Sorry

This feed does not validate.

In addition, interoperability with the widest range of feed readers could be improved by implementing the following recommendations.

Source: http://www.msbiro.net/feeds/posts/default?alt=rss

  1. <?xml version='1.0' encoding='UTF-8'?><rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:openSearch="http://a9.com/-/spec/opensearchrss/1.0/" xmlns:blogger="http://schemas.google.com/blogger/2008" xmlns:georss="http://www.georss.org/georss" xmlns:gd="http://schemas.google.com/g/2005" xmlns:thr="http://purl.org/syndication/thread/1.0" version="2.0"><channel><atom:id>tag:blogger.com,1999:blog-3402937132740268182</atom:id><lastBuildDate>Thu, 28 Mar 2024 16:52:09 +0000</lastBuildDate><category>IBM Sametime</category><category>IBM Connections</category><category>Domino</category><category>HCL Connections</category><category>IBM Domino</category><category>Lotus Domino</category><category>IBM Domino 9.0</category><category>IBM Notes 9.0.1</category><category>webinar</category><category>fix</category><category>IBM Smartcloud</category><category>IBM Verse</category><category>8.5.3</category><category>IBM Domino 9.0.1</category><category>IBM Connections cloud</category><category>factor-y</category><category>Tips</category><category>IBM CHAMPION</category><category>HCL COnnections 7.0</category><category>ibm connections 5.5</category><category>IBM Notes 9.0</category><category>Lotus Traveler</category><category>webcast</category><category>Lotus Notes</category><category>interim fix</category><category>IBM DOmino 10</category><category>IBM Traveler</category><category>Ubuntu</category><category>ibm connections 6.0</category><category>letsconnect</category><category>HCL Sametime</category><category>IBM Traveler 9.0.1</category><category>quickr</category><category>IBM</category><category>Linux</category><category>SSL</category><category>Sametime Proxy</category><category>Security</category><category>Firefox</category><category>IBM connections 5</category><category>IF1</category><category>Sametime 9</category><category>lotus notes 8.5.3</category><category>Cumulative Fix</category><category>Dominopoint</category><category>HCL Domino</category><category>Public Beta</category><category>docker</category><category>fixpack</category><category>iconuk</category><category>inotes</category><category>9.0.1</category><category>Android</category><category>CR1</category><category>IBM Traveler 9.0</category><category>IBM Traveler 9.0.0.1</category><category>hotfix</category><category>iNotes 9</category><category>ibm websphere</category><category>roadmap</category><category>Conjur</category><category>Documentazione</category><category>FP3</category><category>FP5</category><category>HCL Ambassador</category><category>HCL Connections 6.5</category><category>IBM Connections 4.0</category><category>IBM Connections 4.5</category><category>IBM Verse on premise</category><category>IBM mail support outlook</category><category>Lotus</category><category>connections</category><category>cyberark</category><category>cyberark conjur</category><category>docs 2.0</category><category>domino 9.0.1</category><category>howto</category><category>ibm docs</category><category>ibm notes</category><category>mobile</category><category>notes</category><category>social connections</category><category>was</category><category>11.10</category><category>CR2</category><category>JVM</category><category>MacOSX</category><category>Sametime</category><category>domino2025</category><category>ephox</category><category>fp1</category><category>hcl</category><category>icaa</category><category>imsmo</category><category>ip address</category><category>language pack</category><category>policy</category><category>smtp</category><category>support</category><category>tls</category><category>xpages</category><category>8.5.2</category><category>8.5.3 Upgrade Pack 1</category><category>8.5.3 Upgrade Pack 2</category><category>Beta</category><category>CR3</category><category>Collaborations</category><category>Component pack</category><category>Domino Update Pack</category><category>Domino V11</category><category>ENGAGEUG</category><category>HCL Dx</category><category>HCL Notes</category><category>IBM Connections 3.0.1</category><category>IBM DB2</category><category>IBM Http server</category><category>ICS</category><category>IOS</category><category>Link</category><category>MOM</category><category>Mac</category><category>Suse</category><category>admin</category><category>apple</category><category>browser</category><category>domino point day</category><category>domino10</category><category>feature pack 8</category><category>files</category><category>hcl connections 8.0</category><category>iNotes 9.0.1</category><category>iOS8</category><category>ibm client application access</category><category>ibm connect</category><category>ibm connect 2017</category><category>ibm connections content manager</category><category>ibm notes 10</category><category>ibm watson workspace</category><category>ihs</category><category>internet explorer 9</category><category>jam</category><category>jump session</category><category>mail</category><category>nomination</category><category>offline</category><category>panagenda</category><category>smartcloud</category><category>vop</category><category>websphere application server</category><category>windows 10</category><category>wsadmin</category><category>1.0.1</category><category>2015</category><category>3.0.1</category><category>64bit</category><category>8.5.1</category><category>9.0.1.6</category><category>9.0.1.7</category><category>APNS</category><category>Annuncio</category><category>CNCF</category><category>CR5</category><category>Chrome</category><category>Cisco</category><category>Cloud</category><category>Connections 5</category><category>ESR</category><category>Fp2</category><category>Google +</category><category>GreenHouse</category><category>HCL Digital experience 9.5</category><category>HCL Master</category><category>HCL Volt</category><category>HCL collaboration</category><category>IBM Installation Manager</category><category>IBM Traveler 9.0.1.4</category><category>IBM e HCL</category><category>ICON UK</category><category>IF2</category><category>IF5</category><category>Lotus Symphony</category><category>Lotus Traveler 9</category><category>LotusSphere</category><category>NewWayToWork</category><category>Notes 9.0.1</category><category>Silent install</category><category>Social Edition</category><category>Traveler 9.0.1</category><category>VMware</category><category>Virtualizzazione</category><category>XWork Server</category><category>antispam</category><category>ats</category><category>certificazione</category><category>cfix</category><category>clientID</category><category>community server</category><category>container</category><category>dac</category><category>daos</category><category>developer works</category><category>ed brill</category><category>engage2019</category><category>evento</category><category>feature pack 10</category><category>fp4</category><category>from zero to hero</category><category>guide</category><category>ibm client appication access</category><category>ibm connections pink</category><category>ibm domino application cloud</category><category>ibm jump session</category><category>ibm mail onbboarding manager</category><category>ibm social connections</category><category>id vault</category><category>index</category><category>italia</category><category>java</category><category>java 8</category><category>kubecon</category><category>kubernetes</category><category>meetIT</category><category>metrics</category><category>novità</category><category>relay</category><category>silent</category><category>soccnx</category><category>soluzione</category><category>sync</category><category>teamstudio</category><category>tlcc</category><category>usergroup</category><category>watson at work</category><category>websphere liberty</category><category>websphere portal</category><category>what&#39;s new</category><category>widgets</category><category>yosemite</category><category>1.2</category><category>1.3</category><category>10.0.1</category><category>10.10</category><category>10.7.2</category><category>10.8</category><category>100%</category><category>11.5</category><category>12.0.1</category><category>12.04</category><category>2.0.1.1</category><category>2016</category><category>2017</category><category>3.0</category><category>3.0.1 fp2</category><category>4.5.1</category><category>6 CR4</category><category>8.5.3FP1</category><category>8.5.4</category><category>9</category><category>9.0</category><category>9.0.1.14</category><category>9.0.1.5</category><category>9.0.1.8</category><category>ACTION REQUIREd</category><category>ADMG0011E</category><category>Active Directory</category><category>Activities Plus</category><category>Andrea Fontana</category><category>Ansible</category><category>ApplicationInsights</category><category>BP</category><category>Beta2</category><category>Blindcopy</category><category>Button</category><category>CE</category><category>Chrome 15</category><category>Chrome 29</category><category>Collaboration solution community</category><category>Communities</category><category>Companion</category><category>Connections 4 files</category><category>Connections 4 profiles</category><category>Connections 6</category><category>Connections Cloud.roadmap</category><category>DB2</category><category>Daniel Nashed</category><category>Ddive</category><category>EOS</category><category>Engage 2018</category><category>Engage 2020</category><category>Entitlements</category><category>Europa</category><category>FP</category><category>FP34</category><category>FP4 IF1</category><category>FP9 IF2 disponibile</category><category>Firefox 34</category><category>Forward</category><category>GDPR</category><category>Gnome Shell</category><category>Google</category><category>Google Apps</category><category>HCL Connections Mail</category><category>HCL Digital Solutions Academy</category><category>HCL Digital experience</category><category>HCL Docs</category><category>HCL Nomad</category><category>HCL Nomad web</category><category>HCL cloud service</category><category>HCT Traveler</category><category>HOMEPAGE</category><category>IBM Connections Chat</category><category>IBM Connections Content Manager 4.5</category><category>IBM Connections Plug-ins</category><category>IBM Domnino</category><category>IBM Forms</category><category>IBM KEYMAN</category><category>IBM Mail next</category><category>IBM Redbooks</category><category>IBM Security directory server</category><category>IBM Security directory suite</category><category>IBM Think</category><category>IBM Traveler 10</category><category>IBM Traveler 9.0.1.11</category><category>IBM Traveler 9.0.1.3</category><category>IBM Traveler 9.0.1.8</category><category>IBM WebSphere 8.5.5</category><category>IBM WebSphere Portal Express</category><category>IBMer</category><category>ICSUG</category><category>IF3</category><category>IF4</category><category>IF6</category><category>IF7</category><category>IF8</category><category>IFR1</category><category>IFR2</category><category>IKEIMAN</category><category>IOS5</category><category>Installation Manager</category><category>Intel</category><category>K3806-Z</category><category>KYRTOOL</category><category>LDAP</category><category>LS12</category><category>LUG</category><category>Licenza</category><category>Lion</category><category>Lissone</category><category>Lotus Protector</category><category>Mac OSX</category><category>Macbook</category><category>MarvelClient</category><category>Metro</category><category>Mojave</category><category>NetApp</category><category>Notes 10</category><category>Notes 9.0</category><category>Notes V11</category><category>Officescan</category><category>Open Source</category><category>OpenSSF</category><category>Pages</category><category>Plugin</category><category>RedHat</category><category>Redirect</category><category>René</category><category>Rob Novak</category><category>SIGHUP</category><category>SPNEGO</category><category>SSH</category><category>Sameitme 9</category><category>Sametime Entry</category><category>Sametime Interim Feature</category><category>Sametime V11</category><category>Sametime mobile</category><category>Sametime10</category><category>SmartCloud Notes</category><category>Social</category><category>System Console</category><category>TEC</category><category>THINKMILANO</category><category>Trend Micro</category><category>Ubuntu 12.04</category><category>Ubuntu One</category><category>User group WHWHY</category><category>V11</category><category>VodafoneKey</category><category>WebSphere Porta</category><category>Websphere</category><category>Websphere Proxy</category><category>Windows 8</category><category>Windows Phone</category><category>X11</category><category>active sync</category><category>activity</category><category>admin tool</category><category>administration</category><category>agenda</category><category>aha!</category><category>akamai</category><category>allert</category><category>antivirus</category><category>apple ats</category><category>av</category><category>awareness</category><category>black screen a tutto schermo</category><category>blog.msbiro.net</category><category>bluemix</category><category>c5</category><category>cache</category><category>cell</category><category>certificate error fix</category><category>certificati</category><category>cf12</category><category>client</category><category>communicy</category><category>community</category><category>community meeting</category><category>compatibilita</category><category>conenctions chat</category><category>conferenze</category><category>conflict</category><category>conjur architettura</category><category>conjur authenticator</category><category>conjur enterprise</category><category>conjur integrazioni</category><category>conjur system requirements</category><category>connections 5 cr1</category><category>connections 6 cr5</category><category>connections cloud notes</category><category>connections day</category><category>connections expert</category><category>containerday</category><category>contribuzione</category><category>conversione</category><category>corporate</category><category>cpu</category><category>creazione intanza</category><category>customizer</category><category>customizzazione</category><category>cve-2021-44228</category><category>db2 11.1</category><category>db2 11.5.6</category><category>dbmt</category><category>dd12</category><category>deepdive</category><category>demo</category><category>deploy</category><category>derby</category><category>desktop plugin</category><category>developement</category><category>developers</category><category>devsecops</category><category>devsecopsday</category><category>dictionary</category><category>disponibile</category><category>dkim</category><category>dmark</category><category>dns</category><category>docs</category><category>domino 2025</category><category>domino directory</category><category>download</category><category>dx 9.5</category><category>eclipse</category><category>elasticSearch</category><category>email</category><category>end of life</category><category>end of service</category><category>end of support</category><category>engagement center</category><category>esclusioni</category><category>exchange</category><category>explorer</category><category>factory tour</category><category>feature pack 1</category><category>feture pack 2</category><category>feture pack 9</category><category>file</category><category>file owner</category><category>firefox 31</category><category>firefox esr</category><category>firewall</category><category>follower</category><category>fp10</category><category>fp36</category><category>fp6</category><category>fp8</category><category>fp9</category><category>francie tanner</category><category>future</category><category>glossary</category><category>group chat</category><category>gsk5</category><category>hcl forum</category><category>hcl support</category><category>hclconnections</category><category>hclmsp</category><category>header</category><category>hybrid</category><category>hyper-v</category><category>hypervisor</category><category>iOS6</category><category>iOS7</category><category>ibm community meeting</category><category>ibm connection 6.0</category><category>ibm connections docs</category><category>ibm connections editor</category><category>ibm connections meeting</category><category>ibm domino 10.0.1</category><category>ibm messaging</category><category>ibm sametime connect</category><category>ibm traveler 9.0.1.18</category><category>ibm traveler 9.0.1.9</category><category>ibm traveler push</category><category>ibm watson</category><category>ibm wesbphere portal</category><category>ibmconnect</category><category>ical</category><category>idee</category><category>ifix004</category><category>ifttt</category><category>image</category><category>imcl</category><category>impact</category><category>init script</category><category>integration</category><category>integration server</category><category>integrations</category><category>interrogazione</category><category>introduzione</category><category>ios9</category><category>ip</category><category>isw</category><category>jams</category><category>journal</category><category>jwt</category><category>kcd</category><category>kcd italia</category><category>kdb</category><category>kubetrain</category><category>kubeweekly</category><category>kudos analytics</category><category>kudos boards</category><category>lancio</category><category>ldd</category><category>leap second</category><category>libraries.</category><category>library</category><category>live update</category><category>lockout</category><category>log</category><category>log4j</category><category>londra</category><category>madrid</category><category>mailbox</category><category>manageprofile</category><category>marzo</category><category>meeting</category><category>meeting classico</category><category>microsoft 365</category><category>monaco.</category><category>mongodb</category><category>monitor</category><category>move</category><category>msp</category><category>multi account</category><category>net2action</category><category>notes 10.0.1</category><category>notes domino</category><category>notes traveler</category><category>nproc</category><category>nuovo lavoro</category><category>oVirt</category><category>openSUSE</category><category>openntf</category><category>openssl</category><category>orient me</category><category>orientme</category><category>osx10.11</category><category>padding</category><category>panagenda applicationinsights</category><category>partizioni</category><category>partnumber</category><category>password</category><category>path</category><category>pmr</category><category>poddle</category><category>podman</category><category>portal</category><category>postgres</category><category>problemi</category><category>profili</category><category>ptr</category><category>quota</category><category>refresh pack</category><category>replica</category><category>reverse</category><category>risorse</category><category>routing</category><category>sametime 11.6</category><category>sametime connect</category><category>script</category><category>searc</category><category>search</category><category>secrets manager</category><category>secure containers</category><category>select</category><category>serial</category><category>servizi cloud</category><category>session</category><category>sha-2</category><category>skype</category><category>skyppe chat</category><category>slack</category><category>sles11sp2</category><category>sles12</category><category>slides</category><category>smartcloud for social business</category><category>snyk</category><category>socialbizug</category><category>spiffie</category><category>sql xj040</category><category>sso</category><category>stlinks</category><category>streaming</category><category>sviluppo</category><category>synchronizer</category><category>team studio</category><category>technote</category><category>template</category><category>template v10</category><category>textbox.io</category><category>tiny</category><category>transactional log</category><category>tuning</category><category>tuning guide</category><category>update windows</category><category>updatesite</category><category>vasvm035E</category><category>vers on prem</category><category>verse</category><category>verse on prem</category><category>verse on premises</category><category>verse onprem</category><category>volontario</category><category>vop 1.0.6</category><category>vps_preferred</category><category>watson workspace</category><category>wifi</category><category>wiki policy</category><category>windows</category><category>windows  10</category><category>windows server 2012R2</category><category>windows server 2019.attivazione</category><category>wizard</category><category>wps</category><title>www.msbiro.net</title><description>I work as Senior DevSecOps Engineer @sighup and I&#39;m proud to be the team leader of my group.! #shiftleft #cybersecurity. This blogpost are my own !