authzforce/server Docker 镜像 - 轩辕镜像

AuthzForce Server CE - Minimal Docker image

This image of a minimal AuthzForce Server runtime is intended to work together with Identity Manager - Keyrock and PEP Proxy Wilma generic enabler.

Image contents

• OpenJDK JRE 11;
• Tomcat 9 (since AuthzForce Server v9.0.1, else Tomcat 8 for older versions);
• AuthzForce Server CE (version matching the Docker image tag).

Usage

This image gives you a minimal installation for testing purposes. The AuthzForce Installation and Administration guide on readthedocs.org (select the version matching the Docker image tag, then AuthzForce - Installation and Administration Guide) provides you a better approach for using it in a production environment. This installation guide also gives instructions to install from .deb package (instead of Docker), which is the recommended way for Ubuntu hosts.

Create a container using authzforce/server image by doing (replace the first 8080 after -p with whatever network port you want to use on the host to access the AuthzForce Server, e.g. 80; and release-11.0.0 with the current Docker image tag that you are using):

docker run -d -p 8080:8080 --name <container-name> fiware/authzforce-ce-server:release-11.0.0

As stands in the AuthzForce Installation and administration guide on readthedocs.org (select the version matching the Docker image tag, then AuthzForce - Installation and Administration Guide) you can:

• Create a domain

curl -s --request POST \
--header "Accept: application/xml" \
--header "Content-Type: application/xml;charset=UTF-8" \
--data '<?xml version="1.0" encoding="UTF-8"?><taz:domainProperties xmlns:taz="[***]" />' \
 http://<authzforce-container-ip>:8080/authzforce-ce/domains

• Retrieve the domain ID

curl -s --request GET http://<authzforce-container-ip>:8080/authzforce-ce/domains

• Domain removal

curl --verbose --request DELETE \
--header "Content-Type: application/xml;charset=UTF-8" \
--header "Accept: application/xml" \
http://<authzforce-container-ip>:8080/authzforce-ce/domains/<domain-id>

• User and Role Management Setup && Domain Role Assignment

These tasks are now delegated to the Identity Manager - Keyrock enabler. Here you can find how to use the interface for that purpose: How to manage AuthzForce in Fiware.

User feedback

Documentation

All the information regarding the Dockerfile is hosted publicly on Github.

Issues

If you find any issue with this image, feel free to report at Github issue tracking system.