openidentityplatform / openidm

OpenIDM is an open standards based Identity Management, Provisioning and Compliance solution. Experience shows that the most important features of an identity management product are: high flexibility in Business Process handling and compliance with open standards and interfaces. A highly flexible user interface combined with a very robust workflow engine make OpenIDM ready for any Identity Management project.

OpenIDM enables you to consolidate multiple identity sources for policy and workflow-based management. OpenIDM can consume, transform and feed data to external sources so that you maintain control over the identities of users, devices and other objects.

OpenIDM provides a modern UI experience that allows you to manage your data without writing a single line of code. The standard RESTful interfaces also offer ultimate flexibility so that you can customize and develop the product to fit the requirements of your deployment.

License

This project is licensed under the Common Development and Distribution License (CDDL).

Downloads

• OpenIDM ZIP
• OpenIDM Docker (All OS)

Java 1.8+ required

How-to build

For windows use:

git config --system core.longpaths true

git clone --recursive  https://github.com/OpenIdentityPlatform/OpenIDM.git
mvn install -f OpenIDM

How-to run after build

unzip OpenIDM/openidm-zip/target/openidm-*.zip
./opendm/startup.sh

Wait for the message OpenIDM ready and go:

• User self service UI: http://localhost:8080/ (openidm-admin/openidm-admin)
• Admin UI: http://localhost:8080/admin/ (openidm-admin/openidm-admin)
• Apache Felix UI: http://localhost:8080/system/console/ (admin/admin)

Support and Mailing List Information

• OpenIDM Community documentation
• OpenIDM Community discussions
• OpenIDM Community issues
• OpenIDM Community commercial support

Contributing

Please, make Pull request

Thanks 🥰

• Sun Identity Manager / OpenIDM
• Forgerock OpenIDM

openidm's Issues

Dont work junit test in UI

OpenIDM/openidm-ui/pom.xml

Line 88 in c3f3257

<arguments>${grunt.task} --target-version=${project.version} --debug --backtrace --verbose --force</arguments>

ubuntu

[INFO] >> PhantomJS timed out, possibly due to a missing QUnit start() call.
[INFO] Warning: 1/1 assertions failed (0ms)� Used --force, continuing.

mac os

[INFO] [D] Task source: /Users/runner/work/OpenIDM/OpenIDM/openidm-ui/openidm-ui-admin/node_modules/grunt-contrib-qunit/tasks/qunit.js
[INFO] Testing target/qunit/index.html [D] ["/Users/runner/work/OpenIDM/OpenIDM/openidm-ui/openidm-ui-admin/node_modules/grunt-lib-phantomjs/phantomjs/main.js","/var/folders/24/8k48jl6d249_n_qfxwsl6xvm0000gn/T/1713964933964.8005","target/qunit/index.html","{\"timeout\":5000,\"inject\":\"/Users/runner/work/OpenIDM/OpenIDM/openidm-ui/openidm-ui-admin/node_modules/grunt-contrib-qunit/phantomjs/bridge.js\",\"urls\":[],\"force\":false}"]
[INFO] Warning: spawn Unknown system error -86� Used --force, continuing.

Admin-Password cannot be changed via self-service ui

Describe the bug
You cannot change the openidm-admin password via the ui. If you try, you encounter an error on the ui and the console throws an Exception.

To Reproduce
Steps to reproduce the behavior:

1. logon to http://domain.tld:8080/auth with openidm-admin:openidm-admin
2. Click on 'MENU-->SELF-SERVICE'
3. Click on 'MENU-->CHANGE PASSWORD'
4. Enter a new password and click on "UPDATE
5. Get an error message.

