<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Hi Yann Vernette!<br>
This error occurs because you need to restore the midPoint Keystore, as it contains the encryption keys for user credentials. This is one of the only files that must be replicated for backup, apart from config.xml and other customizations.</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Regards,</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Vitor Alves</div>
<div id="appendonsend"></div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<hr style="display: inline-block; width: 98%;">
<div id="divRplyFwdMsg" dir="ltr"><span style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"><b>De:</b> midPoint <midpoint-bounces@lists.evolveum.com> em nome de midpoint-request@lists.evolveum.com <midpoint-request@lists.evolveum.com><br>
<b>Enviado:</b> sexta-feira, 25 de outubro de 2024 07:00<br>
<b>Para:</b> midpoint@lists.evolveum.com <midpoint@lists.evolveum.com><br>
<b>Assunto:</b> midPoint Digest, Vol 150, Issue 14</span>
<div> </div>
</div>
<div style="font-size: 11pt;">Send midPoint mailing list submissions to<br>
midpoint@lists.evolveum.com<br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://lists.evolveum.com/mailman/listinfo/midpoint" id="OWAe1f9b156-595f-bfd5-2c3f-5d5d9ea962b1" class="OWAAutoLink" data-auth="NotApplicable">
https://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
or, via email, send a message with subject or body 'help' to<br>
midpoint-request@lists.evolveum.com<br>
<br>
You can reach the person managing the list at<br>
midpoint-owner@lists.evolveum.com<br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of midPoint digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. backup and restore issue (Yann Vernette)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Thu, 24 Oct 2024 15:36:37 +0200 (CEST)<br>
From: Yann Vernette <yann.vernette@grenoble-inp.fr><br>
To: midpoint@lists.evolveum.com<br>
Subject: [midPoint] backup and restore issue<br>
Message-ID:<br>
<1609586587.46039058.1729776997059.JavaMail.zimbra@grenoble-inp.fr><br>
Content-Type: text/plain; charset="iso-8859-1"<br>
<br>
Hello,<br>
<br>
On my computer, I have 2 instances of midPoint (4.8).<br>
<br>
Each of them comes from a docker compose and are identical except for the server port to the host (8080 and 8081).<br>
<br>
In production instance I have created an HR resource connected to .CSV file (from mP book sample) and done stuff to import and create person users in mP.<br>
<br>
Before backup and restore operations, I can authenticate as administrator.<br>
<br>
These instances reflect a two-environment architecture (pre-production and production).<br>
<br>
I want to make a backup of the production instance and import it into the pre-production instance.<br>
<br>
By making the archives of the data and home volumes of the production instance then placing them in the pre-production volumes I have the following result: By logging in as administrator on the pre-production instance, authentication fails.<br>
<br>
The staging container logs indicate the following message :<br>
<br>
midpoint_server-1 | 2024-10-24 12:57:54,780 [] [http-nio-8080-exec-9] ERROR (com.evolveum.midpoint.authentication.impl.evaluator.CredentialsAuthenticationE<br>
valuatorImpl): Error dealing with credentials of user "administrator" credentials: No key mapped to key digest +DP8EV64FhbtyDpCpT5r21yI9/c= could be found i<br>
n the keystore. Keys digests must be recomputed during initialization<br>
<br>
The behavior is identical if I dump into the production container and then do psql -f in the pre-production container.<br>
<br>
I specify that I did not modify the keystore.jceks file.<br>
<br>
Is it a way to recompute keys digests during initialization ? Or I miss something else ?<br>
<br>
Thanks for your help,<br>
Best regards,<br>
<br>
Yann<br>
<br>
---<br>
Yann Vernette<br>
Concepteur - développeur / DSI - ADA (architecture - développements - applications)<br>
Tél +33 (0)4 76 5 7 47 73<br>
En télétravail mer. matin et vendredi<br>
Mer. après-midi non travaillé<br>
Grenoble INP - UGA<br>
Institut d'ingénierie et de management / Graduate Schools of engineering and management<br>
46 av. Félix Viallet - 38031 Grenoble | [ <a href="https://www.grenoble-inp.fr/" id="OWA8b5e2467-c4b5-c9bb-ca30-59c59e3b1d54" class="OWAAutoLink" data-auth="NotApplicable">
https://www.grenoble-inp.fr/</a> | <a href="https://www.grenoble-inp.fr" id="OWA1a74521f-d611-b2fa-69a2-d6c2f66ea41c" class="OWAAutoLink" data-auth="NotApplicable">
https://www.grenoble-inp.fr</a> ]<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="https://lists.evolveum.com/pipermail/midpoint/attachments/20241024/9032f9d8/attachment-0001.htm" id="OWAd955094c-2691-722b-bb16-2c5bd03de350" class="OWAAutoLink" data-auth="NotApplicable">https://lists.evolveum.com/pipermail/midpoint/attachments/20241024/9032f9d8/attachment-0001.htm</a>><br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
_______________________________________________<br>
midPoint mailing list<br>
midPoint@lists.evolveum.com<br>
<a href="https://lists.evolveum.com/mailman/listinfo/midpoint" id="OWA53e05ffe-3de5-8c0a-d1ad-0f66c88e3a62" class="OWAAutoLink" data-auth="NotApplicable">https://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
<br>
------------------------------<br>
<br>
End of midPoint Digest, Vol 150, Issue 14<br>
*****************************************</div>
</body>
</html>