</description><link>https://www.msbiro.net/</link><managingEditor>noreply@blogger.com (Matteo Bisi)</managingEditor><generator>Blogger</generator><openSearch:totalResults>641</openSearch:totalResults><openSearch:startIndex>1</openSearch:startIndex><openSearch:itemsPerPage>25</openSearch:itemsPerPage><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-6231846133641803415</guid><pubDate>Thu, 28 Mar 2024 08:00:00 +0000</pubDate><atom:updated>2024-03-28T09:00:00.127+01:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">conferenze</category><category domain="http://www.blogger.com/atom/ns#">kubecon</category><category domain="http://www.blogger.com/atom/ns#">risorse</category><title>KubeCon 2024: perchè partecipare ad una conferenza è importante ed alcune risorse utili</title><description>&lt;p&gt;La scorsa settimana ho avuto il piacere di partecipare alla KubeCon 2024 EU di Parigi, motivo per cui devo iniziare queste righe ringraziando &lt;a href=&quot;https://www.sighup.io/&quot; target=&quot;_blank&quot;&gt;SIGHUP&lt;/a&gt; che mi ha dato l&#39;opportunità di partecipare alla seconda KubeCon consecutiva, GRAZIE!&amp;nbsp;&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Ho deciso di scrivere queste righe per cercare di motivare chi non è mai andato ad un evento di grandi dimensioni a partecipare!&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;&lt;b&gt;In questo caso, le dimensioni contano !&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Se sei dentro al mondo cloud native come cliente, dev, consulente o big vendor, non puoi mancare! Colleghi, clienti, partner, competitor, maintainer di piccoli progetti, comitati volontari, big corporation, saranno tutti presenti!&lt;/p&gt;&lt;p&gt;&lt;br /&gt;E&#39; un occasione unica per incontrare persone, parlare, confrontarsi e stabilire relazioni.&lt;/p&gt;&lt;p&gt;In molti casi può capitare di imbattersi in altri attendee e semplicemente sentendoli parlare o spiegare i loro problemi o esigenze, possono aprirsi scenari a cui non avevate pensato!&amp;nbsp;&lt;/p&gt;&lt;p&gt;Se fate consulenza o siete clienti, probabilmente nell&#39;area dello show case, incontrerete vendor con cui lavorate durante l&#39;anno e probabilmente sarà l&#39;occasione di conoscere direttamente tecnici, sales representative o executive che poi si ricorderanno di voi o della vostra azienda durante l&#39;anno.&amp;nbsp;&lt;/p&gt;&lt;p&gt;Gli immancabili gadget come magliette, calze o adesivi possono poi essere un piacevole ulteriore incentivo.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;&lt;b&gt;Formazione&amp;nbsp;&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Conferenza ovviamente significa principalmente sessioni!&amp;nbsp;&lt;/p&gt;&lt;p&gt;Si ha la possibilità di ascoltare alcune delle voci piu autorevoli parlare degli argomenti con cui si lavora, sia che siano sessioni business o tecniche!&amp;nbsp;&lt;/p&gt;&lt;p&gt;Da non sottovalutare la possibilità di fare domande nel Q&amp;amp;A successivo alla sessione o di scambiare 2 chiacchere con lo speaker subito dopo.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;&lt;b&gt;Community&lt;/b&gt;&lt;/p&gt;&lt;p&gt;KubeCon significa community, non dimentichiamo che i progetti CNCF si basano sulla community opensource, che si può collaborare in molti livelli, e quale occasione migliore per incontrare e dare un volto alle persone con cui magari chatti durante l&#39;anno su Slack?&amp;nbsp;&lt;/p&gt;&lt;p&gt;Immergersi nella commuity è un occasione unica alla fine del primo trimestre che ti permette di mettere in pausa i progetti (nel limite del possibile 😅), ricaricare le pile e di riprendere carico e determinato!&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;&lt;b&gt;Risorse&lt;/b&gt;&lt;/p&gt;&lt;p&gt;Che siate stati presenti o meno, non potete certo aver seguito tutte le sessioni che vi interessavano o averle già trovate dai social! La CNCF riprende tutte le sessioni, mette a disposizione i video e le presentazioni, praticamente in tempo reale: WOW.&lt;/p&gt;&lt;p&gt;All&#39;interno dell&#39;agenda &lt;a href=&quot;https://kccnceu2024.sched.com/?iframe=no&quot; target=&quot;_blank&quot;&gt;potete trovare tutto&lt;/a&gt;, i video ovviamente sono disponibili nel &lt;a href=&quot;https://www.youtube.com/@cncf/videos&quot; target=&quot;_blank&quot;&gt;canale YouTube&lt;/a&gt; della CNCF, ed è disponibile &lt;a href=&quot;https://www.flickr.com/photos/143247548@N03/albums/72177720315561784/&quot; target=&quot;_blank&quot;&gt;un album fotografico&lt;/a&gt; di oltre 5000 foto da consultare!&lt;/p&gt;&lt;p&gt;Avete già voglia di pianificare la prossima conferenza?&amp;nbsp;&amp;nbsp;&lt;/p&gt;&lt;p&gt;Potete trovare le conferenze patrocinate CNCF &lt;a href=&quot;https://www.cncf.io/events/?utm_campaign=kubeconeu24&amp;amp;utm_content=287370883&amp;amp;utm_medium=social&amp;amp;utm_source=twitter&amp;amp;hss_channel=tw-3286770860&quot; target=&quot;_blank&quot;&gt;in questa pagina&lt;/a&gt;, io sarò presente al &lt;a href=&quot;https://kcd.pizza/&quot; target=&quot;_blank&quot;&gt;KCD Italy&lt;/a&gt; di Giugno a Bologna e voi?&amp;nbsp;&lt;/p&gt;</description><link>https://www.msbiro.net/2024/03/kubecon-2024-perche-partecipare.html</link><author>noreply@blogger.com (Matteo Bisi)</author><thr:total>0</thr:total><georss:featurename>Galway, Irlanda</georss:featurename><georss:point>53.274001 -9.0512661999999988</georss:point><georss:box>24.963767163821153 -44.2075162 81.584234836178837 26.1049838</georss:box></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-4155440082892523913</guid><pubDate>Thu, 01 Feb 2024 12:04:00 +0000</pubDate><atom:updated>2024-02-01T13:04:06.410+01:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">Conjur</category><category domain="http://www.blogger.com/atom/ns#">cyberark</category><title>CyberArk Conjur 13.2 disponibile: un altro passo nella giusta direzione</title><description>&lt;p&gt;&lt;span style=&quot;font-size: 11pt; white-space-collapse: preserve;&quot;&gt;Da circa una settimana CyberArk ha rilasciato &lt;a href=&quot;https://docs.cyberark.com/conjur-enterprise/latest/en/Content/Enterprise/WhatsNew.htm?tocpath=Get%20started%7C_____2&quot; target=&quot;_blank&quot;&gt;Conjur Enterprise13.2&lt;/a&gt; ed è decisamente un ulteriore passo nella giusta direzione!&lt;/span&gt;&lt;/p&gt;&lt;br /&gt;&lt;p dir=&quot;ltr&quot; style=&quot;line-height: 1.38; margin-bottom: 0pt; margin-top: 0pt;&quot;&gt;&lt;span face=&quot;Arial, sans-serif&quot; style=&quot;font-size: 11pt; font-variant-alternates: normal; font-variant-east-asian: normal; font-variant-numeric: normal; font-variant-position: normal; vertical-align: baseline; white-space-collapse: preserve;&quot;&gt;Questa versione oltre ai bugfix, espande le integrazioni di Conjur (es ora OpenShift 4.14 è supportato), introduce diverse novità alcune quality of life, altre invece di rilievo assoluto come:&lt;/span&gt;&lt;/p&gt;&lt;br /&gt;&lt;ul style=&quot;margin-bottom: 0px; margin-top: 0px; padding-inline-start: 48px;&quot;&gt;&lt;li aria-level=&quot;1&quot; dir=&quot;ltr&quot; style=&quot;font-family: Arial, sans-serif; font-size: 11pt; font-variant-alternates: normal; font-variant-east-asian: normal; font-variant-numeric: normal; font-variant-position: normal; list-style-type: disc; vertical-align: baseline; white-space: pre;&quot;&gt;&lt;p dir=&quot;ltr&quot; role=&quot;presentation&quot; style=&quot;line-height: 1.38; margin-bottom: 0pt; margin-top: 12pt;&quot;&gt;&lt;span style=&quot;font-size: 11pt; font-variant-alternates: normal; font-variant-east-asian: normal; font-variant-numeric: normal; font-variant-position: normal; text-wrap: wrap; vertical-align: baseline;&quot;&gt;CyberArk Vault Synchroniser high availability support&lt;/span&gt;&lt;/p&gt;&lt;/li&gt;&lt;li aria-level=&quot;1&quot; dir=&quot;ltr&quot; style=&quot;font-family: Arial, sans-serif; font-size: 11pt; font-variant-alternates: normal; font-variant-east-asian: normal; font-variant-numeric: normal; font-variant-position: normal; list-style-type: disc; vertical-align: baseline; white-space: pre;&quot;&gt;&lt;p dir=&quot;ltr&quot; role=&quot;presentation&quot; style=&quot;line-height: 1.38; margin-bottom: 12pt; margin-top: 0pt;&quot;&gt;&lt;span style=&quot;font-size: 11pt; font-variant-alternates: normal; font-variant-east-asian: normal; font-variant-numeric: normal; font-variant-position: normal; text-wrap: wrap; vertical-align: baseline;&quot;&gt;Enhanced Conjur to support Container Storage Interface (CSI) driver&lt;/span&gt;&lt;/p&gt;&lt;/li&gt;&lt;/ul&gt;&lt;br /&gt;&lt;p dir=&quot;ltr&quot; style=&quot;line-height: 1.38; margin-bottom: 0pt; margin-top: 0pt;&quot;&gt;&lt;span face=&quot;Arial, sans-serif&quot; style=&quot;font-size: 11pt; font-variant-alternates: normal; font-variant-east-asian: normal; font-variant-numeric: normal; font-variant-position: normal; vertical-align: baseline; white-space-collapse: preserve;&quot;&gt;La novità relativa al synchroniser, permette di avere un installazione passiva, aware dello stato della primaria che in caso di fail interviene autonomamente. Questa nuova funzionalità permette ai clienti una ottimizzazione di strategia e di risorse nella pianificazione ed adozione di Conjur quando è richiesto un disaster recovery plan!&lt;/span&gt;&lt;/p&gt;&lt;p dir=&quot;ltr&quot; style=&quot;line-height: 1.38; margin-bottom: 0pt; margin-top: 0pt;&quot;&gt;&lt;span face=&quot;Arial, sans-serif&quot; style=&quot;font-size: 11pt; font-variant-alternates: normal; font-variant-east-asian: normal; font-variant-numeric: normal; font-variant-position: normal; vertical-align: baseline; white-space-collapse: preserve;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/p&gt;&lt;p dir=&quot;ltr&quot; style=&quot;line-height: 1.38; margin-bottom: 0pt; margin-top: 0pt;&quot;&gt;&lt;span face=&quot;Arial, sans-serif&quot; style=&quot;font-size: 11pt; font-variant-alternates: normal; font-variant-east-asian: normal; font-variant-numeric: normal; font-variant-position: normal; vertical-align: baseline; white-space-collapse: preserve;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/p&gt;&lt;p dir=&quot;ltr&quot; style=&quot;line-height: 1.38; margin-bottom: 0pt; margin-top: 0pt;&quot;&gt;&lt;span face=&quot;Arial, sans-serif&quot; style=&quot;font-size: 11pt; font-variant-alternates: normal; font-variant-east-asian: normal; font-variant-numeric: normal; font-variant-position: normal; vertical-align: baseline; white-space-collapse: preserve;&quot;&gt;Il supporto del CSI driver invece permette di poter gestire i secrets in modo sicuro bypassando la necessità di ricorrere a sidecar/init container, quindi in caso si adotti questa strategia di erogazione secrets, garantisce un risparmio di risorse impiegate.&lt;br /&gt;&lt;/span&gt;&lt;/p&gt;&lt;br /&gt;&lt;p dir=&quot;ltr&quot; style=&quot;line-height: 1.38; margin-bottom: 0pt; margin-top: 0pt;&quot;&gt;&lt;span face=&quot;Arial, sans-serif&quot; style=&quot;font-size: 11pt; font-variant-alternates: normal; font-variant-east-asian: normal; font-variant-numeric: normal; font-variant-position: normal; vertical-align: baseline; white-space-collapse: preserve;&quot;&gt;Mi occupo di installazioni e gestioni di CyberArk Conjur da quasi 2 anni e voglio dire che il prodotto è in costante evoluzione release dopo release, aumentando integrazioni, supporti e quality of life release dopo release, quindi Kudos to CyberArk, ottimo lavoro !&lt;/span&gt;&lt;/p&gt;&lt;br /&gt;&lt;p dir=&quot;ltr&quot; style=&quot;line-height: 1.38; margin-bottom: 0pt; margin-top: 0pt;&quot;&gt;&lt;span face=&quot;Arial, sans-serif&quot; style=&quot;font-size: 11pt; font-variant-alternates: normal; font-variant-east-asian: normal; font-variant-numeric: normal; font-variant-position: normal; vertical-align: baseline; white-space-collapse: preserve;&quot;&gt;Per chi è nuovo sull&#39;argomento , &lt;/span&gt;&lt;a href=&quot;https://www.msbiro.net/search?q=conjur&quot; style=&quot;text-decoration-line: none;&quot;&gt;&lt;span face=&quot;Arial, sans-serif&quot; style=&quot;color: #1155cc; font-size: 11pt; font-variant-alternates: normal; font-variant-east-asian: normal; font-variant-numeric: normal; font-variant-position: normal; text-decoration-line: underline; text-decoration-skip-ink: none; vertical-align: baseline; white-space-collapse: preserve;&quot;&gt;CyberArk Conjur è un secrets manager&lt;/span&gt;&lt;/a&gt;&lt;span face=&quot;Arial, sans-serif&quot; style=&quot;font-size: 11pt; font-variant-alternates: normal; font-variant-east-asian: normal; font-variant-numeric: normal; font-variant-position: normal; vertical-align: baseline; white-space-collapse: preserve;&quot;&gt; ed è disponibile in 3 differenti versioni:&lt;/span&gt;&lt;/p&gt;&lt;br /&gt;&lt;ul style=&quot;margin-bottom: 0px; margin-top: 0px; padding-inline-start: 48px;&quot;&gt;&lt;li aria-level=&quot;1&quot; dir=&quot;ltr&quot; style=&quot;font-family: Arial, sans-serif; font-size: 11pt; font-variant-alternates: normal; font-variant-east-asian: normal; font-variant-numeric: normal; font-variant-position: normal; list-style-type: disc; vertical-align: baseline; white-space: pre;&quot;&gt;&lt;p dir=&quot;ltr&quot; role=&quot;presentation&quot; style=&quot;line-height: 1.38; margin-bottom: 0pt; margin-top: 0pt;&quot;&gt;&lt;a href=&quot;https://www.cyberark.com/products/secrets-manager-enterprise/&quot; style=&quot;text-decoration-line: none;&quot;&gt;&lt;span style=&quot;color: #1155cc; font-size: 11pt; font-variant-alternates: normal; font-variant-east-asian: normal; font-variant-numeric: normal; font-variant-position: normal; text-decoration-line: underline; text-decoration-skip-ink: none; text-wrap: wrap; vertical-align: baseline;&quot;&gt;Enterprise&lt;/span&gt;&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&lt;li aria-level=&quot;1&quot; dir=&quot;ltr&quot; style=&quot;font-family: Arial, sans-serif; font-size: 11pt; font-variant-alternates: normal; font-variant-east-asian: normal; font-variant-numeric: normal; font-variant-position: normal; list-style-type: disc; vertical-align: baseline; white-space: pre;&quot;&gt;&lt;p dir=&quot;ltr&quot; role=&quot;presentation&quot; style=&quot;line-height: 1.38; margin-bottom: 0pt; margin-top: 0pt;&quot;&gt;&lt;a href=&quot;https://www.conjur.org&quot; style=&quot;text-decoration-line: none;&quot;&gt;&lt;span style=&quot;color: #1155cc; font-size: 11pt; font-variant-alternates: normal; font-variant-east-asian: normal; font-variant-numeric: normal; font-variant-position: normal; text-decoration-line: underline; text-decoration-skip-ink: none; text-wrap: wrap; vertical-align: baseline;&quot;&gt;Opensource&lt;/span&gt;&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&lt;li aria-level=&quot;1&quot; dir=&quot;ltr&quot; style=&quot;font-family: Arial, sans-serif; font-size: 11pt; font-variant-alternates: normal; font-variant-east-asian: normal; font-variant-numeric: normal; font-variant-position: normal; list-style-type: disc; vertical-align: baseline; white-space: pre;&quot;&gt;&lt;p dir=&quot;ltr&quot; role=&quot;presentation&quot; style=&quot;line-height: 1.38; margin-bottom: 0pt; margin-top: 0pt;&quot;&gt;&lt;a href=&quot;https://docs.cyberark.com/conjur-cloud/latest/en/Content/ConjurCloud/cl_ConjurCloudOverview.htm?tocpath=Get%20started%7C_____1&quot; style=&quot;text-decoration-line: none;&quot;&gt;&lt;span style=&quot;color: #1155cc; font-size: 11pt; font-variant-alternates: normal; font-variant-east-asian: normal; font-variant-numeric: normal; font-variant-position: normal; text-decoration-line: underline; text-decoration-skip-ink: none; text-wrap: wrap; vertical-align: baseline;&quot;&gt;Cloud&lt;/span&gt;&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&lt;/ul&gt;</description><link>https://www.msbiro.net/2024/02/conjur-13-2-disponibile-un-passo-nella-giusta-direzione.html</link><author>noreply@blogger.com (Matteo Bisi)</author><thr:total>0</thr:total><georss:featurename>Galway, Irlanda</georss:featurename><georss:point>53.274001 -9.0512661999999988</georss:point><georss:box>24.963767163821153 -44.2075162 81.584234836178837 26.1049838</georss:box></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-6667424231395607620</guid><pubDate>Thu, 25 Jan 2024 22:42:00 +0000</pubDate><atom:updated>2024-01-25T23:42:44.355+01:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">CNCF</category><category domain="http://www.blogger.com/atom/ns#">kubeweekly</category><title>CNCF Kubeweekly porta le notizie Kubernetes nella vostra inbox</title><description>&lt;p&gt;Come ho già scritto &lt;a href=&quot;https://www.msbiro.net/2023/11/contribuire-a-progetti-open-source-cncf-openssf-glossary-team-italiano.html&quot; target=&quot;_blank&quot;&gt;in questo post&lt;/a&gt;, apprezzo e appoggio le iniziative di tipo &quot;community&quot; che facciano parte della mia sfera lavorativa.&lt;/p&gt;&lt;p&gt;Questo è sempre stato un mio modo di essere e continuerò a farlo nel corso della mia carriera.&amp;nbsp;&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Oggi volevo parlare di Kubeweekly, newsletter settimanale che la CNCF, contenente news inerenti a Kubernetes ed al landscape CNCF.&lt;/p&gt;&lt;p&gt;In &lt;a href=&quot;https://www.cncf.io/kubeweekly/&quot; target=&quot;_blank&quot;&gt;questa pagina &lt;/a&gt;potete consultare lo storico delle uscite ed iscrivervi se lo desiderate.&lt;/p&gt;&lt;p&gt;Durante la prima metà del 2024 sarò uno degli editor che aiuteranno a curare il contenuto della newsletter, quindi non esitate ad iscrivervi !&lt;/p&gt;</description><link>https://www.msbiro.net/2024/01/cncf-cubeweekly-.html</link><author>noreply@blogger.com (Matteo Bisi)</author><thr:total>0</thr:total><georss:featurename>Galway, Irlanda</georss:featurename><georss:point>53.274001 -9.0512661999999988</georss:point><georss:box>24.963767163821153 -44.2075162 81.584234836178837 26.1049838</georss:box></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-4511786548851903645</guid><pubDate>Wed, 17 Jan 2024 18:57:00 +0000</pubDate><atom:updated>2024-01-17T20:05:16.487+01:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">kcd</category><category domain="http://www.blogger.com/atom/ns#">kcd italia</category><title>Kubernetes Community Days Italia 2024</title><description>&lt;p&gt;Post rapido per segnalarvi che è stato annunciato il &lt;a href=&quot;https://community.cncf.io/kcd-italy/&quot; target=&quot;_blank&quot;&gt;KCD Italy 2024&lt;/a&gt;, che avrà luogo (per la prima volta) a Bologna il prossimo 20 Giugno 2024!&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;div class=&quot;separator&quot; style=&quot;clear: both; text-align: center;&quot;&gt;&lt;a href=&quot;https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUZlu6yCvgTIQAjJIQFgZBRS75tkiWrEgNDUscvyojGrLDM7_ePwsbbonVvFRmZ1fUXW9RreSGcurpR7SMVMwJaLacNlmJrtTeTk6X2LpAQ95SfwvsB3T1CGapWyBE_NmfJN-8NWGienZgiGRMiZ8GSv4vCAa0utQuvoNpP-pe8VwDiXLROeTqGl4IwM8/s1920/kcd.jpeg&quot; style=&quot;margin-left: 1em; margin-right: 1em;&quot;&gt;&lt;img border=&quot;0&quot; data-original-height=&quot;1080&quot; data-original-width=&quot;1920&quot; height=&quot;225&quot; src=&quot;https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUZlu6yCvgTIQAjJIQFgZBRS75tkiWrEgNDUscvyojGrLDM7_ePwsbbonVvFRmZ1fUXW9RreSGcurpR7SMVMwJaLacNlmJrtTeTk6X2LpAQ95SfwvsB3T1CGapWyBE_NmfJN-8NWGienZgiGRMiZ8GSv4vCAa0utQuvoNpP-pe8VwDiXLROeTqGl4IwM8/w400-h225/kcd.jpeg&quot; width=&quot;400&quot; /&gt;&lt;/a&gt;&lt;/div&gt;&lt;br /&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Ho avuto il piacere di partecipare alla scorsa edizione e posso dirvi che le sessioni sono di livello e ci saranno sicuramente presenti i big di settore e le principali aziende che operano in ambito cloud native italiane, fra cui ovviamente &lt;a href=&quot;https://sighup.io/&quot; target=&quot;_blank&quot;&gt;SIGHUP&lt;/a&gt; !&lt;/p&gt;&lt;p&gt;Spargete la voce ai vostri colleghi, il sito lo trovate facilmente &lt;a href=&quot;https://kcd.pizza&quot;&gt;https://kcd.pizza&lt;/a&gt;&amp;nbsp;&lt;/p&gt;&lt;p&gt;E&#39; aperta la call for papers che &lt;a href=&quot;https://sessionize.com/kcd-italy-2024&quot; target=&quot;_blank&quot;&gt;trovate a questo link&lt;/a&gt;&lt;/p&gt;&lt;p&gt;Se la vostra azienda è interessata, la ricerca di sponsor aggiuntivi è ancora aperta, potete contattare uno degli organizzatori che trovate nella pagina dell&#39;evento o potete contattare me per fare da tramite.