Return-Path: X-Original-To: apmail-syncope-commits-archive@www.apache.org Delivered-To: apmail-syncope-commits-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 1A5BF18C66 for ; Thu, 1 Oct 2015 09:34:38 +0000 (UTC) Received: (qmail 93595 invoked by uid 500); 1 Oct 2015 09:34:38 -0000 Delivered-To: apmail-syncope-commits-archive@syncope.apache.org Received: (qmail 93519 invoked by uid 500); 1 Oct 2015 09:34:38 -0000 Mailing-List: contact commits-help@syncope.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@syncope.apache.org Delivered-To: mailing list commits@syncope.apache.org Received: (qmail 93454 invoked by uid 99); 1 Oct 2015 09:34:37 -0000 Received: from git1-us-west.apache.org (HELO git1-us-west.apache.org) (140.211.11.23) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 01 Oct 2015 09:34:37 +0000 Received: by git1-us-west.apache.org (ASF Mail Server at git1-us-west.apache.org, from userid 33) id 731ACE0A00; Thu, 1 Oct 2015 09:34:37 +0000 (UTC) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit From: fmartelli@apache.org To: commits@syncope.apache.org Date: Thu, 01 Oct 2015 09:34:38 -0000 Message-Id: <3f874f2cfe0543da8d983645f7ed8eba@git.apache.org> In-Reply-To: <3d8eff89ca3e4c5cbcab328015e24621@git.apache.org> References: <3d8eff89ca3e4c5cbcab328015e24621@git.apache.org> X-Mailer: ASF-Git Admin Mailer Subject: [2/6] syncope git commit: [SYNCOPE-700] Getting Started: half done [SYNCOPE-700] Getting Started: half done Project: http://git-wip-us.apache.org/repos/asf/syncope/repo Commit: http://git-wip-us.apache.org/repos/asf/syncope/commit/931c6de5 Tree: http://git-wip-us.apache.org/repos/asf/syncope/tree/931c6de5 Diff: http://git-wip-us.apache.org/repos/asf/syncope/diff/931c6de5 Branch: refs/heads/SYNCOPE-156 Commit: 931c6de5b7a6a15dafc75fc447230ea4b31675f2 Parents: af214a2 Author: Francesco Chicchiriccò Authored: Wed Sep 30 15:38:14 2015 +0200 Committer: Francesco Chicchiriccò Committed: Wed Sep 30 15:38:14 2015 +0200 ---------------------------------------------------------------------- README.md | 4 +- deb/console/src/deb/control/control | 2 +- deb/core/src/deb/control/control | 2 +- pom.xml | 24 ++++ .../getting-started/getting-started.adoc | 11 +- .../getting-started/images/architecture.png | Bin 0 -> 62994 bytes .../getting-started/images/architecture.xml | 1 + .../images/identityLifecycle.png | Bin 0 -> 121230 bytes .../asciidoc/getting-started/introduction.adoc | 114 +++++++++++++++++++ .../getting-started/systemRequirements.adoc | 50 ++++++++ src/main/asciidoc/syncope-theme.yml | 6 +- src/site/xdoc/building.xml | 6 +- src/site/xdoc/index.xml | 2 +- src/site/xdoc/release-process.xml | 2 +- src/site/xdoc/security.xml | 2 +- 15 files changed, 207 insertions(+), 19 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/syncope/blob/931c6de5/README.md ---------------------------------------------------------------------- diff --git a/README.md b/README.md index 5445635..4c83469 100644 --- a/README.md +++ b/README.md @@ -17,8 +17,8 @@ specific language governing permissions and limitations under the License. --> **Apache Syncope** is an Open Source system for managing digital identities in enterprise environments, -implemented in JEE technology and released under Apache 2.0 license. +implemented in Java EE technology and released under Apache 2.0 license. More information at http://syncope.apache.org - \ No newline at end of file + http://git-wip-us.apache.org/repos/asf/syncope/blob/931c6de5/deb/console/src/deb/control/control ---------------------------------------------------------------------- diff --git a/deb/console/src/deb/control/control b/deb/console/src/deb/control/control index 5a9765c..cfe4ff1 100644 --- a/deb/console/src/deb/control/control +++ b/deb/console/src/deb/control/control @@ -7,7 +7,7 @@ Depends: [[debian.dependencies]] Maintainer: The Apache Syncope project Description: Apache Syncope Console Web Application Apache Syncope is an Open Source system for managing digital identities in enterprise environments, - implemented in JEE technology and released under Apache 2.0 