SP-initiated authentication
|
||||
LOG.debug("found SAMLRequest parameter for SP-initiated authentication")
|
||||
|
|
|
|||
|
|
@ -41,12 +41,9 @@ spec:
|
|||
podDisruptionBudget:
|
||||
maxUnavailable: "50%"
|
||||
git:
|
||||
tag: "r-38cda7e0ac156aa4e8342fa76df3951edf99f6a5"
|
||||
tag: "r-17392f4fc2f29ede0c371af50d06749396d69a29"
|
||||
dir: "DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/fido-uaf"
|
||||
credentials: "git-credentials"
|
||||
database:
|
||||
name: "fido-uaf"
|
||||
requiredVersion: "7.2402.1"
|
||||
keystores:
|
||||
- "fido-uaf-default-server-identity"
|
||||
- "fido-uaf-default-client-identity"
|
||||
|
|
|
|||
|
|
@ -1,26 +0,0 @@
|
|||
apiVersion: "operator.nevis-security.ch/v1"
|
||||
kind: "NevisDatabase"
|
||||
metadata:
|
||||
name: "fido-uaf"
|
||||
namespace: "adn-agov-nevisidm-01-uat"
|
||||
labels:
|
||||
deploymentTarget: "fido-uaf"
|
||||
annotations:
|
||||
projectKey: "DEFAULT-ADN-AGOV-PROJECT"
|
||||
patternId: "9385d1b33aefe975fb1c5914"
|
||||
spec:
|
||||
type: "NevisFIDO"
|
||||
databaseType: "MariaDB"
|
||||
version: "7.2402.1"
|
||||
url: "mariadb-agov-dev-gp.mariadb.database.azure.com"
|
||||
port: 3306
|
||||
database: "nevisfido_uaf"
|
||||
bootstrap: true
|
||||
migrate: true
|
||||
rootCredentials:
|
||||
name: "root-adn-agov-nevisidm-01-dev-idm"
|
||||
namespace: "adn-agov-nevisidm-01-dev-idm"
|
||||
podSecurity:
|
||||
policy: "baseline"
|
||||
automountServiceAccountToken: false
|
||||
timeZone: "Europe/Zurich"
|
||||
|
|
@ -31,18 +31,18 @@ credential-repository:
|
|||
user-attribute: extId
|
||||
|
||||
session-repository:
|
||||
type: sql
|
||||
jdbc-url: jdbc:mariadb://mariadb-agov-dev-gp.mariadb.database.azure.com:3306/nevisfido_uaf?sslMode=disable&autocommit=true
|
||||
max-connection-lifetime: 10m
|
||||
user: ${exec:/var/opt/nevisfido/default/conf/credentials/dbUser}
|
||||
password: ${exec:/var/opt/nevisfido/default/conf/credentials/dbPassword}
|
||||
type: in-memory
|
||||
jdbc-url:
|
||||
max-connection-lifetime:
|
||||
user:
|
||||
password:
|
||||
schema-user:
|
||||
schema-user-password:
|
||||
automatic-db-schema-setup: false
|
||||
|
||||
fido-uaf:
|
||||
enabled: true
|
||||
app-id: https://auth.agov-d.azure.adnovum.net/nevisfido/uaf/1.1/facets
|
||||
app-id: https://auth.agov-w.azure.adnovum.net/nevisfido/uaf/1.1/facets
|
||||
facets:
|
||||
- android:apk-key-hash:kb0yJ345nFUmt4nOYK5Li7KvwDDobMKPosY48Uwb0QI
|
||||
- ios:bundle-id:ch.agov.accessapp.t
|
||||
|
|
@ -102,15 +102,15 @@ fido-uaf:
|
|||
- type: "firebase-cloud-messaging"
|
||||
dry-run: false
|
||||
service-account-json: "inv-res-secret://a78926e06a159811ee15c224-bdd107d2"
|
||||
registration-redeem-url: "https://auth.agov-d.azure.adnovum.net/nevisfido/token/redeem/registration"
|
||||
authentication-redeem-url: "https://auth.agov-d.azure.adnovum.net/nevisfido/token/redeem/authentication"
|
||||
deregistration-redeem-url: "https://auth.agov-d.azure.adnovum.net/nevisfido/token/redeem/deregistration"
|
||||
registration-redeem-url: "https://auth.agov-w.azure.adnovum.net/nevisfido/token/redeem/registration"
|
||||
authentication-redeem-url: "https://auth.agov-w.azure.adnovum.net/nevisfido/token/redeem/authentication"
|
||||
deregistration-redeem-url: "https://auth.agov-w.azure.adnovum.net/nevisfido/token/redeem/deregistration"
|
||||
- type: "png-qr-code"
|
||||
registration-redeem-url: "https://auth.agov-d.azure.adnovum.net/nevisfido/token/redeem/registration"
|
||||
authentication-redeem-url: "https://auth.agov-d.azure.adnovum.net/nevisfido/token/redeem/authentication"
|
||||
deregistration-redeem-url: "https://auth.agov-d.azure.adnovum.net/nevisfido/token/redeem/deregistration"
|
||||
registration-redeem-url: "https://auth.agov-w.azure.adnovum.net/nevisfido/token/redeem/registration"
|
||||
authentication-redeem-url: "https://auth.agov-w.azure.adnovum.net/nevisfido/token/redeem/authentication"
|
||||
deregistration-redeem-url: "https://auth.agov-w.azure.adnovum.net/nevisfido/token/redeem/deregistration"
|
||||
- type: "link"
|