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;I KCDs sono un eventi organizzati dalla&amp;nbsp; community &lt;a href=&quot;https://www.cncf.io/kcds/&quot; target=&quot;_blank&quot;&gt;supportati dalla CNCF&lt;/a&gt;.&lt;/p&gt;</description><link>https://www.msbiro.net/2024/01/kcd-italia-bologna-2024-giugno-20.html</link><author>noreply@blogger.com (Matteo Bisi)</author><media:thumbnail xmlns:media="http://search.yahoo.com/mrss/" url="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUZlu6yCvgTIQAjJIQFgZBRS75tkiWrEgNDUscvyojGrLDM7_ePwsbbonVvFRmZ1fUXW9RreSGcurpR7SMVMwJaLacNlmJrtTeTk6X2LpAQ95SfwvsB3T1CGapWyBE_NmfJN-8NWGienZgiGRMiZ8GSv4vCAa0utQuvoNpP-pe8VwDiXLROeTqGl4IwM8/s72-w400-h225-c/kcd.jpeg" height="72" width="72"/><thr:total>0</thr:total></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-2717529536663694971</guid><pubDate>Thu, 07 Dec 2023 14:53:00 +0000</pubDate><atom:updated>2023-12-07T15:53:19.610+01:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">Conjur</category><title>CyberArk Conjur 13.1 disponibile</title><description>&lt;p&gt;Alcune settimane fa, CyberArk ha rilasciato la versione 13.1 di Conjur che è molto interessante perchè introduce alcune modifiche/aggiornamenti, volti ad incrementare l&#39;affidabilità e resilienza della connessione fra i followers ed il leader.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;Se vuoi saperne di piu, &lt;a href=&quot;https://blog.sighup.io/cyberark-conjur-13-1-has-been-relased-with-interesting-updates-under-the-hood/&quot; target=&quot;_blank&quot;&gt;ho scritto un articolo&lt;/a&gt; sul &lt;a href=&quot;https://blog.sighup.io&quot; target=&quot;_blank&quot;&gt;blog di SIGHUP&lt;/a&gt; .&lt;/p&gt;</description><link>https://www.msbiro.net/2023/12/cyberark-conjur-131-disponibile.html</link><author>noreply@blogger.com (Matteo Bisi)</author><thr:total>0</thr:total><georss:featurename>Galway, Irlanda</georss:featurename><georss:point>53.274001 -9.0512661999999988</georss:point><georss:box>24.963767163821153 -44.2075162 81.584234836178837 26.1049838</georss:box></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-257901866355273324</guid><pubDate>Fri, 10 Nov 2023 05:30:00 +0000</pubDate><atom:updated>2023-11-10T06:30:00.135+01:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">kubecon</category><category domain="http://www.blogger.com/atom/ns#">kubetrain</category><title>KubeCon EU 2024 Parigi, parliamo di Kubetrain</title><description>&lt;p&gt;Ieri è terminata la&amp;nbsp; KubeCon NA a Chicago, quindi si può iniziare a parlare di &lt;a href=&quot;https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/&quot; target=&quot;_blank&quot;&gt;KubeconEU 2024&lt;/a&gt; che si terrà a Parigi 19-22 Marzo 2024 😊 .&lt;/p&gt;&lt;p&gt;&lt;span style=&quot;text-align: center;&quot;&gt;Per Parigi &lt;/span&gt;&lt;a href=&quot;https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/register/&quot; style=&quot;text-align: center;&quot;&gt;le registrazioni sono in fase di early bird&lt;/a&gt;&lt;span style=&quot;text-align: center;&quot;&gt; fino al 28 Novembre ed è ancora possibile partecipare&lt;/span&gt;&lt;/p&gt;&lt;a href=&quot;https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/program/cfp/&quot;&gt;alla call for paper&lt;/a&gt;.&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Volevo parlarvi di una &lt;a href=&quot;https://kubetrain.io/the_plan/&quot; target=&quot;_blank&quot;&gt;interessante iniziativa denominata Kubetrain&lt;/a&gt;, che si pone come obbiettivo quello di raggiungere Parigi in un modo maggiormente sostenibile per l&#39;ambiente scegliendo il treno al posto dell&#39;aereo.&lt;/p&gt;&lt;div class=&quot;separator&quot; style=&quot;clear: both; text-align: center;&quot;&gt;&lt;a href=&quot;https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhcuAuM2uH6iys6_2FThVZhXIWu3uKTnrYaPjMG2FRkWlPvAdlGmndEc2SZr4Kkh1C8VLGRQTYkVHRTm1TIiewIw_HwwTOZdJVy6BlOPnmNByR1WUXZaFzjK5MQvM_Eknhvn5B6mR0AMAZnGBVo-0V1Q4zh_rfXq1lkKwCs6KKOqzvARJ99h1cWZjGVlpw/s926/SCR-20231109-jssy.png&quot; imageanchor=&quot;1&quot; style=&quot;margin-left: 1em; margin-right: 1em;&quot;&gt;&lt;img border=&quot;0&quot; data-original-height=&quot;926&quot; data-original-width=&quot;904&quot; height=&quot;320&quot; src=&quot;https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhcuAuM2uH6iys6_2FThVZhXIWu3uKTnrYaPjMG2FRkWlPvAdlGmndEc2SZr4Kkh1C8VLGRQTYkVHRTm1TIiewIw_HwwTOZdJVy6BlOPnmNByR1WUXZaFzjK5MQvM_Eknhvn5B6mR0AMAZnGBVo-0V1Q4zh_rfXq1lkKwCs6KKOqzvARJ99h1cWZjGVlpw/s320/SCR-20231109-jssy.png&quot; width=&quot;312&quot; /&gt;&lt;/a&gt;&lt;/div&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;Per rendere il tutto economicamente sostenibile gli organizzatori di Kubetrain hanno pensato di organizzare carrozze &quot;sponsorizzate&quot; da alcune delle principali città europee, che quindi poteranno le persone a Parigi, rendendo quindi possibile organizzare anche eventi di networking durante il viaggio!!&lt;/p&gt;&lt;p&gt;Le città coinvolte sono le seguenti:&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;ul style=&quot;text-align: left;&quot;&gt;&lt;li&gt;Amsterdam&lt;/li&gt;&lt;li&gt;Berlino&lt;/li&gt;&lt;li&gt;Londra&lt;/li&gt;&lt;li&gt;Lione&amp;nbsp;&lt;/li&gt;&lt;li&gt;Milano&amp;nbsp;&lt;/li&gt;&lt;li&gt;&lt;a href=&quot;https://zurich.kubetrain.io/&quot; target=&quot;_blank&quot;&gt;Zurigo&lt;/a&gt;&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;Attualmente è già &quot;operativo&quot; il viaggio da Zurigo,&amp;nbsp; per il resto è ancora un work in progress ma vi invito a seguire il loro sito per rimanere aggiornati ed eventualmente prenotare la partenza dalla vostra città preferita.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Trovo l&#39;iniziativa molto interessante, complimenti agli organizzatori!!&lt;/p&gt;</description><link>https://www.msbiro.net/2023/11/kubecon-eu-parigi-2024-kubetrain.html</link><author>noreply@blogger.com (Matteo Bisi)</author><media:thumbnail xmlns:media="http://search.yahoo.com/mrss/" url="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhcuAuM2uH6iys6_2FThVZhXIWu3uKTnrYaPjMG2FRkWlPvAdlGmndEc2SZr4Kkh1C8VLGRQTYkVHRTm1TIiewIw_HwwTOZdJVy6BlOPnmNByR1WUXZaFzjK5MQvM_Eknhvn5B6mR0AMAZnGBVo-0V1Q4zh_rfXq1lkKwCs6KKOqzvARJ99h1cWZjGVlpw/s72-c/SCR-20231109-jssy.png" height="72" width="72"/><thr:total>0</thr:total><georss:featurename>Galway, Irlanda</georss:featurename><georss:point>53.274001 -9.0512661999999988</georss:point><georss:box>24.963767163821153 -44.2075162 81.584234836178837 26.1049838</georss:box></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-8913644772173120553</guid><pubDate>Wed, 01 Nov 2023 15:00:00 +0000</pubDate><atom:updated>2023-11-01T16:24:21.024+01:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">CNCF</category><category domain="http://www.blogger.com/atom/ns#">community</category><category domain="http://www.blogger.com/atom/ns#">contribuzione</category><category domain="http://www.blogger.com/atom/ns#">glossary</category><category domain="http://www.blogger.com/atom/ns#">OpenSSF</category><category domain="http://www.blogger.com/atom/ns#">volontario</category><title>Perchè dovresti contribuire ai progetti community? Vi parlo di CNCF e OpenSSF</title><description>&lt;p&gt;&lt;span style=&quot;font-family: inherit;&quot;&gt;Parto da una premessa per chi non lo sapesse già: l&#39;ecosistema dei sofware open-source spesso ruota attorno a fondazioni, la più famosa probabilmente è la &lt;a href=&quot;https://www.linuxfoundation.org/&quot; target=&quot;_blank&quot;&gt;Linux Foundation&lt;/a&gt;.&amp;nbsp;&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style=&quot;font-family: inherit;&quot;&gt;Per quanto riguarda l&#39;ambito cloud native, la fondazione di riferimento è la Cloud Native Computing Foundation, comunemente chiamata CNCF.&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style=&quot;font-family: inherit;&quot;&gt;La &lt;a href=&quot;https://www.cncf.io/about/who-we-are/&quot; target=&quot;_blank&quot;&gt;CNCF&lt;/a&gt; è una fondazione creata dalla &lt;a href=&quot;https://www.linuxfoundation.org/&quot; target=&quot;_blank&quot;&gt;Linux Foundation&lt;/a&gt;&amp;nbsp;nel 2015, per occuparsi strettamente della gestione dei progetti dell&#39;ambito cloud native. In parole povere potremmo definirlo un ente terzo, vendor neutral, che regola lo sviluppo e le attività relative a tutti i più grandi progetti relativi alle tecnologie containerizzate come Kubernetes.&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style=&quot;font-family: inherit;&quot;&gt;La fondazione è composta da un grande numero di organi, gruppi di lavoro che si occupano dei vari progetti e gran parte dei lavori è svolto da volontari, e per partecipare devono essere rispettate le regole &lt;a href=&quot;https://www.cncf.io/conduct/&quot; target=&quot;_blank&quot;&gt;del codice di condotta&lt;/a&gt; della CNCF.&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style=&quot;font-family: inherit;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/p&gt;&lt;p&gt;Parlando quindi di Kubernetes e dei principali progetti che ci girano attorno, potete immaginare la mole di lavoro richiesta per fare funzionare questo sistema e quante persone a tutti i livelli possano servire per contribuire ai progetti tecnici e non tecnici.&lt;br /&gt;&lt;br /&gt;Nella mia carriera ho sempre cercato di essere parte di ciò che circondava il mio mondo lavorativo, prendendo parte a eventi, parlando a eventi ed anche organizzandone.&amp;nbsp;&lt;/p&gt;&lt;p&gt;Anche nel mio capitolo lavorativo iniziato in &lt;a href=&quot;https://sighup.io/&quot; target=&quot;_blank&quot;&gt;SIGHUP&lt;/a&gt;, ho mantenuto lo stesso comportamento e modalità operativa. Da qualche mese faccio parte del team italiano che si occupa della localizzazione italiana del &lt;a href=&quot;https://glossary.cncf.io/&quot; target=&quot;_blank&quot;&gt;glossary della CNCF&lt;/a&gt;.&lt;/p&gt;&lt;p&gt;Vi racconto questo perchè trovo estremamente gratificante partecipare a questi tipi di iniziative, conoscendo nuove persone, magari uscendo un po&#39; dalla propria confort zone, e poter essere di aiuto a persone, azienda, che non si conoscono, per il gusto di vivere in un ecosistema migliore.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Come potete immaginare i contributi possono essere dati a tutti i livelli, ci sono team diversi per ogni &quot;materia&quot;, a volte regionalizzati,&amp;nbsp; ed ovviamente capita di poter lavorare con persone da tutto il mondo e di tutte le provenienze.&lt;/p&gt;&lt;p&gt;Come mi ha detto un collega pochi giorni fa, &quot;se entri in una riunione e ti senti un cretino rispetto agli altri partecipanti, probabilmente significa che sei nel posto giusto&quot;, perchè partecipare ai meeting anche come uditore, con persone di alto livello è una grande opportunità crescita professionale.&lt;/p&gt;&lt;p&gt;Bene, ora che vi ho fatto venire voglia, come potete partecipare o cercare un progetto adatto a voi?&lt;/p&gt;&lt;p&gt;Vi suggerisco una serie di link dove trovare informazioni relative agli eventi e progetti CNCF:&lt;/p&gt;&lt;ul style=&quot;text-align: left;&quot;&gt;&lt;li&gt;&lt;a href=&quot;https://www.cncf.io/all-cncf/&quot; target=&quot;_blank&quot;&gt;EXPLORE ALL CNCF SITES&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a href=&quot;https://www.cncf.io/enduser/&quot; target=&quot;_blank&quot;&gt;END USER COMMUNITY&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a href=&quot;https://communityinviter.com/apps/cloud-native/cncf&quot; target=&quot;_blank&quot;&gt;CNCF SLACK&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a href=&quot;https://github.com/cncf&quot; target=&quot;_blank&quot;&gt;Repo su GitHub&lt;/a&gt;&lt;/li&gt;&lt;/ul&gt;Quanto ho detto sopra vale anche per un altra fondazione, molto interessante nata nel 2020 che si chiama &lt;a href=&quot;https://openssf.org/&quot; target=&quot;_blank&quot;&gt;Open Source Security foundation&lt;/a&gt;,&amp;nbsp; abitualmente abbreviato in OpenSSF.&amp;nbsp;&lt;div&gt;Questa fondazione è una creazione della Linux Foundation, e si occupa di sviluppare la securezza informatica del software open-source.&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;Occupandomi di sicurezza, seguo con attenzione diverse iniziative di questa fondazione, al momento per limiti di tempo, non sono un contributor attivo, ma i ragazzi del mio team hanno già avuto modo di contribuire e partecipare a diverse riunioni dei gruppi di lavoro.&amp;nbsp;&lt;/div&gt;&lt;div&gt;E&#39; importante rispettare sempre &lt;a href=&quot;https://openssf.org/community/code-of-conduct/&quot; target=&quot;_blank&quot;&gt;il codice di condotta&lt;/a&gt;&amp;nbsp;qundo si partecipa e si contribuisce.&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;Anche in questo caso vi lascio alcuni link utili dove trovare idee di collaborazione per OpenSSF:&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;&lt;ul style=&quot;text-align: left;&quot;&gt;&lt;li&gt;&lt;a href=&quot;https://openssf.org/community/openssf-working-groups/&quot; target=&quot;_blank&quot;&gt;OpenSSF Working Groups&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a href=&quot;https://openssf.org/getinvolved/&quot; target=&quot;_blank&quot;&gt;Get Involved&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a href=&quot;https://github.com/ossf&quot; target=&quot;_blank&quot;&gt;Repo su GitHub&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a href=&quot;https://openssf.slack.com/signup&quot; target=&quot;_blank&quot;&gt;OpenSSF SLACK&lt;/a&gt;&lt;/li&gt;&lt;/ul&gt;&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;&amp;nbsp;&lt;br /&gt;&lt;br /&gt;&lt;p&gt;&lt;/p&gt;&lt;/div&gt;</description><link>https://www.msbiro.net/2023/11/contribuire-a-progetti-open-source-cncf-openssf-glossary-team-italiano.html</link><author>noreply@blogger.com (Matteo Bisi)</author><thr:total>0</thr:total><georss:featurename>Galway, Irlanda</georss:featurename><georss:point>53.274001 -9.0512661999999988</georss:point><georss:box>24.963767163821153 -44.2075162 81.584234836178837 26.1049838</georss:box></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-4698805959225371096</guid><pubDate>Wed, 30 Aug 2023 10:14:00 +0000</pubDate><atom:updated>2023-08-30T12:14:33.793+02:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">communicy</category><category domain="http://www.blogger.com/atom/ns#">containerday</category><category domain="http://www.blogger.com/atom/ns#">devsecopsday</category><category domain="http://www.blogger.com/atom/ns#">evento</category><title>containerday 2023 - devsecopsday 2023  in Ottobre a Bologna</title><description>&lt;p&gt;Scrivo questo post per segnalarvi 2 eventi che ci saranno a Bologna in Ottobre, organizzati dal &lt;a href=&quot;https://www.grusp.org/&quot; target=&quot;_blank&quot;&gt;Grusp&lt;/a&gt;, il containerday 2023, che sarà seguito dalla prima edizione del devsecopsday il giorno successivo:&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;ul style=&quot;text-align: left;&quot;&gt;&lt;li&gt;12 Ottobre containerday 2023, &lt;a href=&quot;https://2023.containerday.it/talks_speakers/&quot; target=&quot;_blank&quot;&gt;agenda&lt;/a&gt;&lt;/li&gt;&lt;li&gt;13 Ottobre devsecopsday 2023, &lt;a href=&quot;https://2023.devsecopsday.it/talks_speakers/&quot; target=&quot;_blank&quot;&gt;agenda&lt;/a&gt;&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;Per chi non ha mai partecipato in passato, il tema del containerday è in generale il mondo dell&#39;infratruttura cloud-native con quello che ci gira attorno, mentre il devsecopsday sarà incetrato su temi di security.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Le agende ed i link per le registrazioni le trovate nei rispettivi siti, 11 Ottobre ci saranno 3 workshop per anticipare l&#39;evento,&amp;nbsp; 2 dei quali sarano tenuti da colleghi del mio gruppo, i link vedere i programmi e l&#39;iscrizione &lt;a href=&quot;https://2023.containerday.it/workshop/&quot; target=&quot;_blank&quot;&gt;li trovate a questa pagina&lt;/a&gt;.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Gli eventi del Grusp sono bene organizzati, gli speaker di alto livello quindi non posso fare altro che raccomandarvi di partecipare.&lt;/p&gt;&lt;p&gt;Io sarò presente agli eventi, SIGHUP sarà presente a 360gradi come sponsor, con sessioni e con l&#39;organizzazione dei 2 workshop.&amp;nbsp;&lt;/p&gt;&lt;p&gt;Ci vediamo a Bologna 👋&lt;/p&gt;</description><link>https://www.msbiro.net/2023/08/containerday2023-devsecopsday2023-bologna-2023-eventi-community-grusp.html</link><author>noreply@blogger.com (Matteo Bisi)</author><thr:total>0</thr:total><georss:featurename>Galway, Irlanda</georss:featurename><georss:point>53.274001 -9.0512661999999988</georss:point><georss:box>24.963767163821153 -44.2075162 81.584234836178837 26.1049838</georss:box></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-2599823320711255974</guid><pubDate>Tue, 06 Jun 2023 16:23:00 +0000</pubDate><atom:updated>2023-06-06T18:23:40.817+02:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">cyberark</category><category domain="http://www.blogger.com/atom/ns#">cyberark conjur</category><title>CyberArk Conjur 13.0 disponibile, quali sono le novità e perchè aggiornare</title><description>&lt;p&gt;&amp;nbsp;Nei giorni scorsi CyberArk ha rilasciato una&amp;nbsp; nuova versione di CyberArk Conjur arrivato alla 13.0.&lt;/p&gt;&lt;p&gt;Quali funzionalità nuove ci sono? Chi dovrebbe aggiornare?&lt;/p&gt;&lt;p&gt;Ho pubblicato un blogpost &lt;a href=&quot;https://blog.sighup.io/&quot; target=&quot;_blank&quot;&gt;nel blog di SIGHUP&lt;/a&gt; a riguardo &lt;a href=&quot;https://blog.sighup.io/cyberark-conjur-13-0-has-been-released-whats-new/&quot; target=&quot;_blank&quot;&gt;che trovate qui&lt;/a&gt;&amp;nbsp;&lt;/p&gt;</description><link>https://www.msbiro.net/2023/06/conjur-13-disponibile-novita-disponibili.html</link><author>noreply@blogger.com (Matteo Bisi)</author><thr:total>0</thr:total><georss:featurename>Galway, Irlanda</georss:featurename><georss:point>53.274001 -9.0512661999999988</georss:point><georss:box>24.963767163821153 -44.2075162 81.584234836178837 26.1049838</georss:box></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-5155610422666050453</guid><pubDate>Wed, 24 May 2023 16:12:00 +0000</pubDate><atom:updated>2023-05-24T18:12:24.308+02:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">Conjur</category><category domain="http://www.blogger.com/atom/ns#">cyberark</category><category domain="http://www.blogger.com/atom/ns#">cyberark conjur</category><category domain="http://www.blogger.com/atom/ns#">podman</category><title>CyberArk Conjur 12.9 e podman - come ripristinare la logs rotation in caso di problemi</title><description>&lt;p&gt;&lt;a href=&quot;https://www.cyberark.com/products/secrets-manager-enterprise/&quot; target=&quot;_blank&quot;&gt;CyberArk Conjur&lt;/a&gt; è rilasciato sotto forma di appliance containerizzata, in modo da poter permettere rapidi setup senza errori.&lt;/p&gt;&lt;p&gt;&lt;a href=&quot;https://docs.cyberark.com/Product-Doc/OnlineHelp/AAM-DAP/12.9/en/Content/Deployment/platforms/dap-sysreqs-server.htm&quot; target=&quot;_blank&quot;&gt;I container runtime&lt;/a&gt; supportati sono i seguenti:&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;ul style=&quot;text-align: left;&quot;&gt;&lt;li&gt;docker 20.10 or later&lt;/li&gt;&lt;li&gt;mirantis container runtime 20.10&lt;/li&gt;&lt;li&gt;podman 3.x,4.x&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Lavorando su diversi ambienti Conjur nei nostri lab o da clienti ci siamo resi conto che la logs rotation (conjur, nginx, cluster, etc) non veniva eseguita in ambienti installati su podman mentre funzionava correttamente su Docker.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Dopo alcune indagini con i ragazzi del CyberArk support team, abbiamo trovato la soluzione:&lt;/p&gt;&lt;p&gt;i conjur container devono essere creati aggiungendo la capability AUDIT_WRITE :&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;&lt;span color=&quot;rgba(0, 0, 0, 0.8)&quot; face=&quot;Roboto, sans-serif&quot; style=&quot;background-color: white; font-size: 14.4px; white-space: pre-line;&quot;&gt;&lt;/span&gt;&lt;/p&gt;&lt;blockquote&gt;&lt;span style=&quot;background-color: white; color: rgba(0, 0, 0, 0.8); white-space: pre-line;&quot;&gt;&lt;span style=&quot;font-family: inherit;&quot;&gt;podman run \
  2. ...
  3. --cap-add AUDIT_WRITE \
  4. ...
