My Life at LSF (Lanka Software Foundation)

Setup guide: [ link ] At each change you may run the following bash file to on Unix environment for run the dockers. $ sh docker-up.sh OpenLDAP Add object classes We first have to add following object classes: [ link ] After when you have downloaded the ldif files setup them on a folder so that they can be copied in to ldap image we are building.[ link ] Observe here we do not use Dockerfile or docker-compose.yml to run ldap commands. This is because we cannot use the docker command 'RUN' for 'ldapadd' since the slapd service (ldap service name) need to be up and running first. So basic docker practice is using 'CMD' to run the command when the container is up. Yet having 'CMD' run will mess up openldap image developed by Osixia (so some reason I have not disclosed yet). For this I used a bash file to run the docker-compose and then execute commands on ldap container with given container name. Add Organizational Units Add Organizati...

So here I started developing 'docker-compose.yml' file from ground level. So I will end up with clean configuration. Previous to this I have built own 'WSO2-IS server docker image'. You may may find it on this [ link ]. Following is my Github repo for this full implementation. https://github.com/MrClemRkz/iam-with-wso2 Running WSO2 Identity Server As of the first commit [ link ]  I start off with docker-composer.yml file with just running the same image I had built previously. So when you are to run the file, make sure you have properly installed docker along with docker-compose.  Run the following command to create the wos2-is container up and running. $ docker-compose up -d Here observe the option '-d'. Since this means container is run detached to the running terminal, it won't show any of the IS output of logs on the terminal. There for either you wait a minute or two until the server is ready or run the command without option '-...

So before meddling with configuration, we can run Identity Server right on spot with downloaded zip file [ download ]. Prerequisites for the server is: Java 7 or 8  Let's first download the zip and run the server and make sure there's no failure in it. Unzip and goto folder on terminal and run  Unix $ sh bin/wso2server.sh Windows C:/> wso2server.sh Find the docker image for the sever to run. In this case I realized best to find the lowest possible capacity consuming docker with OS.  For this I have 3 options as below: ubuntu + java size on disk: 778MB Ubuntu 16.04 with Java 8 docker link oracle linux + java size on disk: 280MB Oracle Linux 7.5 with Java 8 docker link alpine + java size on disk: 126MB Apline 3.7.1 with Java 8 docker link Then we have to copy Identity Server files to selected image. At this stage I thought of going with ubuntu, since I have worked and tested on it successfully, and it is...

Tech Stack WSO2 Identity Server As IS (Identity Servers) there are two most popular ones as  WSO2 Identity Server Microsoft Identity Server We have chosen WSO2 IS with consideration to support and favourable architecture for our expected architecture. Where as several multiple authentication features comes in one package. OpenLDAP WOS2 IS usually comes with embedded LDAP with the system. Yet we need to maintain a user store (store with users data of a system) externally. OpenLDAP is a free, open source, lightweight Directory Access protocol to maintain user data. MySQL Community Edition Free, Open Source, Relational database for meta data storage. OpenID Connect Identity layer on top of the OAuth 2.0 protocol. Will be used as SSO for any service within the organization. Docker [Docker-Compose] (for the time being) Focus is to deploy on Kubernetes. Yet docker-compose will be used for the time being. Therefore required docker images and containers ...

What? I would rather call this my tech journal. So this is merely a tracker for reference. Why? Right when I joined LSF (Lanka Software Foundation) is was informed as we are to research on the work we are to start, better if we could maintain blogs. It has been 3 weeks, I have successfully started three articles on pop blog platform; Medium. Non of them are completed thus not published. Because any writer expects best start with a best ending with proper management of the content distribution within the article. (I guess reading that sentence even bore you out. LOL) However it is, I thought to myself, whatever I think or do, is important to be recorded, in free manner. Therefore here I go. What I am into.. Before I get to the bigger picture, let me start with what I am assigned to first. In simple terms it's platform for IAM (Identity Access Management) System for SL Government institutes.  (Of course whatever we build is free and open source, so can be used ...