||||
registration-redeem-url: "https://auth.agov-d.azure.adnovum.net/nevisfido/token/redeem/registration"
|
||||
authentication-redeem-url: "https://auth.agov-d.azure.adnovum.net/nevisfido/token/redeem/authentication"
|
||||
deregistration-redeem-url: "https://auth.agov-d.azure.adnovum.net/nevisfido/token/redeem/deregistration"
|
||||
registration-redeem-url: "https://auth.agov-w.azure.adnovum.net/nevisfido/token/redeem/registration"
|
||||
authentication-redeem-url: "https://auth.agov-w.azure.adnovum.net/nevisfido/token/redeem/authentication"
|
||||
deregistration-redeem-url: "https://auth.agov-w.azure.adnovum.net/nevisfido/token/redeem/deregistration"
|
||||
base-url: "ch.agov.access-t://x-callback-url/authenticate"
|
||||
|
|
@ -1,26 +0,0 @@
|
|||
apiVersion: "operator.nevis-security.ch/v1"
|
||||
kind: "NevisDatabase"
|
||||
metadata:
|
||||
name: "fido2"
|
||||
namespace: "adn-agov-nevisidm-01-uat"
|
||||
labels:
|
||||
deploymentTarget: "fido2"
|
||||
annotations:
|
||||
projectKey: "DEFAULT-ADN-AGOV-PROJECT"
|
||||
patternId: "3e9b024326987a3fad17a38f"
|
||||
spec:
|
||||
type: "NevisFIDO"
|
||||
databaseType: "MariaDB"
|
||||
version: "7.2402.1"
|
||||
url: "mariadb-agov-dev-gp.mariadb.database.azure.com"
|
||||
port: 3306
|
||||
database: "nevisfido_fido2"
|
||||
bootstrap: true
|
||||
migrate: true
|
||||
rootCredentials:
|
||||
name: "root-adn-agov-nevisidm-01-dev-idm"
|
||||
namespace: "adn-agov-nevisidm-01-dev-idm"
|
||||
podSecurity:
|
||||
policy: "baseline"
|
||||
automountServiceAccountToken: false
|
||||
timeZone: "Europe/Zurich"
|
||||
|
|
@ -41,12 +41,9 @@ spec:
|
|||
podDisruptionBudget:
|
||||
maxUnavailable: "50%"
|
||||
git:
|
||||
tag: "r-38cda7e0ac156aa4e8342fa76df3951edf99f6a5"
|
||||
tag: "r-17392f4fc2f29ede0c371af50d06749396d69a29"
|
||||
dir: "DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/fido2"
|
||||
credentials: "git-credentials"
|
||||
database:
|
||||
name: "fido2"
|
||||
requiredVersion: "7.2402.1"
|
||||
keystores:
|
||||
- "fido2-default-identity"
|
||||
- "fido2-default-client-identity"
|
||||
|
|
|
|||
|
|
@ -23,23 +23,23 @@ credential-repository:
|
|||
user-attribute: extId
|
||||
|
||||
session-repository:
|
||||
type: sql
|
||||
jdbc-url: jdbc:mariadb://mariadb-agov-dev-gp.mariadb.database.azure.com:3306/nevisfido_fido2?sslMode=disable&autocommit=true
|
||||
max-connection-lifetime: 10m
|
||||
user: ${exec:/var/opt/nevisfido/default/conf/credentials/dbUser}
|
||||
password: ${exec:/var/opt/nevisfido/default/conf/credentials/dbPassword}
|
||||
type: in-memory
|
||||
jdbc-url:
|
||||
max-connection-lifetime:
|
||||
user:
|
||||
password:
|
||||
schema-user:
|
||||
schema-user-password:
|
||||
automatic-db-schema-setup: false
|
||||
automatic-db-schema-setup: true
|
||||
|
||||
fido2:
|
||||
enabled: true
|
||||
rp-name: AGOV-RelPartName
|
||||
rp-id: adnovum.net
|
||||
origins:
|
||||
- https://me.agov-d.azure.adnovum.net
|
||||
- https://nevisidm.agov-d.azure.adnovum.net
|
||||
- https://auth.agov-d.azure.adnovum.net
|
||||
- https://me.agov-w.azure.adnovum.net
|
||||
- https://nevisidm.agov-w.azure.adnovum.net
|
||||
- https://auth.agov-w.azure.adnovum.net
|
||||
signature-algorithms:
|
||||
- RS1
|
||||
- RS256
|
||||
|
|
|
|||
|
|
@ -41,7 +41,7 @@ spec:
|
|||
podDisruptionBudget:
|
||||
maxUnavailable: "50%"
|
||||
git:
|
||||
tag: "r-38cda7e0ac156aa4e8342fa76df3951edf99f6a5"
|
||||
tag: "r-17392f4fc2f29ede0c371af50d06749396d69a29"
|
||||
dir: "DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/idm"
|
||||
credentials: "git-credentials"
|
||||
keystores:
|
||||
|
|
|
|||
|
|
@ -7,11 +7,11 @@ database.connection.username=adndbadmin
|
|||
# source: pattern://2951ead44a7a9362a4545094
|
||||
database.connection.password=secret://59f191e7aa67a1ed9f7b87d2
|
||||
# source: pattern://b8a36646f81c3247cdb5d90b
|
||||
application.mail.smtp.host=greenmail.adn-agov-mail-01-dev.svc
|
||||
application.mail.smtp.host=greenmail.adn-agov-mail-01-uat.svc
|
||||
# source: pattern://b8a36646f81c3247cdb5d90b
|
||||