license. + implemented in Java EE technology and released under Apache 2.0 license. Identity management (or IdM) represents the joint result of business process and IT to manage user data on systems and applications. IdM involves considering user attributes, roles, resources and entitlements in trying to give a decent answer to the question bumping up every time in an http://git-wip-us.apache.org/repos/asf/syncope/blob/931c6de5/deb/core/src/deb/control/control ---------------------------------------------------------------------- diff --git a/deb/core/src/deb/control/control b/deb/core/src/deb/control/control index e9563a3..1c91061 100644 --- a/deb/core/src/deb/control/control +++ b/deb/core/src/deb/control/control @@ -7,7 +7,7 @@ Depends: [[debian.dependencies]] Maintainer: The Apache Syncope project Description: Apache Syncope Core Web Application Apache Syncope is an Open Source system for managing digital identities in enterprise environments, - implemented in JEE technology and released under Apache 2.0 license. + implemented in Java EE technology and released under Apache 2.0 license. Identity management (or IdM) represents the joint result of business process and IT to manage user data on systems and applications. IdM involves considering user attributes, groups, resources and entitlements in trying to give a decent answer to the question bumping up every time in an http://git-wip-us.apache.org/repos/asf/syncope/blob/931c6de5/pom.xml ---------------------------------------------------------------------- diff --git a/pom.xml b/pom.xml index 48eefec..c1cdb33 100644 --- a/pom.xml +++ b/pom.xml @@ -1522,6 +1522,30 @@ under the License. + org.apache.maven.plugins + maven-antrun-plugin + + + copy-doc-images + + run + + generate-resources + + + + + + + + + + + + + + + org.asciidoctor asciidoctor-maven-plugin 1.5.2.1 http://git-wip-us.apache.org/repos/asf/syncope/blob/931c6de5/src/main/asciidoc/getting-started/getting-started.adoc ---------------------------------------------------------------------- diff --git a/src/main/asciidoc/getting-started/getting-started.adoc b/src/main/asciidoc/getting-started/getting-started.adoc index 12aeccf..1f0f520 100644 --- a/src/main/asciidoc/getting-started/getting-started.adoc +++ b/src/main/asciidoc/getting-started/getting-started.adoc @@ -52,9 +52,11 @@ New contributors are always welcome! This guide shows you how to get started with Apache Syncope services for identity management, provisioning, and compliance. -== Introduction +include::introduction.adoc[] -== Which method? +include::systemRequirements.adoc[] + +== Obtain Apache Syncope === Standalone @@ -64,7 +66,4 @@ compliance. === Maven project -== Moving forward - -// Chapters will be placed in separate .adoc files in the same directory -//include::XXX.adoc[] \ No newline at end of file +== Move forward http://git-wip-us.apache.org/repos/asf/syncope/blob/931c6de5/src/main/asciidoc/getting-started/images/architecture.png ---------------------------------------------------------------------- diff --git a/src/main/asciidoc/getting-started/images/architecture.png b/src/main/asciidoc/getting-started/images/architecture.png new file mode 100644 index 0000000..6d437d7 Binary files /dev/null and b/src/main/asciidoc/getting-started/images/architecture.png differ http://git-wip-us.apache.org/repos/asf/syncope/blob/931c6de5/src/main/asciidoc/getting-started/images/architecture.xml ---------------------------------------------------------------------- diff --git a/src/main/asciidoc/getting-started/images/architecture.xml b/src/main/asciidoc/getting-started/images/architecture.xml new file mode 100644 index 0000000..e5936df --- /dev/null +++ b/src/main/asciidoc/getting-started/images/architecture.xml @@ -0,0 +1 @@ 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 