Identity Server 5 "error while loading user profile metadata" - active-directory

I've installed WSO2 Identity Server 5.0 and have configured a secondary user store with Active Directory. It is able to pull in users as I can see them under Users and Roles. However when I click on a users' profile the Identity Server comes back with "Error while loading user profile metadata".
Any ideas?

Have you made any changes in the <IS_HOME>/repository/conf/claim-config.xml or the <IS_HOME>/repository/deployment/server/userstores/<userstore_domain_name>.xml ?
If so please double check if there are any invalid characters in it.
This is possible in the scenario where invalid characters are present.

Related

can we load codeigniter application by keeping database.php credentials blank?

In our application, every user have it's own schema. So what I am doing is creating subdomain for every user. so every user will have unique subdomain.
whenever user try to login with their subdomain url, i will identify subdomain and based on subdomain, i will fetch the database and will do the database accordingly on the way and store in session.
to do this, i am keeping database.php credentails blank.
but problem is that auth doesn't load and it say that can't connect to database.
how can i do it ?
A Database Error Occurred
Unable to connect to your database server using the provided settings.
Filename: controllers/Auth.php
Line Number: 14

I get the error "no mapping between user and security ids was done" when I try to deploy a cube

When I try to deploy my SQL Server Analysis Services project to the server, I get the error message No mapping between user and security ids was done. I don't get where this is coming from!
I've checked the user credentials on the Data Source. I've previously deployed projects to the same server with the same credentials with no problems.
When I google this problem, I get a lot of hits for things to do with Active Directory, but nothing that directly links to SSAS. Where does this error spring from?
This error occurs when there are users defined in a role that are either not known to the server (i.e. a local account on the machine the project was designed on) or no longer available in the Active Directory. To solve this:
Open the cube in BIDS / Visual Studio
Go to the Roles node in the Solution Explorer
Per role, go to the tab "memberships"
Per member defined, check to see if that member still exists in the AD.
In my experience, it's advisable not to use local users in Roles, nor personal accounts. Instead, grant the rights to a role to a group, then add and remove users to that group in the Active Directory as needed.

SQL - Server always encrypted not workings with applicationpoolidentity

I have a web application that read and write from/to database and I use with always encrypted.
When I tried my web application in my local device(where I developed the site) it's work perfect but when I created web site in the server it's can't read from the database because my application doesn't found the CEK(the public key cert).
In the server I created a new database and do the always encrypted, and add the applicationpoolidentity to my database with the following steps:
Add login account IIS APPPOOL\name applicationpoolidentity.
Add the login as user in the relevant database.
I search a lot for solution but nothing work.
For example:
Create new windows user connect to database with SQL Server in
Single-User Mode : I saw that solution will be problematic.
Add name application pool identity as login windows auth in the
SQL-Server but not working. Who can i connect with application pool
identity as login to SQL-Server?
I gave up, I need help :)
OK, after many searches for a soulotion I found one.
Untill now I created always with Current User Certificate Stores and because of that I can't use with the cert in all users.
So I generate new certificate in Local Machine Certificate Stores
and add the application pool identity to the cert permissions with the following steps:
run mmc.
Click Certificates -> right click on the specific cert -> all task -> manage private key -> click add -> enter the name application pool identity to the textbox -> click ok -> check v on read permission and click ok.
Now the always encrypted work perfect.

How to get registration data from a portlet/jsp

Where does WebSphere Portal 8.5 store user registration data that is entered through sign up form? I.e. user id, password, first, last name, email etc.
WebSphere Portal doesn't store any user info on its own.
It uses PUMA and VMM to talk to users store registry. See more here http://www-01.ibm.com/support/knowledgecenter/SSHRKX_8.0.0/plan/plan_vmm_int.dita.
Guess you can look at http://public.dhe.ibm.com/software/dw/websphere/PUMA_scenarios.pdf to figure out how you can retrieve user information from the user registry.
This data is stored in PUMA.
In the WAS console, you will be able to view the LDAP configurations.
Login to the WAS console and go to Security > Global security > Federated repositories > Manage repositories > PortalLdap
Under LDAP server, the "Primary Host Name" will show the server where PUMA is configured.

MVC 4 Login and Policy on different DataBase

I'm trying to find a tutorial or help for solve this scenario.
In my MVC 4 application I want to have a Database where I store login information (username, password, connection strings ).
When User Login success, I want to open database with connection string stored in User Table, and get the policy from specific database (this database also contains the application data).
This means that a user can access to multiple database, and have different policy on every database.
Administrator can create a new user on Login Database, associate user with databases, and set policies for every Database.
Someone can help me or know a tutorial for doing that.
Thanks

Resources