application.mail.smtp.port=3025
|
||||
# source: pattern://b8a36646f81c3247cdb5d90b
|
||||
application.mail.sender=noreply-agov-dev@adnovum.ch
|
||||
application.mail.sender=noreply-agov-uat@adnovum.ch
|
||||
# source: pattern://71411a755a625f9b850c6cf5
|
||||
application.feature.email.validation.enabled=false
|
||||
# source: pattern://71411a755a625f9b850c6cf5, pattern://b8a36646f81c3247cdb5d90b
|
||||
|
|
|
|||
|
|
@ -40,7 +40,7 @@ spec:
|
|||
podDisruptionBudget:
|
||||
maxUnavailable: "50%"
|
||||
git:
|
||||
tag: "r-38cda7e0ac156aa4e8342fa76df3951edf99f6a5"
|
||||
tag: "r-17392f4fc2f29ede0c371af50d06749396d69a29"
|
||||
dir: "DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/logrend"
|
||||
credentials: "git-credentials"
|
||||
podSecurity:
|
||||
|
|
|
|||
|
|
@ -4,10 +4,10 @@ application.gui.litdict=yes
|
|||
application.gui.substitution=yes
|
||||
application.input.charset=UTF-8
|
||||
application.inputs.htmlencode=yes
|
||||
application.language.cookie.de=LANG:de:.agov-d.azure.adnovum.net
|
||||
application.language.cookie.en=LANG:en:.agov-d.azure.adnovum.net
|
||||
application.language.cookie.fr=LANG:fr:.agov-d.azure.adnovum.net
|
||||
application.language.cookie.it=LANG:it:.agov-d.azure.adnovum.net
|
||||
application.language.cookie.de=LANG:de:.agov-w.azure.adnovum.net
|
||||
application.language.cookie.en=LANG:en:.agov-w.azure.adnovum.net
|
||||
application.language.cookie.fr=LANG:fr:.agov-w.azure.adnovum.net
|
||||
application.language.cookie.it=LANG:it:.agov-w.azure.adnovum.net
|
||||
application.loginapp.current=
|
||||
application.loginapp.default=Auth_Realm_Recovery
|
||||
application.loginapp.override=header:channel
|
||||
|
|
|
|||
|
|
@ -17,10 +17,10 @@ application.languages=en,de,fr,it
|
|||
# source: pattern://4fcfadb4a5c946ead7e6e995
|
||||
application.languages.default=en
|
||||
# source: pattern://097929211988398a87bcbb0c
|
||||
application.language.cookie.en=LANG:en:.agov-d.azure.adnovum.net
|
||||
application.language.cookie.en=LANG:en:.agov-w.azure.adnovum.net
|
||||
# source: pattern://097929211988398a87bcbb0c
|
||||
application.language.cookie.de=LANG:de:.agov-d.azure.adnovum.net
|
||||
application.language.cookie.de=LANG:de:.agov-w.azure.adnovum.net
|
||||
# source: pattern://097929211988398a87bcbb0c
|
||||
application.language.cookie.fr=LANG:fr:.agov-d.azure.adnovum.net
|
||||
application.language.cookie.fr=LANG:fr:.agov-w.azure.adnovum.net
|
||||
# source: pattern://097929211988398a87bcbb0c
|
||||
application.language.cookie.it=LANG:it:.agov-d.azure.adnovum.net
|
||||
application.language.cookie.it=LANG:it:.agov-w.azure.adnovum.net
|
||||
|
|
|
|||
|
|
@ -17,10 +17,10 @@ application.languages=en,de,fr,it
|
|||
# source: pattern://204c22beaccdfd22727af378
|
||||
application.languages.default=en
|
||||
# source: pattern://097929211988398a87bcbb0c
|
||||
application.language.cookie.en=LANG:en:.agov-d.azure.adnovum.net
|
||||
application.language.cookie.en=LANG:en:.agov-w.azure.adnovum.net
|
||||
# source: pattern://097929211988398a87bcbb0c
|
||||
application.language.cookie.de=LANG:de:.agov-d.azure.adnovum.net
|
||||
application.language.cookie.de=LANG:de:.agov-w.azure.adnovum.net
|
||||
# source: pattern://097929211988398a87bcbb0c
|
||||
application.language.cookie.fr=LANG:fr:.agov-d.azure.adnovum.net
|
||||
application.language.cookie.fr=LANG:fr:.agov-w.azure.adnovum.net
|
||||
# source: pattern://097929211988398a87bcbb0c
|
||||
application.language.cookie.it=LANG:it:.agov-d.azure.adnovum.net
|
||||
application.language.cookie.it=LANG:it:.agov-w.azure.adnovum.net
|
||||
|
|
|
|||
|
|
@ -17,10 +17,10 @@ application.languages=en,de,fr,it
|
|||
# source: pattern://06aeae2d799e492f5580d03b
|
||||
application.languages.default=en
|
||||
# source: pattern://097929211988398a87bcbb0c
|
||||
application.language.cookie.en=LANG:en:.agov-d.azure.adnovum.net
|
||||
application.language.cookie.en=LANG:en:.agov-w.azure.adnovum.net
|
||||
# source: pattern://097929211988398a87bcbb0c
|
||||
application.language.cookie.de=LANG:de:.agov-d.azure.adnovum.net