qRItO1p58NFZwQWttMSzqGcmMUigvRtFPMn05RRm4AyYoBmLY1ct6BekUSPZmd02fakzQ4KBLXZ7btxt0nztuACfYgT/UZhLqe8nyAEFDB3/9+ZAsceuEzRDeAEeFZ4EiBBx2mYhtNZNnjQj7S9o0fQA9k2TV+a9RWxhU4pVBo+wLrReRCuRQKmj5MjJH3mqoycH8UTF1ST4OVJ0WUnlWRuEB4n4eVuC1Hj94SVlazvQcsNvsM7YPS+RIJOMb6elciZ4iugUPv0EJR5uG8OmhYqgP50JEaPkY/E9tHOEIip0PfD0AMMEsu7wEAtexLUQTZ1qCZbQn0PUG7VPthsXHhxDGu7uGiRVgWx3Jli8sxeqkOBnar1I72UjyqghQWHdy+Vd1ONq2vafeBKQCdN5WUvzsmwV4sOUQvvosOqJPaNglSs7RuDLMG/YwseP0AloIU0if5Cai3Xb1YAePlopTXsQvp7A1+eyOetfNLPgOhqCVe3bth2y6HeaN3YC8wGW5pnvgyFgpcaUu0vYxjvq00SeUrgOu3y+t21uybQ7FQurHsYAjfd9bYmUNvqXY9Kc1p7aiLBHLEATXlgBPEUYOR78nmc9YrevGe9ryW6fVQNZXxdV2206JJn10PkJ7E7YgFKKwHvF6wX/QGndEamsx88mun8hydg/qnAcbNTG9taAWRxRdAL1vIyfKtiGlcVrT5SaVrx/x5YnoQDpSyBZQxuTiyrQxNtp3EpCzk2BBXijz1WoLqFIKLdm1jzjTC9PyFQId1CnLLOyx2THPEqv0m2o+MZ3uHBrEXlvFCpmsxWxKmJtPd4Vf6tcLkh6hA1VF7sTZ/ZaciqInvs44TivueqRSjFlNnJCc8tlNTxvJ1f9rAZmro0IEcK6XjNlO8UdHHm/rRmaODKXa5BM2618Ec4F+u+39ZMv6QZ8uO/s2ZKZVSAEaoGzWCSUbufafSKsjFr+78iG9tEufby538Ofzaq1BK9fc7++VCblk qqDXq/qqVySU4vMmvQklsljphmCwbJ9e/zQqmYUXqveBold08+IacQEo3vV02BWyLejQYPfw77UrUZVFRMVbPzF9jD7uHPiOlUOfyXMxh/Aw== \ No newline at end of file http://git-wip-us.apache.org/repos/asf/syncope/blob/931c6de5/src/main/asciidoc/getting-started/images/identityLifecycle.png ---------------------------------------------------------------------- diff --git a/src/main/asciidoc/getting-started/images/identityLifecycle.png b/src/main/asciidoc/getting-started/images/identityLifecycle.png new file mode 100644 index 0000000..e9eb528 Binary files /dev/null and b/src/main/asciidoc/getting-started/images/identityLifecycle.png differ http://git-wip-us.apache.org/repos/asf/syncope/blob/931c6de5/src/main/asciidoc/getting-started/introduction.adoc ---------------------------------------------------------------------- diff --git a/src/main/asciidoc/getting-started/introduction.adoc b/src/main/asciidoc/getting-started/introduction.adoc new file mode 100644 index 0000000..5991756 --- /dev/null +++ b/src/main/asciidoc/getting-started/introduction.adoc @@ -0,0 +1,114 @@ +// +// Licensed to the Apache Software Foundation (ASF) under one +// or more contributor license agreements. See the NOTICE file +// distributed with this work for additional information +// regarding copyright ownership. The ASF licenses this file +// to you under the Apache License, Version 2.0 (the +// "License"); you may not use this file except in compliance +// with the License. You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, +// software distributed under the License is distributed on an +// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY +// KIND, either express or implied. See the License for the +// specific language governing permissions and limitations +// under the License. +// + +== Introduction + +*Apache Syncope* is an Open Source system for managing digital identities in enterprise environments, implemented in +Java EE technology and released under Apache 2.0 license. + +*Identity management* (or IdM) represents the joint result of business process and IT to manage user data on systems and +applications. IdM involves considering user attributes, roles, resources and entitlements in trying to give a decent +answer to the question bumping up every time in an IT administrator's mind: + +[.text-center] +_Who has access to What, When, How, and Why?_ + +=== What is this Identity Management, anyway? + +**** +Account:: Computers work with records of data about persons. Such records contains technical information needed by the system for +which the account is created and managed. +(Digital) Identity:: A representation of a set of claims made by one digital subject about itself. *It's you!* +**** + +Have you ever been hired by a company, entered an organization or just subscribed a new Google account? +Companies, organizations and cloud entities works with applications that need your data to function properly: +username, password, e-mail, first name, surname, and more. + +Who is going to feed such information? And what happens when you need to be enabled for more applications? And what if +you get promoted and acquire more rights on the applications you already had access to? +Most important, what happens when you quit or they gently let you go? + +Shortly, Identity Management takes care of managing identity data throughout what is called the *Identity