Further, the console gives the following exception:
Resource exception: 500 Internal Server Error: "ReferenceError: "openidm" is not defined. (file:/opt/openidm/bin/defaults/script/crypto.js#31) in file:/opt/openidm/bin/defaults/script/crypto.js at line number 31 at column number 0" org.forgerock.json.resource.InternalServerErrorException: ReferenceError: "openidm" is not defined. (file:/opt/openidm/bin/defaults/script/crypto.js#31) in file:/opt/openidm/bin/defaults/script/crypto.js at line number 31 at column number 0 at org.forgerock.json.resource.ResourceException.newResourceException(ResourceException.java:239) at org.forgerock.json.resource.ResourceException.getException(ResourceException.java:330) at org.forgerock.script.engine.Utils.adapt(Utils.java:261) at org.forgerock.openidm.filter.ScriptedFilter.evalScript(ScriptedFilter.java:325) at org.forgerock.openidm.filter.ScriptedFilter.evaluateOnRequest(ScriptedFilter.java:230) at org.forgerock.openidm.filter.ScriptedFilter.filterRequest(ScriptedFilter.java:190) at org.forgerock.openidm.filter.ScriptedFilter.filterUpdate(ScriptedFilter.java:148) at org.forgerock.json.resource.Filters$ConditionalFilter.filterUpdate(Filters.java:110) at org.forgerock.json.resource.FilterChain$Cursor.handleUpdate(FilterChain.java:121) at org.forgerock.openidm.filter.ScriptedFilter$6.apply(ScriptedFilter.java:152) at org.forgerock.openidm.filter.ScriptedFilter$6.apply(ScriptedFilter.java:149) at org.forgerock.util.promise.Promises$CompletedPromise.thenAsync(Promises.java:255) at org.forgerock.util.promise.Promises$CompletedPromise.thenAsync(Promises.java:244) at org.forgerock.util.promise.Promises$CompletedPromise.thenAsync(Promises.java:223) at org.forgerock.openidm.filter.ScriptedFilter.filterRequest(ScriptedFilter.java:192) at org.forgerock.openidm.filter.ScriptedFilter.filterUpdate(ScriptedFilter.java:148) at org.forgerock.json.resource.Filters$ConditionalFilter.filterUpdate(Filters.java:110) at org.forgerock.json.resource.FilterChain$Cursor.handleUpdate(FilterChain.java:121) at org.forgerock.openidm.filter.ScriptedFilter$6.apply(ScriptedFilter.java:152) at org.forgerock.openidm.filter.ScriptedFilter$6.apply(ScriptedFilter.java:149) at org.forgerock.util.promise.Promises$CompletedPromise.thenAsync(Promises.java:255) at org.forgerock.util.promise.Promises$CompletedPromise.thenAsync(Promises.java:244) at org.forgerock.util.promise.Promises$CompletedPromise.thenAsync(Promises.java:223) at org.forgerock.openidm.filter.ScriptedFilter.filterRequest(ScriptedFilter.java:192) at org.forgerock.openidm.filter.ScriptedFilter.filterUpdate(ScriptedFilter.java:148) at org.forgerock.json.resource.Filters$ConditionalFilter.filterUpdate(Filters.java:110) at org.forgerock.json.resource.FilterChain$Cursor.handleUpdate(FilterChain.java:121) at org.forgerock.openidm.audit.filter.AuditFilter$7.apply(AuditFilter.java:230) at org.forgerock.openidm.audit.filter.AuditFilter$7.apply(AuditFilter.java:227) at org.forgerock.util.promise.Promises$CompletedPromise.thenAsync(Promises.java:255) at org.forgerock.util.promise.Promises$CompletedPromise.thenAsync(Promises.java:244) at org.forgerock.util.promise.Promises$CompletedPromise.thenAsync(Promises.java:223) at org.forgerock.openidm.audit.filter.AuditFilter.logAuditAccessEntry(AuditFilter.java:255) at org.forgerock.openidm.audit.filter.AuditFilter.filterUpdate(AuditFilter.java:226) at org.forgerock.openidm.filter.MutableFilterDecorator.filterUpdate(MutableFilterDecorator.java:110) at org.forgerock.json.resource.Filters$ConditionalFilter.filterUpdate(Filters.java:110) at org.forgerock.json.resource.FilterChain$Cursor.handleUpdate(FilterChain.java:121) at org.forgerock.openidm.servlet.internal.ServletConnectionFactory$4.filterUpdate(ServletConnectionFactory.java:489) at org.forgerock.json.resource.FilterChain$Cursor.handleUpdate(FilterChain.java:121) at org.forgerock.openidm.filter.PassthroughFilter.filterUpdate(PassthroughFilter.java:86) at org.forgerock.openidm.filter.MutableFilterDecorator.filterUpdate(MutableFilterDecorator.java:110) at org.forgerock.json.resource.FilterChain$Cursor.handleUpdate(FilterChain.java:121) at org.forgerock.openidm.filter.PassthroughFilter.filterUpdate(PassthroughFilter.java:86) at org.forgerock.openidm.filter.MutableFilterDecorator.filterUpdate(MutableFilterDecorator.java:110) at org.forgerock.json.resource.FilterChain$Cursor.handleUpdate(FilterChain.java:121) at org.forgerock.json.resource.FilterChain.handleUpdate(FilterChain.java:266) at