|
||||
application.language.cookie.de=LANG:de:.agov-w.azure.adnovum.net
|
||||
# source: pattern://097929211988398a87bcbb0c
|
||||
application.language.cookie.fr=LANG:fr:.agov-d.azure.adnovum.net
|
||||
application.language.cookie.fr=LANG:fr:.agov-w.azure.adnovum.net
|
||||
# source: pattern://097929211988398a87bcbb0c
|
||||
application.language.cookie.it=LANG:it:.agov-d.azure.adnovum.net
|
||||
application.language.cookie.it=LANG:it:.agov-w.azure.adnovum.net
|
||||
|
|
|
|||
|
|
@ -1,26 +0,0 @@
|
|||
apiVersion: "operator.nevis-security.ch/v1"
|
||||
kind: "NevisDatabase"
|
||||
metadata:
|
||||
name: "proxy-idp"
|
||||
namespace: "adn-agov-nevisidm-01-uat"
|
||||
labels:
|
||||
deploymentTarget: "proxy-idp"
|
||||
annotations:
|
||||
projectKey: "DEFAULT-ADN-AGOV-PROJECT"
|
||||
patternId: "699f0a21dd0e852f28d27e9d"
|
||||
spec:
|
||||
type: "NevisProxy"
|
||||
databaseType: "MariaDB"
|
||||
version: "7.2402.1"
|
||||
url: "mariadb-agov-dev-gp.mariadb.database.azure.com"
|
||||
port: 3306
|
||||
database: "idp_replicated_session_store"
|
||||
bootstrap: true
|
||||
migrate: true
|
||||
rootCredentials:
|
||||
name: "root-adn-agov-nevisidm-01-dev-idm"
|
||||
namespace: "adn-agov-nevisidm-01-dev-idm"
|
||||
podSecurity:
|
||||
policy: "baseline"
|
||||
automountServiceAccountToken: false
|
||||
timeZone: "Europe/Zurich"
|
||||
|
|
@ -41,12 +41,9 @@ spec:
|
|||
podDisruptionBudget:
|
||||
maxUnavailable: "50%"
|
||||
git:
|
||||
tag: "r-38cda7e0ac156aa4e8342fa76df3951edf99f6a5"
|
||||
tag: "r-17392f4fc2f29ede0c371af50d06749396d69a29"
|
||||
dir: "DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/proxy-idp"
|
||||
credentials: "git-credentials"
|
||||
database:
|
||||
name: "proxy-idp"
|
||||
requiredVersion: "7.2402.1"
|
||||
keystores:
|
||||
- "proxy-idp-notused-auth-realm-identity"
|
||||
- "proxy-idp-1f0702aaabef60a615abf41f"
|
||||
|
|
|
|||
|
|
@ -9,11 +9,11 @@ metadata:
|
|||
projectKey: "DEFAULT-ADN-AGOV-PROJECT"
|
||||
patternId: "0ceb05c56644a59d648c13b9"
|
||||
spec:
|
||||
cn: "auth.agov-d.azure.adnovum.net"
|
||||
cn: "auth.agov-w.azure.adnovum.net"
|
||||
usage: "<reserved for future use>"
|
||||
san:
|
||||
dns:
|
||||
- "proxy-idp"
|
||||
- "proxy-idp.adn-agov-nevisidm-01-uat"
|
||||
- "auth.agov-d.azure.adnovum.net"
|
||||
- "auth.agov-w.azure.adnovum.net"
|
||||
email: []
|
||||
|
|
|
|||
|
|
@ -10,7 +10,7 @@ metadata:
|
|||
patternId: "0ceb05c56644a59d648c13b9"
|
||||
spec:
|
||||
hosts:
|
||||
- host: "auth.agov-d.azure.adnovum.net"
|
||||
- host: "auth.agov-w.azure.adnovum.net"
|
||||
protocol: "HTTPS"
|
||||
servicePort: 8443
|
||||
serviceName: "proxy-idp"
|
||||
|
|
|
|||
|
|
@ -12,21 +12,21 @@
|
|||
<!-- source: pattern://0ceb05c56644a59d648c13b9 -->
|
||||
<Connector port="11080" name="management" listen="0.0.0.0:11080"/>
|
||||
<!-- source: pattern://1f0702aaabef60a615abf41f -->
|
||||
<Connector port="443" name="auth.agov-d.azure.adnovum.net" listen="0.0.0.0:8443">
|
||||
<Connector port="443" name="auth.agov-w.azure.adnovum.net" listen="0.0.0.0:8443">
|
||||
<!-- source: pattern://1f0702aaabef60a615abf41f, pattern://1f0702aaabef60a615abf41f#keystore -->
|
||||
<SSL SSLCipherSuite="ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256" SSLOptions="+OptRenegotiate +StdEnvVars +ExportCertData" SSLProtocol="-all +TLSv1.2 -TLSv1.3" SSLCertificateFile="/var/opt/keys/own/proxy-idp-1f0702aaabef60a615abf41f/cert.pem" SSLCertificateKeyFile="/var/opt/keys/own/proxy-idp-1f0702aaabef60a615abf41f/key.pem" SSLCertificateChainFile="/var/opt/keys/own/proxy-idp-1f0702aaabef60a615abf41f/ca-chain.pem" SSLInsecureRenegotiation="off" SSLHonorCipherOrder="on"/>
|
||||
</Connector>
|
||||
<!-- source: pattern://1f0702aaabef60a615abf41f -->
|
||||
<Engine defaultHost="auth.agov-d.azure.adnovum.net">
|
||||
<Engine defaultHost="auth.agov-w.azure.adnovum.net">
|
||||
<!-- source: pattern://0ceb05c56644a59d648c13b9 -->
|
||||
<Host name="management">
|
||||
<!-- source: pattern://0ceb05c56644a59d648c13b9 -->
|
||||
<Context docBase="/var/opt/nevisproxy/default/host-management"/>