Lifecycle*. + +[.text-center] +image::identityLifecycle.png[title="Identity Lifecycle",alt="Identity Lifecycle",width="505",height="324"] + +.Users, groups and any objects +**** +With Apache Syncope 2.0.0, the managed identities are not limited anymore to users and groups. New object types can be +defined so that any object's data can be managed through Syncope: workstations, printers, folders, sensors, services, +and so on. This positions Apache Syncope at best places for bringing Identity Management in the IoT world. +**** + +=== Bird's eye view on Architecture + +*_Core_* is the central component, providing all services offered by Apache Syncope. + +It exposes a full-compliant https://en.wikipedia.org/wiki/Java_API_for_RESTful_Web_Services[JAX-RS 2.0^] +https://en.wikipedia.org/wiki/Representational_state_transfer[RESTful^] interface which enables third-party applications, +written in any programming language, to consume IdM services. + + * *_Logic_* implements the overall business logic that can be triggered via REST services, and controls some additional +features (notifications, reports and audit over all) + * *_Provisioning_* is delegated to manage the internal (via workflow) and external (via specific connectors) +representation of users, groups and any objects. + +Being the crucial decision point for defining and enforcing the consistency and transformations between internal and +external data, this component needs often to be tailored on requirements of specific deployment. For this reason, besides +the all-Java default implementation that can be anyway extended, an http://camel.apache.org/[Apache Camel^]-based +implementation is also available as extension, which brings all the power of runtime changes and adaptation. + * *_Workflow_* is one of pluggable aspects: this lets every deployment choose the preferred engine +among provided - including the one based on http://www.activiti.org/[Activiti BPM^], the reference open source +http://www.bpmn.org/[BPMN 2.0^] implementation - or define new, custom ones. + * *_Persistence_* manages all data (users, groups, attributes, resources, ...) at high level +using a standard https://en.wikipedia.org/wiki/Java_Persistence_API[JPA 2.0^] approach, persisting to an underlying +database, referred as the *_Internal Storage_*. Consistency is ensured via the comprehensive +http://docs.spring.io/spring/docs/4.1.x/spring-framework-reference/html/transaction.html[transaction management^] +provided by the Spring Framework. + +Globally, all this permits to scale up to million entities and at the same time allows great portability with no code +changes: MySQL, MariaDB, PostgreSQL, Oracle and MS SQL Server are fully supported deployment options. + * *_Security_* defines a fine-grained set of entitlements which can be granted to administrators, thus allowing to +implement real delegated administration scenarios. + +[.text-center] +image::architecture.png[title="Architecture",alt="Architecture"] + +*_Admin UI_* is the web-based console for configuring and administering running deployments, with full support +for delegated administration. + +*_End-user UI_* is the web-based application for self-registration, self-service and password reset. + +*_CLI_* is the command-line application for interacting with Apache Syncope from scripts, particularly useful for +system administrators. + +Third-party applications are provided full access to IdM services by leveraging the REST interface, either via the +Java _SyncopeClient_ library (at the basis of Admin UI, End-user UI and CLI) or plain HTTP calls. + +.ConnId +**** +The *_Provisioning_* layer relays on http://connid.tirasa.net[ConnId^]; ConnId is designed to separate the +implementation of an application from the dependencies of the system that the application is attempting to connect to. + +ConnId is the continuation of The Identity Connectors Framework (Sun ICF), a project that used to be part of market +leader Sun IdM and has since been released by Sun Microsystems as an Open Source project. This makes the connectors layer +particularly reliable because