org.forgerock.json.resource.InternalConnection.updateAsync(InternalConnection.java:100) at org.forgerock.json.resource.AbstractConnectionWrapper.updateAsync(AbstractConnectionWrapper.java:229) at org.forgerock.openidm.servlet.internal.ServletConnectionFactory$1$1.updateAsync(ServletConnectionFactory.java:275) at org.forgerock.json.resource.http.RequestRunner.visitUpdateRequest(RequestRunner.java:352) at org.forgerock.json.resource.http.RequestRunner.visitUpdateRequest(RequestRunner.java:93) at org.forgerock.json.resource.Requests$UpdateRequestImpl.accept(Requests.java:622) at org.forgerock.json.resource.http.RequestRunner.handleResult(RequestRunner.java:139) at org.forgerock.json.resource.http.HttpAdapter$1.apply(HttpAdapter.java:711) at org.forgerock.json.resource.http.HttpAdapter$1.apply(HttpAdapter.java:708) at org.forgerock.util.promise.Promises$CompletedPromise.thenAsync(Promises.java:255) at org.forgerock.util.promise.Promises$CompletedPromise.thenAsync(Promises.java:244) at org.forgerock.json.resource.http.HttpAdapter.doRequest(HttpAdapter.java:708) at org.forgerock.json.resource.http.HttpAdapter.doUpdate(HttpAdapter.java:653) at org.forgerock.json.resource.http.HttpAdapter.handle(HttpAdapter.java:270) at org.forgerock.http.handler.Handlers$HandlerDescribableAsDescribableHandler.handle(Handlers.java:154) at org.forgerock.http.filter.OptionsFilter.filter(OptionsFilter.java:77) at org.forgerock.http.handler.Handlers$1.handle(Handlers.java:61) at org.forgerock.http.swagger.OpenApiRequestFilter.filter(OpenApiRequestFilter.java:69) at org.forgerock.http.handler.Handlers$1.handle(Handlers.java:61) at org.forgerock.caf.authentication.framework.AuthenticationFramework.grantAccess(AuthenticationFramework.java:220) at org.forgerock.caf.authentication.framework.AuthenticationFramework.access$400(AuthenticationFramework.java:65) at org.forgerock.caf.authentication.framework.AuthenticationFramework$3.apply(AuthenticationFramework.java:212) at org.forgerock.caf.authentication.framework.AuthenticationFramework$3.apply(AuthenticationFramework.java:205) at org.forgerock.util.promise.Promises$CompletedPromise.thenAsync(Promises.java:255) at org.forgerock.util.promise.Promises$CompletedPromise.thenAsync(Promises.java:244) at org.forgerock.caf.authentication.framework.AuthenticationFramework.validateRequest(AuthenticationFramework.java:170) at org.forgerock.caf.authentication.framework.AuthenticationFramework.access$100(AuthenticationFramework.java:65) at org.forgerock.caf.authentication.framework.AuthenticationFramework$1.apply(AuthenticationFramework.java:155) at org.forgerock.caf.authentication.framework.AuthenticationFramework$1.apply(AuthenticationFramework.java:152) at org.forgerock.util.promise.PromiseImpl$7.handleStateChange(PromiseImpl.java:485) at org.forgerock.util.promise.PromiseImpl.handleCompletion(PromiseImpl.java:567) at org.forgerock.util.promise.PromiseImpl.addOrFireListener(PromiseImpl.java:555) at org.forgerock.util.promise.PromiseImpl.thenAsync(PromiseImpl.java:477) at org.forgerock.util.promise.PromiseImpl.thenAsync(PromiseImpl.java:468) at org.forgerock.caf.authentication.framework.AuthenticationFramework.processMessage(AuthenticationFramework.java:147) at org.forgerock.caf.authentication.framework.AuthenticationFilter.filter(AuthenticationFilter.java:96) at org.forgerock.openidm.auth.AuthFilterWrapper.filter(AuthFilterWrapper.java:90) at org.forgerock.http.handler.Handlers$1.handle(Handlers.java:61) at org.forgerock.http.filter.TransactionIdInboundFilter.filter(TransactionIdInboundFilter.java:60) at org.forgerock.http.handler.Handlers$1.handle(Handlers.java:61) at org.forgerock.http.servlet.HttpFrameworkServlet.service(HttpFrameworkServlet.java:237) at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:812) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1669) at org.eclipse.jetty.servlets.UserAgentFilter.doFilter(UserAgentFilter.java:83) at org.eclipse.jetty.servlets.GzipFilter.doFilter(GzipFilter.java:301) at sun.reflect.GeneratedMethodAccessor66.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.forgerock.openidm.servletregistration.impl.ServletRegistrationSingleton$FilterProxy.invoke(ServletRegistrationSingleton.java:299) at com.sun.proxy.$Proxy39.doFilter(Unknown Source) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1652) at org.eclipse.jetty.servlets.CrossOriginFilter.handle(CrossOriginFilter.java:257) at org.eclipse.jetty.servlets.CrossOriginFilter.doFilter(CrossOriginFilter.java:220) at sun.reflect.GeneratedMethodAccessor66.