Sailpoint Installation Part 2

so I welcome everyone let's start our today's session so today what we'll be talking about so we were talking about installation of sale point and as part of that we talked about that there are three major components involved and these components are first component is java second component is our application server and third component is our database so we did their installation into our environment and today what we'll be talking about we'll be talking about the final component that is involved in the installation and this component is going to be my sale point software so this is what we are going to talk about so for different components and now we will be picking up our fourth component and we're talking about how we will go about sale point installation so as I was talking about yesterday that to download sale point software you have to go to the compass website this is a website that is hosted by sale point itself and here you will be able to find all sale point softwares so I will go to this particular website and show you from where you will be able to download the software's compass sale point so this is active community of sale point developers implementers around the world and even the sale point organization will post updates on this particular portal so over here if I go to identity IQ if I go to download section over here I will be able to see that this is the latest version and this is the version that I would be downloading for all the IDS that I got from your respective consultancies I've already sent the material for those of you who have not received the material please drop me an email and I will send you the materials then so here this is the software that we are downloading 7.3 wit adjuster it is so we'll click on 7.3 and over here we will be downloading a zip file this is 7.3 and these are the features new features that were released in 7.3 and he talks about the different features so what we are going ahead we are downloading the 7.3 will be downloading the zip file 7.3 so to save time I have already downloaded this 7.3 file and I will show you what are the components of the sale point software so this is how your zip file is going to look like and you will go ahead and extract the zip file so if you go ahead and extract the zip file these are the folders that you will see database document integration connector gateway and the war file that we talked about yesterday that we are going to leverage for our implementation so web application our file archive file a compressed file that will leverage for our implementation so what is contained in the database folder in the database folder you will find all the scripts using which you can automatically create sale point database so as we discussed there four major supported databases db2 my sequel Oracle and sequel server she will see support for all these four major databases so you can see we have create scripts drop scripts upgrade scripts so you would be able to leverage these scripts to automatically create upgrade drop post upgrade your database over here if you want to see their contents you will be able to see the contents of these files as well so meditating it with notepad plus plus and you can see over here it is generating a database it is creating a new database over here if it is not existing already so created a base if it is not existing and then one by one it is creating different sale point tables that are required for for storing different objects in sales point so these are the automated scripts you will get which you can leverage to create sale point database automatically and do all kind of modifications so the first folder is a database folder will be getting database scripts the second folder that is shipped with the product is the document folder now over here there are some important guides that can help you improve your knowledge on sale point some of the guides are important over here are so you will see that this guide over here identity IQ user guide so this is one important guide you can go through one of the most important guide is sale point direct connectors admin and configuration guide so this is another important guide you can go through and the last one that I would recommend is sale point integration guide and does not mean the others are not important but these are the ones that will give you a fair bit of an idea about sale point so whenever you have time these are detail guides you can go through to which talks in details about sailfin capabilities so you can look at these detailed guides that can improve your sales point knowledge the third folder is integration folder now let us understand what is there in the integration folder now what I'm trying to say over here is that sale point is having its solution called identity IQ now identity IQ comes in says that I want to control your entire organization I want to control the entire organization does it want to manage everything in our organization and in order to control the organization what is organization organization is nothing but set of applications if you further drill down inside your organization what you will find you will find nothing but applications now applications can be anything they can be SAP they can be Oracle they can be a performance management system your attendance management systems they can be a simple database so they can be different target systems so I am saying organization anything and everything that you find in your organization is nothing but an application the application type can vary but it is nothing but an application so if sale point identity IQ solution has to control our organization and has to control these applications because organization is nothing but applications so it has to control these set of applications now in order to control these set of applications we have to onboard or connect these applications on to sale point platform so on both these applications to sale point platform so this is what is required to on both these applications to sale point platform so that sale point can manage it now this particular process is called application onboarding so what is application onboarding in sale point connecting your end applications target applications with sale point platform so that sale point can manage these applications this particular process is called application onboarding so for application onboarding we have a