Jeremy, Thanks for your help ! I found what the problem was. I ran a local copy of the UAA on my laptop, pointing to the cloud database and ran your testcases; it all worked as expected ! I was able t

#uaa

Hi Jon, I provided an update for #2 within the issue on Github. Caitlyn

Hi David, Done – Issue 906. I too have been involved in several conversations over the past several years about this, back in 2015 we had a meeting with Dieu Cao (Hi Dieu!) and the former chief securi

Hi Jeremy, Thanks for that testcase. I followed your testcase on our UAA Server except with one change; since we are setup with MFA, I used the uaac token sso to get Marissas token. The UAA app versio

#uaa

GOOD NEWS EVERYONE! We have a couple of presentations for tomorrow: Auto-patching of app images: Piyali Banerjee, CAPI, VMware New Quarks Secret feature: Mario Manno, Quarks, SUSE TT

Hi everyone, Glad to see this conversation happening. I've been involved in several conversations about this over the years but I'm not sure what public artifacts exist about these efforts. Historical

Hi Viraj, I couldn't replicate the issue you've described. While logs are always helpful, more helpful would be a small set up replicating the issue. For example, this is what I did to replicate your

#uaa

+1 on desiring everything to be encrypted on the network. We’re under the impression that Silk (apps.internal) traffic between cells is also unencrypted.

We may run into similar requirements for cloud.gov, so TLS everywhere would be A+.

Hi everyone, There has been a lot of excellent progress in securing all CF traffic with TLS and as far as I can tell there are only a few things that are still unencrypted. Is there a timeline or any

As of right now, we don't have any topics for discussion or presentations scheduled for the next CAB call. I'll keep polling project people informally on Slack, but if you have a topic you would like

Hello CF friends, Members of the CF K8s Networking team will be on zoom this Wednesday from 10-10:30am PDT hosting office hours for the project. We welcome questions related to routing, load balancing

Hi, everyone, VMware is nominating Amin Jamali for the Diego project lead in the Application Runtime PMC. Amin has worked at Pivotal and VMware as a core contributor to Cloud Foundry since 2015. Since

Hi, everyone, VMware is nominating Jeremy Morony for the UAA Project Lead in the Application Runtime PMC. Jeremy is a software engineer and manager at VMware who has been working with the UAA team sin

Hi, everyone, Josh Collins is stepping down from his role as the Diego project lead, as he is currently focused primarily on activities with the CF CLI team. The Diego team now has an opening for its

Hi, everyone, Pablo Schuhmacher, the Project Lead for the UAA team within the Application Runtime PMC, is stepping down from the project, as he is now focusing on product management responsibilities i

Jeremy, I upgraded to the latest UAA version 74.24.0 and I still see the same issue. Is there something I can provide from logs that might help ? Thanks, Viraj

#uaa

Hi Jeremy, Thanks for taklng the time to respond. Really appreciate it. I have double checked this many times. From Postman, I saw the request that is being sent and checked the bearer token to see th

#uaa

Hi Viraj, From the details provided it looks like the call to /introspect might be using the user's token in the authorize header instead of a client token. A successful curl request looks like: curl

#uaa

I increased the logging for the UAA and found this exception. The error message is "User is not anonymous". Any idea what this could mean? 09-10T17:34:55.74-0400 [APP/PROC/WEB/0] OUT [2020-09-10 21:34

#uaa