Page tree
Skip to end of metadata
Go to start of metadata

This demo shows Midpoint with PostgreSQL repository. Midpoint contains csv-resource as the source and openldap-resource as the target. 

The image can be found in the Evolveum/midpoint-docker GitHub project.

Starting

 

$ cd demo/simple
$ docker-compose up --build

 

After docker-compose up command successfully finishes you should see something like this on the console:

 

simple_midpoint_server_1  | 2019-02-22 15:07:50,222 [] [main] INFO (org.springframework.boot.web.embedded.tomcat.TomcatWebServer): Tomcat started on port(s): 8080 (http) with context path '/midpoint'
simple_midpoint_server_1  | 2019-02-22 15:07:50,230 [] [main] INFO (com.evolveum.midpoint.web.boot.MidPointSpringApplication): Started MidPointSpringApplication in 74.425 seconds (JVM running for 77.109)

 

Now you can log into midPoint using http://localhost:8080/midpoint URL, with an user of administrator and a password of 5ecr3t.

Also you can log into OpenLDAP server using a host of localhost and a port of 389, with a Bind DN of cn=admin,dc=evolveum,dc=com and a Bind password of secret.

During starting, in Midpoint is configured two resources, one object template, one role and are started two script for testing connection on reseouces and one for import accounts from csv-resources. If user is imported from csv file, then he automaticly get role, which insure create user account in OpenLdap server.

You can safely ignore console messages like this:

 

simple_midpoint_server_1  | ERROR:  could not serialize access due to read/write dependencies among transactions
simple_midpoint_server_1  | DETAIL:  Reason code: Canceled on identification as a pivot, during write.
simple_midpoint_server_1  | HINT:  The transaction might succeed if retried.

 

This is a part of standard midPoint conflict resolution process. The mentioned transactions are really retried and they succeed eventually.

Containers

The demo/simple composition contains the following containers:

Container name
Description
simple_midpoint_server_1
This is the standard container providing midPoint functionality. It contains standalone Tomcat running midPoint application.
simple_midpoint_data_1This container hosts midPoint repository; this time it is implemented on PostgreSQL 9.5 database.
simple_ldap_1
OpenLDAP server used as the target.

Communication

The containers publish the following TCP ports. (Port mapped to localhost denotes the mapping of container port to the host port where it can be reached from the outside.)

ContainerPort numberPort mapped to localhostDescription
simple_midpoint_server_1
80808080HTTP port to be used to connect to midPoint application
simple_midpoint_data_154325432Port used to connect to the PostgreSQL database
simple_ldap_1
389389Port used to connect to the OpenLDAP server

Docker volumes

The following volumes are created to persist data and other relevant files.

Volume name
Description
Used by container
simple_midpoint_homeThe midPoint home directory. Contains schema extensions, logs, custom libraries, custom ConnId connectors, and so on.simple_midpoint_server_1
simple_midpoint_dataVolume hosting PostgreSQL database used by midPoint.simple_midpoint_data_1
simple_ldap_dataVolume hosting LDAP database.simple_ldap_1
simple_ldap_confVolume hosting the corresponding LDAP config files.simple_ldap_1

Configuring the composition

The following configuration properties are supported. Please refer to the main documentation page for their explanation.

Property
Default value
REPO_DATABASE_TYPE
postgresql
REPO_JDBC_URL
default
REPO_HOST
midpoint_data
REPO_PORT
default
REPO_DATABASE
midpoint
REPO_USER
midpoint
REPO_PASSWORD_FILE
/run/secrets/mp_database_password.txt
REPO_MISSING_SCHEMA_ACTION
create
REPO_UPGRADEABLE_SCHEMA_ACTIONstop
REPO_SCHEMA_VERSION_IF_MISSING 
REPO_SCHEMA_VARIANT 
MP_MEM_MAX2048m
MP_MEM_INIT1024m
MP_JAVA_OPTS 
MP_KEYSTORE_PASSWORD_FILE
/run/secrets/mp_keystore_password.txt
TIMEZONE
UTC

You can tailor these to your needs.

The following Docker secrets are used:

Secret
Location
mp_database_password.txtconfigs-and-secrets/midpoint/application/database_password.txt
mp_keystore_password.txtconfigs-and-secrets/midpoint/application/keystore_password.txt

The following configuration files are used:

Target file
Source location
Description
/opt/midpoint/var/midpoint_server/container_files/mp-home/When postgresql_midpoint_server_1 is created, the files from this directory are copied to the Midpoint home directory in the container.

You can modify or replace these files as needed.

  • No labels