Identity Source Cloud Bridge

The identity source type Cloud Bridge is one of the IDaaS Cloud Bridges. It is used to establish a connection channel between BambooCloud IDaaS and enterprise internal identity sources. Currently, AD identity source is supported.

This chapter guides you through deploying and using the Identity Source Cloud Bridge Agent on the IDaaS platform, and provides update records for the Identity Source Cloud Bridge installation package so you can choose the appropriate version according to project requirements. The following takes CentOS Linux release 8.0.1905 as an example for deploying the Identity Source Cloud Bridge Agent.

Prerequisites

• You have administrator permissions for the IDaaS enterprise center platform.

• You have internal network server operation permissions.

• The server has net-tools, curl, jdk (OpenJDK 17 or above), and rng-tools installed. Installation steps are as follows:

  net-tools Installation

  • Verify whether net-tools is installed.

    rpm -q net-tools

    yum -y install net-tools-2.0-0.22.20131004git.el7.x86_64.rpm

    rpm -q net-tools

    curl --version

    yum -y install jdk-17.0.13_linux-x64_bin.rpm

    java -version

    yum install rng-tools

    cat /etc/sysconfig/rngd

    echo "OPTIONS=\"-r /dev/urandom\"" > /etc/sysconfig/rngd

    service rngd start   启动rng服务
    service rngd status   查看rng服务状态

  sha256sum -c cloudAgent-identitySource-{版本号}.zip.sha256

  unzip -od {文件解压后的存放地址} cloudAgent-identitySource-{版本号}.zip

   ###UTF-8格式YAML配置标识头,勿删除###
   server:
    # 云桥启动端口
     port: 9081

   agent:
     # 云桥服务地址。domain为在IDaaS的租户域名xx.bccastle.com
     示例：serverAddress: wss://domain/api/v1/ws
     # 云桥ClientID。在IDaaS创建的云桥的ClientID
     示例：agentId: 7jve68NZlPFqyWD8SJToWxTU5Wg6khk1
     # 云桥ClientSecret。在IDaaS创建的云桥的ClientSecret
     示例：agentSecret: LdfwryojYHLMaeNGVdr9fSh1iwyDCL0QuBxhKn0jxT5UOhUQVpAoGdglsvtpLNV1

   # 身份源回收属性
   idsource:
     recycle:
       # AD身份源回收属性
       ad:
         # AD服务器的主机名或IP地
         示例：host: 127.0.0.1
         # 用于与AD服务器通信的TCP/IP端口
         示例：port: 8080
         # 选中此复选框可使用SSL连接到AD服务器
         示例：ssl: false
         # 默认情况下使用TLSv1.2，建议使用TLSV 1.3和TLSv1.2（为了兼容性，可以使用SSL和TLSv1.0）。
         示例：protocolVersion: TLSv1.2
         # 用于AD服务器身份验证的标识符
         示例：principal: DEMO-TEST\Administrator
         # 主体的密码
         示例：credentials: passw0rd
         # 基本上下文(搜索AD树时将使用的AD树中的一个或多个起点，当从AD服务器找到用户或用户所属的组时，将执行搜索)
         示例：baseContexts: OU=org-test,DC=demo-test,DC=com
         # 映射到UID属性的AD属性的名称。默认值：objectGUID
         示例：uidAttribute: objectGUID
         # 输入多个对象类，每个条目都应有自己的行;请勿使用逗号或分号分隔多个对象类;某些对象类可能需要指定类层次结构中的所有对象类。默认值：organizationalUnit
         示例：organizationObjectClasses: organizationalUnit
         # 输入多个对象类，每个条目应有自己的行;请勿使用逗号或分号分隔多个对象类;某些对象类可能需要指定类层次结构中的所有对象类。默认值：top, person, organizationalPerson, user
         示例：accountObjectClasses: user
         # 使用VLV控件,默认值：true
         示例：useVlvControls: true
         # 指定用于资源上VLV索引的排序属性。默认值：objectGUID
         示例：vlvSortAttribute: objectGUID

   # This is the Agent log level control configuration
   logging:
     level:
       com.bamboocloud.bcidaas.cloudbridge: INFO
     file:
       # The value of the attribute must have a unit, which can be KB or MB
       # 单个日志文件大小。默认值10MB，最大值10MB
       # default: 10MB
       # max-size: 10MB
       # The maximum number of days that log files are to be archived
       # 日志最长保留时间。默认值7天，最大值7天
       # default: 7 DAYS
       # max-history: 7

   ./cloudBridge.sh start

   ./agent.sh install

   ./agent.sh uninstall