unity-idm-discuss

[Unity-idm-discuss] error on scim editor

[Sander A. <sa....@fz...>]

Hi Krzysztof,
while testing the SCIM API we got another error. When we open the
configuration in console endpoint (Services -> SCIM REST API), a pop-up
appears with "Please check the form for invalid and missing mandatory
values". The log indicates a null pointer, but I do not get which
mandatory value is missing. Following the manual
unity.endpoint.scim.rootGroup is the only mandatory config. This is set
in our config:

cat modules/core/scim.properties 
unity.endpoint.scim.rootGroup=/
unity.endpoint.scim.membershipGroups.1=groups
unity.endpoint.scim.membershipAttributes.1=/

cat modules/core.module
unityServer.core.endpoints.scim.endpointType=SCIM
unityServer.core.endpoints.scim.endpointConfigurationFile=${CONF}/modul
es/core/scim.properties
unityServer.core.endpoints.scim.contextPath=/scim
unityServer.core.endpoints.scim.endpointRealm=defaultRealm
unityServer.core.endpoints.scim.endpointName=SCIM REST API
unityServer.core.endpoints.scim.endpointAuthenticators=pwd;

This config worked on 3.9. Are there some changes to 3.11.1?

Best regards,
Sander
-- 
Federated Systems and Data
Juelich Supercomputing Centre

phone: +49 2461 61 8847
fax: +49 2461 61 6656
email: sa....@fz...

-----------------------------------------------------------------------
-----------------------------------------------------------------------
Forschungszentrum Juelich GmbH
52425 Juelich
Sitz der Gesellschaft: Juelich
Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498
Vorsitzender des Aufsichtsrats: MinDir Volker Rieke
Geschaeftsfuehrung: Prof. Dr.-Ing. Wolfgang Marquardt (Vorsitzender),
Karsten Beneke (stellv. Vorsitzender), Prof. Dr. Astrid Lambrecht,
Prof. Dr. Frauke Melchior
-----------------------------------------------------------------------
-----------------------------------------------------------------------

Re: [Unity-idm-discuss] error on scim editor

[Krzysztof B. <kb...@un...>]

Hi Sander,

W dniu 20.10.2022 o 11:33, Sander Apweiler pisze:
> Hi Krzysztof,
> while testing the SCIM API we got another error. When we open the
> configuration in console endpoint (Services -> SCIM REST API), a pop-up
> appears with "Please check the form for invalid and missing mandatory
> values". The log indicates a null pointer, but I do not get which
> mandatory value is missing. Following the manual
> unity.endpoint.scim.rootGroup is the only mandatory config. This is set
> in our config:
>
> cat modules/core/scim.properties
> unity.endpoint.scim.rootGroup=/
> unity.endpoint.scim.membershipGroups.1=groups
> unity.endpoint.scim.membershipAttributes.1=/

That's s small bug on our side. We have added one extra config option 
which was not marked as mandatory in configuration, while in code we 
assumed its presence.

It will be fixed in the next patch (this expected week), in that way 
that this extra option will be really optional.

As a workaround you can add

unity.endpoint.scim.|restAdminGroup=/some/group|

setting it to a group. Use an empty group if you don't want to give 
anyone capabilities to use the SCIM admin REST API (what would be 
equivalent to not setting the property in 3.11.2) .

HTH,
Krzysztof