IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  ISAM in Dockers

    Posted Sun August 16, 2020 06:02 AM
    Edited by khader basha dastageer Sun August 16, 2020 06:07 AM
    Hello Team,

    I dont understand why nothing is working ISAM on dockers from the below page.

    https://hub.docker.com/u/kdastageer/content/sub-0c69299c-1109-4ccf-96af-1ab202e3df43

    How to download,install,configure as the per the above URL?

    Not working at all.

    /var/shared/snapshots/isva_10.0.0.0_published.snapshot. how to get this snapshot ??

    So tierd.

    Please help urgently.

    Thanks
    Das

    ------------------------------
    khader basha dastageer
    ------------------------------


  • 2.  RE: ISAM in Dockers

    Posted Sun August 16, 2020 06:33 AM

    Hello Das,

    I can't get to the link you've posted.

    The snapshot is created by using the "publish" option in the management UI of the config container - after you have set up you're desired configuration.

    If you are new to Verify Access on Docker, I suggest you start with my cookbook which is a available here:
    https://www.securitylearningacademy.com/course/view.php?id=5273


    I hope this helps. 


    Jon. 



    ------------------------------
    Jon Harry
    Consulting IT Security Specialist
    IBM
    ------------------------------

    Original Message


  • 3.  RE: ISAM in Dockers

    Posted Mon August 17, 2020 05:20 AM
    Edited by Jon Harry Mon August 17, 2020 05:20 AM
    Das,

    [following up from your direct message]

    I can't tell what you did before the screenshot you shared but the errors you're seeing now are there because you have a partially set up environment which is now conflicting with the new attempt you are making.  You need to clean up with:

    ./cleanup.sh

    and then re-run:

    ./docker-setup.sh

    If you still get errors, please post these as a reply on this thread.

    Jon.

    ------------------------------
    Jon Harry
    Consulting IT Security Specialist
    IBM
    ------------------------------

    Original Message


  • 4.  RE: ISAM in Dockers

    Posted Mon August 17, 2020 09:21 AM
    Das,

    The errors you are seeing like this:

    docker: Error response from daemon: Ports are not available: listen tcp 127.0.0.2:443: bind: can't assign requested address.

    are caused because you are running on Mac and these 127.0.0.x addresses do not exist automatically like they do on Linux.  You must create IP aliases for 127.0.0.2, 127.0.0.3 and 127.0.0.4 before you run the docker-setup command.

    You can create with these commands:
    sudo ifconfig lo0 alias 127.0.0.2
    sudo ifconfig lo0 alias 127.0.0.3
    sudo ifconfig lo0 alias 127.0.0.4

    These aliases will only last until you reboot.  There may be  a way to make these aliases permanent but I haven't found it yet.

    Jon.



    ------------------------------
    Jon Harry
    Consulting IT Security Specialist
    IBM
    ------------------------------

    Original Message


  • 5.  RE: ISAM in Dockers

    Posted Tue August 18, 2020 05:13 AM
    Hi Das,

    There are two versions of my cookbook and docker assets - one for the (older) "Access Manager v9" release and a new one for the (new) "Verify Access v10" release.

    If you are using scripts from https://github.com/jonpharry/isam-docker then you should use cookbook from https://ibm.biz/isamdockercookbook.
    If you are using scripts from https://github.com/iamexploring/container-deployment then you should use cookbook from https://www.securitylearningacademy.com/course/view.php?id=5273

    For v9 I have a set of cookbooks that cover Kubernetes, Helm, and OpenShift in addition to the Docker and Docker Compose basics.
    For v10 I currently only have the Docker and Docker Compose cookbook right now.

    Jon.

    Jon.

    ------------------------------
    Jon Harry
    Consulting IT Security Specialist
    IBM
    ------------------------------

    Original Message


Related Content