most connectors have already been implemented in the framework and widely tested. + +The new ConnId project, featuring contributors from several companies, provides all that is required nowadays for a +modern Open Source project, including an Apache Maven driven build, artifacts and mailing lists. Additional connectors – +such as for SOAP, CSV, PowerShell and Active Directory – are also provided. +**** \ No newline at end of file http://git-wip-us.apache.org/repos/asf/syncope/blob/931c6de5/src/main/asciidoc/getting-started/systemRequirements.adoc ---------------------------------------------------------------------- diff --git a/src/main/asciidoc/getting-started/systemRequirements.adoc b/src/main/asciidoc/getting-started/systemRequirements.adoc new file mode 100644 index 0000000..869ef47 --- /dev/null +++ b/src/main/asciidoc/getting-started/systemRequirements.adoc @@ -0,0 +1,50 @@ +// +// Licensed to the Apache Software Foundation (ASF) under one +// or more contributor license agreements. See the NOTICE file +// distributed with this work for additional information +// regarding copyright ownership. The ASF licenses this file +// to you under the Apache License, Version 2.0 (the +// "License"); you may not use this file except in compliance +// with the License. You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, +// software distributed under the License is distributed on an +// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY +// KIND, either express or implied. See the License for the +// specific language governing permissions and limitations +// under the License. +// + +== System Requirements + +=== Hardware + +The numbers below are greatly affected by several requirements of given deployment, in particular the total number of +managed entities (users, groups and any objects), their attributes and resources. + + * CPU: dual core, 2 GHz (minimum) + * RAM: 2 GB (minimum) + * Disk: 100 MB (minimum) + +=== Java + +Apache Syncope {docVersion} requires the latest JDK 7 or JDK 8 available. + +=== Java EE Container + +Apache Syncope {docVersion} is verified with the following Java EE containers: + + . http://tomcat.apache.org/download-80.cgi[Apache Tomcat 8^] + . https://glassfish.java.net/[Glassfish 4.1^] + . http://www.wildfly.org/[Wildfly 9^] + +=== Internal Storage + +Apache Syncope {docVersion} is verified with the recent versions of the following DBMSes, for internal storage: + + . http://www.mysql.com/[MySQL^] + . https://mariadb.org/[MariaDB^] + . https://www.oracle.com/database/index.html[Oracle Database^] + . http://www.microsoft.com/en-us/server-cloud/products/sql-server/[MS SQL Server^] \ No newline at end of file http://git-wip-us.apache.org/repos/asf/syncope/blob/931c6de5/src/main/asciidoc/syncope-theme.yml ---------------------------------------------------------------------- diff --git a/src/main/asciidoc/syncope-theme.yml b/src/main/asciidoc/syncope-theme.yml index 4635b36..0112bfc 100644 --- a/src/main/asciidoc/syncope-theme.yml +++ b/src/main/asciidoc/syncope-theme.yml @@ -262,15 +262,15 @@ footer: # * {section-title} # * {section-or-chapter-title} recto_content: - right: '_Copyright © 2010–{year} The Apache Software Foundation. All rights reserved._ | - {section-or-chapter-title} | + right: '{document-title} | + _Copyright © 2010–{year} The Apache Software Foundation. All rights reserved._ | {page-number}' #right: '{document-title} | {page-number}' #right: '{page-number}' #center: '{page-number}' verso_content: left: '{page-number} | - {section-or-chapter-title} | + {document-title} | _Copyright © 2010–{year} The Apache Software Foundation. All rights reserved._' #left: '{page-number}' #center: '{page-number}' \ No newline at end of file http://git-wip-us.apache.org/repos/asf/syncope/blob/931c6de5/src/site/xdoc/building.xml ---------------------------------------------------------------------- diff --git a/src/site/xdoc/building.xml b/src/site/xdoc/building.xml index 9aa2409..e1a90ae 100644 --- a/src/site/xdoc/building.xml +++ b/src/site/xdoc/building.xml @@ -86,7 +86,7 @@ under the License.