  5. registry.tld/conjur-appliance:12.9.0&lt;/span&gt;&lt;/span&gt;&lt;/blockquote&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;per risolvere poi un successivo problema di rumore nei log di nginx va cambiato il seguente permesso nei container di Conjur:&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;blockquote&gt;chmod 701 /opt/cyberark/dap/log/nginx&lt;/blockquote&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Il CyberArk support team è stato collaborativo come sempre nel lavorare con noi per trovare la soluzione.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Entrambi i problemi sono stati tracciati nella documentazione di CyberArk e dovrebbero essere risolti a breve nella doc e nelle immagini rilasciate.&amp;nbsp;&lt;/p&gt;&lt;p&gt;In caso riscontriate lo stesso problema nei vostri ambienti vi suggerisco comunque di contattare il team di supporto per avere conferma che la soluzione sia applicabile anche ai vostri ambienti..&lt;/p&gt;&lt;div&gt;&lt;span color=&quot;rgba(0, 0, 0, 0.8)&quot; face=&quot;Roboto, sans-serif&quot; style=&quot;background-color: white; font-size: 14.4px; white-space: pre-line;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span color=&quot;rgba(0, 0, 0, 0.8)&quot; face=&quot;Roboto, sans-serif&quot; style=&quot;background-color: white; font-size: 14.4px; white-space: pre-line;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span color=&quot;rgba(0, 0, 0, 0.8)&quot; face=&quot;Roboto, sans-serif&quot; style=&quot;background-color: white; font-size: 14.4px; white-space: pre-line;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/div&gt;</description><link>https://www.msbiro.net/2023/05/cyberark-conjur-129-podma-ripristinare-logs-rotation-in-caso-di-problemi.html</link><author>noreply@blogger.com (Matteo Bisi)</author><thr:total>0</thr:total><georss:featurename>Galway, Irlanda</georss:featurename><georss:point>53.274001 -9.0512661999999988</georss:point><georss:box>24.963767163821153 -44.2075162 81.584234836178837 26.1049838</georss:box></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-6516033708184885054</guid><pubDate>Wed, 12 Apr 2023 16:08:00 +0000</pubDate><atom:updated>2023-04-14T18:05:40.878+02:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">secure containers</category><category domain="http://www.blogger.com/atom/ns#">SIGHUP</category><title>SIGHUP Secure Containers:  come scegliete le base image per i vostri workload?</title><description>&lt;p&gt;&lt;b&gt;Premessa&lt;/b&gt;: in questo articolo parlo di un prodotto/servizio offerto dall&#39;azienda per cui lavoro, &lt;a href=&quot;https://sighup.io/&quot; rel=&quot;&quot; target=&quot;_blank&quot;&gt;SIGHUP&lt;/a&gt;, voglio specificare che non mi è stato richiesto di parlarne qui sul mio blog, ma quelle che seguono sono le mie opinioni riguardo a questo servizio.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;div class=&quot;separator&quot; style=&quot;clear: both; text-align: center;&quot;&gt;&lt;a href=&quot;https://blogger.googleusercontent.com/img/a/AVvXsEh3vV4XWTnP1WfJ7ofET6WrxlQEHmUzyL246FmpoLek-aqkd4OKVJ7DZAKrzHiPoYYK6_cBl7CGRmsKYmM7mkg3utddN2cgP5mz1E5Iq-aX3h2cw4xrC7f8S4CF4rR4DAKhkMYBVHRM9V7N0QyT9R8qlvhTVjUFV0aXnS4Pk9T5vdZD2W2wZ8u58Ov1&quot; style=&quot;margin-left: 1em; margin-right: 1em;&quot;&gt;&lt;img alt=&quot;&quot; data-original-height=&quot;150&quot; data-original-width=&quot;150&quot; height=&quot;240&quot; src=&quot;https://blogger.googleusercontent.com/img/a/AVvXsEh3vV4XWTnP1WfJ7ofET6WrxlQEHmUzyL246FmpoLek-aqkd4OKVJ7DZAKrzHiPoYYK6_cBl7CGRmsKYmM7mkg3utddN2cgP5mz1E5Iq-aX3h2cw4xrC7f8S4CF4rR4DAKhkMYBVHRM9V7N0QyT9R8qlvhTVjUFV0aXnS4Pk9T5vdZD2W2wZ8u58Ov1&quot; width=&quot;240&quot; /&gt;&lt;/a&gt;&lt;/div&gt;&lt;br /&gt;&lt;br /&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;Secure Containers è un servizio commerciale, offerto da SIGHUP che fornisce &lt;a href=&quot;https://opensource.com/article/21/8/container-image&quot; rel=&quot;&quot; target=&quot;_blank&quot;&gt;container base image&lt;/a&gt;&amp;nbsp;sicure, hardenizzate e aggiornate.&amp;nbsp;&lt;br /&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Lavorare in ambienti containerizzati rispetto al passato ha molti vantaggi, come standardizzazioni, automazioni e velocità di rilascio.&lt;br /&gt;&lt;br /&gt;Talvolta però ci si dimentica che lavorando con container, spesso ci si affida ad container image fatte da trovate da varie fonti che potrebbero avere uno o più dei seguenti problemi:&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;ul style=&quot;text-align: left;&quot;&gt;&lt;li&gt;bug&lt;/li&gt;&lt;li&gt;CVEs&lt;/li&gt;&lt;li&gt;non essere aggiornate&lt;/li&gt;&lt;li&gt;contenere sw malevolo&lt;/li&gt;&lt;/ul&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;E&#39; chiaro che avere base image costantemente aggiornate, che contengano il minor numero di CVEs possibili è importante perchè eventuali problemi, una volta deployato il software, vengono replicati nel container che poi troviamo a girare negli ambienti di produzione.&lt;/p&gt;&lt;p&gt;Tenere &lt;u&gt;aggiornate e sicure le base image&lt;/u&gt; quindi è &lt;b&gt;un attività non trascurabile&lt;/b&gt;, che deve diventare un task&amp;nbsp; seguito in modo adeguato da qualcuno in azienda togliendolo da altri compiti.&lt;/p&gt;&lt;p&gt;&lt;a href=&quot;https://sighup.io/secure-containers/&quot; target=&quot;_blank&quot;&gt;Secure Containers&lt;/a&gt;&amp;nbsp;si pone come servizio gestito da parte di SIGHUP e viene erogato con alcune caratteristiche interessanti fra cui :&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;ul style=&quot;text-align: left;&quot;&gt;&lt;li&gt;un catalogo di immagini completo&lt;/li&gt;&lt;li&gt;scansioni di sicurezza regolari&lt;/li&gt;&lt;li&gt;report settimanali sullo stato del catalogo (update, immagini deprecate)&lt;/li&gt;&lt;li&gt;immagini da fonti verificate prometheus friendly&lt;/li&gt;&lt;li&gt;supporto in caso di problemi&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;Se vi interessa un quadro più completo sulle base image e sul perchè è importate metterle in sicurezza &lt;a href=&quot;https://thenewstack.io/container-security-101-a-guide-to-safe-and-efficient-operations/&quot; target=&quot;_blank&quot;&gt;potete consultare questo mio articolo&lt;/a&gt; dove ne parlo più in profondità.&amp;nbsp;&lt;/p&gt;&lt;p&gt;Se siete interessati al servizio offerto da &lt;a href=&quot;https://sighup.io/secure-containers/&quot; target=&quot;_blank&quot;&gt;SIGHUP, andando al sito dedicato&lt;/a&gt; potete trovare ulteriori informazioni,FAQ o essere contattati per aprire il periodo di prova gratuita con cui verificare e testare direttamente il prodotto.&amp;nbsp;&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;</description><link>https://www.msbiro.net/2023/04/sighup-secure-containers-come-scegliete-le-base-image-per-i-vostri-workload.html</link><author>noreply@blogger.com (Matteo Bisi)</author><media:thumbnail xmlns:media="http://search.yahoo.com/mrss/" url="https://blogger.googleusercontent.com/img/a/AVvXsEh3vV4XWTnP1WfJ7ofET6WrxlQEHmUzyL246FmpoLek-aqkd4OKVJ7DZAKrzHiPoYYK6_cBl7CGRmsKYmM7mkg3utddN2cgP5mz1E5Iq-aX3h2cw4xrC7f8S4CF4rR4DAKhkMYBVHRM9V7N0QyT9R8qlvhTVjUFV0aXnS4Pk9T5vdZD2W2wZ8u58Ov1=s72-c" height="72" width="72"/><thr:total>0</thr:total><georss:featurename>Galway, Irlanda</georss:featurename><georss:point>53.274001 -9.0512661999999988</georss:point><georss:box>24.963767163821153 -44.2075162 81.584234836178837 26.1049838</georss:box></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-5547522806825756836</guid><pubDate>Fri, 13 Jan 2023 08:10:00 +0000</pubDate><atom:updated>2023-01-13T09:10:21.468+01:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">developers</category><category domain="http://www.blogger.com/atom/ns#">Security</category><category domain="http://www.blogger.com/atom/ns#">snyk</category><title>Snyk, come accontentare Developers e Security officers</title><description>&lt;p&gt;Per lavorare nella cybersecurity serve conoscenza della materia, attenzione ai dettagli ed un buon portfolio di tools ai quali affidarsi.&lt;/p&gt;&lt;p&gt;Uno dei tools con cui ho avuto il piacere di lavorare negli ultimi mesi è &lt;a href=&quot;https://snyk.io/&quot; target=&quot;_blank&quot;&gt;Snyk&lt;/a&gt;.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;div class=&quot;separator&quot; style=&quot;clear: both; text-align: center;&quot;&gt;&lt;a href=&quot;https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_rdmDYzyA6D74ZLcZ1cFMSzBwyUYeQwHm04f4_XQYp6bj1zXbcLZpvDjjTlvJ94Vd0p38hkow9SM54pP7ZC8d4eF4ePjijma6hfwdIif7bR3NChEWxygKl7-PaoluwiHg-kcmRGen3jIc1-JM6vaPWc4xGHSyo6fFW10eKk-EuVSyX4Fqmg48L7u4/s600/tech_pro.jpeg&quot; style=&quot;margin-left: 1em; margin-right: 1em;&quot;&gt;&lt;img border=&quot;0&quot; data-original-height=&quot;600&quot; data-original-width=&quot;529&quot; height=&quot;320&quot; src=&quot;https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_rdmDYzyA6D74ZLcZ1cFMSzBwyUYeQwHm04f4_XQYp6bj1zXbcLZpvDjjTlvJ94Vd0p38hkow9SM54pP7ZC8d4eF4ePjijma6hfwdIif7bR3NChEWxygKl7-PaoluwiHg-kcmRGen3jIc1-JM6vaPWc4xGHSyo6fFW10eKk-EuVSyX4Fqmg48L7u4/s320/tech_pro.jpeg&quot; width=&quot;282&quot; /&gt;&lt;/a&gt;&lt;/div&gt;&lt;br /&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Chiamarlo tool è riduttivo perchè Snyk è una security plattform che comprende una serie di tools atti a rendere sicuro tutto il codice che potete produrre:&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;ul style=&quot;text-align: left;&quot;&gt;&lt;li&gt;&lt;a href=&quot;https://snyk.io/product/snyk-code/&quot; target=&quot;_blank&quot;&gt;code&lt;/a&gt; (SAST)&lt;/li&gt;&lt;li&gt;&lt;a href=&quot;https://snyk.io/product/open-source-security-management/&quot; target=&quot;_blank&quot;&gt;open source&lt;/a&gt; (SCA)&lt;/li&gt;&lt;li&gt;&lt;a href=&quot;https://snyk.io/product/container-vulnerability-management/&quot; target=&quot;_blank&quot;&gt;container&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a href=&quot;https://snyk.io/product/infrastructure-as-code-security/&quot; target=&quot;_blank&quot;&gt;infrastructure as a code&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a href=&quot;https://snyk.io/product/snyk-cloud/&quot; target=&quot;_blank&quot;&gt;cloud&lt;/a&gt;&lt;/li&gt;&lt;/ul&gt;&lt;div&gt;Negli ultimi anni le righe di codice sono cresciute esponenzialmente, le librerie open ed i container a disposizione dei developers hanno aumentato la quantità di codice prodotto semplificando il lavoro, ma a che prezzo?&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;In che modo&amp;nbsp; si può essere sicuri che oltre ad aver prodotto codice sicuro, non si vada ad incappare in vulnerabilità prodotte da queste risorse? I reparti che si occupano di sicurezza come possono controllare e validare grandi moli di lavoro senza diventare colli di bottiglia che rallentano la &quot;produzione&quot;?&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;Snyk risponde a queste esigenze, andandosi ad inserire ad esempio in IDE, repository git o pipeline CI/CD e riuscendo a fornire risposte rapide ed efficaci.&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;Ad esempio Snyk è in grado di aprire pull request dopo scansioni su repository git in modo automatico, andando ad evidenziare le vulnerabilità e proponendo una soluzione.&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;Per venire incontro alle esigenze degli uffici sicurezza, queste funzionalità sono configurabili centralmente tramite policy che allineano il comportamento dei tools alle specifiche esigenze e è possibile avere report e dashboard per capire rapidamente lo stato della sicurezza dei vari progetti.&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;Snyk inoltre ha generato il &lt;a href=&quot;https://security.snyk.io/&quot; target=&quot;_blank&quot;&gt;proprio db delle vulnerabilit&lt;/a&gt;à, che oltre a catalogare i CVE con le varie severity, fornisce quando possibile, esempi e suggerimenti per i developers.&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;Provarlo è semplice perchè è stato previsto un piano limitato gratuito!&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;Vi lascio inoltre &lt;a href=&quot;https://blog.sighup.io/snyk-and-shift-left-approach/&quot; target=&quot;_blank&quot;&gt;il link all&#39;articolo&lt;/a&gt;&amp;nbsp;pubblicato dal mio collega &lt;a href=&quot;https://www.linkedin.com/in/lucabandini/&quot; target=&quot;_blank&quot;&gt;Luca Bandini&lt;/a&gt; che racconta la nostra esperienza con Snyk, utilizzato anche per controllare il codice di &lt;a href=&quot;https://docs.kubernetesfury.com/index.html&quot; target=&quot;_blank&quot;&gt;Fury, la distrubuzione Kubernetes&lt;/a&gt; svilluppata da&amp;nbsp;&lt;a href=&quot;https://sighup.io/&quot; target=&quot;_blank&quot;&gt;SIGHUP&lt;/a&gt;.&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;p&gt;&lt;/p&gt;</description><link>https://www.msbiro.net/2023/01/snyk-come-accontentare-developers-e-security-officers.html</link><author>noreply@blogger.com (Matteo Bisi)</author><media:thumbnail xmlns:media="http://search.yahoo.com/mrss/" url="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_rdmDYzyA6D74ZLcZ1cFMSzBwyUYeQwHm04f4_XQYp6bj1zXbcLZpvDjjTlvJ94Vd0p38hkow9SM54pP7ZC8d4eF4ePjijma6hfwdIif7bR3NChEWxygKl7-PaoluwiHg-kcmRGen3jIc1-JM6vaPWc4xGHSyo6fFW10eKk-EuVSyX4Fqmg48L7u4/s72-c/tech_pro.jpeg" height="72" width="72"/><thr:total>0</thr:total><georss:featurename>Galway, Irlanda</georss:featurename><georss:point>53.270668 -9.0567905</georss:point><georss:box>24.960434163821155 -44.2130405 81.580901836178839 26.099459500000002</georss:box></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-1345054317153397703</guid><pubDate>Mon, 21 Nov 2022 11:00:00 +0000</pubDate><atom:updated>2022-11-21T13:03:37.610+01:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">cyberark conjur</category><category domain="http://www.blogger.com/atom/ns#">follower</category><category domain="http://www.blogger.com/atom/ns#">openssl</category><category domain="http://www.blogger.com/atom/ns#">postgres</category><title>CyberArk Conjur follower, system error e reboot in fase di configurazione: come risolvere (verificare connettivita postgres in modo corretto)</title><description>&lt;p&gt;Lavorando con CyberArk Conjur, mi sono trovato in una condizione anomala del comportamento dei follower, che ha necessitato di un pò di debug per venirne a capo.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;I follower su Kubernetes erano in grado di contattare le API del nodo leader di Conjur in modo corretto, quindi si inizializzava la configurazione del follower, ma poi questa non finiva andando in un generico System Error e il pod del follower iniziava a riavviarsi.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Dopo alcune analisi abbiamo capito che il problema era lato network load balancer che esponeva la porta Postgres in modo non corretto.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;In prima fase di troubleshooting avevamo verificato la connettività dal follower al leader tramite il comando nc. ma questo non è ovviamente sufficente perchè verifica la connettività TCP fra follower e loadbalancer.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Per vedere se in effetti la connettività Postgres può funzionare, è necessario utilizzare questo comando openssl:&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p style=&quot;text-align: center;&quot;&gt;&lt;span color=&quot;rgba(0, 0, 0, 0.8)&quot; face=&quot;Roboto, sans-serif&quot; style=&quot;background-color: white; font-size: 14.4px; white-space: pre-line;&quot;&gt;&lt;b&gt;echo &quot;&quot; | openssl s_client -starttls postgres -connect &amp;lt;lb_DNS&amp;gt;:5432 -showcerts
  6. &lt;/b&gt;&lt;/span&gt;&lt;/p&gt;&lt;div&gt;&lt;span color=&quot;rgba(0, 0, 0, 0.8)&quot; face=&quot;Roboto, sans-serif&quot; style=&quot;background-color: white; font-size: 14.4px; white-space: pre-line;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span color=&quot;rgba(0, 0, 0, 0.8)&quot; face=&quot;Roboto, sans-serif&quot; style=&quot;background-color: white; font-size: 14.4px; white-space: pre-line;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span color=&quot;rgba(0, 0, 0, 0.8)&quot; face=&quot;Roboto, sans-serif&quot; style=&quot;background-color: white; font-size: 14.4px; white-space: pre-line;&quot;&gt;In caso di successo, fornisce il certificato del server.&amp;nbsp;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span color=&quot;rgba(0, 0, 0, 0.8)&quot; face=&quot;Roboto, sans-serif&quot; style=&quot;background-color: white; font-size: 14.4px; white-space: pre-line;&quot;&gt;