|
||||
</Host>
|
||||
<!-- source: pattern://0ceb05c56644a59d648c13b9 -->
|
||||
<Host name="auth.agov-d.azure.adnovum.net">
|
||||
<Host name="auth.agov-w.azure.adnovum.net">
|
||||
<!-- source: pattern://1f0702aaabef60a615abf41f -->
|
||||
<Context entryURI="/" unsecureConnection="allow" trailingSlashRedirect="true" filePreload="false" docBase="/var/opt/nevisproxy/default/host-auth.agov-d.azure.adnovum.net" path="" allowedMethods="ALL-HTTP ALL-WEBDAV -TRACE -CONNECT"/>
|
||||
<Context entryURI="/" unsecureConnection="allow" trailingSlashRedirect="true" filePreload="false" docBase="/var/opt/nevisproxy/default/host-auth.agov-w.azure.adnovum.net" path="" allowedMethods="ALL-HTTP ALL-WEBDAV -TRACE -CONNECT"/>
|
||||
</Host>
|
||||
</Engine>
|
||||
</Service>
|
||||
|
|
|
|||
|
|
@ -195,13 +195,13 @@ SecResponseBodyLimitAction ProcessPartial
|
|||
# This default setting is chosen due to all systems have /tmp available however,
|
||||
# this is less than ideal. It is recommended that you specify a location that's private.
|
||||
#
|
||||
SecTmpDir /var/opt/nevisproxy/default/run/host-auth.agov-d.azure.adnovum.net
|
||||
SecTmpDir /var/opt/nevisproxy/default/run/host-auth.agov-w.azure.adnovum.net
|
||||
|
||||
# The location where ModSecurity will keep its persistent data. This default setting
|
||||
# is chosen due to all systems have /tmp available however, it
|
||||
# too should be updated to a place that other users can't access.
|
||||
#
|
||||
SecDataDir /var/opt/nevisproxy/default/run/host-auth.agov-d.azure.adnovum.net
|
||||
SecDataDir /var/opt/nevisproxy/default/run/host-auth.agov-w.azure.adnovum.net
|
||||
|
||||
|
||||
# -- File uploads handling configuration -------------------------------------
|
||||
|
|
@ -250,7 +250,7 @@ SecAuditLogParts ABIJDEFHZ
|
|||
# assumes that you will use the audit log only ocassionally.
|
||||
#
|
||||
SecAuditLogType Serial
|
||||
SecAuditLog /var/opt/nevisproxy/default/logs/host-auth.agov-d.azure.adnovum.net_modsec_audit.log
|
||||
SecAuditLog /var/opt/nevisproxy/default/logs/host-auth.agov-w.azure.adnovum.net_modsec_audit.log
|
||||
|
||||
# Specify the path for concurrent audit logging.
|
||||
#SecAuditLogStorageDir /opt/modsecurity/var/audit/
|
||||
|
|
@ -1,5 +1,5 @@
|
|||
# load modsecurity
|
||||
Include /var/opt/nevisproxy/default/host-auth.agov-d.azure.adnovum.net/WEB-INF/modsecurity.conf
|
||||
Include /var/opt/nevisproxy/default/host-auth.agov-w.azure.adnovum.net/WEB-INF/modsecurity.conf
|
||||
|
||||
# apply whitelist modifications - must be done before loading other rules (replaces REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf)
|
||||
|
||||
|
|
@ -8,7 +8,7 @@ Include /var/opt/nevisproxy/default/host-auth.agov-d.azure.adnovum.net/WEB-INF/m
|
|||
SecAction "id:900000,phase:1,nolog,pass,t:none,setvar:tx.paranoia_level=1"
|
||||
|
||||
# load the rule set of the virtual host
|
||||
Include /var/opt/nevisproxy/default/host-auth.agov-d.azure.adnovum.net/WEB-INF/rules.conf
|
||||
Include /var/opt/nevisproxy/default/host-auth.agov-w.azure.adnovum.net/WEB-INF/rules.conf
|
||||
|
||||
# apply rule exceptions (replaces RESPONSE-999-EXCLUSION-RULES-AFTER-CRS.conf)
|
||||
|
||||
|
|
@ -1,5 +1,5 @@
|
|||
# load modsecurity
|
||||
Include /var/opt/nevisproxy/default/host-auth.agov-d.azure.adnovum.net/WEB-INF/modsecurity.conf
|
||||
Include /var/opt/nevisproxy/default/host-auth.agov-w.azure.adnovum.net/WEB-INF/modsecurity.conf
|
||||
|
||||
# apply whitelist modifications - must be done before loading other rules (replaces REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf)
|
||||
|
||||
|
|
@ -8,7 +8,7 @@ Include /var/opt/nevisproxy/default/host-auth.agov-d.azure.adnovum.net/WEB-INF/m
|
|||
SecAction "id:900000,phase:1,nolog,pass,t:none,setvar:tx.paranoia_level=3"
|
||||
|
||||
# load the rule set of the virtual host
|
||||
Include /var/opt/nevisproxy/default/host-auth.agov-d.azure.adnovum.net/WEB-INF/rules.conf
|
||||
Include /var/opt/nevisproxy/default/host-auth.agov-w.azure.adnovum.net/WEB-INF/rules.conf