specific piece in sale point that is called connector what is a connector so connector will help sale point talk to these end applications do read operations write operations so what is connector connector is a utility that will help sale point identity IQ talk to these end applications so using connector we will be connecting sale point with these target applications so over here what you see are our integration files say if sale points say have to connect to oh I am for example we will be leveraging this integration file if sale point has to connect to Oracle HRMS you will be leveraging these integration files so we can either leave rich connector or we can leverage integration files these integration files will assist sale point in connecting to these and the applications third fold over here is an integration folder integration folder will help me to provide integration files that will help me integrate with these target applications similarly what we have the next folder that you see over here is called connector gateway what is connector gateway so connector gateway is similar to your integration folder the only difference between connector gateway and integration folder is connect the gateway is for a special class of applications in this special class of applications are the ones that are exposed to internet so some applications in your organization will be exposed to internet like your email like your say leaf management system or attendance management system but most of your applications that are critical to your enterprise will be there only on internet so these applications that are exposed to Internet they are generally placed in an area called DMZ demilitarized zone where they can be monitored and this special class of applications that are there over here are a cf2 then we have rack of applications and top-secret so if you have to integrate any of these applications we will be using the connector gateway over here for connecting these applications on to sailfin platform so to connect rack of ACF to and top-secret these kind of applications you will be using connector gateway and next is the most important file that we will leverage and this file is called identity IQ dot war so this is a compressed file war over here stands for web application archive and this is the file we will be leveraging to deploy sale point now as we did yesterday where we'll be deploying this particular war file we will be deploying this particular war file on our application server and this application server in our cases Apache Tomcat which we installed yesterday so be deploying this particular war file in our Apache Tomcat so what I will do is I will copy this particular wall file and I will go to PC C Drive high Q folder that we created yesterday and here is my Apache Tomcat I will go inside web apps and place that particular war file so what I've done is I've gone inside web apps and pasted my war file after pasting your war file inside web apps now I will try to extract that particular war file because currently it is a compressed file so I will try to extract the components of this particular war file so how we will do the extraction now I will click on startup dot bat so first servers already started I will make sure it is shut down and then I will restart my server so if I restart my server what will happen so see I'm restarting my application server now after placing my war file so if you read over here it is saying deploying web application archive identity IQ dot war so not now what my application server is doing it is doing two important things first thing that it is doing is it is extracting my war file that is first thing that it is doing the second thing is it is deploying it on my application server deploy on application server so these are the two things that are being done so when is this happening when I'm clicking on startup dot back when I'm starting my application server my application server is looking at the war file that is placed inside that particular folder it is trying to extract that particular war file and deploy it on my application server so now if I go back to Apache Tomcat if I go back to web apps folder I will see that this file war file has been extracted and a new folder over here is being made called identity IQ so my identity IQ war file over here is being extracted over here and a new folder has been made in web apps called identity IQ what we use for extraction simply we started our application server and now if I go inside identity IQ I can see the entire structure of sale point what are the different folders I am able to see over here and CSS folder is there LCM folder is there so different components folders are there the most important folder over here is whereby an F so inside identity IQ I'm going inside web on a folder inside web-inf I will go inside bin and here I get Michael so Laxus iook you console access IQ console is an admin console and from here we will be able to execute different commands related to sale point so what I will do is I will copy this particular address and I will try to reach that particular address from command prompt so I will do CD and navigate to that particular address again where I'm going so I'm going inside web apps where I place my war file so it extracted a new folder called identity IQ after that I never get it to a folder called web-inf and I went inside bin where I'm getting access to my IQ console so once there you will right over here command called high IQ and over here it is giving you the list of commands that can be launched over here so this is the list of commands it can be launched now let us note down the steps over here let us note down the steps what we are doing so the what is the first step over here first step is copy your wall file copy war file inside a web apps folder in Apache Tomcat this is the first that we did what was the second step start your application server start application server to extract and deploy and next what we'll be doing what is the next step that we are going to do so one of the initial steps in sale point is to generate your scripts over here so will not believe edging the scripts that were shipped with the software what we are doing over here using our schema command using a schema command we will be generating database scripts and this will be done for all our major databases so let us go ahead and do that so over here I will execute my command