...
Code Block |
---|
language | text |
---|
theme | RDarkDefault |
---|
title | Listing 2. Generate SAML SP identity and metadata (in Windows use '\' instead of '/') |
---|
|
ubilogin-sso> java/bin/java -jar ubilogin/webapps/password/WEB-INF/lib/ubisaml2.jar Generate https://idp.example.com/password/spsso -y -o ubilogin/webapps/password/WEB-INF/saml2/sp
ubilogin-sso> java/bin/java -jar ubilogin/webapps/password/WEB-INF/lib/ubisaml2.jar Metadata ubilogin/webapps/password/WEB-INF/saml2/sp -f password.xml |
...
Ubisecure Password uses email when performing the password reset functionality. Mail settings need to be configured to the ubilogin-sso/ubilogin/webapps/password/WEB-INF/web.xml
file. Uncomment the context-param elements that contain mail.smtp.host and mail.smtp.from param-names. Edit the param-values according to your environment.
Code Block |
---|
language | text | theme | RDark |
---|
title | Listing 3. Excerpt from ubilogin-sso/ubilogin/webapps/password/WEB-INF/web.xml |
---|
|
<context-param>
<param-name>mail.smtp.host</param-name>
<param-value>smtp-gw.example.com</param-value>
</context-param>
<context-param>
<param-name>mail.smtp.from</param-name>
<param-value>password@example.com</param-value>
</context-param> |
...
Remove the file ubilogin-sso/tomcat/conf/Ubilogin/idp.example.com/password.xml
. Then run update the update:
Code Block |
---|
language | text |
---|
theme | RDark |
---|
title | Listing 4. Update Ubisecure Server in Windows |
---|
|
C:\Program Files\Ubisecure\ubilogin-sso\ubilogin> config\tomcat\update.cmd |
Code Block |
---|
language | text |
---|
theme | RDark |
---|
title | Listing 5. Update Ubisecure Server in Linux |
---|
|
/usr/local/ubisecure/ubilogin-sso/ubilogin# /etc/init.d/ubilogin-server stop
/usr/local/ubisecure/ubilogin-sso/ubilogin# ./config/tomcat/update.sh
/usr/local/ubisecure/ubilogin-sso/ubilogin# /etc/init.d/ubilogin-server start |
...
All user interface text, including text used in emails sent to users are configured in the resource files of the application using a text editor. The keys are self-explanatory and default texts are provided.
Code Block |
---|
language | text |
---|
theme | RDark |
---|
title | Listing 6. User interface and email message customization for Password application |
---|
|
ubilogin\webapps\password\WEB-INF\classes\resources_en.properties
ubilogin\webapps\password\WEB-INF\classes\resources_fi.properties
ubilogin\webapps\password\WEB-INF\classes\resources_sv.properties |
...
Code Block |
---|
language | text |
---|
theme | RDarkDefault |
---|
title | Listing 7. Update Ubisecure Server in Windows |
---|
|
C:\Program Files\Ubisecure\ubilogin-sso\ubilogin> config\tomcat\update.cmd |
...
Code Block |
---|
language | text |
---|
theme | RDarkDefault |
---|
title | Listing 8. Update Ubisecure Server in Linux |
---|
|
/usr/local/ubisecure/ubilogin-sso/ubilogin# /etc/init.d/ubilogin-server stop
/usr/local/ubisecure/ubilogin-sso/ubilogin# ./config/tomcat/update.sh
/usr/local/ubisecure/ubilogin-sso/ubilogin# /etc/init.d/ubilogin-server start |
...
Code Block |
---|
language | text |
---|
theme | RDarkDefault |
---|
|
https://idp.example.com/password/change?locale=fi |
...
Code Block |
---|
language | text |
---|
theme | RDarkDefault |
---|
|
https://idp.example.com/password/reset?method=password.ad.1&locale=fi |
Links can be added to the Ubisecure SSO user interface using the *LINKS settings described in the Login UI customization - SSO UI Customizationdocumentation.
Password Application Audit Log
...
Code Block |
---|
language | text |
---|
theme | RDarkDefault |
---|
|
ubilogin/tomcat/log/locahost.YYYY-MM-DD.log |
...
Code Block |
---|
language | text |
---|
theme | RDarkDefault |
---|
title | Listing 9. Password change/reset audit log example |
---|
|
INFO: [INFO] Audit
2012-02-23T13:29:36.191Z [195.197.211.20] mail-fail 23423
reset.account.not-found
23.2.2012 15:29:47
org.apache.catalina.core.ApplicationContext log
INFO: [INFO] Audit
2012-02-23T13:29:47.574Z [195.197.211.20] mail-fail CN=Keith
Uber,OU=Users,OU=Ubisecure,OU=Production,CN=Ubilogin,DC=demo,DC=ubisecure,DC=com
reset.mail.invalid
23.2.2012 15:29:57
org.apache.catalina.core.ApplicationContext log
INFO: [INFO] Audit
2012-02-23T13:29:56.596Z [195.197.211.20] mail-sent CN=Keith
Uber,OU=Users,OU=Ubisecure,OU=Production,CN=Ubilogin,DC=demo,DC=ubisecure,DC=com
keith.uber@ubisecure.com
23.2.2012 15:34:11
org.apache.catalina.core.ApplicationContext log
INFO: [INFO] Audit
2012-02-23T13:34:11.083Z [195.197.211.20] reset-success CN=Keith
Uber,OU=Users,OU=Ubisecure,OU=Production,CN=Ubilogin,DC=demo,DC=ubisecure,DC=com |