  7. Ringrazio il supporto CyberArk per avercelo girato (noi avevamo fatto la verifica in altro modo meno elegante con stesso risultato).&amp;nbsp;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span color=&quot;rgba(0, 0, 0, 0.8)&quot; face=&quot;Roboto, sans-serif&quot; style=&quot;background-color: white; font-size: 14.4px; white-space: pre-line;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span color=&quot;rgba(0, 0, 0, 0.8)&quot; face=&quot;Roboto, sans-serif&quot; style=&quot;background-color: white; font-size: 14.4px; white-space: pre-line;&quot;&gt;Per altre opzioni e spiegazioni aggiuntive sul comando&amp;nbsp; openssl s_client, &lt;a href=&quot;https://www.misterpki.com/openssl-s-client/&quot; target=&quot;_blank&quot;&gt;vi rimando a questo blogpost&lt;/a&gt; che trovo ben fatto e completo.&lt;/span&gt;&lt;/div&gt;</description><link>https://www.msbiro.net/2022/11/cyberark-conjur-follower-system-error-in-configurazione-come-risolvere-verificare-connettivita-postgres-load-balancer.html</link><author>noreply@blogger.com (Matteo Bisi)</author><thr:total>0</thr:total><georss:featurename>40053 Valsamoggia BO, Italia</georss:featurename><georss:point>44.504314099999988 11.0799504</georss:point><georss:box>16.194080263821142 -24.0762996 72.814547936178826 46.2362004</georss:box></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-8823788386516668852</guid><pubDate>Fri, 30 Sep 2022 14:44:00 +0000</pubDate><atom:updated>2022-09-30T16:44:19.451+02:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">Conjur</category><category domain="http://www.blogger.com/atom/ns#">cyberark</category><category domain="http://www.blogger.com/atom/ns#">synchronizer</category><category domain="http://www.blogger.com/atom/ns#">vasvm035E</category><title>CyberArk Vault Synchronizer - CASVM035E Vault name is missing , come risolvere</title><description>&lt;p&gt;Una delle componenti di Cybeark Conjur è il&amp;nbsp;&lt;span style=&quot;color: #333333;&quot;&gt;&lt;a href=&quot;https://docs.cyberark.com/Product-Doc/OnlineHelp/AAM-DAP/Latest/en/Content/Conjur/cv_Synchronizer-lp.htm&quot; target=&quot;_blank&quot;&gt;Synchronizer&lt;/a&gt;&lt;/span&gt;&amp;nbsp;che serve a ricevere i secrets dal Vault.&lt;/p&gt;&lt;p&gt;Nei giorni scorsi mi sono imbattuto in un CyberArk Vault Synchronizer 11.7 in stato di &quot;abbandono&quot; che necessitava comunque di un aggiornamento alla 12.7.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Dopo aver effettuato l&#39;aggiornamento &lt;a href=&quot;https://docs.cyberark.com/Product-Doc/OnlineHelp/AAM-DAP/Latest/en/Content/Conjur/cv_Upgrade.htm?tocpath=Integrations%7CCyberArk%20Vault%20Synchronizer%7C_____11&quot; target=&quot;_blank&quot;&gt;seguendo la documentazione&lt;/a&gt;, il servizio non partiva, con il seguente errore nei log&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;&lt;span style=&quot;color: #333333;&quot;&gt;[5] [main] FATAL VaultConjurSynchronizer.Service.SynchronizerService - VCSS006F Failed to start CyberArk Vault-Conjur Synchronizer Service: CASVM035E Vault name is missing.&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style=&quot;color: #333333;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style=&quot;color: #333333;&quot;&gt;Da una ricerca nella documentazione si trovava l&#39;errore della componente CASOS però riferita al Vault server e come internal error suggerisce di contattare il supporto.&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;&lt;span style=&quot;color: #333333;&quot;&gt;Nel caso del&amp;nbsp;&lt;/span&gt;&lt;span style=&quot;color: #333333;&quot;&gt;Synchronizer, ho risolto valorizzando, all&#39;interno del file&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style=&quot;color: #333333;&quot;&gt;C:\Program Files\CyberArk\Synchronizer\VaultConjurSynchronizer.exe.config&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;il valore di INTEGRATION_VAULT_NAME. con il nome del vault present all&#39;interno del vault.ini .&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;una volta valorizzato il servizio è partito correttamente.&lt;/p&gt;</description><link>https://www.msbiro.net/2022/09/CyberArk-Vault-Synchronizer-CASVM035EVaultnameismissingcomerisolvere.html</link><author>noreply@blogger.com (Matteo Bisi)</author><thr:total>0</thr:total><georss:featurename>40053 Valsamoggia BO, Italia</georss:featurename><georss:point>44.504314099999988 11.0799504</georss:point><georss:box>16.194080263821142 -24.0762996 72.814547936178826 46.2362004</georss:box></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-6706895667526346349</guid><pubDate>Wed, 21 Sep 2022 12:56:00 +0000</pubDate><atom:updated>2022-09-21T14:56:27.060+02:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">cyberark</category><category domain="http://www.blogger.com/atom/ns#">impact</category><title>CyberArk Impact 2022 world tour, io ci sarò e tu?</title><description>&lt;p&gt;Come probabilmente già sapete CyberArk ha un grande evento annuale chiamato Impact, che quest&#39;anno è stato organizzato a Boston.&lt;/p&gt;&lt;p&gt;Durante le scorse settimane CyberArk ha annunciato una importante iniziativa, chiamata Impact world tour che porterà la conferenza, in diverse città, in tutto il mondo!&lt;/p&gt;&lt;p&gt;Se siete interessanti, &lt;a href=&quot;https://www.cyberark.com/impact-world-tour/&quot; target=&quot;_blank&quot;&gt;in questa pagina&lt;/a&gt; potete trovare:&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;ul style=&quot;text-align: left;&quot;&gt;&lt;li&gt;elenco delle città e delle date&lt;/li&gt;&lt;li&gt;agenda&lt;/li&gt;&lt;li&gt;registration form&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Io sarò presente alla data di Milano 11 Ottobre 2022.&lt;/p&gt;&lt;p&gt;Sono contento dell&#39;opportunità di poter incontrare le persone di CyberArk di persona e di poter assistere ad interessanti sessioni dal vivo: a presto !&amp;nbsp;&lt;/p&gt;</description><link>https://www.msbiro.net/2022/09/cyberark-impact-2022-world-tour-milano-ci-sar.html</link><author>noreply@blogger.com (Matteo Bisi)</author><thr:total>0</thr:total><georss:featurename>40053 Valsamoggia BO, Italia</georss:featurename><georss:point>44.504314099999988 11.0799504</georss:point><georss:box>16.194080263821142 -24.0762996 72.814547936178826 46.2362004</georss:box></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-929032902873449017</guid><pubDate>Fri, 05 Aug 2022 07:39:00 +0000</pubDate><atom:updated>2022-08-23T12:13:05.924+02:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">Conjur</category><category domain="http://www.blogger.com/atom/ns#">conjur authenticator</category><category domain="http://www.blogger.com/atom/ns#">conjur integrazioni</category><category domain="http://www.blogger.com/atom/ns#">jwt</category><category domain="http://www.blogger.com/atom/ns#">spiffie</category><title>CyberArk Conjur , authenticators e integrazioni</title><description>&lt;p&gt;Nei precedenti blogpost vi ho parlato di &lt;a href=&quot;https://www.msbiro.net/2022/07/cyberark-conjur-secrets-manager-enterprise-opensource-adozione-utilizzo.html&quot; target=&quot;_blank&quot;&gt;cosa è un secrets manager &lt;/a&gt;(e del motivo per cui&amp;nbsp; dovreste averne la necessità) ed ho fatto &lt;a href=&quot;https://www.msbiro.net/2022/07/cyberark-conjur-architettura-system-requirements-panoramica-how-to.html&quot; target=&quot;_blank&quot;&gt;una overview dell&#39;architettura di Conjur &lt;/a&gt;e dei suoi system requirements.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Un secrets manager non può fare il suo lavoro se non può parlare con chi ha bisogno di chiedergli i segreti ed è qui che arriva la &quot;magia&quot; di Conjur, gli &quot;authenticator&quot; a cui Conjur demanda le sue funzionalità di autenticazione.&amp;nbsp;&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Questa che vi metto qui sotto&amp;nbsp; la lista &quot;grezza&quot; degli authenticators disponibili:&lt;/p&gt;&lt;table cellspacing=&quot;0&quot; class=&quot;TableStyle-Standard&quot; style=&quot;border-collapse: collapse; border-color: rgb(229, 229, 229); border-spacing: 0px; border-style: solid; border-width: 1px; color: black; font-family: &amp;quot;Open Sans&amp;quot;, Arial, Verdana, &amp;quot;sans-serif&amp;quot;; font-size: 16px; margin-left: 0px; margin-right: auto; max-width: 100%; width: 555.875px;&quot;&gt;&lt;tbody style=&quot;box-sizing: border-box;&quot;&gt;&lt;tr class=&quot;TableStyle-Standard-Body-Body1&quot; style=&quot;box-sizing: border-box;&quot;&gt;&lt;td class=&quot;TableStyle-Standard-BodyE-Column1-Body1&quot; style=&quot;border-bottom: 1px solid rgb(229, 229, 229); border-right: 1px solid rgb(229, 229, 229); box-sizing: border-box; margin-bottom: 8px; overflow-wrap: normal; padding: 3pt 10pt; vertical-align: top; word-break: normal;&quot;&gt;&lt;span class=&quot;Emphasis&quot; style=&quot;box-sizing: border-box; font-weight: bold;&quot;&gt;&lt;a href=&quot;https://docs.cyberark.com/Product-Doc/OnlineHelp/AAM-DAP/Latest/en/Content/Operations/Services/default_authn.htm&quot; style=&quot;box-sizing: border-box; color: #4d84b8; text-decoration-line: none;&quot;&gt;authn&lt;/a&gt;&lt;/span&gt;&lt;/td&gt;&lt;td class=&quot;TableStyle-Standard-BodyD-Column1-Body1&quot; style=&quot;border-bottom: 1px solid rgb(229, 229, 229); box-sizing: border-box; margin-bottom: 8px; overflow-wrap: normal; padding: 3pt 10pt; vertical-align: top; word-break: normal;&quot;&gt;Defines the&amp;nbsp;&lt;span class=&quot;mc-variable project_variables.ConjPrefix variable&quot; style=&quot;box-sizing: border-box;&quot;&gt;Conjur&lt;/span&gt;&amp;nbsp;default authenticator. Authentication for both users and hosts is based on an ID and API key.&amp;nbsp;&lt;/td&gt;&lt;/tr&gt;&lt;tr class=&quot;TableStyle-Standard-Body-Body1&quot; style=&quot;box-sizing: border-box;&quot;&gt;&lt;td class=&quot;TableStyle-Standard-BodyE-Column1-Body1&quot; style=&quot;border-bottom: 1px solid rgb(229, 229, 229); border-right: 1px solid rgb(229, 229, 229); box-sizing: border-box; margin-bottom: 8px; overflow-wrap: normal; padding: 3pt 10pt; vertical-align: top; word-break: normal;&quot;&gt;&lt;span class=&quot;Emphasis&quot; style=&quot;box-sizing: border-box; font-weight: bold;&quot;&gt;&lt;a href=&quot;https://docs.cyberark.com/Product-Doc/OnlineHelp/AAM-DAP/Latest/en/Content/OIDC/OIDC.htm&quot; style=&quot;box-sizing: border-box; color: #4d84b8; text-decoration-line: none;&quot;&gt;authn-oidc&lt;/a&gt;&lt;/span&gt;&lt;/td&gt;&lt;td class=&quot;TableStyle-Standard-BodyD-Column1-Body1&quot; style=&quot;border-bottom: 1px solid rgb(229, 229, 229); box-sizing: border-box; margin-bottom: 8px; overflow-wrap: normal; padding: 3pt 10pt; vertical-align: top; word-break: normal;&quot;&gt;Leverages the identity layer provided by OIDC to allow applications to authenticate with&amp;nbsp;&lt;span class=&quot;mc-variable project_variables.ConjPrefix variable&quot; style=&quot;box-sizing: border-box;&quot;&gt;Conjur&lt;/span&gt;&amp;nbsp;and retrieve secrets needed for connecting to services such as a database.&lt;/td&gt;&lt;/tr&gt;&lt;tr class=&quot;TableStyle-Standard-Body-Body1&quot; style=&quot;box-sizing: border-box;&quot;&gt;&lt;td class=&quot;TableStyle-Standard-BodyE-Column1-Body1&quot; style=&quot;border-bottom: 1px solid rgb(229, 229, 229); border-right: 1px solid rgb(229, 229, 229); box-sizing: border-box; margin-bottom: 8px; overflow-wrap: normal; padding: 3pt 10pt; vertical-align: top; word-break: normal;&quot;&gt;&lt;span class=&quot;Emphasis&quot; style=&quot;box-sizing: border-box; font-weight: bold;&quot;&gt;&lt;a href=&quot;https://docs.cyberark.com/Product-Doc/OnlineHelp/AAM-DAP/Latest/en/Content/Operations/Services/AWS_IAM_Authenticator.htm&quot; style=&quot;box-sizing: border-box; color: #4d84b8; text-decoration-line: none;&quot;&gt;authn-iam&lt;/a&gt;&lt;/span&gt;&lt;/td&gt;&lt;td class=&quot;TableStyle-Standard-BodyD-Column1-Body1&quot; style=&quot;border-bottom: 1px solid rgb(229, 229, 229); box-sizing: border-box; margin-bottom: 8px; overflow-wrap: normal; padding: 3pt 10pt; vertical-align: top; word-break: normal;&quot;&gt;Enables an AWS resource to use its AWS IAM role to authenticate with&amp;nbsp;&lt;span class=&quot;mc-variable project_variables.ConjPrefix variable&quot; style=&quot;box-sizing: border-box;&quot;&gt;Conjur&lt;/span&gt;.&lt;/td&gt;&lt;/tr&gt;&lt;tr class=&quot;TableStyle-Standard-Body-Body1&quot; data-mc-conditions=&quot;&quot; style=&quot;box-sizing: border-box;&quot;&gt;&lt;td class=&quot;TableStyle-Standard-BodyE-Column1-Body1&quot; style=&quot;border-bottom: 1px solid rgb(229, 229, 229); border-right: 1px solid rgb(229, 229, 229); box-sizing: border-box; margin-bottom: 8px; overflow-wrap: normal; padding: 3pt 10pt; vertical-align: top; word-break: normal;&quot;&gt;&lt;p style=&quot;box-sizing: border-box; line-height: 1.8rem; margin-bottom: 10px; margin-top: 10px; overflow-wrap: normal; word-break: normal;&quot;&gt;&lt;span class=&quot;Emphasis&quot; style=&quot;box-sizing: border-box; font-weight: bold;&quot;&gt;&lt;a href=&quot;https://docs.cyberark.com/Product-Doc/OnlineHelp/AAM-DAP/Latest/en/Content/Operations/Services/azure_authn.htm&quot; style=&quot;box-sizing: border-box; color: #4d84b8; text-decoration-line: none;&quot;&gt;authn-azure&lt;/a&gt;&lt;/span&gt;&lt;/p&gt;&lt;/td&gt;&lt;td class=&quot;TableStyle-Standard-BodyD-Column1-Body1&quot; style=&quot;border-bottom: 1px solid rgb(229, 229, 229); box-sizing: border-box; margin-bottom: 8px; overflow-wrap: normal; padding: 3pt 10pt; vertical-align: top; word-break: normal;&quot;&gt;&lt;p style=&quot;box-sizing: border-box; line-height: 1.8rem; margin-bottom: 10px; margin-top: 10px; overflow-wrap: normal; word-break: normal;&quot;&gt;Enables an Azure resource to authenticate with&amp;nbsp;&lt;span class=&quot;mc-variable project_variables.ConjPrefix variable&quot; style=&quot;box-sizing: border-box;&quot;&gt;Conjur&lt;/span&gt;&lt;/p&gt;&lt;/td&gt;&lt;/tr&gt;&lt;tr class=&quot;TableStyle-Standard-Body-Body1&quot; data-mc-conditions=&quot;&quot; style=&quot;box-sizing: border-box;&quot;&gt;&lt;td class=&quot;TableStyle-Standard-BodyE-Column1-Body1&quot; style=&quot;border-bottom: 1px solid rgb(229, 229, 229); border-right: 1px solid rgb(229, 229, 229); box-sizing: border-box; margin-bottom: 8px; overflow-wrap: normal; padding: 3pt 10pt; vertical-align: top; word-break: normal;&quot;&gt;&lt;p style=&quot;box-sizing: border-box; line-height: 1.8rem; margin-bottom: 10px; margin-top: 10px; overflow-wrap: normal; word-break: normal;&quot;&gt;&lt;span class=&quot;Emphasis&quot; style=&quot;box-sizing: border-box; font-weight: bold;&quot;&gt;&lt;a href=&quot;https://docs.cyberark.com/Product-Doc/OnlineHelp/AAM-DAP/Latest/en/Content/Operations/Services/cjr-authn-jwt-lp.htm&quot; style=&quot;box-sizing: border-box; color: #4d84b8; text-decoration-line: none;&quot;&gt;authn-jwt&lt;/a&gt;&lt;/span&gt;&lt;/p&gt;&lt;/td&gt;&lt;td class=&quot;TableStyle-Standard-BodyD-Column1-Body1&quot; style=&quot;border-bottom: 1px solid rgb(229, 229, 229); box-sizing: border-box; margin-bottom: 8px; overflow-wrap: normal; padding: 3pt 10pt; vertical-align: top; word-break: normal;&quot;&gt;&lt;p style=&quot;box-sizing: border-box; line-height: 1.8rem; margin-bottom: 10px; margin-top: 10px; overflow-wrap: normal; word-break: normal;&quot;&gt;Enables an application to authenticate to&amp;nbsp;&lt;span class=&quot;mc-variable project_variables.ConjPrefix variable&quot; style=&quot;box-sizing: border-box;&quot;&gt;Conjur&lt;/span&gt;&amp;nbsp;using a JWT from a JWT Provider.&lt;/p&gt;&lt;/td&gt;&lt;/tr&gt;&lt;tr class=&quot;TableStyle-Standard-Body-Body1&quot; data-mc-conditions=&quot;&quot; style=&quot;box-sizing: border-box;&quot;&gt;&lt;td class=&quot;TableStyle-Standard-BodyE-Column1-Body1&quot; style=&quot;border-bottom: 1px solid rgb(229, 229, 229); border-right: 1px solid rgb(229, 229, 229); box-sizing: border-box; margin-bottom: 8px; overflow-wrap: normal; padding: 3pt 10pt; vertical-align: top; word-break: normal;&quot;&gt;&lt;p style=&quot;box-sizing: border-box; line-height: 1.8rem; margin-bottom: 10px; margin-top: 10px; overflow-wrap: normal; word-break: normal;&quot;&gt;&lt;span class=&quot;Emphasis&quot; style=&quot;box-sizing: border-box; font-weight: bold;&quot;&gt;&lt;a href=&quot;https://docs.cyberark.com/Product-Doc/OnlineHelp/AAM-DAP/Latest/en/Content/Operations/Services/cjr-gcp-authn.htm#GCP%C2%A0Auth&quot; style=&quot;box-sizing: border-box; color: #4d84b8; text-decoration-line: none;&quot;&gt;authn-gcp&lt;/a&gt;&lt;/span&gt;&lt;/p&gt;&lt;/td&gt;&lt;td class=&quot;TableStyle-Standard-BodyD-Column1-Body1&quot; style=&quot;border-bottom: 1px solid rgb(229, 229, 229); box-sizing: border-box; margin-bottom: 8px; overflow-wrap: normal; padding: 3pt 10pt; vertical-align: top; word-break: normal;&quot;&gt;&lt;p style=&quot;box-sizing: border-box; line-height: 1.8rem; margin-bottom: 10px; margin-top: 10px; overflow-wrap: normal; word-break: normal;&quot;&gt;Enables a Google Cloud Platform resource to authenticate with&amp;nbsp;&lt;span class=&quot;mc-variable project_variables.ConjPrefix variable&quot; style=&quot;box-sizing: border-box;&quot;&gt;Conjur&lt;/span&gt;&lt;/p&gt;&lt;/td&gt;&lt;/tr&gt;&lt;tr class=&quot;TableStyle-Standard-Body-Body1&quot; style=&quot;box-sizing: border-box;&quot;&gt;&lt;td class=&quot;TableStyle-Standard-BodyE-Column1-Body1&quot; style=&quot;border-bottom: 1px solid rgb(229, 229, 229); border-right: 1px solid rgb(229, 229, 229); box-sizing: border-box; margin-bottom: 8px; overflow-wrap: normal; padding: 3pt 10pt; vertical-align: top; word-break: normal;&quot;&gt;&lt;span class=&quot;Emphasis&quot; style=&quot;box-sizing: border-box; font-weight: bold;&quot;&gt;&lt;a href=&quot;https://docs.cyberark.com/Product-Doc/OnlineHelp/AAM-DAP/Latest/en/Content/Integrations/k8s-ocp/k8s-k8s-authn.htm&quot; style=&quot;box-sizing: border-box; color: #4d84b8; text-decoration-line: none;&quot;&gt;authn-k8s&lt;/a&gt;&lt;/span&gt;&lt;/td&gt;&lt;td class=&quot;TableStyle-Standard-BodyD-Column1-Body1&quot; style=&quot;border-bottom: 1px solid rgb(229, 229, 229); box-sizing: border-box; margin-bottom: 8px; overflow-wrap: normal; padding: 3pt 10pt; vertical-align: top; word-break: normal;&quot;&gt;Authenticates hosts that are Kubernetes resources, such as a Kubernetes namespace, deployment, stateful set, and others. Authentication is certificate-based using a mutual TLS connection.