Debug

Starts the full environment used by integration tests (with same components available when running new project in embedded mode - but console) and enables remote JPDA debugging on port 8000 in the running JEE container (Tomcat). + but console) and enables remote JPDA debugging on port 8000 in the running Java EE container (Tomcat). $ mvn -Pdebug

Dev

@@ -134,7 +134,7 @@ $ mvn -Pdev -Dit.test=UserTestITCase#create against a real MS SQL Server database via $ mvn -Psqlserver-it -

JEE containers

+

Java EE containers

Glassfish
Perform the full test suite by deploying Syncope core in @@ -157,7 +157,7 @@ $ mvn -Pdev -Dit.test=UserTestITCase#create

Debug

Starts the full environment used by core's integration tests (with same components available when running new project in embedded mode, - including console) and enables remote JPDA debugging on port 8000 in the running JEE container (Tomcat). + including console) and enables remote JPDA debugging on port 8000 in the running Java EE container (Tomcat). $ mvn -Pdebug

JRebel

http://git-wip-us.apache.org/repos/asf/syncope/blob/931c6de5/src/site/xdoc/index.xml ---------------------------------------------------------------------- diff --git a/src/site/xdoc/index.xml b/src/site/xdoc/index.xml index ee3af80..8e2954b 100644 --- a/src/site/xdoc/index.xml +++ b/src/site/xdoc/index.xml @@ -35,7 +35,7 @@ under the License.

Apache Syncope is an Open Source system for managing digital identities in enterprise environments, - implemented in JEE technology and released under Apache 2.0 license. + implemented in Java EE technology and released under Apache 2.0 license.

http://git-wip-us.apache.org/repos/asf/syncope/blob/931c6de5/src/site/xdoc/release-process.xml ---------------------------------------------------------------------- diff --git a/src/site/xdoc/release-process.xml b/src/site/xdoc/release-process.xml index 3617b53..4af4ccf 100644 --- a/src/site/xdoc/release-process.xml +++ b/src/site/xdoc/release-process.xml @@ -109,7 +109,7 @@ under the License.

- +

This is an optional step.
These verifications take some time and have quite strong environment requirements. However, it is of fundamental http://git-wip-us.apache.org/repos/asf/syncope/blob/931c6de5/src/site/xdoc/security.xml ---------------------------------------------------------------------- diff --git a/src/site/xdoc/security.xml b/src/site/xdoc/security.xml index 436c083..8232c6a 100644 --- a/src/site/xdoc/security.xml +++ b/src/site/xdoc/security.xml @@ -64,7 +64,7 @@ under the License.

In the various places in which Apache Commons JEXL expressions are allowed (derived schema definition, user / group templates, connObjectLinks of resource mappings) a malicious administrator can inject Java code - that can be executed remotely by the JEE container running the Apache Syncope core.

+ that can be executed remotely by the Java EE container running the Apache Syncope core.

Affects