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.forgerock.openidm.servletregistration.impl.ServletRegistrationSingleton$FilterProxy.invoke(ServletRegistrationSingleton.java:299) at com.sun.proxy.$Proxy39.doFilter(Unknown Source) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1652) at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:585) at org.ops4j.pax.web.service.jetty.internal.HttpServiceServletHandler.doHandle(HttpServiceServletHandler.java:72) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143) at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:577) at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:223) at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1127) at org.ops4j.pax.web.service.jetty.internal.HttpServiceContext.doHandle(HttpServiceContext.java:287) at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:515) at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:185) at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1061) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141) at org.ops4j.pax.web.service.jetty.internal.JettyServerHandlerCollection.handle(JettyServerHandlerCollection.java:80) at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:97) at org.eclipse.jetty.server.Server.handle(Server.java:499) at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:311) at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:258) at org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:544) at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:635) at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:555) at java.lang.Thread.run(Thread.java:748) Caused by: javax.script.ScriptException: ReferenceError: "openidm" is not defined. (file:/opt/openidm/bin/defaults/script/crypto.js#31) in file:/opt/openidm/bin/defaults/script/crypto.js at line number 31 at column number 0 at org.forgerock.script.javascript.RhinoScript.eval(RhinoScript.java:342) at sun.reflect.GeneratedMethodAccessor67.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.forgerock.script.registry.ScriptRegistryImpl$LibraryRecord.invoke(ScriptRegistryImpl.java:505) at com.sun.proxy.$Proxy23.eval(Unknown Source) at org.forgerock.script.registry.ScriptRegistryImpl$ScriptImpl.eval(ScriptRegistryImpl.java:741) at org.forgerock.script.registry.ScriptRegistryImpl$ScriptImpl.eval(ScriptRegistryImpl.java:752) at org.forgerock.openidm.filter.ScriptedFilter.evalScript(ScriptedFilter.java:322) ... 122 more Caused by: org.mozilla.javascript.EcmaError: ReferenceError: "openidm" is not defined. (file:/opt/openidm/bin/defaults/script/crypto.js#31) at org.mozilla.javascript.ScriptRuntime.constructError(ScriptRuntime.java:3687) at org.mozilla.javascript.ScriptRuntime.constructError(ScriptRuntime.java:3665) at org.mozilla.javascript.ScriptRuntime.notFoundError(ScriptRuntime.java:3750) at org.mozilla.javascript.ScriptRuntime.nameOrFunction(ScriptRuntime.java:1794) at org.mozilla.javascript.ScriptRuntime.name(ScriptRuntime.java:1733) at org.mozilla.javascript.gen.file__opt_openidm_bin_defaults_script_crypto_js_63._c_anonymous_2(file:/opt/openidm/bin/defaults/script/crypto.js:31) at org.mozilla.javascript.gen.file__opt_openidm_bin_defaults_script_crypto_js_63.call(file:/opt/openidm/bin/defaults/script/crypto.js) at org.mozilla.javascript.optimizer.OptRuntime.callName(OptRuntime.java:63) at org.mozilla.javascript.gen.file__opt_openidm_bin_defaults_script_crypto_js_63._c_anonymous_4(file:/opt/openidm/bin/defaults/script/crypto.js:48) at org.mozilla.javascript.gen.file__opt_openidm_bin_defaults_script_crypto_js_63.call(file:/opt/openidm/bin/defaults/script/crypto.js) at org.mozilla.javascript.optimizer.OptRuntime.call1(OptRuntime.java:32) at org.mozilla.javascript.gen._633C5C3E15065BF2D4D3AD9ECD72A57AFF2D8258_57._c_script_0(633C5C3E15065BF2D4D3AD9ECD72A57AFF2D8258:1) at org.mozilla.javascript.gen._633C5C3E15065BF2D4D3AD9ECD72A57AFF2D8258_57.call(633C5C3E15065BF2D4D3AD9ECD72A57AFF2D8258) at org.mozilla.javascript.ContextFactory.doTopCall(ContextFactory.java:394) at org.mozilla.javascript.ScriptRuntime.doTopCall(ScriptRuntime.java:3091) at org.mozilla.javascript.gen._633C5C3E15065BF2D4D3AD9ECD72A57AFF2D8258_57.call(633C5C3E15065BF2D4D3AD9ECD72A57AFF2D8258) at org.mozilla.javascript.gen._633C5C3E15065BF2D4D3AD9ECD72A57AFF2D8258_57.exec(633C5C3E15065BF2D4D3AD9ECD72A57AFF2D8258) at org.forgerock.script.javascript.RhinoScript.eval(RhinoScript.java:316) ... 130 more