|
||||
|
||||
# apply rule exceptions (replaces RESPONSE-999-EXCLUSION-RULES-AFTER-CRS.conf)
|
||||
|
||||
|
|
@ -1,11 +1,6 @@
|
|||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN" "/opt/nevisproxy/dtd/web-app_2_3.dtd">
|
||||
<web-app>
|
||||
<!-- source: pattern://699f0a21dd0e852f28d27e9d -->
|
||||
<context-param>
|
||||
<param-name>application-id</param-name>
|
||||
<param-value>auth.agov-d.azure.adnovum.net</param-value>
|
||||
</context-param>
|
||||
<!-- source: pattern://06aeae2d799e492f5580d03b, pattern://4fcfadb4a5c946ead7e6e995, pattern://204c22beaccdfd22727af378 -->
|
||||
<context-param>
|
||||
<param-name>SectokenVerifierCert</param-name>
|
||||
|
|
@ -31,7 +26,7 @@
|
|||
<!-- source: pattern://4fcfadb4a5c946ead7e6e995 -->
|
||||
<init-param>
|
||||
<param-name>EntryPointID</param-name>
|
||||
<param-value>auth.agov-d.azure.adnovum.net</param-value>
|
||||
<param-value>auth.agov-w.azure.adnovum.net</param-value>
|
||||
</init-param>
|
||||
<!-- source: pattern://4fcfadb4a5c946ead7e6e995 -->
|
||||
<init-param>
|
||||
|
|
@ -96,7 +91,7 @@
|
|||
<!-- source: pattern://cb8c63274fe346280de0ffd5 -->
|
||||
<init-param>
|
||||
<param-name>EntryPointID</param-name>
|
||||
<param-value>auth.agov-d.azure.adnovum.net</param-value>
|
||||
<param-value>auth.agov-w.azure.adnovum.net</param-value>
|
||||
</init-param>
|
||||
<!-- source: pattern://cb8c63274fe346280de0ffd5 -->
|
||||
<init-param>
|
||||
|
|
@ -156,7 +151,7 @@
|
|||
<!-- source: pattern://204c22beaccdfd22727af378 -->
|
||||
<init-param>
|
||||
<param-name>EntryPointID</param-name>
|
||||
<param-value>auth.agov-d.azure.adnovum.net</param-value>
|
||||
<param-value>auth.agov-w.azure.adnovum.net</param-value>
|
||||
</init-param>
|
||||
<!-- source: pattern://204c22beaccdfd22727af378 -->
|
||||
<init-param>
|
||||
|
|
@ -216,7 +211,7 @@
|
|||
<!-- source: pattern://e0fda9336be9c69dafc9b69e -->
|
||||
<init-param>
|
||||
<param-name>EntryPointID</param-name>
|
||||
<param-value>auth.agov-d.azure.adnovum.net</param-value>
|
||||
<param-value>auth.agov-w.azure.adnovum.net</param-value>
|
||||
</init-param>
|
||||
<!-- source: pattern://e0fda9336be9c69dafc9b69e -->
|
||||
<init-param>
|
||||
|
|
@ -276,7 +271,7 @@
|
|||
<!-- source: pattern://cb8c63274fe346280de0ffd5 -->
|
||||
<init-param>
|
||||
<param-name>EntryPointID</param-name>
|
||||
<param-value>auth.agov-d.azure.adnovum.net</param-value>
|
||||
<param-value>auth.agov-w.azure.adnovum.net</param-value>
|
||||
</init-param>
|
||||
<!-- source: pattern://cb8c63274fe346280de0ffd5 -->
|
||||
<init-param>
|
||||
|
|
@ -326,7 +321,7 @@
|
|||
<!-- source: pattern://06aeae2d799e492f5580d03b -->
|
||||
<init-param>
|
||||
<param-name>EntryPointID</param-name>
|
||||
<param-value>auth.agov-d.azure.adnovum.net</param-value>
|
||||
<param-value>auth.agov-w.azure.adnovum.net</param-value>
|
||||
</init-param>
|
||||
<!-- source: pattern://06aeae2d799e492f5580d03b -->
|
||||
<init-param>
|
||||
|
|
@ -371,7 +366,7 @@
|
|||
<!-- source: pattern://cdbb957d49fdc6695a978265 -->
|
||||
<init-param>
|
||||
<param-name>Script.Path</param-name>
|
||||
<param-value>/var/opt/nevisproxy/default/host-auth.agov-d.azure.adnovum.net/WEB-INF/csrf_default.lua</param-value>
|
||||
<param-value>/var/opt/nevisproxy/default/host-auth.agov-w.azure.adnovum.net/WEB-INF/csrf_default.lua</param-value>
|
||||
</init-param>
|
||||
</filter>
|
||||
<!-- source: pattern://ecf4381f4653b0aa9a69b417, pattern://ecf4381f4653b0aa9a69b417#filters -->
|
||||
|
|
@ -519,7 +514,7 @@
|
|||
<!-- source: pattern://64f16c5d4c99eff0acbc8fdf -->
|
||||
<init-param>
|
||||
<param-name>Script.Path</param-name>
|
||||
<param-value>/var/opt/nevisproxy/default/host-auth.agov-d.azure.adnovum.net/WEB-INF/lua_http_processing_terminate_session.lua</param-value>
|
||||
<param-value>/var/opt/nevisproxy/default/host-auth.agov-w.azure.adnovum.net/WEB-INF/lua_http_processing_terminate_session.lua</param-value>
|
||||
</init-param>
|
||||
</filter>
|
||||
<!-- source: pattern://db89acad30d11cbc950a87c7 -->
