3-minute fever 三分鐘熱度

I have always wanted to write about this for years. Like other old, stubborn developers, I hate process changes, and introduced to something I don't know or not familiar with. And these are not technical related to me, and I have no interest in it. Somehow, after we are forced to do this, and got familiarised with it, we started to enjoy it. We were proud of our team velocity acceleration too! I still can't differentiate or identify what scrum, agile, and bla bla bla is, but I think we did the estimation and planning right. It helps in our projects and sprints planning. You could visit Wiki's page on Planning Poker or continue to read this. I am no longer a developer, and the team dismissed long time ago. Anyway, for me to explain this easier, I will use present tense in the following. :) Our team consists of a Project Manager, a Product Owner, a Scrum Master, who is also the tech lead of the developers, 4 other developers and 2 QAs. It starts with the features o...

This post is only focus on including the App Role in the SAML response. Please refer to the following posts for Setup the App Role and Setup the SAML SSO . Once you have the App Role setup, the user.assignedroles will be made available in the claim source attributes. Just select that from drop down for your claim setup.

I actually tried to figure out the how-to from this article Application roles . 1. Go to Azure Active Directory > App Registrations For step 5, some tips/rules to follow. The displayName and value must be in one word, no space is allowed. I learn in hard way. The id can be generated using this Online GUID generator Also, in order to support multiple group assignment, the groupMembershipClaim in the manifest must be set to "All", the default value is null. See below: "groupMembershipClaims": "All", Once this is updated, the new Role will be visible in the user/group assignment. 7. Go to Azure Directory > Enterprise App > Your App > Users and Groups > Add User The user/group list will be displayed accordingly. Ta-da, done~ The roles setup in this way is meant for this special application only. To use the roles from Azure AD security group. I haven't check that out.

keytool -list -v -keystore [enter keystore file] -storepass [enter keystore password]

keytool -importkeystore -srckeystore pkcs12FileName.pfx -srcstoretype pkcs12 -destkeystore jksFileName.jks -deststoretype jks

When I was a developer, I was assigned to a project to enable SAML login from client's IDP to our application. That is the project I wanted to do. I did some study, and then was "requested" to help out a Java project. And someone else "requested" to do research and POC on behalf of myself, and I'll do the development. A funny arrangement by the management. I am trying to convince myself that I am not complaining, but I am not convinced though. Anyway... In my recent projects (and no longer a developer), I am involved in SAML setup related task. This is my second running on trial version on enterprise tool to figure out, how the client can setup SAML in order to connect to our application. :D Ignore all the unorganized setup in my Azure account. This is my first time using it, and free trial time is ticking. This post is mainly to setup the SAML-based sign-on to a 3rd party application in Azure AD. Click on the image to view the original size of it for ...

D2 : Cloud Data Security M6 : Ensure Compliance with Regulations and Controls IT Service Management (ITSM) Management and oversight to ensure alignment between IT and business. Configuration Management Maintain information about configuration items required to deliver an IT service, including their relationship. Change Management An approach to transitioning individuals, teams, and organizations to a desired future state. Respond to acustomer's changing business requirements Respond to business and IT requests Ensure changes are recorded and evaluated Ensure the authorized changes are prioritized, planned, tested, implemented, documented and reviewed in a controlled manner Ensure all changes to configuration items are recorded in configuration management system Optimize overall business risk. Incident Management To identify, analyze, and correct hazards to prevent a future re-occurrence of an incident. Event : A change of state that has significance for the mana...

OMG! I can't believe that it's a year passed by, and I did not write up for the last 2 topics that I'd like to covered in RHCE! Those posts were prepared after I have finished and passed RHCE. Anyway, I am in preparation for another certification, CCSP. Thought of "document" my study notes in order to help me to organize my notes, and also help me to reinforce my understanding on the topics. I am going to start from Domain 2. D2 : Cloud Data Security M1 : Understand Cloud Data Life Cycle Process overview This table is to layout the possible access and allowed access by functions/actor/location. The access control requirement and design can be retrieved from this table. M2 : Understand Implication of Cloud to Enterprise Risk Risk management Risk framework Key roles associate with data management Data subject : individual who is the subject of personal data Data controller : person who determines the purpose and how to process personal data...

This should be the third last topic that I'd like to share related to my RHCE course, but my brain just hang there without any progress. So I proceed with SELinux and firewall first. I am still trying to understand the networking terms, teaming and bridge are 2 new words that I learned from RH Admin III course. Actually, I still don't quite understand what is the usage for these. When I setup VirtualBox for this series of sharings, I started to understand more for bridge... Anyway, let me stay focus on the topic (how-to). The Network Manager commands (nmcli) are rather easy to use, if you know what you are trying to do. Network teaming I did some hacks to make 2 available interfaces, enp0s8 and enp0s10. Next, create a team master. This team master will configured to activebackup setting, i.e. one port/link is used while other reserved as backup. Now create the team slaves (team ports). Use teamdctl to see the status of the teaming. This is provided in teamd pac...

SELinux stands for NSA Security-Enhanced Linux. By default, the setting for SELinux is set at /etc/selinux/config. Theh default setup is permissive, which if the SELinux policy is violated, warnings will be logged rather than prohibit the service from running properly. SELinux config file content. In permissive mode, the log is captured in /var/log/audit/audit.log file. Port related Let's do a test. I set the httpd service also listen to port 1234, which is not a convention port number for httpd. When it is in permissive mode, the httpd service is successfully to restart. However, there's an entry in the audit.log file. When I set SELinux to enforcing, the service failed to start. This is the snippets of log when I get the status of httpd service. From the log in audit.log file and also the status log, port 1234 is the culprit. It should be added to related SELinux policy. I am adding the port to http_port_t as well. Now it can be successfully restarted! ...