[midPoint] midPoint Digest, Vol 150, Issue 14

[Vitor Alves | Efí]

Hi Yann Vernette!
This error occurs because you need to restore the midPoint Keystore, as it contains the encryption keys for user credentials. This is one of the only files that must be replicated for backup, apart from config.xml and other customizations.

Regards,
Vitor Alves

________________________________
De: midPoint <midpoint-bounces at lists.evolveum.com> em nome de midpoint-request at lists.evolveum.com <midpoint-request at lists.evolveum.com>
Enviado: sexta-feira, 25 de outubro de 2024 07:00
Para: midpoint at lists.evolveum.com <midpoint at lists.evolveum.com>
Assunto: midPoint Digest, Vol 150, Issue 14

Send midPoint mailing list submissions to
        midpoint at lists.evolveum.com

To subscribe or unsubscribe via the World Wide Web, visit
        https://lists.evolveum.com/mailman/listinfo/midpoint
or, via email, send a message with subject or body 'help' to
        midpoint-request at lists.evolveum.com

You can reach the person managing the list at
        midpoint-owner at lists.evolveum.com

When replying, please edit your Subject line so it is more specific
than "Re: Contents of midPoint digest..."


Today's Topics:

   1. backup and restore issue (Yann Vernette)


----------------------------------------------------------------------

Message: 1
Date: Thu, 24 Oct 2024 15:36:37 +0200 (CEST)
From: Yann Vernette <yann.vernette at grenoble-inp.fr>
To: midpoint at lists.evolveum.com
Subject: [midPoint] backup and restore issue
Message-ID:
        <1609586587.46039058.1729776997059.JavaMail.zimbra at grenoble-inp.fr>
Content-Type: text/plain; charset="iso-8859-1"

Hello,

On my computer, I have 2 instances of midPoint (4.8).

Each of them comes from a docker compose and are identical except for the server port to the host (8080 and 8081).

In production instance I have created an HR resource connected to .CSV file (from mP book sample) and done stuff to import and create person users in mP.

Before backup and restore operations, I can authenticate as administrator.

These instances reflect a two-environment architecture (pre-production and production).

I want to make a backup of the production instance and import it into the pre-production instance.

By making the archives of the data and home volumes of the production instance then placing them in the pre-production volumes I have the following result: By logging in as administrator on the pre-production instance, authentication fails.

The staging container logs indicate the following message :

midpoint_server-1 | 2024-10-24 12:57:54,780 [] [http-nio-8080-exec-9] ERROR (com.evolveum.midpoint.authentication.impl.evaluator.CredentialsAuthenticationE
valuatorImpl): Error dealing with credentials of user "administrator" credentials: No key mapped to key digest +DP8EV64FhbtyDpCpT5r21yI9/c= could be found i
n the keystore. Keys digests must be recomputed during initialization

The behavior is identical if I dump into the production container and then do psql -f in the pre-production container.

I specify that I did not modify the keystore.jceks file.

Is it a way to recompute keys digests during initialization ? Or I miss something else ?

Thanks for your help,
Best regards,

Yann

---
Yann Vernette
Concepteur - développeur / DSI - ADA (architecture - développements - applications)
Tél +33 (0)4 76 5 7 47 73
En télétravail mer. matin et vendredi
Mer. après-midi non travaillé
Grenoble INP - UGA
Institut d'ingénierie et de management / Graduate Schools of engineering and management
46 av. Félix Viallet - 38031 Grenoble | [ https://www.grenoble-inp.fr/ | https://www.grenoble-inp.fr ]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20241024/9032f9d8/attachment-0001.htm>

------------------------------

Subject: Digest Footer

_______________________________________________
midPoint mailing list
midPoint at lists.evolveum.com
https://lists.evolveum.com/mailman/listinfo/midpoint


------------------------------

End of midPoint Digest, Vol 150, Issue 14
*****************************************
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20241029/83b168fe/attachment.htm>