I I Q and I will write my command schema so this command is schema file generator and this will generate database scripts for all the four major supported databases why I am NOT leave raising the ones that were shipped with the product so remember in the product that I was showing you we had a database folder where there were already scripts were available so if we had made any changes so over here I have my database folder and the scripts were available so not leveraging these scripts because if there is any change in the war file or if we are making any customizations that will not be recorded when these database scripts so it is better to leave edge the schema command so now over here I will write my command i IQ schema and what it is doing it is generating database scripts for all the four major databases my sequel oracle sequel server and db2 so it has generated my database scripts that now i would be leveraging to generate my sale point database so these scripts have been generated now where they are kept so I will go one folder back to web INF and you can see a database folder has been created where I can find all my database scripts the next step over here is to log in to your my sequel console and execute these database scripts so my sequel is a database to will log into my sequel console and execute our database scripts so for execution for pointing to that particular script we will be using our source command so let us do that now so I will say my sequel - you root the username - P the password is again root once I enter I will write my source command and I will point to the database script where my database script is being kept so I will copy this address and now I have two special which script should be executed out of this so the script that I want to execute is create identity IQ tables 7.3 got my sequel so 7.3 is the base version that we are implementing and my sequel is a choice of database so I will go to properties and I will copy this particular name and I will execute this particular script so what this script is going to do it is going to generate my sale point database now so I will execute this particular command and now you can see what it is doing it is generating my sale point database and creating different tables over here in sale point so that is what this particular script is doing it will take some time to get executed it should not take much time so once it is executed we'll check whether our sale point database was created or not so right now what we are doing we are creating sale point database and for this what we are leveraging we are leveraging our source command and pointing to that particular database script so wait for this particular script to execute so now it is generating different tables so in the meantime I will tell you what is the table structure so finally see your sale point database you will see two important tables two important type of tables getting created so one will be SPT underscore triggers and one will be SPT underscore object these are the two kind of tables that you will see so your triggers over here will store all your transient information so these kind of tables will store all kind of transient information so when I say transient information it will be scheduled jobs anything that has to be executed in sale point any scheduled jobs scheduled tasks workflow processes so they will be stored in SPT triggers then we have SPT object tables so they are like SPT underscore identity SPT underscore role so what these tables will do as the name suggests SPT identity will contain all my identities SPT rule will contain all my roles so this way you will have many tables storing different objects in sale points so these are two important kind of tables you will find so the script is finally executed and now what I will do is I will write my command over here show databases and I should see two new databases getting created identity IQ and identity IQ plugin and I will go inside the database now I will say use identity IQ and after that what I am going to do I am going to write my command show tables so over here you can see your table section over here so you can see that your first kind of tables that you see in sale point are triggers so they are used for storing any kind of transient information so this is squads two to one that is SPD table name underscore triggers underscore calendars underscore locks so they're storing all kind of transient information and then you have SPT underscore object tables so SPT underscore form will store all the forms in sale point similarly you have SPT identity storing all your identity information group index storing all your group index it's object by object different tables are created and all these tables are storing different cell phone information we'll come back to this particular table right now you can see if I try to select so right now these tables will be empty if I say select star from SPT identity table that is if sale point is hanging and any identity at all so it is saying it as an empty set over here so we will reign we will create an identity I will show you what kind of information is stored in these tables so now we have successfully created a sale point database we have verified that as well and now I will exit so what is the next step over here now so the next step over here now is to initialize sale point installation so how you can initialize sailfin installation for this you will have to enter your IQ admin console so for this we will be writing a command called a IQ so why here I will again write my command by Q and you can see by writing a command console it gives me access to admin console and over here what you will be able to see that whenever you try to enter admin console in sale point using this particular command in the background sale point will initiate a integrity check what is integrity check so it will make sure that all the different components that you have installed till now are in sync so they are in sync over here so that you have to make sure remember if you try to enter IQ admin console before doing step 4 it will throw you an error so this has to be done in a sequential manner so if you receive an error over here if you enter this particular command over here i IQ console it will take some time to do any kind of process checking that is involved so if you receive any error over here on the lines of version checker so if you