&lt;/td&gt;&lt;/tr&gt;&lt;tr class=&quot;TableStyle-Standard-Body-Body1&quot; style=&quot;box-sizing: border-box;&quot;&gt;&lt;td class=&quot;TableStyle-Standard-BodyB-Column1-Body1&quot; style=&quot;border-right: 1px solid rgb(229, 229, 229); box-sizing: border-box; margin-bottom: 8px; overflow-wrap: normal; padding: 3pt 10pt; vertical-align: top; word-break: normal;&quot;&gt;&lt;span class=&quot;Emphasis&quot; style=&quot;box-sizing: border-box; font-weight: bold;&quot;&gt;&lt;a href=&quot;https://docs.cyberark.com/Product-Doc/OnlineHelp/AAM-DAP/Latest/en/Content/Integrations/ldap/configure-ldap-authn.htm&quot; style=&quot;box-sizing: border-box; color: #4d84b8; text-decoration-line: none;&quot;&gt;authn-ldap&lt;/a&gt;&lt;/span&gt;&lt;/td&gt;&lt;td class=&quot;TableStyle-Standard-BodyA-Column1-Body1&quot; style=&quot;box-sizing: border-box; margin-bottom: 8px; overflow-wrap: normal; padding: 3pt 10pt; vertical-align: top; word-break: normal;&quot;&gt;Authenticates users based on an LDAP directory.&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;&lt;br /&gt;&lt;div&gt;come si può intuire Conjur è integrabile nativamente con molte delle tecnologie moderne che potete utilizzare a vostro piacimento , per gestirne i secrets in modo sicuro!&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;Di default dopo l&#39;installazione di Conjur, l&#39;unico authenticator attivo è authn che è in grado di fornire accesso a Conjur ed ai suoi secrets tramite username o API key (generate random fra i 51 e 56 caratteri).&amp;nbsp;&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;Se però ad esempio dovete però fornire accesso ad applicazioni che risiedono su un cluster Kubernetes attivando authn-k8s potete farlo in modo sicuro tramite una connessione sicura stabilita in mTLS , utilizzando &lt;a href=&quot;https://spiffe.io/docs/latest/spiffe-about/overview/&quot; target=&quot;_blank&quot;&gt;Spiffie&lt;/a&gt; secondo lo schema sottostante (&lt;a href=&quot;https://www.conjur.org/blog/kubernetes-authentication/&quot; target=&quot;_blank&quot;&gt;qui per approfondire&lt;/a&gt;) :&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div class=&quot;separator&quot; style=&quot;clear: both; text-align: center;&quot;&gt;&lt;a href=&quot;https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEji4nzjoSLvlymN6r2lUqLovE4hN4OKneyhz4UuGf95-Qc8oLbPJov6KIC0Yefg9ZytWoL4Y7pVbriw_j3Qa2stK46M3R14Tny2qalwqIIwMZPUTHcsJyzaavzIe1mobeZZeLSaTNVmahcVLRChOLdPeq8WUxokINxZf5J86AqsJA3eFwWMd0_-iJhB/s1148/k8s_authentication_flow.png&quot; style=&quot;margin-left: 1em; margin-right: 1em;&quot;&gt;&lt;img border=&quot;0&quot; data-original-height=&quot;1148&quot; data-original-width=&quot;976&quot; height=&quot;400&quot; src=&quot;https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEji4nzjoSLvlymN6r2lUqLovE4hN4OKneyhz4UuGf95-Qc8oLbPJov6KIC0Yefg9ZytWoL4Y7pVbriw_j3Qa2stK46M3R14Tny2qalwqIIwMZPUTHcsJyzaavzIe1mobeZZeLSaTNVmahcVLRChOLdPeq8WUxokINxZf5J86AqsJA3eFwWMd0_-iJhB/w340-h400/k8s_authentication_flow.png&quot; width=&quot;340&quot; /&gt;&lt;/a&gt;&lt;/div&gt;&lt;div class=&quot;separator&quot; style=&quot;clear: both; text-align: center;&quot;&gt;&lt;br /&gt;&lt;/div&gt;&lt;div class=&quot;separator&quot; style=&quot;clear: both; text-align: left;&quot;&gt;analogamente a quanto fatto per Kubernetes se poi doveste aver la necessità di integrare un identità di qualunque tipo ( ad esempio Google Apigee ) potete ricorrere all&#39;authenticator authn-jwt &lt;a href=&quot;https://docs.cyberark.com/Product-Doc/OnlineHelp/AAM-DAP/Latest/en/Content/Operations/Services/cjr-authn-jwt-lp.htm&quot; target=&quot;_blank&quot;&gt;che lavora come descritto&lt;/a&gt; qui secondo lo schema sottostante:&amp;nbsp;&lt;/div&gt;&lt;div class=&quot;separator&quot; style=&quot;clear: both; text-align: left;&quot;&gt;&lt;br /&gt;&lt;/div&gt;&lt;div class=&quot;separator&quot; style=&quot;clear: both; text-align: left;&quot;&gt;&lt;br /&gt;&lt;/div&gt;&lt;div class=&quot;separator&quot; style=&quot;clear: both; text-align: center;&quot;&gt;&lt;a href=&quot;https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGOa2CXqR2ZkQF_VjafIuijVV0Px2uRKBdhyFYw6RbPe67qMwgLJON1wq5hkg2naiN68ZlnEp1KB3E06twHNL0ynW6S05CXpS4oRX6lR5MwngZ7AnZS3FYy-ILfmzg_vZ40jyKuoeixKnY77jPDaTjMV6_GTe5hPweaj44maiO2gRtoQFZYKFHOe4x/s2151/cjr-authn-jwt-flow.png&quot; style=&quot;margin-left: 1em; margin-right: 1em;&quot;&gt;&lt;img border=&quot;0&quot; data-original-height=&quot;1199&quot; data-original-width=&quot;2151&quot; height=&quot;223&quot; src=&quot;https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGOa2CXqR2ZkQF_VjafIuijVV0Px2uRKBdhyFYw6RbPe67qMwgLJON1wq5hkg2naiN68ZlnEp1KB3E06twHNL0ynW6S05CXpS4oRX6lR5MwngZ7AnZS3FYy-ILfmzg_vZ40jyKuoeixKnY77jPDaTjMV6_GTe5hPweaj44maiO2gRtoQFZYKFHOe4x/w400-h223/cjr-authn-jwt-flow.png&quot; width=&quot;400&quot; /&gt;&lt;/a&gt;&lt;/div&gt;&lt;br /&gt;&lt;div class=&quot;separator&quot; style=&quot;clear: both; text-align: left;&quot;&gt;&lt;br /&gt;&lt;/div&gt;Come potete capire dalla lista sopra degli authenticator , le possibilità che ha Conjur di servire la vostra applicazione o meglio identità verificata in modo sicuro coprono praticamente la totalità dei casi possibili.&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;Quindi se&amp;nbsp; dovete quindi fornire secrets in una o più dei seguenti esempi&amp;nbsp;&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;&lt;ul style=&quot;text-align: left;&quot;&gt;&lt;li&gt;Kubernetes (locali o cloud)&amp;nbsp;&lt;/li&gt;&lt;li&gt;API gateway&lt;/li&gt;&lt;li&gt;Jenkins&lt;/li&gt;&lt;li&gt;Ansible&lt;/li&gt;&lt;li&gt;Puppet&lt;/li&gt;&lt;li&gt;Terraform&lt;/li&gt;&lt;li&gt;Cloud services&lt;/li&gt;&lt;/ul&gt;&lt;/div&gt;&lt;div&gt;in modo sicuro e nativo non potete che considerare Conjur rivolgendovi a CyberArk o &lt;a href=&quot;https://sighup.io/#tech-partners&quot; target=&quot;_blank&quot;&gt;al vostro partner CyberArk di riferimento&lt;/a&gt;.&lt;/div&gt;&lt;div&gt;&lt;div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;/div&gt;&lt;/div&gt;</description><link>https://www.msbiro.net/2022/08/cyberark-conjur-authenticators-integrazioni-jwt-kubernetes-spiffie.html</link><author>noreply@blogger.com (Matteo Bisi)</author><media:thumbnail xmlns:media="http://search.yahoo.com/mrss/" url="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEji4nzjoSLvlymN6r2lUqLovE4hN4OKneyhz4UuGf95-Qc8oLbPJov6KIC0Yefg9ZytWoL4Y7pVbriw_j3Qa2stK46M3R14Tny2qalwqIIwMZPUTHcsJyzaavzIe1mobeZZeLSaTNVmahcVLRChOLdPeq8WUxokINxZf5J86AqsJA3eFwWMd0_-iJhB/s72-w340-h400-c/k8s_authentication_flow.png" height="72" width="72"/><thr:total>0</thr:total><georss:featurename>Bonn, Germania</georss:featurename><georss:point>50.73743 7.0982068</georss:point><georss:box>22.427196163821158 -28.0580432 79.047663836178856 42.2544568</georss:box></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-862466964502823380</guid><pubDate>Sun, 24 Jul 2022 15:20:00 +0000</pubDate><atom:updated>2022-08-23T12:13:30.557+02:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">conjur architettura</category><category domain="http://www.blogger.com/atom/ns#">conjur enterprise</category><category domain="http://www.blogger.com/atom/ns#">conjur system requirements</category><category domain="http://www.blogger.com/atom/ns#">cyberark conjur</category><title>CyberArk Conjur - panoramica su system requirements e architettura</title><description>&lt;p&gt;Continua la serie su CyberArk Conjur, nel post precedente ho spiegato &lt;a href=&quot;https://www.msbiro.net/2022/07/cyberark-conjur-secrets-manager-enterprise-opensource-adozione-utilizzo.html&quot; target=&quot;_blank&quot;&gt;a cosa serve un secrets manager enterprise&lt;/a&gt;, in questo post parlerò di architettura e system requirements.&amp;nbsp;&lt;/p&gt;&lt;p&gt;Conjur è disponibile in versione Enterprise, opensource (chiamata OSS) ed a breve lo sarà anche in versione cloud in soluzione SAAS.&lt;/p&gt;&lt;p&gt;I miei post fanno riferimento alla versione enterprise, che è comunque molto simile alla OSS.&lt;/p&gt;&lt;h2 style=&quot;text-align: left;&quot;&gt;Architettura&lt;/h2&gt;&lt;p&gt;Conjur è distribuito come appliance in forma di docker image, quindi il suo setup dell&#39;infrastruttura risulta semplice e veloce.&lt;/p&gt;&lt;p&gt;Questi sono i componenti principali dell&#39;appliance:&amp;nbsp;&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;ul style=&quot;text-align: left;&quot;&gt;&lt;li&gt;nginx&amp;nbsp; &amp;nbsp;- garantisce l&#39;accesso web per GUI amministrativa e API per fruizione secrets&lt;/li&gt;&lt;li&gt;postgres database - contiene tutti i dati di conjur, secrets e policies. Inoltre c&#39;è un secondo db per. i log funzionali e di audit&lt;/li&gt;&lt;li&gt;conjur appliance - il prodotto&amp;nbsp;&lt;/li&gt;&lt;li&gt;syslog-ng - viene utilizzato per collezionare log e audit di funzionamento&lt;/li&gt;&lt;/ul&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;La configurazione minima tipica in ambito enterprise è di 3 nodi, configurati in &lt;a href=&quot;https://docs.cyberark.com/Product-Doc/OnlineHelp/AAM-DAP/Latest/en/Content/Deployment/HighAvailability/deploy-auto-failover-intro.htm&quot; target=&quot;_blank&quot;&gt;cluster con auto-failover&lt;/a&gt;:&lt;/p&gt;&lt;div class=&quot;separator&quot; style=&quot;clear: both; text-align: center;&quot;&gt;&lt;a href=&quot;https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRDdiEBuxe2MBeBeTllkbe8pEZRyQO9_aJ8ldiC--v9wySfYVJz7h004jI5yXNw8YUOqXaiU7fxhIXT6qj-HAtDgSb_dBnY8z4gLcN5MO8W-4_FGdhS164s2HhwGWbUgEjgODsgrNLVhNlnqVed3GHFYIQ3tQzTOayKryFT9wcv8LTyTGNYPoinVuE/s1586/arch1.png&quot; style=&quot;margin-left: 1em; margin-right: 1em;&quot;&gt;&lt;img border=&quot;0&quot; data-original-height=&quot;488&quot; data-original-width=&quot;1586&quot; height=&quot;136&quot; src=&quot;https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRDdiEBuxe2MBeBeTllkbe8pEZRyQO9_aJ8ldiC--v9wySfYVJz7h004jI5yXNw8YUOqXaiU7fxhIXT6qj-HAtDgSb_dBnY8z4gLcN5MO8W-4_FGdhS164s2HhwGWbUgEjgODsgrNLVhNlnqVed3GHFYIQ3tQzTOayKryFT9wcv8LTyTGNYPoinVuE/w444-h136/arch1.png&quot; width=&quot;444&quot; /&gt;&lt;/a&gt;&lt;/div&gt;&lt;br /&gt;&lt;p&gt;Il funzionamento del cluster come si può intuire dalla figura, è active-passive e si basa su un nodo principale , &quot;leader&quot;, che eroga i servizi mantiene i db in read write e fornisce accesso tramite API rest ai secrets.&amp;nbsp;&lt;/p&gt;&lt;p&gt;Oltre al leader vengono tipicamente installati 2 o più nodi inattivi, chiamati &quot;standby&quot;, che possono essere sync o async .&amp;nbsp;&lt;/p&gt;&lt;p&gt;I dati sono replicati fra i vari nodi sfruttando la postgres replication.&lt;/p&gt;&lt;p&gt;In caso di fail del nodo principale , viene eseguita la promozione di un nodo Standby utilizzando &lt;a href=&quot;https://docs.cyberark.com/Product-Doc/OnlineHelp/AAM-DAP/Latest/en/Content/Deployment/HighAvailability/deploy-auto-failover-intro.htm&quot; target=&quot;_blank&quot;&gt;etcd e Raft consensus algorithm&lt;/a&gt;&amp;nbsp;ed il load balancer garantirà l&#39;accesso al nuovo nodo leader.&lt;/p&gt;&lt;p&gt;In caso il cluster non sia configurato con una policy di auto-failover, va eseguita una promozione manuale di un altro nodo.&amp;nbsp;&lt;/p&gt;&lt;p&gt;E&#39; possibile avere ad esempio una configurazione con un site primario in auto-failover ed un nodo di disaster recovery con standbys async da promuovere manualmente in caso di necessità.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Oltre ai nodi che costituiscono il cluster, esiste la possibilità di installare dei nodi passivi chiamati follower, che possiedono una replica dei db in read-only e garantiscono accesso ai secrets alle applicazioni.&amp;nbsp;&lt;/p&gt;&lt;p&gt;Un caso tipico di utilizzo di un follower è su un cluster Kubernetes, dove viene installato garantire la minor latenza possibile nella risposta alle applicazioni locali.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;L&#39;architettura finale quindi aggiungendo follower e applicazioni al disegno sopra diventa qualcosa di simile al seguente:&amp;nbsp;&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;div class=&quot;separator&quot; style=&quot;clear: both; text-align: center;&quot;&gt;&lt;a href=&quot;https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6QlR1mTOdLuU578lvID0j_r6yyaNp83stDfrv_TujeCg9OlfC8SEgFF1j5GVMuxkXPFIdCVNvYJNkPN9LASMZ1X_8yoQlMTlhAw82Fd7TXNIZdHL0WtaZacg9CJiLUDqV0AGUyTgCTEfPnUzanzSS9RLPQdKhPTI3GBRvr5OfXqMhZpH-N-DZTW2V/s1582/arch2.png&quot; style=&quot;margin-left: 1em; margin-right: 1em;&quot;&gt;&lt;img border=&quot;0&quot; data-original-height=&quot;984&quot; data-original-width=&quot;1582&quot; height=&quot;252&quot; src=&quot;https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6QlR1mTOdLuU578lvID0j_r6yyaNp83stDfrv_TujeCg9OlfC8SEgFF1j5GVMuxkXPFIdCVNvYJNkPN9LASMZ1X_8yoQlMTlhAw82Fd7TXNIZdHL0WtaZacg9CJiLUDqV0AGUyTgCTEfPnUzanzSS9RLPQdKhPTI3GBRvr5OfXqMhZpH-N-DZTW2V/w405-h252/arch2.png&quot; width=&quot;405&quot; /&gt;&lt;/a&gt;&lt;/div&gt;&lt;br /&gt;&lt;h2 style=&quot;text-align: left;&quot;&gt;&lt;b&gt;System requirements&lt;/b&gt;&lt;/h2&gt;&lt;p&gt;La &lt;a href=&quot;https://docs.cyberark.com/product-doc/onlinehelp/aam-dap/latest/en/Content/Deployment/platforms/dap-sysreqs-server.htm?tocpath=Setup%7CConjur%20Enterprise%20requirements%7C_____1&quot; target=&quot;_blank&quot;&gt;configurazione suggerita&lt;/a&gt; per i nodi di produzione è la seguente:&amp;nbsp;&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;ul style=&quot;text-align: left;&quot;&gt;&lt;li&gt;4 core&lt;/li&gt;&lt;li&gt;8 GB ram&lt;/li&gt;&lt;li&gt;50 GB hd&lt;/li&gt;&lt;/ul&gt;&lt;div&gt;Per un ambiente di dev/test&lt;/div&gt;&lt;div&gt;&lt;ul style=&quot;text-align: left;&quot;&gt;&lt;li&gt;2 core&lt;/li&gt;&lt;li&gt;4 GB ram&lt;/li&gt;&lt;li&gt;20 GB hd&lt;/li&gt;&lt;/ul&gt;&lt;div&gt;per quanto riguarda il container runtime sono supportati&amp;nbsp; i seguenti&lt;/div&gt;&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;&lt;ul style=&quot;text-align: left;&quot;&gt;&lt;li&gt;docker 1.13 or later&lt;/li&gt;&lt;li&gt;Mirantis Container runtime (MRC) 19.x, 20.10 su RHEL 8.x&lt;/li&gt;&lt;li&gt;Kubernetes e Openshift ( solo per i follower )&amp;nbsp;&lt;/li&gt;&lt;li&gt;podman 3.3 e 3.4&amp;nbsp;&lt;/li&gt;&lt;/ul&gt;&lt;/div&gt;&lt;div&gt;mentre OS host deve essere uno di quelli supportati dai container runtime (tipicamente RHEL e derivate o Ubuntu server LTS) .&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;Nel caso in cui disponiate di un server CyberArk Vault e vogliate sincronizzare i secrets verso Conjur per espanderne l&#39;adozione , è necessario installare un &lt;a href=&quot;https://docs.cyberark.com/product-doc/onlinehelp/aam-dap/latest/en/Content/Deployment/platforms/dap-sysreqs-synchronizer.htm?tocpath=Setup%7CConjur%20Enterprise%20requirements%7C_____2&quot; target=&quot;_blank&quot;&gt;server per il componente&amp;nbsp;Vault Synchronizer&lt;/a&gt;&amp;nbsp;&amp;nbsp;&lt;/div&gt;&lt;div&gt;&lt;ul style=&quot;text-align: left;&quot;&gt;&lt;li&gt;4 core&lt;/li&gt;&lt;li&gt;8 GB ram&lt;/li&gt;&lt;li&gt;OS Windows 2012 R2 o superiore&lt;/li&gt;&lt;/ul&gt;&lt;/div&gt;&lt;p&gt;&lt;/p&gt;</description><link>https://www.msbiro.net/2022/07/cyberark-conjur-architettura-system-requirements-panoramica-how-to.html</link><author>noreply@blogger.com (Matteo Bisi)</author><media:thumbnail xmlns:media="http://search.yahoo.com/mrss/" url="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRDdiEBuxe2MBeBeTllkbe8pEZRyQO9_aJ8ldiC--v9wySfYVJz7h004jI5yXNw8YUOqXaiU7fxhIXT6qj-HAtDgSb_dBnY8z4gLcN5MO8W-4_FGdhS164s2HhwGWbUgEjgODsgrNLVhNlnqVed3GHFYIQ3tQzTOayKryFT9wcv8LTyTGNYPoinVuE/s72-w444-h136-c/arch1.png" height="72" width="72"/><thr:total>0</thr:total><georss:featurename>Bonn, Germania</georss:featurename><georss:point>50.73743 7.0982068</georss:point><georss:box>22.427196163821158 -28.0580432 79.047663836178856 42.2544568</georss:box></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-743940642906747768</guid><pubDate>Mon, 18 Jul 2022 22:47:00 +0000</pubDate><atom:updated>2022-08-23T12:13:56.260+02:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">cyberark conjur</category><category domain="http://www.blogger.com/atom/ns#">introduzione</category><category domain="http://www.blogger.com/atom/ns#">secrets manager</category><title>CyberArk Conjur , alcuni motivi per cui un enterprise secrets manager deve essere adottato</title><description>Quando ci si occupa di security , uno dei temi che non si possono ignorare è la gestione dei secrets , tema che può impattare a 360° il destino di un azienda.