|
||||
|
|
@ -539,7 +534,7 @@
|
|||
<!-- source: pattern://db89acad30d11cbc950a87c7 -->
|
||||
<init-param>
|
||||
<param-name>Script.Path</param-name>
|
||||
<param-value>/var/opt/nevisproxy/default/host-auth.agov-d.azure.adnovum.net/WEB-INF/recovery_pdf_session_processing.lua</param-value>
|
||||
<param-value>/var/opt/nevisproxy/default/host-auth.agov-w.azure.adnovum.net/WEB-INF/recovery_pdf_session_processing.lua</param-value>
|
||||
</init-param>
|
||||
<!-- source: pattern://db89acad30d11cbc950a87c7 -->
|
||||
<init-param>
|
||||
|
|
@ -588,7 +583,7 @@
|
|||
<!-- source: pattern://cdbb957d49fdc6695a978265 -->
|
||||
<init-param>
|
||||
<param-name>ConfigFile</param-name>
|
||||
<param-value>/var/opt/nevisproxy/default/host-auth.agov-d.azure.adnovum.net/WEB-INF/security_app_icon_application.conf</param-value>
|
||||
<param-value>/var/opt/nevisproxy/default/host-auth.agov-w.azure.adnovum.net/WEB-INF/security_app_icon_application.conf</param-value>
|
||||
</init-param>
|
||||
</filter>
|
||||
<!-- source: pattern://0573c2491a56e59daca47e95, pattern://0ceb05c56644a59d648c13b9 -->
|
||||
|
|
@ -598,7 +593,7 @@
|
|||
<!-- source: pattern://0573c2491a56e59daca47e95 -->
|
||||
<init-param>
|
||||
<param-name>ConfigFile</param-name>
|
||||
<param-value>/var/opt/nevisproxy/default/host-auth.agov-d.azure.adnovum.net/WEB-INF/security_request_validation_settings_modsecurity.conf</param-value>
|
||||
<param-value>/var/opt/nevisproxy/default/host-auth.agov-w.azure.adnovum.net/WEB-INF/security_request_validation_settings_modsecurity.conf</param-value>
|
||||
</init-param>
|
||||
</filter>
|
||||
<!-- source: pattern://1f0702aaabef60a615abf41f -->
|
||||
|
|
@ -758,7 +753,7 @@
|
|||
<!-- source: pattern://4fcfadb4a5c946ead7e6e995 -->
|
||||
<init-param>
|
||||
<param-name>Servlet</param-name>
|
||||
<param-value>MySQLSessionStoreServlet</param-value>
|
||||
<param-value>LocalSessionStoreServlet</param-value>
|
||||
</init-param>
|
||||
<!-- source: pattern://4fcfadb4a5c946ead7e6e995 -->
|
||||
<init-param>
|
||||
|
|
@ -803,7 +798,7 @@
|
|||
<!-- source: pattern://cb8c63274fe346280de0ffd5 -->
|
||||
<init-param>
|
||||
<param-name>Servlet</param-name>
|
||||
<param-value>MySQLSessionStoreServlet</param-value>
|
||||
<param-value>LocalSessionStoreServlet</param-value>
|
||||
</init-param>
|
||||
<!-- source: pattern://cb8c63274fe346280de0ffd5 -->
|
||||
<init-param>
|
||||
|
|
@ -848,7 +843,7 @@
|
|||
<!-- source: pattern://204c22beaccdfd22727af378 -->
|
||||
<init-param>
|
||||
<param-name>Servlet</param-name>
|
||||
<param-value>MySQLSessionStoreServlet</param-value>
|
||||
<param-value>LocalSessionStoreServlet</param-value>
|
||||
</init-param>
|
||||
<!-- source: pattern://204c22beaccdfd22727af378 -->
|
||||
<init-param>
|
||||
|
|
@ -893,7 +888,7 @@
|
|||
<!-- source: pattern://e0fda9336be9c69dafc9b69e -->
|
||||
<init-param>
|
||||
<param-name>Servlet</param-name>
|
||||
<param-value>MySQLSessionStoreServlet</param-value>
|
||||
<param-value>LocalSessionStoreServlet</param-value>
|
||||
</init-param>
|
||||
<!-- source: pattern://06aeae2d799e492f5580d03b -->
|
||||
<init-param>
|
||||
|
|
@ -1147,7 +1142,7 @@
|
|||
<!-- source: pattern://cdbb957d49fdc6695a978265#backends -->
|
||||
<init-param>
|
||||
<param-name>InetAddress</param-name>
|
||||
<param-value>connect-application-billing.adn-agov-connect-01-dev:8082</param-value>
|
||||
<param-value>connect-application-billing.adn-agov-connect-01-uat:8082</param-value>
|
||||
</init-param>
|
||||
<!-- source: pattern://cdbb957d49fdc6695a978265#backends -->
|
||||
<init-param>
|
||||
|
|
@ -1439,7 +1434,7 @@
|
|||
<!-- source: pattern://cadefc0abd2323fdccdb7a18#backends -->
|
||||
<init-param>
|
||||
<param-name>InetAddress</param-name>
|
||||
<param-value>utility-application-be.adn-agov-me-01-dev:8081</param-value>
|
||||
<param-value>utility-application-be.adn-agov-me-01-uat:8081</param-value>
|
||||
</init-param>
|
||||
<!-- source: pattern://cadefc0abd2323fdccdb7a18#backends -->
|
||||
<init-param>