Versions tested:

• openidm 5.5.0 with openjdk8. Above error occurs
• openidm 4.0.0 with openjdk8. NO error, the process works as indended.

OpenID 4.5

this is a general question and not a bug. In the releases list I see version 4.0 and then 5.5, how can I get the OpenIDM 4.5?

Thx

OpenIDM can't create managed user: "openidm" (object) is not defined (e.g. openidm.create(...) )

Describe the bug
Upon trying to create a new managed user with the "out of the box" OpenIDM 5.5.0, the openidm0.log.0 shows this error:
Jul 23, 2020 11:16:13 PM org.forgerock.openidm.servlet.internal.ServletConnectionFactory$3 handleException
WARNING: Resource exception: 500 Internal Server Error: "onCreate script encountered exception"
org.forgerock.json.resource.InternalServerErrorException: onCreate script encountered exception
...
Caused by: javax.script.ScriptException: ReferenceError: "openidm" is not defined. (file:/abs/openidm/bin/defaults/script/roles/relationshipHelper.js#80) in file:/abs/openidm/bin/defaults/script/roles/relationshipHelper.js at line number 80 at column number 0
at org.forgerock.script.javascript.RhinoScript.eval(RhinoScript.java:342)
at sun.reflect.GeneratedMethodAccessor69.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at org.forgerock.script.registry.ScriptRegistryImpl$LibraryRecord.invoke(ScriptRegistryImpl.java:505)
at com.sun.proxy.$Proxy26.eval(Unknown Source)
at org.forgerock.script.registry.ScriptRegistryImpl$ScriptImpl.eval(ScriptRegistryImpl.java:741)
at org.forgerock.script.registry.ScriptRegistryImpl$ScriptImpl.eval(ScriptRegistryImpl.java:752)
at org.forgerock.openidm.managed.ManagedObjectSet.execScript(ManagedObjectSet.java:349)