are writing your IQ console command and you are receiving an error in your system on the lines of version checker field not able create a pool label connection so if this is the error that you are getting what you can do over here in this particular case so in this particular case what you will have to do you will have to downgrade your sequel version so most of the times you will have to downgrade your sequel version and you will have to check that all the different components that you have installed till now are working in synchronization incompatible with each other so this error will come in two cases one that you have not done your step for your sale point database is not created or the sequel version you are having a recent sequel version that is currently not supported so either of these two will be the reason of this particular error so as soon as you write this particular command immediately it will not allow you to enter and once it has done its processing if it is successful you will be able to see your arrow sign over here so now I have entered IQ console the next command that I would be executing over here my sixth step will be my import init dot XML command so using this command I am trying to initialize sale point now what is this init file I will show you so what we will be doing will be writing a command over here import init dot XML now where this init file is located now this file contains different artifacts that needs to be initialized for sale point installation and we have to execute this particular command in IQ control if I go to web INF and if I go to config folder so now I'm going inside there by an F and I'm going inside configuration folder so here my init file is located that I'm trying to import now what is contained in this init file so it is an initialization file for sale point repositories so it is including different things into sale when installation like connectors your rules workflows it is initializing different artifacts that are required by sale on installation so different artifacts it is bringing into the sale point per view that is initializing that different artifacts you can see these are connectors so different things it will work on so let us go ahead and execute this particular command import init dot XML and now you can see it is currently working on sale point rights and permissions and now it is initializing different capabilities into sale point now these are different connectors that are getting initialized now by default the sale point is having the capability to connect to different target systems so you will get out-of-the-box connectors when I say out-of-the-box connectors say if you have to connect to today say ear/watch your active directory sale point gives you a out-of-the-box connector so you can use out-of-the-box connectors to connect to these target application if these connectors are not available you can design your own connector as well which is custom connector using the open connector framework so now it is initializing different connectors on to sale point platform so now aggression files and dashboard contents we can pause the screen by clicking on the screen and resume it again by pressing enter now this is the most important line it is says identity SP admin so what is identity SP admin over here so just make a while back we did select star from s PT identity table meaning sale point was having no identity at all that till that particular moment so s PT identity was empty was resulting in a null set and now using this particular command input in it dot XML one identity is initialized called SP admin so this is kind of a root accounting sale point this is a service account and this is the only identity will be present by default in your installation so SP admin will be the identity and admin will be the password so this is the identity that will be the only identity administrative identity that will be present by default in sale point installation and this this gets initialized by your import in a dot XML command over here so you can see it is getting a nice nice identity SP admin so now it is working on policies request definitions you can see lot of artifacts are getting initialized widgets lot of email templates so same point by default has a notification mechanism and these email templates are already available in sale point to notify end-user of any action pending on their end so not is working on rules workflows again email templates some more rules now these are different tasks definitions so by default we have lot of tasks in sale point or jobs in sale point that we can run so they are getting initialized you that is including some jesper templates so whatever is listed in that XML file is getting loaded over here and by default you can see how much information is available out of the box so you can see the level of information that is already available in a default installation the different objects are already available so with this step we are done with the first component installation after this is done after this step is done you can click on exit and now we will again stop and start our application server so we'll go back to apache tomcat bim we'll make sure that our application is shut down application server is shut and we'll restart it again so now once you have deployed your war file over here you can safely go ahead and remove it otherwise if you're not removing it what will happen every time it will try to deploy that particular war file so once your war file is successfully deployed you can go ahead and remove it if you want so you will be able to remove this once it is deployed so you can go ahead and remove it otherwise what will happen every time it will try to deploy so we will wait for an application server to start and then we will go ahead and start identity IQ so these are the steps that we have completed till now and we wrote a command import in it dot XML and this command was executed we're on IQ console so went into IQ admin console and executed this particular command that is import in it dot XML and what this command is doing it is initializing my governance and compliance module now CL Point is also having another module over here that will be initialized as well so for this we will be using a separate command anchor sorry to interrupt you yeah Billy tell me okay so I just joined it 10:45 so I was 15 today is the first class dude is the second class Oh