RUB-NDS / PrOfESSOS

PrOfESSOS is our open source implementation for fully automated Evaluation-as-a-Service for SSO. PrOfESSOS introduces a generic approach to improve the security of OpenID Connect implementations by systematically detecting vulnerabilities.
28 stars 14 forks source link

unable to access web config page after successful deployment #8

Open MukundKMallar opened 6 years ago

MukundKMallar commented 6 years ago

I did a deployment on glassfish but now am Unable to access web configuration. I see the demo server is also not functioning for reference. I can access the admin console on 4848 without issues but unable to get the configuration page. Ports are configured fine, see 8080 , 4848 , 8181 available and listening on the container and mapped them to host server too.

Please assist.

plokta commented 6 years ago

Not sure I completely follow your issue, so here is some general advice.

The demo OIDC client, although its hostname is currently hardcoded in PrOfESSOS, is not included as a part of this repo. https://github.com/mitreid-connect/simple-web-app can be used as demo SP when configured to make use of dynamic client configuration. Currently, PrOfESSOS expects the demo SP to be available at http://www.honestsp.de:8080/simple-web-app/login.

We hope to be able to add detailed setup instructions and a functional Dockerfile soon(ish).

MukundKMallar commented 6 years ago

So i add a file glassfish-web.xml under applications/professos-1.0.0-SNAPSHOT/WEB-INF alongside web.xml and set delegation to false. Nothing better, but now atleast i get "HTTP Status 404 - Not Found" while accessing http://domain:8080/professos/rp-verifier.html

My web.xml file under WEB-INF just has one entry with display-name OpenID Verifier. is there suppose to be more for this to work?

MukundKMallar commented 6 years ago

Any comments, please?

mladevbb commented 6 years ago

Sorry for the late answer. We found some bugs regarding the deployment and fixed these already. Currently, we test the web application. The next days we can publish a docker image with a working example and pre-configured environment. I think, this will help you a lot with the current issues.

plokta commented 5 years ago

I've added a temporary setup guide to the wiki. We are currently working on a more convenient deployment process and will hopefully be able to release some updates soon. I'll leave this issue open for reference until then.