To Reproduce
Steps to reproduce the behavior:

1. Unzip the latest openidm-5.5.0.zip
2. /path/to/openidm/startup.sh
3. open browser to localhost:8080/admin and authenticate as openidm-admin/openidm-admin
4. Select Manage->User from menu
5. Click the "+ New User" button
6. Fill out required fields on Details tab and Password tab, and click Save button
7. Browser gets 500 error, go to /path/to/openidm/logs and look at openidm0.log.0 file
8. Error shows in file, user not created

Expected behavior
Should be able to create a user with no errors. Should also be able to use "openidm" object in custom endpoints, e.g. openidm.create, openidm.read, openidm.query, openidm.update, openidm.delete, openidm.action, etc.

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

• OS: Red Hat Enterprise Linux 8
• Browser any

Additional context
I tried with default orientdb as the repo and with MySQL as the repo, same issue. /path/to/openidm/bundle folder shows openidm*.jar and "scr list" on console shows they are active, but it appears that Rhino doesn't load them?

maybe it is not a bug,but I build failed.

Describe the bug
I git out the source code, after that,
when I try to "mvn -DskipTests -Dmaven.javadoc.skip=true clean install -f ./OpenICF/OpenDJ/forgerock-parent" and other maven commands, I always get following errors.

Exception in thread "main" java.lang.NoClassDefFoundError: java/util/logging/Logger
at com.google.inject.internal.util.Stopwatch.(Stopwatch.java:27)
at com.google.inject.internal.InternalInjectorCreator.(InternalInjectorCreator.java:60)
at com.google.inject.Guice.createInjector(Guice.java:87)
at com.google.inject.Guice.createInjector(Guice.java:69)
at com.google.inject.Guice.createInjector(Guice.java:59)
at org.codehaus.plexus.DefaultPlexusContainer.addPlexusInjector(DefaultPlexusContainer.java:481)
at org.codehaus.plexus.DefaultPlexusContainer.(DefaultPlexusContainer.java:206)
at org.apache.maven.cli.MavenCli.container(MavenCli.java:636)
at org.apache.maven.cli.MavenCli.doMain(MavenCli.java:282)
at org.apache.maven.cli.MavenCli.main(MavenCli.java:193)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:567)
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced(Launcher.java:282)
at org.codehaus.plexus.classworlds.launcher.Launcher.launch(Launcher.java:225)
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode(Launcher.java:406)
at org.codehaus.plexus.classworlds.launcher.Launcher.main(Launcher.java:347)
Caused by: java.lang.ClassNotFoundException: java.util.logging.Logger
at org.codehaus.plexus.classworlds.strategy.SelfFirstStrategy.loadClass(SelfFirstStrategy.java:50)
at org.codehaus.plexus.classworlds.realm.ClassRealm.unsynchronizedLoadClass(ClassRealm.java:271)
at org.codehaus.plexus.classworlds.realm.ClassRealm.loadClass(ClassRealm.java:247)
at org.codehaus.plexus.classworlds.realm.ClassRealm.loadClass(ClassRealm.java:239)
... 18 more

To Reproduce
Steps to reproduce the behavior:

1. Go to '...'
2. Click on '....'
3. Scroll down to '....'
4. See error

Expected behavior
A clear and concise description of what you expected to happen.

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

• OS: [e.g. iOS]
• Browser [e.g. chrome, safari]
• Version [e.g. 22]

Smartphone (please complete the following information):

• Device: [e.g. iPhone6]
• OS: [e.g. iOS8.1]
• Browser [e.g. stock browser, safari]
• Version [e.g. 22]

Additional context
Add any other context about the problem here.

Binary version and Docker

Hey,

just asking, why do you not release a binary version and a corresponding Dockerfile for OpenIDM the same way you do with OpenDJ, OpenAM, OpenIG, ...?

Thanks!