yesterday is the first class yeah you can get the recording from the consultancy ok gotcha so yesterday you started with the installation yeah got it thank you thank you so you can see this particular message server start up in this way milliseconds so this specifies that your application server is started now and now we'll go to localhost and try to start an application server so HTTP localhost port 8080 and you can see our application server screen turns up and now what we will do is we'll try to start identity IQ so now what I have done what I've written I am saying HTTP localhost port 8080 and my service name is identity IQ so my sail point I then did the IQ pH comes up over here now and if I go ahead and write my user ID and password as I specified that using this particular command my this identity is getting a nice niced only one identity is present by default and main identity sail point admin and admin is the password so I will write SP admin and admin as the password and try to login to sale point and now you can see that I have logged into sale point now by the fall that you see over here so we have installed only one module of sale point sale point is having another important module that is around lifecycle management so currently what we have done we have only installed one module of sale point sale point is also having a separately license module and this module is called LCM module LCM over here stands for lifecycle management managing the lifecycle of the identity so two initialized LCA module we need to write a separate command that is import in it LCM note XML so this will initialize my separate modules separately license module and same module what this module will do so this module can you can using this particular module you can request for new access you can edit identity you can act on lifecycle events so I will show you the difference over here so what you're seeing over here these are all called quicklinks approvals access reviews these are all called quick links using this you will be able to initiate a workflow or see a particular view so they are all quick links so right now you can see that the information that I am having is fairly limited so what I will do is I will again go back to my IQ admin console and initialize my LCM module as well so for that again what I need to do I need to again write IQ I will go inside IQ admin console so we are again at admin console will ensure that our server is shut so I will shut down my application server you and then if we are entering so we have successfully entered our IQ console after integrity check was successful and you can go ahead and then write your command import in it LCM dot XML so where this particular file is kept again it is kept in the same place so go inside web apps identity IQ web-inf and earlier we went into configuration and here itself just next to in it we have in it LCM dot XML that we are now currently onboarding so we have this init LCM that we are currently onboarding it has it has artifacts for doing important things like lever jointer mover working on lifecycle events working on identity changes so this is the module that we are initializing right now it is a separately licensed module in sale point so I'm saying import in it LCM dot XML and now you can see what it is working on it is working on joiner liebherr mover so this creating new quick links into sale point so new quick links are getting created not is working on different rules email templates workflows and now over here you can see it is having default workflows for joiner leaver mover so by default these workflows are already present in sale point depending on your organizational requirements you will be able to modify these workflows and now this command is successfully executed next what we are going to do is you are going to again restart our application server to see the changes that have been implemented again what I will do is I will again shut down my application server make sure that it is shut correctly and i will restart my application server using startup dot bad so now what we have done we have installed our LCA module lifecycle management module and we want to see what are the changes and for that we are stopping our application server and restarting it again so we'll wait for it to restart and then I will show you the changes as I was talking about LCM module so when you install LCM module you will get one important thing that is compliance manager lifecycle manager over here so you will be able to see a lifecycle manager using which you will be able to control the lifecycle of identity so when I say lifecycle three important things are over here when a person joins our organization when he moves roles in our organization and when he leaves so these are the events that you will be able to work on so you will also see lifecycle events getting created and apart from lifecycle events you will also see new Quick Links getting generated using these Quick Links you will be able to control the access part of the lifecycle part of identities so these are the other things that you will be able to see so try to restart our sale point again so now you can see I'm able to see this particular message server startup in this many milliseconds so my server has started and now what I will do is I will again open identity IQ sum again opening sale point identity IQ now and again I will login using SPF men admin and now you will be able to see some new changes so you can see some new quick links have been created manage user access track my request and earlier we did not have these Quick Links over here now we are able to see these Quick Links further if I go over here I can see manage access manage identities some new quicklinks have been created to control the life cycle of the identity earlier I was not able to see these Quick Links over here and further in the earlier version we had the compliance manager over here but this time we have the compliance as well as lifecycle manager using which we will be able to manage the lifecycle of the identity now as I specified most of your organization's do go for their ism license so most of the organizations that implement sale point will buy a LCM license as well using which they will be able to control the life cycle of the identities and do and do end-to-end provisioning to target systems so this is one important module and you can see over here I have business