&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;Per secrets ad esempio possiamo considerare ad esempio:&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;&lt;ul style=&quot;text-align: left;&quot;&gt;&lt;li&gt;username&lt;/li&gt;&lt;li&gt;database passwords&lt;/li&gt;&lt;li&gt;SSL certificates e keys&lt;/li&gt;&lt;li&gt;SSH Keys&lt;/li&gt;&lt;li&gt;credenziali cloud&lt;/li&gt;&lt;/ul&gt;&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;&amp;quot;Open Sans&amp;quot;, Arial, Verdana, &amp;quot;sans-serif&amp;quot;&quot; style=&quot;font-size: 16px;&quot;&gt;potete capire quindi che la gestione di questi dati diventa fondamentale per salvaguardare sicurezza , funzionamento e reputazione.&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;&amp;quot;Open Sans&amp;quot;, Arial, Verdana, &amp;quot;sans-serif&amp;quot;&quot; style=&quot;font-size: 16px;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Open Sans, Arial, Verdana, sans-serif&quot;&gt;Alcuni dei problemi di gestione più diffusi dei secrets includono :&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;ul style=&quot;text-align: left;&quot;&gt;&lt;li&gt;&lt;span face=&quot;Open Sans, Arial, Verdana, sans-serif&quot;&gt;hardcoded secrets nel codice&lt;/span&gt;&lt;/li&gt;&lt;li&gt;&lt;span face=&quot;Open Sans, Arial, Verdana, sans-serif&quot;&gt;data-breach&lt;/span&gt;&lt;/li&gt;&lt;li&gt;&lt;span face=&quot;Open Sans, Arial, Verdana, sans-serif&quot;&gt;password leak&lt;/span&gt;&lt;/li&gt;&lt;li&gt;&lt;span face=&quot;Open Sans, Arial, Verdana, sans-serif&quot;&gt;secrets presenti in repository pubblici&lt;/span&gt;&lt;/li&gt;&lt;/ul&gt;&lt;div&gt;&lt;span face=&quot;Open Sans, Arial, Verdana, sans-serif&quot;&gt;un secrets non gestito in modo corretto grazie a fenomeni come lateral movement, può portare a danni importanti.&lt;/span&gt;&lt;/div&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Open Sans, Arial, Verdana, sans-serif&quot;&gt;&amp;nbsp;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;&amp;quot;Open Sans&amp;quot;, Arial, Verdana, &amp;quot;sans-serif&amp;quot;&quot; style=&quot;font-size: 16px;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Open Sans, Arial, Verdana, sans-serif&quot;&gt;Per poter gestire al meglio i secrets&amp;nbsp;è necessario rivolgersi ad un secrets manager ed una delle possibili soluzioni è &lt;a href=&quot;https://docs.cyberark.com/Product-Doc/OnlineHelp/AAM-DAP/Latest/en/Content/Get%20Started/WhatIsConjur.html?tocpath=Get%20started%7C_____1&quot; rel=&quot;nofollow&quot; target=&quot;_blank&quot;&gt;CyberArk Conjur&lt;/a&gt;.&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Open Sans, Arial, Verdana, sans-serif&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Open Sans, Arial, Verdana, sans-serif&quot;&gt;Conjur , grazie ad un set di API rest è programmabile ed accessible tramite URL.&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Open Sans, Arial, Verdana, sans-serif&quot;&gt;La sicurezza garantita da policy, rende disponibile l&#39;accesso ai secrets in modo rapido e semplice per i developers, senza renderli partecipi in modo diretto del valore dei secrets coinvolti nel loro codice.&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Open Sans, Arial, Verdana, sans-serif&quot;&gt;La sicurezza aziendale può essere migliorata tramite la rotazione automatica dei secrets utilizzando i rotators, ed ovviamente si integra alla perfezione con gli altri componenti dell&#39;ecosistema di Cyberark come il Pas Vault, rendendo la sicurezza garantita da Cyberark&amp;nbsp; anche al mondo Cloud Native.&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Open Sans, Arial, Verdana, sans-serif&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Open Sans, Arial, Verdana, sans-serif&quot;&gt;Conjur è disponibile in 2 versioni, &lt;a href=&quot;https://docs.cyberark.com/Product-Doc/OnlineHelp/AAM-DAP/Latest/en/Content/Resources/_TopNav/cc_Home.htm&quot; target=&quot;_blank&quot;&gt;una enterprise&lt;/a&gt; ed &lt;a href=&quot;https://docs.conjur.org/Latest/en/Content/Resources/_TopNav/cc_Home.htm&quot; rel=&quot;nofollow&quot; target=&quot;_blank&quot;&gt;una opensource&lt;/a&gt; che &lt;a href=&quot;https://www.cyberark.com/resources/solution-briefs/cyberark-conjur-enterprise-and-cyberark-conjur-open-source&quot; target=&quot;_blank&quot;&gt;si differenziano in alcune funzionalità&lt;/a&gt;.&amp;nbsp;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Open Sans, Arial, Verdana, sans-serif&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Open Sans, Arial, Verdana, sans-serif&quot;&gt;Questo post vuole essere una introduzione al tema e nei prossimi post vi parlerò di requisiti, architettura (semplice e veloce grazie al rilascio sw come container images) e sulle modalità di accesso ai secrets.&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Open Sans, Arial, Verdana, sans-serif&quot;&gt;&amp;nbsp;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Open Sans, Arial, Verdana, sans-serif&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Open Sans, Arial, Verdana, sans-serif&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/div&gt;</description><link>https://www.msbiro.net/2022/07/cyberark-conjur-secrets-manager-enterprise-opensource-adozione-utilizzo.html</link><author>noreply@blogger.com (Matteo Bisi)</author><thr:total>0</thr:total><georss:featurename>Bonn, Germania</georss:featurename><georss:point>50.73743 7.0982068</georss:point><georss:box>22.427196163821158 -28.0580432 79.047663836178856 42.2544568</georss:box></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-262556231919329387</guid><pubDate>Wed, 25 May 2022 21:40:00 +0000</pubDate><atom:updated>2022-05-25T23:40:44.436+02:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">devsecops</category><category domain="http://www.blogger.com/atom/ns#">nuovo lavoro</category><title>Un nuovo viaggio è iniziato.. aggiornamento professionale e cambio focus per il blog</title><description>&lt;p&gt;Scrivo un alcune di righe per riportare anche qui un importante aggiornamento professionale che riguarda futuro di questo blog: come forse avrete visto su &lt;a href=&quot;https://it.linkedin.com/in/matteobisi/&quot; target=&quot;_blank&quot;&gt;LinkedIn&lt;/a&gt; o &lt;a href=&quot;https://twitter.com/IamMatteoBisi&quot; target=&quot;_blank&quot;&gt;Twitter&lt;/a&gt; , dal 16 Maggio 2022 ho dato una svolta alla mia carriera cambiando società e ruolo, ora lavoro come Senior DevOps Engineer presso &lt;a href=&quot;https://sighup.io/&quot; target=&quot;_blank&quot;&gt;Sighup&lt;/a&gt; .&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Questo cambiamento di ruolo, obbiettivi , tecnologie e responsabilità avrà come riflesso il cambio dei contenuti di questo blog verso temi differenti a partire da &lt;a href=&quot;https://www.cyberark.com/products/secrets-manager-enterprise/&quot; target=&quot;_blank&quot;&gt;CyberArk Conjur&lt;/a&gt;&amp;nbsp;fino ad altri prodotti successivi di cui scriverò nel prossimo futuro.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;I contenuti precedenti a questo post del blog rimarranno li dove sono ora , visto che saranno utili per parecchio tempo ed ho intenzione di onorare il mio ruolo di HCL Ambassador.&amp;nbsp;&lt;/p&gt;&lt;p&gt;Aggiungo che in&amp;nbsp; questo momento il mio ruolo &lt;a href=&quot;https://letsconnect.world/&quot; target=&quot;_blank&quot;&gt;di membro organizzatore dello usergroup Let&#39;sConnect&lt;/a&gt; rimane immutato, spero quindi vivamente di essere in grado di incontrarvi nuovamente al prossimo evento.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Un grande abbraccio alla mia precedente community e audience e un grande benveuto ai futuri lettori ed alla futura community.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;</description><link>https://www.msbiro.net/2022/05/un-nuovo-viaggio-lavorativo-inizio-matteo-bisi-sighup-devsecops-nuovo-blog.html</link><author>noreply@blogger.com (Matteo Bisi)</author><thr:total>0</thr:total><georss:featurename>40053 Valsamoggia BO, Italia</georss:featurename><georss:point>44.504314099999988 11.0799504</georss:point><georss:box>16.194080263821142 -24.0762996 72.814547936178826 46.2362004</georss:box></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-2877855657704586482</guid><pubDate>Thu, 28 Apr 2022 06:59:00 +0000</pubDate><atom:updated>2022-04-28T08:59:28.612+02:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">HCL Connections</category><title>HCL Connections 7.0 , come risolvere errori db su Wikis , Files e Metrics durante migrazione side by side con dbt.jar</title><description>&lt;p&gt;Durante questi giorni sono impegnato in una migrazione side by side da Connections 6.0 a 7.0.&lt;/p&gt;&lt;p&gt;La migrazione dei database preferisco farla con il tool dbt.jar che copia le tabelle dei dati da vecchio a nuovo per una serie di ragioni , fra cui :&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;ol style=&quot;text-align: left;&quot;&gt;&lt;li&gt;tipicamente la faccio nel primo giro di test mentre gli utenti lavorano , senza problemi&lt;/li&gt;&lt;li&gt;mi aiuta a capire e fixare eventuali problemi sulle tabelle dei dati&lt;/li&gt;&lt;/ol&gt;&lt;div&gt;In questa situazione ho trovato problemi su Wikis, Files e Metrics.&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;&lt;b&gt;Wikis e Files&lt;/b&gt;&lt;/div&gt;&lt;div&gt;In questo caso i DB di Wikis e Files non venivano migrati in modo corretto , andavano in errore su una tabella con questo errore:&lt;/div&gt;&lt;div&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;background-color: white; color: #4b4b4b; font-size: 14px; white-space: pre-wrap;&quot;&gt;ERROR: Error occurred gathering data from the source database&lt;/span&gt;&lt;br style=&quot;background-color: white; box-sizing: border-box; color: #4b4b4b; font-family: Roboto, SourceSansPro, Helvetica, Arial, sans-serif; font-size: 14px; white-space: pre-wrap;&quot; /&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;background-color: white; color: #4b4b4b; font-size: 14px; white-space: pre-wrap;&quot;&gt;com.ibm.db2.jcc.am.SqlSyntaxErrorException: DB2 SQL Error: SQLCODE=-551, SQLSTATE=42501, SQLERRMC=LCUSER;SELECT;FILES.EVENT_STORE, DRIVER=4.29.24&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;background-color: white; color: #4b4b4b; font-size: 14px; white-space: pre-wrap;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;background-color: white; color: #4b4b4b; font-size: 14px; white-space: pre-wrap;&quot;&gt;dopo alcune verifiche mi sono reso conto che le tabelle in questa condizione erano 3 per entrambi i db&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;background-color: white; color: #4b4b4b; font-size: 14px; white-space: pre-wrap;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;background-color: white; color: #4b4b4b; font-size: 14px; white-space: pre-wrap;&quot;&gt;EVENT_PROCESSING&lt;/span&gt;&lt;br style=&quot;background-color: white; box-sizing: border-box; color: #4b4b4b; font-family: Roboto, SourceSansPro, Helvetica, Arial, sans-serif; font-size: 14px; white-space: pre-wrap;&quot; /&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;background-color: white; color: #4b4b4b; font-size: 14px; white-space: pre-wrap;&quot;&gt;EVENT_STORE&lt;/span&gt;&lt;br style=&quot;background-color: white; box-sizing: border-box; color: #4b4b4b; font-family: Roboto, SourceSansPro, Helvetica, Arial, sans-serif; font-size: 14px; white-space: pre-wrap;&quot; /&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;background-color: white; color: #4b4b4b; font-size: 14px; white-space: pre-wrap;&quot;&gt;FILE_LOCATION&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;background-color: white; color: #4b4b4b; font-size: 14px; white-space: pre-wrap;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;color: #4b4b4b;&quot;&gt;&lt;span style=&quot;background-color: white; font-size: 14px; white-space: pre-wrap;&quot;&gt;L&#39;errore SQL è di mancato accesso ed in effetti LCUSER non poteva leggere le 3 tabelle , nè sul produzione attuale sorgente nè sul destinazione.&lt;/span&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;color: #4b4b4b;&quot;&gt;&lt;span style=&quot;background-color: white; font-size: 14px; white-space: pre-wrap;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;color: #4b4b4b;&quot;&gt;&lt;span style=&quot;background-color: white; font-size: 14px; white-space: pre-wrap;&quot;&gt;Dopo una verifica sugli script ho verificato che queste tabelle venivano aggiunte nel CR5 di Connections 6.0 e quindi non erano presenti negli appGrants.sql inclusi di default ( ed i dev si sono dimenticati di mettere le grant negli script di creazione ... ) .&lt;/span&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;color: #4b4b4b;&quot;&gt;&lt;span style=&quot;background-color: white; font-size: 14px; white-space: pre-wrap;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;color: #4b4b4b;&quot;&gt;&lt;span style=&quot;background-color: white; font-size: 14px; white-space: pre-wrap;&quot;&gt;Ho proceduto quindi ad inserirle a mano , sia su sorgente che su destinazione ( essendo poi presenti negli appGrants.sql della versione 7.0 )&lt;/span&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;color: #4b4b4b;&quot;&gt;&lt;span style=&quot;background-color: white; font-size: 14px; white-space: pre-wrap;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/span&gt;&lt;/div&gt;&lt;p&gt;&lt;/p&gt;&lt;div&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;color: #4b4b4b;&quot;&gt;&lt;span style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;CONNECT TO FILES@&lt;/span&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span style=&quot;background-color: white;&quot;&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;color: #4b4b4b;&quot;&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;GRANT DELETE,INSERT,SELECT,UPDATE ON &quot;FILES&quot;.&quot;EVENT_STORE&quot; TO USER LCUSER@&lt;/div&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;GRANT DELETE,INSERT,SELECT,UPDATE ON &quot;FILES&quot;.&quot;EVENT_PROCESSING&quot; TO USER LCUSER@&lt;/div&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;GRANT DELETE,INSERT,SELECT,UPDATE ON &quot;FILES&quot;.&quot;FILE_LOCATION&quot; TO USER LCUSER@&lt;/div&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;&lt;br /&gt;&lt;/div&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;COMMIT WORK@&lt;/div&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;CONNECT RESET@&lt;/div&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;&lt;br /&gt;&lt;/div&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;&lt;br /&gt;&lt;/div&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;CONNECT TO WIKIS@&lt;/div&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;GRANT DELETE,INSERT,SELECT,UPDATE ON &quot;WIKIS&quot;.&quot;EVENT_STORE&quot; TO USER LCUSER@&lt;/div&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;GRANT DELETE,INSERT,SELECT,UPDATE ON &quot;WIKIS&quot;.&quot;EVENT_PROCESSING&quot; TO USER LCUSER@&lt;/div&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;GRANT DELETE,INSERT,SELECT,UPDATE ON &quot;WIKIS&quot;.&quot;FILE_LOCATION&quot; TO USER LCUSER@&lt;/div&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;&lt;br /&gt;&lt;/div&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;COMMIT WORK@&lt;/div&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;CONNECT RESET@&lt;/div&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;&lt;br /&gt;&lt;/div&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;&lt;b&gt;Metrics&lt;/b&gt;&lt;/div&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;Il problema di metrics era differente,  con questo errore:&lt;/div&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;&lt;span style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;com.ibm.db2.jcc.am.SqlTransactionRollbackException: Error for batch element #1: DB2 SQL Error: SQLCODE=-1476, SQLSTATE=40506, SQLERRMC=-964, DRIVER=4.29.24
  8. ERRORCODE=-4225, SQLSTATE=null
  9.  
  10. mber of the batch..755 CEST] error.executing.transfer
  11. Use getNextException() to retrieve the exceptions for specific batched elements. ERRORCODE=-4229, SQLSTATE=null
  12. com.ibm.db2.jcc.am.BatchUpdateException: [jcc][t4][102][10040][4.29.24] Batch failure.  The batch was submitted, but at least one exception occurred on an individual member of the batch.
  13. Use getNextException() to retrieve the exceptions for specific batched elements. ERRORCODE=-4229, SQLSTATE=null&lt;/span&gt;
  14. &lt;/div&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;&lt;br /&gt;&lt;/div&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;ERRORCODE=-4229 è un errore generico che necessita di debug, da un po&#39; di indagini nel db2diag.log dell&#39;instanza di destinazione , ho verificato questi errori durante la migrazione dei dati del db:&lt;/div&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;&lt;br /&gt;&lt;/div&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;&lt;br /&gt;&lt;/div&gt;&lt;div&gt;&lt;span style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;FUNCTION: DB2 UDB, data protection services, sqlpgResSpace, probe:1660
  15. MESSAGE : ADM1822W  The active transaction log is being held by dirty pages.
  16.          Database performance may be impacted.
  17.  
  18.  
  19. MESSAGE : ZRC=0x870F0035=-2029060043=SQLO_NOTAVAIL
  20.          &quot;Cannot honor the conditional request&quot;
  21.          DIA8531C A memory access error has occurred.
  22.  
  23.  