Doesn't Seem to Build

mvn clean install
[INFO] Scanning for projects...
Downloading from forgerock-staging-repository: http://maven.forgerock.org/repo/releases/org/forgerock/forgerock-parent/2.0.3/forgerock-parent-2.0.3.pom
Downloading from oss.sonatype.org: https://oss.sonatype.org/content/groups/public/org/forgerock/forgerock-parent/2.0.3/forgerock-parent-2.0.3.pom
Downloading from maven-restlet: http://maven.restlet.org/org/forgerock/forgerock-parent/2.0.3/forgerock-parent-2.0.3.pom
Downloading from central: https://repo.maven.apache.org/maven2/org/forgerock/forgerock-parent/2.0.3/forgerock-parent-2.0.3.pom
[ERROR] [ERROR] Some problems were encountered while processing the POMs:
[FATAL] Non-resolvable parent POM for org.forgerock.openidm:openidm-project:4.0.0-2: Could not transfer artifact org.forgerock:forgerock-parent:pom:2.0.3 from/to forgerock-staging-repository (http://maven.forgerock.org/repo/releases): Not authorized , ReasonPhrase:Unauthorized. and 'parent.relativePath' points at wrong local POM @ line 27, column 13
@
[ERROR] The build could not read 1 project -> [Help 1]
[ERROR]
[ERROR] The project org.forgerock.openidm:openidm-project:4.0.0-2 (/apps/was/OpenIDM/pom.xml) has 1 error
[ERROR] Non-resolvable parent POM for org.forgerock.openidm:openidm-project:4.0.0-2: Could not transfer artifact org.forgerock:forgerock-parent:pom:2.0.3 from/to forgerock-staging-repository (http://maven.forgerock.org/repo/releases): Not authorized , ReasonPhrase:Unauthorized. and 'parent.relativePath' points at wrong local POM @ line 27, column 13 -> [Help 2]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/ProjectBuildingException
[ERROR] [Help 2] http://cwiki.apache.org/confluence/display/MAVEN/UnresolvableModelException

Bug: org.openidentityplatform.commons.geo 21.0.0-SNAPSHOT FAILURE on building OpenIDM

Describe the bug
When following the latest instructions to build OpenIDM, this step fails:

mvn -DskipTests -Dmaven.javadoc.skip=true clean install -f OpenIDM/OpenICF/OpenDJ/forgerock-parent

ERROR "geolite.maxmind.com: Unknown host"

To Reproduce
Steps to reproduce the behavior:

1. Go to https://github.com/OpenIdentityPlatform/OpenIDM
2. Scroll down to How to Build
3. Run step 1 for the git clone
4. Run step for mvn -DskipTests -Dmaven.javadoc.skip=true clean install -f OpenIDM/OpenICF/OpenDJ/forgerock-parent
5. mvn fails with the "[ERROR] Failed to execute goal com.savage7.maven.plugins:maven-external-dependency-plugin:0.6-SNAPSHOT:resolve-external (resolve-install-external-dependencies) on project geo: geolite.maxmind.com: Unknown host geolite.maxmind.com -> [Help 1]"

Expected behavior
mvn command should complete successfully

Desktop (please complete the following information):

• OS: Red Hat Enterprise Linux 8
• Java: openjdk version "1.8.0_262"
• Maven: Apache Maven 3.5.4 (Red Hat 3.5.4-5)

Product uses wrong truststore

Describe the bug
Openidm uses its own truststore, rather than using the default cacerts. As this truststore seems to be pretty old, in example, LetsEncrypt certificates are not accepted. This breaks connectors et al. Those were introduced with Java1.8.101 or something like that, so several years ago!!

To Reproduce
Steps to reproduce the behavior:

1. unzip openidm
2. try to connect an LDAP system via SSL using LetsEncrypt certificates. It will not work, console will throw Exceptions regarding the certificate path
3. stop openidm. Replace security/truststore with cacerts file
4. try again. This time, connecting the LDAP system via SSL works.

Expected behavior
The product should not use its own (oooooold!) truststore and instead use the default cacerts file that is shipped with the jre/jdk.

LDAP Connector doesn't recover groups

Describe the bug
After configuration the ldap connector doesn't bring any group values.

Screenshots

Does not work with OpenJDK 11

Describe the bug
Does not work with OpenJDK 11. Not much more to say.

Response needed

Hi all,
Is this project alive?

grzegorz