|
||||
|
|
@ -1463,6 +1458,27 @@
|
|||
<!-- source: pattern://e0fda9336be9c69dafc9b69e, pattern://c642107fde6b2e07f16bfedb, pattern://decb9b3f88d430fb5c95f466 -->
|
||||
<servlet-class>ch::nevis::isiweb4::servlet::defaults::DefaultServlet</servlet-class>
|
||||
</servlet>
|
||||
<!-- source: pattern://cb8c63274fe346280de0ffd5 -->
|
||||
<servlet>
|
||||
<servlet-name>LocalSessionStoreServlet</servlet-name>
|
||||
<!-- source: pattern://cb8c63274fe346280de0ffd5 -->
|
||||
<servlet-class>ch::nevis::nevisproxy::servlet::cache::local::LocalSessionStoreServlet</servlet-class>
|
||||
<!-- source: pattern://cb8c63274fe346280de0ffd5 -->
|
||||
<init-param>
|
||||
<param-name>MaxInactiveInterval</param-name>
|
||||
<param-value>600</param-value>
|
||||
</init-param>
|
||||
<!-- source: pattern://cb8c63274fe346280de0ffd5 -->
|
||||
<init-param>
|
||||
<param-name>MaxLifetime</param-name>
|
||||
<param-value>28800</param-value>
|
||||
</init-param>
|
||||
<!-- source: pattern://cb8c63274fe346280de0ffd5 -->
|
||||
<init-param>
|
||||
<param-name>MemorySize</param-name>
|
||||
<param-value>512000000</param-value>
|
||||
</init-param>
|
||||
</servlet>
|
||||
<!-- source: pattern://097929211988398a87bcbb0c -->
|
||||
<servlet>
|
||||
<servlet-name>LoginRenderer_nevisLogrend</servlet-name>
|
||||
|
|
@ -1479,57 +1495,6 @@
|
|||
<param-value>remote:NevisLogrendConnector_nevisLogrend:/nevislogrend/index.vm?logrendresourcepath=/nevislogrend</param-value>
|
||||
</init-param>
|
||||
</servlet>
|
||||
<!-- source: pattern://699f0a21dd0e852f28d27e9d -->
|
||||
<servlet>
|
||||
<servlet-name>MySQLSessionStoreServlet</servlet-name>
|
||||
<!-- source: pattern://699f0a21dd0e852f28d27e9d -->
|
||||
<servlet-class>ch::nevis::nevisproxy::servlet::cache::mysql::MySQLSessionStoreServlet</servlet-class>
|
||||
<!-- source: pattern://699f0a21dd0e852f28d27e9d -->
|
||||
<init-param>
|
||||
<param-name>AttributesTableName</param-name>
|
||||
<param-value>attribute</param-value>
|
||||
</init-param>
|
||||
<!-- source: pattern://699f0a21dd0e852f28d27e9d -->
|
||||
<init-param>
|
||||
<param-name>ConfigurationsTableName</param-name>
|
||||
<param-value>conf</param-value>
|
||||
</init-param>
|
||||
<!-- source: pattern://699f0a21dd0e852f28d27e9d -->
|
||||
<init-param>
|
||||
<param-name>ConnectString</param-name>
|
||||
<param-value>//mariadb-agov-dev-gp.mariadb.database.azure.com:3306/idp_replicated_session_store?connect_timeout=10&ping_timeout=2</param-value>
|
||||
</init-param>
|
||||
<!-- source: pattern://699f0a21dd0e852f28d27e9d -->
|
||||
<init-param>
|
||||
<param-name>DisableDatabaseSchemaCheck</param-name>
|
||||
<param-value>false</param-value>
|
||||
</init-param>
|
||||
<!-- source: pattern://699f0a21dd0e852f28d27e9d -->
|
||||
<init-param>
|
||||
<param-name>KeyToIdMapTableName</param-name>
|
||||
<param-value>key_id_map</param-value>
|
||||
</init-param>
|
||||
<!-- source: pattern://699f0a21dd0e852f28d27e9d -->
|
||||
<init-param>
|
||||
<param-name>MaxLimitOnDelete</param-name>
|
||||
<param-value>100</param-value>
|
||||
</init-param>
|
||||
<!-- source: pattern://699f0a21dd0e852f28d27e9d -->
|
||||
<init-param>
|
||||
<param-name>Password</param-name>
|
||||
<param-value>${exec:/var/opt/nevisproxy/default/conf/credentials/dbPassword}</param-value>
|
||||
</init-param>
|
||||
<!-- source: pattern://699f0a21dd0e852f28d27e9d -->
|
||||
<init-param>
|
||||
<param-name>SessionsTableName</param-name>
|
||||
<param-value>session</param-value>
|
||||
</init-param>
|
||||
<!-- source: pattern://699f0a21dd0e852f28d27e9d -->
|
||||
<init-param>
|
||||
<param-name>UserName</param-name>
|
||||
<param-value>${exec:/var/opt/nevisproxy/default/conf/credentials/dbUser}</param-value>
|
||||
</init-param>
|
||||
</servlet>
|
||||
<!-- source: pattern://097929211988398a87bcbb0c -->
|
||||
<servlet>
|
||||
<servlet-name>NevisLogrendConnector_nevisLogrend</servlet-name>
|
||||
Some files were not shown because too many files have changed in this diff Show More
Loading…
Reference in New Issue