  24. MESSAGE : ZRC=0x85100009=-2062548983=SQLP_NOSPACE
  25.          &quot;Log File has reached its saturation point&quot;
  26.          DIA8309C Log file was full.&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;questi errori relativi ai log del db che si riempivano mi hanno fatto pensare, dopo aver ricreato il db di destinazione alla seguente soluzione:&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/div&gt;&lt;div style=&quot;text-align: center;&quot;&gt;&lt;span style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;db2 update db cfg for METRICS using logfilsiz 16000 logprimary 26 logsecond 6&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;con questo settaggio , la copia dati è terminata in modo corretto.&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/div&gt;&lt;div style=&quot;font-size: 14px; white-space: pre-wrap;&quot;&gt;&lt;br /&gt;&lt;/div&gt;&lt;/span&gt;&lt;/span&gt;&lt;/div&gt;</description><link>https://www.msbiro.net/2022/04/hcl-connections-7-migrazione-database-metrics-files-wikis-copia-dati-problema-dbt.jar-come-risolvere.html</link><author>noreply@blogger.com (Matteo Bisi)</author><thr:total>0</thr:total><georss:featurename>40053 Valsamoggia BO, Italia</georss:featurename><georss:point>44.504314099999988 11.0799504</georss:point><georss:box>16.194080263821142 -24.0762996 72.814547936178826 46.2362004</georss:box></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-7665349590479050920</guid><pubDate>Tue, 29 Mar 2022 15:41:00 +0000</pubDate><atom:updated>2022-03-29T17:41:31.225+02:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">HCL Sametime</category><title>HCL Sametime Premium v12, programmato evento lancio</title><description>&lt;p&gt;HCL ha ufficializzato un webinar per lanciare il nuovo Sametime Premium v12, che porterà novità funzionali lato meetings e porterà la parte di chat dentro i container docker o Kubernetes lato architetturale.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Se siete interessati, il meeting è&amp;nbsp; organizzato per il 27 Aprile , 2022 4:00 PM - 5:00 PM CEST&lt;/p&gt;&lt;a href=&quot;https://register.gotowebinar.com/register/1174444865961910027?source=msbiro.net&quot; target=&quot;_blank&quot;&gt;in questa pagina&lt;/a&gt; trovate il link di registrazione.&lt;br /&gt;&lt;br /&gt;&lt;div&gt;Vi consiglio di non perderlo, sarà sicuramente molto interessante,.&lt;/div&gt;</description><link>https://www.msbiro.net/2022/03/blog-post.html</link><author>noreply@blogger.com (Matteo Bisi)</author><thr:total>0</thr:total><georss:featurename>40053 Valsamoggia BO, Italia</georss:featurename><georss:point>44.504314099999988 11.0799504</georss:point><georss:box>16.194080263821142 -24.0762996 72.814547936178826 46.2362004</georss:box></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-2844330283473939670</guid><pubDate>Wed, 23 Mar 2022 14:38:00 +0000</pubDate><atom:updated>2022-03-23T15:38:16.449+01:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">hcl connections 8.0</category><title>HCL Connections V8 preview , disponibile !</title><description>&lt;p&gt;HCL ha rilasciato l&#39;ambiente di &lt;a href=&quot;https://preview.hclconnections.net/&quot; target=&quot;_blank&quot;&gt;preview ( beta) di Connections V8.0&lt;/a&gt; che&amp;nbsp; è attualmente schedulato per fine 2022.&lt;/p&gt;&lt;p&gt;Se siete interessati a vederlo e provarlo ,&amp;nbsp; rilasciare feedback e suggerimenti&amp;nbsp;&lt;a href=&quot;https://leap.hcltechsw.com/apps/anon/org/app/61b615e9-2bf8-4213-8b25-aaa0b70488ff/launch/index.html?form=F_Form1&quot; target=&quot;_blank&quot;&gt;potete andare a questo indirizzo&lt;/a&gt; e registrarvi.&amp;nbsp; Se vi eravate già iscritti alla preview di Connections V7.0, avete già un account.&lt;/p&gt;&lt;p&gt;L&#39;ambiente è completo ma non ancora tutto aggiornato alla nuova versione V8 e verrà rilasciato per gradi, secondo al seguente roadmap:&lt;/p&gt;&lt;div class=&quot;p-rich_text_section&quot; style=&quot;background-color: #222529; box-sizing: inherit; color: #d1d2d3; counter-reset: list-0 0 list-1 0 list-2 0 list-3 0 list-4 0 list-5 0 list-6 0 list-7 0 list-8 0 list-9 0; font-family: Slack-Lato, Slack-Fractions, appleLogo, sans-serif; font-size: 15px; font-variant-ligatures: common-ligatures;&quot;&gt;The initial release in&amp;nbsp;&lt;b data-stringify-type=&quot;bold&quot; style=&quot;box-sizing: inherit;&quot;&gt;March &#39;22&lt;/b&gt;&amp;nbsp;will include:&lt;br style=&quot;box-sizing: inherit;&quot; /&gt;&lt;/div&gt;&lt;ul class=&quot;p-rich_text_list p-rich_text_list__bullet&quot; data-border=&quot;0&quot; data-indent=&quot;0&quot; data-stringify-type=&quot;unordered-list&quot; style=&quot;background-color: #222529; box-sizing: inherit; color: #d1d2d3; font-family: Slack-Lato, Slack-Fractions, appleLogo, sans-serif; font-size: 15px; font-variant-ligatures: common-ligatures; list-style-type: none; margin: 0px; padding: 0px;&quot;&gt;&lt;li data-stringify-border=&quot;0&quot; data-stringify-indent=&quot;0&quot; style=&quot;box-sizing: inherit; list-style-type: none; margin-bottom: 0px; margin-left: 28px;&quot;&gt;New Share Experience&lt;/li&gt;&lt;li data-stringify-border=&quot;0&quot; data-stringify-indent=&quot;0&quot; style=&quot;box-sizing: inherit; list-style-type: none; margin-bottom: 0px; margin-left: 28px;&quot;&gt;New Homepage&lt;/li&gt;&lt;li data-stringify-border=&quot;0&quot; data-stringify-indent=&quot;0&quot; style=&quot;box-sizing: inherit; list-style-type: none; margin-bottom: 0px; margin-left: 28px;&quot;&gt;New Top Level Navigation — as displayed on the Homepage, Profiles, Search Results pages&lt;/li&gt;&lt;li data-stringify-border=&quot;0&quot; data-stringify-indent=&quot;0&quot; style=&quot;box-sizing: inherit; list-style-type: none; margin-bottom: 0px; margin-left: 28px;&quot;&gt;Profile Page &amp;amp; Settings&lt;/li&gt;&lt;li data-stringify-border=&quot;0&quot; data-stringify-indent=&quot;0&quot; style=&quot;box-sizing: inherit; list-style-type: none; margin-bottom: 0px; margin-left: 28px;&quot;&gt;New Search&lt;/li&gt;&lt;li data-stringify-border=&quot;0&quot; data-stringify-indent=&quot;0&quot; style=&quot;box-sizing: inherit; list-style-type: none; margin-bottom: 0px; margin-left: 28px;&quot;&gt;Important-To-Me bar (Important-To-Me Profile Card will be in Phase 2)&lt;/li&gt;&lt;/ul&gt;&lt;div class=&quot;p-rich_text_section&quot; style=&quot;background-color: #222529; box-sizing: inherit; color: #d1d2d3; counter-reset: list-0 0 list-1 0 list-2 0 list-3 0 list-4 0 list-5 0 list-6 0 list-7 0 list-8 0 list-9 0; font-family: Slack-Lato, Slack-Fractions, appleLogo, sans-serif; font-size: 15px; font-variant-ligatures: common-ligatures;&quot;&gt;In the second phase targeted for&amp;nbsp;&lt;b data-stringify-type=&quot;bold&quot; style=&quot;box-sizing: inherit;&quot;&gt;May &#39;22&lt;/b&gt;&amp;nbsp;we will add the next set of updated capabilities:&lt;br style=&quot;box-sizing: inherit;&quot; /&gt;&lt;/div&gt;&lt;ul class=&quot;p-rich_text_list p-rich_text_list__bullet&quot; data-border=&quot;0&quot; data-indent=&quot;0&quot; data-stringify-type=&quot;unordered-list&quot; style=&quot;background-color: #222529; box-sizing: inherit; color: #d1d2d3; font-family: Slack-Lato, Slack-Fractions, appleLogo, sans-serif; font-size: 15px; font-variant-ligatures: common-ligatures; list-style-type: none; margin: 0px; padding: 0px;&quot;&gt;&lt;li data-stringify-border=&quot;0&quot; data-stringify-indent=&quot;0&quot; style=&quot;box-sizing: inherit; list-style-type: none; margin-bottom: 0px; margin-left: 28px;&quot;&gt;Forums&lt;/li&gt;&lt;li data-stringify-border=&quot;0&quot; data-stringify-indent=&quot;0&quot; style=&quot;box-sizing: inherit; list-style-type: none; margin-bottom: 0px; margin-left: 28px;&quot;&gt;Wikis&lt;/li&gt;&lt;li data-stringify-border=&quot;0&quot; data-stringify-indent=&quot;0&quot; style=&quot;box-sizing: inherit; list-style-type: none; margin-bottom: 0px; margin-left: 28px;&quot;&gt;Blogs&lt;/li&gt;&lt;li data-stringify-border=&quot;0&quot; data-stringify-indent=&quot;0&quot; style=&quot;box-sizing: inherit; list-style-type: none; margin-bottom: 0px; margin-left: 28px;&quot;&gt;Communities&lt;/li&gt;&lt;li data-stringify-border=&quot;0&quot; data-stringify-indent=&quot;0&quot; style=&quot;box-sizing: inherit; list-style-type: none; margin-bottom: 0px; margin-left: 28px;&quot;&gt;Files&lt;/li&gt;&lt;li data-stringify-border=&quot;0&quot; data-stringify-indent=&quot;0&quot; style=&quot;box-sizing: inherit; list-style-type: none; margin-bottom: 0px; margin-left: 28px;&quot;&gt;Profile Card&lt;/li&gt;&lt;/ul&gt;&lt;div class=&quot;p-rich_text_section&quot; style=&quot;background-color: #222529; box-sizing: inherit; color: #d1d2d3; counter-reset: list-0 0 list-1 0 list-2 0 list-3 0 list-4 0 list-5 0 list-6 0 list-7 0 list-8 0 list-9 0; font-family: Slack-Lato, Slack-Fractions, appleLogo, sans-serif; font-size: 15px; font-variant-ligatures: common-ligatures;&quot;&gt;Concluding the Preview process we will release a third drop in&amp;nbsp;&lt;b data-stringify-type=&quot;bold&quot; style=&quot;box-sizing: inherit;&quot;&gt;July &#39;22&lt;/b&gt;&amp;nbsp;adding these updates:&lt;br style=&quot;box-sizing: inherit;&quot; /&gt;&lt;/div&gt;&lt;ul class=&quot;p-rich_text_list p-rich_text_list__bullet&quot; data-border=&quot;0&quot; data-indent=&quot;0&quot; data-stringify-type=&quot;unordered-list&quot; style=&quot;background-color: #222529; box-sizing: inherit; color: #d1d2d3; font-family: Slack-Lato, Slack-Fractions, appleLogo, sans-serif; font-size: 15px; font-variant-ligatures: common-ligatures; list-style-type: none; margin: 0px; padding: 0px;&quot;&gt;&lt;li data-stringify-border=&quot;0&quot; data-stringify-indent=&quot;0&quot; style=&quot;box-sizing: inherit; list-style-type: none; margin-bottom: 0px; margin-left: 28px;&quot;&gt;Activities and Activities Plus&lt;/li&gt;&lt;li data-stringify-border=&quot;0&quot; data-stringify-indent=&quot;0&quot; style=&quot;box-sizing: inherit; list-style-type: none; margin-bottom: 0px; margin-left: 28px;&quot;&gt;Moderation&lt;/li&gt;&lt;li data-stringify-border=&quot;0&quot; data-stringify-indent=&quot;0&quot; style=&quot;box-sizing: inherit; list-style-type: none; margin-bottom: 0px; margin-left: 28px;&quot;&gt;Tours&lt;/li&gt;&lt;li data-stringify-border=&quot;0&quot; data-stringify-indent=&quot;0&quot; style=&quot;box-sizing: inherit; list-style-type: none; margin-bottom: 0px; margin-left: 28px;&quot;&gt;Bookmarks&lt;/li&gt;&lt;/ul&gt;</description><link>https://www.msbiro.net/2022/03/hcl-connections-v8-preview-disponibile.html</link><author>noreply@blogger.com (Matteo Bisi)</author><thr:total>0</thr:total><georss:featurename>40053 Valsamoggia BO, Italia</georss:featurename><georss:point>44.504314099999988 11.0799504</georss:point><georss:box>16.194080263821142 -24.0762996 72.814547936178826 46.2362004</georss:box></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-2693905232483343817</guid><pubDate>Tue, 15 Mar 2022 23:17:00 +0000</pubDate><atom:updated>2022-03-24T11:06:13.736+01:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">HCL Connections</category><title>HCL Connections - il  Desktop Plug-ins Marzo 2022 per Windows e macOS è disponibile</title><description>&lt;p&gt;&amp;nbsp;HCL oggi ha rilasciato il nuovo deskto plug-ins per Windows e macOS , con interessanti novità.&lt;/p&gt;&lt;p&gt;Questo è il what&#39;s new per&amp;nbsp; Windows:&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p style=&quot;background-color: white; box-sizing: border-box; color: #4b4b4b; font-family: Roboto, SourceSansPro, Helvetica, Arial, sans-serif; font-size: 14px; margin: 0px 0px 10px;&quot;&gt;&lt;span face=&quot;arial, helvetica, sans-serif&quot; style=&quot;box-sizing: border-box; font-size: 10pt;&quot;&gt;&lt;strong style=&quot;box-sizing: border-box;&quot;&gt;Version 22.03 (March, 2022) update:&amp;nbsp;&amp;nbsp;&lt;/strong&gt;The latest release introduces the following:&lt;/span&gt;&lt;/p&gt;&lt;div style=&quot;box-sizing: border-box;&quot;&gt;&lt;ul style=&quot;background-color: white; box-sizing: border-box; color: #4b4b4b; font-family: Roboto, SourceSansPro, Helvetica, Arial, sans-serif; list-style-position: inside; margin-bottom: 10px; margin-top: 0px;&quot;&gt;&lt;li style=&quot;box-sizing: border-box; font-size: 10pt;&quot;&gt;Prompt to lock when opening files and prompt to unlock when publishing local changes. Behavior can be controlled by preference or administrator policy. Note: this does not apply to sync files.&lt;/li&gt;&lt;li style=&quot;box-sizing: border-box; font-size: 10pt;&quot;&gt;Initial sync performance improvements when processing thousands of files&lt;/li&gt;&lt;li style=&quot;box-sizing: border-box; font-size: 10pt;&quot;&gt;Resolved customer reported problems and bug fixes&lt;br style=&quot;box-sizing: border-box;&quot; /&gt;&lt;/li&gt;&lt;ul style=&quot;box-sizing: border-box; font-size: 14px; list-style-position: inside; margin-bottom: 0px; margin-top: 0px;&quot;&gt;&lt;li style=&quot;box-sizing: border-box; font-size: 10pt;&quot;&gt;Improved error messaging when Windows IP stack reports server unavailable error.&lt;/li&gt;&lt;li style=&quot;box-sizing: border-box; font-size: 10pt;&quot;&gt;Windows 11 local draft popup notification has truncated text&lt;/li&gt;&lt;li style=&quot;box-sizing: border-box; font-size: 10pt;&quot;&gt;Preferences panel shows save error after visiting but not changing server preferences for server with OAuth authentication&lt;/li&gt;&lt;li style=&quot;box-sizing: border-box; font-size: 10pt;&quot;&gt;Crash when publishing local draft in community folder&lt;/li&gt;&lt;li style=&quot;box-sizing: border-box; font-size: 10pt;&quot;&gt;Crash in trace utility when trying to save very large trace files&lt;/li&gt;&lt;/ul&gt;&lt;/ul&gt;e qui in seguito le novità per macOS:&lt;br /&gt;&lt;/div&gt;&lt;div style=&quot;box-sizing: border-box;&quot;&gt;&lt;br /&gt;&lt;/div&gt;&lt;div style=&quot;box-sizing: border-box;&quot;&gt;&lt;p style=&quot;background-color: white; box-sizing: border-box; color: #4b4b4b; font-family: Roboto, SourceSansPro, Helvetica, Arial, sans-serif; font-size: 14px; margin: 0px 0px 10px;&quot;&gt;&lt;span face=&quot;arial, helvetica, sans-serif&quot; style=&quot;box-sizing: border-box; font-size: 10pt;&quot;&gt;&lt;strong style=&quot;box-sizing: border-box;&quot;&gt;Version 22.03 (released March, 2022) update:&amp;nbsp;&amp;nbsp;&lt;/strong&gt;The latest release:&lt;/span&gt;&lt;/p&gt;&lt;ul style=&quot;background-color: white; box-sizing: border-box; color: #4b4b4b; font-family: Roboto, SourceSansPro, Helvetica, Arial, sans-serif; list-style-position: inside; margin-bottom: 10px; margin-top: 0px;&quot;&gt;&lt;li style=&quot;box-sizing: border-box; font-size: 10pt;&quot;&gt;Adds like, pin and follow actions for files and folders&lt;br style=&quot;box-sizing: border-box;&quot; /&gt;&lt;ul style=&quot;box-sizing: border-box; list-style-position: inside; margin-bottom: 0px; margin-top: 0px;&quot;&gt;&lt;li style=&quot;box-sizing: border-box; font-size: 10pt;&quot;&gt;Beta, English only - to use, click &#39;Enable beta features&#39; in preferences&lt;/li&gt;&lt;/ul&gt;&lt;/li&gt;&lt;li style=&quot;box-sizing: border-box; font-size: 10pt;&quot;&gt;Adds clickable link in properties panel to open log file location in Finder&lt;/li&gt;&lt;li style=&quot;box-sizing: border-box; font-size: 10pt;&quot;&gt;Initial sync performance improvements when processing thousands of files&lt;/li&gt;&lt;li style=&quot;box-sizing: border-box; font-size: 10pt;&quot;&gt;Customer reported problems and bug fixes:&lt;br style=&quot;box-sizing: border-box;&quot; /&gt;&lt;/li&gt;&lt;ul style=&quot;box-sizing: border-box; font-size: 14px; list-style-position: inside; margin-bottom: 0px; margin-top: 0px;&quot;&gt;&lt;li style=&quot;box-sizing: border-box; font-size: 10pt;&quot;&gt;Improve error message when failing to retrieve file properties&lt;/li&gt;&lt;li style=&quot;box-sizing: border-box; font-size: 10pt;&quot;&gt;Make version text selectable and copyable in About box&lt;/li&gt;&lt;li style=&quot;box-sizing: border-box; font-size: 10pt;&quot;&gt;Intermittent crash in authentication code&lt;/li&gt;&lt;/ul&gt;&lt;/ul&gt;&lt;div&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;color: #4b4b4b;&quot;&gt;&lt;span style=&quot;font-size: 13.3333px;&quot;&gt;Vi ricordo che tenere i connettori desktop aggiornati nei client è importante ! Purtroppo al momento, non esistono metodi di auto update, quindi gli amministratori si devono preoccupare di controllare ed aggiornare le versioni.&lt;/span&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;color: #4b4b4b;&quot;&gt;&lt;span style=&quot;font-size: 13.3333px;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;color: #4b4b4b;&quot;&gt;&lt;span style=&quot;font-size: 13.3333px;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;color: #4b4b4b;&quot;&gt;&lt;span style=&quot;font-size: 13.3333px;&quot;&gt;Vi lascio i link alle pagine , dedicate a&amp;nbsp;&amp;nbsp;&lt;a href=&quot;https://support.hcltechsw.com/csm?sys_kb_id=69109e711bfd4158a2f48661cd4bcbd3&amp;amp;id=kb_article_view&amp;amp;sysparm_rank=9&amp;amp;sysparm_tsqueryId=5c1b78c61ba73c10a2f48661cd4bcbb4&amp;amp;spa=1&quot; target=&quot;_blank&quot;&gt;Windows &lt;/a&gt;ed a&amp;nbsp;&amp;nbsp;&lt;a href=&quot;https://support.hcltechsw.com/csm?sys_kb_id=8104dab51b318158a2f48661cd4bcb93&amp;amp;id=kb_article_view&amp;amp;sysparm_rank=16&amp;amp;sysparm_tsqueryId=b8f4bfb0dba29c1855f38d6d139619c2&amp;amp;spa=1&quot; target=&quot;_blank&quot;&gt;macOS &lt;/a&gt;dove potete trovare i what&#39;s new delle varie release ed i link a Flexnet per scaricare i pacchetti comodamente (richiede autenticazione).&lt;/span&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;color: #4b4b4b;&quot;&gt;&lt;span style=&quot;font-size: 13.3333px;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;color: #4b4b4b;&quot;&gt;&lt;span style=&quot;font-size: 13.3333px;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;color: #4b4b4b;&quot;&gt;&lt;span style=&quot;font-size: 13.3333px;&quot;&gt;&lt;b&gt;aggiornamento 23Marzo&lt;/b&gt;: c&#39;è stato un problema con la prima release del connettore windows, ora risolto. Se avete problemi di upgrade su non sistema operativo non EN assicuratevi di avere la nuova versione, disponibile su flexnet&lt;/span&gt;&lt;/span&gt;&lt;/div&gt;&lt;div&gt;&lt;span face=&quot;Roboto, SourceSansPro, Helvetica, Arial, sans-serif&quot; style=&quot;color: #4b4b4b;&quot;&gt;&lt;span style=&quot;font-size: 13.3333px;&quot;&gt;&lt;br /&gt;&lt;/span&gt;&lt;/span&gt;&lt;/div&gt;&lt;/div&gt;</description><link>https://www.msbiro.net/2022/03/HCL-Connections-nuova-versione-desktop-plugins-marzo-2022.html</link><author>noreply@blogger.com (Matteo Bisi)</author><thr:total>0</thr:total><georss:featurename>40053 Valsamoggia BO, Italia</georss:featurename><georss:point>44.504314099999988 11.0799504</georss:point><georss:box>16.194080263821142 -24.0762996 72.814547936178826 46.2362004</georss:box></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-6831472594053149539</guid><pubDate>Wed, 02 Mar 2022 13:50:00 +0000</pubDate><atom:updated>2022-03-02T14:50:16.603+01:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">HCL COnnections 7.0</category><title>HCL Connections 7.0 cumulative fix di Febbraio 2022 disponibile</title><description>&lt;p&gt;HCL alcuni giorni fa ha rilasciato il primo update del 2022 per Connections 7.0, il&amp;nbsp;CFix.70.2202 che aggiorna il sistema a questa alla Release v7.0.0.0 build IC7.0_Integration_20220216-1736.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Vi ricordo che i CFix sono cumulativi, vengono rilasciati a mesi alterni con quelli della 6.5 e sono cumulativi, quindi potete sempre installare l&#39;ultimo disponibile, in qualunque release di connections 6.5 o 7 siate attualmente.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;Le novità introdotte &lt;a href=&quot;https://support.hcltechsw.com/csm?id=kb_article&amp;amp;sysparm_article=KB0088085&quot; target=&quot;_blank&quot;&gt;le potete vedere qui&lt;/a&gt;, segnalo fra le varie correzioni, i nuovi certificati PNS di Apple che garantiranno il funzionamento delle notifiche push.&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;</description><link>https://www.msbiro.net/2022/03/hcl-connections-70-cumulative-fix-di.html</link><author>noreply@blogger.com (Matteo Bisi)</author><thr:total>0</thr:total></item><item><guid isPermaLink="false">tag:blogger.com,1999:blog-3402937132740268182.post-5902309811884467268</guid><pubDate>Wed, 23 Feb 2022 18:50:00 +0000</pubDate><atom:updated>2022-02-23T19:50:55.185+01:00</atom:updated><category domain="http://www.blogger.com/atom/ns#">IBM DB2</category><title>IBM DB2 backup errore SQL2062N An error occurred while accessing media Reason code: &quot;0x860f0003&quot; , come risolvere</title><description>&lt;p&gt;Uno dei task sui cui ho lavorato negli ultimi giorni consisteva nel configurare un online backup di un server db2 10.5.x&amp;nbsp; installato su SLES 11.x , con destinazione un mount NFS.&lt;/p&gt;&lt;p&gt;Dopo aver controllato che l&#39;utente propretario dell&#39;instanza fosse in grado di scrivere/cancellare files/folder, ho iniziato l&#39;intervento e dopo aver spento l&#39;applicazione che usava l&#39;instanza, lanciando un db2 backup database ho ottenuto il seguente errore&lt;/p&gt;&lt;div style=&quot;text-align: center;&quot;&gt;SQL2062N An error occurred while accessing media Reason code: &quot;0x860f0003&quot;.&lt;/div&gt;&lt;div style=&quot;text-align: center;&quot;&gt;&lt;br /&gt;&lt;/div&gt;&lt;div style=&quot;text-align: left;&quot;&gt;Dopo alcune verifiche ho trovato &lt;a href=&quot;https://www.ibm.com/support/pages/node/555935&quot; target=&quot;_blank&quot;&gt;questa technote IBM&lt;/a&gt;&amp;nbsp;&amp;nbsp;, quindi dopo aver controllato il file&amp;nbsp; /etc/fstab file ho modificato le opzioni di mount da&amp;nbsp; DEFAULTS a&amp;nbsp; &amp;nbsp;rw,sync,nolock&amp;nbsp; .&lt;/div&gt;&lt;div style=&quot;text-align: left;&quot;&gt;&lt;br /&gt;&lt;/div&gt;&lt;div style=&quot;text-align: left;&quot;&gt;Una volta rimontato il disco NFS, il comando db2 backup database si è completato in modo corretto.&lt;/div&gt;</description><link>https://www.msbiro.net/2022/02/ibm-db2-backup-error-SQL2062N-An-error-occurred-while-accessing-media-Reason-code-0x860f0003-come-risolvere.html</link><author>noreply@blogger.com (Matteo Bisi)</author><thr:total>0</thr:total><georss:featurename>40053 Valsamoggia BO, Italia</georss:featurename><georss:point>44.504314099999988 11.0799504</georss:point><georss:box>16.194080263821142 -24.0762996 72.814547936178826 46.2362004</georss:box></item></channel></rss>

Home · About · News · Docs · Terms

 
Copyright © 2002-9 Sam Ruby, Mark Pilgrim, Joseph Walton, and Phil Ringnalda