digitaliceland / straumurinn Goto Github PK

In order to make things easier for the System Administrator that is setting up the Security Server it might be a good idea to share findings that help with that task.

The information in the guide doesn't seem to be correct.

Seems like the http proxy port is actually port 8080 and not 80?

Also, I have followed the guide and tried to set up the standalone security server in one Docker container (called secserv) with the ping-pong api endpoint served from a second container (pingserv) and the X-client running in a third container (xclient). All containers are named in such a way that they can resolve to one another via container name (this has been verified in each container)

The guide has been followed step by step but when it comes to querying the API through the security server, the following message appears:

 {"type":"Server.ClientProxy.NetworkError","message":"ss: Temporary failure in name resolution","detail":"32b18e23-c256-4824-830a-7af22a5b9f41"}

I then setup an additional REST service (TEST124) through the security service UI and this service references an external API:

https://api.hel.fi/kore/v1/

The setup has been tested via the following curl api call:

 curl -l -X GET 'http://secserv:8080/r1/CS/ORG/1111/TestService/TEST124/schools' -H 'accept: application/json' -H 'X-Road-Client:CS/ORG/1111/TestClient'

The same error message appears yet again:

 {"type":"Server.ClientProxy.NetworkError","message":"ss","detail":"9c89bd10-4004-4d16-88f8-dca36671679d"}

The API domain name api.hel.fi can be resolved in all containers and so I am not sure where the issue lies.

Something similar to this https://github.com/nordic-institute/X-Road/blob/develop/doc/Manuals/ig-ss_x-road_v6_security_server_installation_guide_for_rhel7.md

Perhaps it is best to reference to original documents in the X-Road repository.