#InterSystems API Manager (IAM)

Hi everyone,

I am currently setting up InterSystems API Manager (IAM) 3.4.3.11 using Docker. The installation is successful, the license is active, and I can access the Manager (port 8002).

I am now trying to secure the Administration Portal using basic-auth. I've found some documentation stating that I should:

1. Go to the Teams section in the UI.
2. Click on Invite Admin to create the first user.
3. Only then, enable KONG_ENFORCE_RBAC and KONG_ADMIN_GUI_AUTH in the docker-compose.yml.

I was not able to get IAM working on my Development Server because of issues with creating volumes as a Non root user, so I opted to run it within Docker on my WSL Ubuntu locally. I was able to get it running, however the Workspaces is empty, and the Dev Portal is not enabled.

At this point do I need to sign up for the free Kong Konnect? or what are the next steps?

Thanks

Scott

I downloaded IAM-3.4.2.0-5604.tar.gz from the Online Distribution site this morning, it the implementation to install it on our Development environment to see if it is a viable solution. Following the instructions, I have ran into an issue trying to make sure I am entering the information into the prompts correctly.

I have IRIS HealthShare Health Connect 2024.1 running locally using a Local Web Server, so when prompted I have entered the IP Address and port 443 is that correct? 

:>iam-setup.sh
Welcome to the InterSystems IRIS and InterSystems API Manager (IAM) setup script.

Outside of the learning module for IAM, I would like to give it a try with Community Edition on my own however the Community Edition License does not include it.

Has there been any discussion on allowing Company's Demo IAM through Community Edition before they get the license?

Thanks

Scott

We have solution which uses IRIS with IAM and webgateway integrated.

After integration, we notice that in the kong configuration in the kongdb upstreams are not created as listed in the kong.yml

We noticed that, IAM api calls are failing with enterprise license expired.

[kong@iam-deployment-75f485954c-ssdfv /]$ curl --location --request POST 'http://localhost:8001/services/'
{"message":"Enterprise license missing or expired"}

From Logs:

2023/11/22 14:59:04 [notice] 2325#0: *32 [lua] init.lua:393: timer_at(): [timer-ng] fallback to ngx.timer.at [delay = 86400], context: ngx.timer

My cluster status is as follows:

when I do journal restore on primary, it says journal restore is not allowed. The DR is also not allowed to do journal restore.

Hi, 

I am trying to get the API Manager up and running. 

I have enabled the application and IAM user and changed password.

when we run the iam_setup.sh I get the following.

Getting IAM license using your inputs...
Internal server error when testing inputs

I have check on Iris management portal , but could see no errors.

On the cspgateway I see

Hello!

Greetings from Chile, I have a question about IAM, I have a client who implements IAM in a QA environment, I configure a workspace and a series of routes (quite a few) and now he wants to export what has been created and take it to production (another server), which is the procedure to do it? Is it possible to export the workspace, routes, plugins, etc.?

Thank you!!

Hi all,

I am trying to test the IAM locally, but I came to a issue. When I turned on the the Basic Authentication, I get an 503 Service Unavailable.
error.

This is the scenario/setup:

• Because I am new to IRIS I need a test sample in IRIS where I can get data from. So I use this tutorial: https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=AFL_rest#AFL_rest_exercise. It works, I can make direct calls to IRIS via Postman.
• Because the goal is to test IAM, I setup the IAM with: https://openedx.learning.intersystems.

I have performed the suggested steps given in the below link for IAM installation but got an error "docker. errors.NullResource: Resource ID was not provided
[21528] Failed to execute script docker-compose"

https://docs.intersystems.com/components/csp/docbook/Doc.View.cls?KEY=C…

Using the Windows Subsystem for Linux (WSL2), is it possible to install IRIS and run it from there? I am wanting to test IAM, but unable to run Docker Desktop on my VM, and do not have access to a Linux machine to install and test with.

Thanks

Scott

Has anyone else seen this error?  From the API Manager Catalog, I can select an API and use the "Try it Out" feature.  An error is returned - TypeError: Failed to fetch.

The same Curl can be imported into Postman and executed successfully.  For us, API Manager is in a container and the container can ping the server.

How are others deploying API Manager services, routes and plugins from one environment to another?  We plan to use cache object code to deploy.  Is it best to embed curl or is there a better way?

I am working with InterSystems API Manager product and I'm trying to solve an authentication problem.  In our implementation, API Manager accepts basic authentication.  One of the endpoints accepts OAuth2.  The request coming into API Manager is FHIR and needs to have basic auth in the header.  The OAuth token is passed to API Manager as a parameter.  I want to send FHIR to the endpoint with a Bearer Token in the header instead of the basic auth that came into API Manager.  Has anyone used a transformation plug-in to solve a similar issue?

Hi *.*,

I am new to IRIS, IKO and IAM. I have read through a lot of the documentation, but I need clarity on some things that I can't find in the documentation.

• Which Load Balancer does IKO use on the ingress?
  Can it be set to use another one? e.g. nginx-kubernetes + GCP LoadBalancer?
• On a multi-compute and multi-data instances deployment, how do you get to the Management Portal of each instance?
  i.e. The load balancer is the only point of entry into the cluster exposing 1972 and 52773, so how do I route to the individual instances?

I have been using the 

"in": "PATH"

parameter type for at least a year and was working fine for my GET requests.

Now, since this new version, it has stopped compiling. Does someone know why and what's the workaround to make a request like this work

/getmethod/getparam

Regards

I am trying to create REST API following these instructions:  https://docs.intersystems.com/irislatest/csp/docbook/Doc.View.cls?KEY=GREST_apimgmnt

However it does not work.

I tried downloaded the v2.0 schema.json of the OpenAPI specification and pasted it on Postman with the parameters as speicifed, but I get this error message back:

{
    "msg": "ERROR #8738: Correct OpenAPI 2.0 version was not specified: . <$.swagger>\r\n  > ERROR #5490: Error running generator for method '%OnCompile:TasksRestApp.spec' \r\nERROR: %REST.Spec.cls(%OnCompile) of generated code compiling subclass 'TasksRestApp.spec'\r\n    > ERROR #5030: An error occurred while compiling class 'TasksRestApp.spec'"

}

Hi someone have tested that ? 

i try, but is not simple, and have no updated documentation about that in kong information.

After I loaded the intersystems/iam:0.34-1-1 image in local, I am trying to do the next step of configuration.

2) Configure your InterSystems IRIS instance

  2a) Enable the /api/IAM web application
  2b) Enable the IAM user
  2c) Change the password for the IAM user

Do we need to change these settings in iris.cpf file? any inputs where we have to configure? I have IRIS 2019.1.1 installed in my machine.

Thanks,

Nag.

I am trying to install IAM in my local and I downloaded IAM-0.34-1-1.tar.gz and extracted. I went to the location where iam_image.tar is available and run below command in the command prompt. 

C:\ESB\HC\IAM-0.34-1-1.tar\IAM-0.34-1-1\IAM>docker load -i iam_image.tar
unsupported os linux

Getting unsupported os Linux issue. Kindly let me know if anyone had this issue. Thanks!