processes so business processes are nothing but workflows workflows in sale point they are called business processes now here if I go to lifecycle manager it is telling me which workflow is getting executed when you are LCA many LSM request is placed so it is saying when edit identity is placed this is a workflow getting called when I'm saying request access this is the workflow getting called and you will be able to see your workflows going to business process so detailed view you will be able to see in business process and apart from the another important thing that gets initialized with LCM module is your life cycle events so you can go to life cycle events and over here you will be able to see that life cycle events getting initialized and these are Joyner lever mover so we'll talk more about this but you can see these are the life cycle events these events can act as joiner mover lever and they are part of your LCM module so in short LCM module will be used for provisioning or sending data to your target systems and this module can be used to control the life cycle of the identity so how you would initialize this particular module by using the command input in it LCM dot XML so with this we have installed sale point the next thing over here is now how we can check the version that we are on check the version of sale point so how we can check the version of sale point so to check the version of sale point you have two ways if you want to do it using the console you can write your about command or if you do want to do it from UI you can navigate to debug page so let us see how we can do this so now we are checking the version of sale point that is installed now currently I am in IQ console so when I mean IQ controller I will write this command about and over here it will give me the information over here what is the version of sale point that is currently in place so currently you can see I am on seven point three version so it is displaying me the current version that we are having system watch miss 7.3 some getting the version information and if you want to see it from the UI now in UI we have a special page called debug page in sale point what is debug page no debug page gives you access to code now over here you will be able to see all your object XML plus you will be able to modify any sale point configuration file so it is a very important page access to this page is highly restricted in sale point only admins will have access to this particular page how to go to this particular page I will show you so if you want to go to this particular page delete home dot GSF and after identity I Q write debug and this will take you to the debug page in sale point as I mentioned that it will give you access to different objects in sale point now say I want to see all my identity if it is configured right now only one identity is there that is SP admin I can open the object XML of that particular identity and I can modify any code if I want any attribute if I want similarly different objects are available the application object we have application object rule object so different objects are available say if I write rule these are different rules that are already available that we saw getting imported if I open any rule I would be able to see this particular rule over here so this is the rule that is written so likewise you will be able to modify do any kind of modifications by going to object XML over here by going to debug page furthermore you can modify these configuration objects so these are important sale point configuration files as part of our implementation we will be modifying one such these configuration files so as part of our implementation we will be modifying these configuration files as well so that you have an idea about how these configuration work so these are some important configuration objects now once you're on debug page to check the version of sale point you can click on this About section now this About section will give you more detailed report compared to your about command on console so your about command on console gives you a very limited information but if you're seeing your about page from debug page it gives you information about Java properties as well so whatever Java properties system is leveraging what are the available processors what are the different properties being used what is their current mapping like what is a file encoding CP one - five - everything would be listed over here so if you receive any errors related to Java in your system this is the properties that you can check by coming to about section and look at Java system properties it also gives you identity starts over here so identity starts says how many identities we are currently managing so you can see currently we have only one identity and it will also show you what are the licensed identities so licensed identities are calculated based on number of active identities and correlated identities I will speak about what is correlated in our coming sessions so you can see I am able to see again complete information about server product information bundle information and Java system properties so that is further listed in my about page in in debug About section it is listed what is the current version I am using so this is how you will install your sale point product these are the different components involved the next thing on our agenda would be patching of identity IQ environment how we will patch our identity IQ environment so this is the thing that we'll be discussing in our next session the dispatching your identity IQ environment but we'll just briefly discuss a bit of an overview about it matching identity IQ environment so what we discussed about crunching see whenever you are on a base version say your organization is on 7.2 and now say the latest version is 7.3 say if you have to migrate to 7.3 you have to leverage SSB you will have to do database backup so rather than doing all these things sale point what what it will do is whenever you are on any base version it will release multiple patches like p1 2p3 so what these patches will contain these patches will contain security enhancements like any wonder abilities that are identified in the software a fix for that plus it will also contain whatever updates that are going ahead with sale point software like updates to connectors updates to your configuration files any new capability that is introduced so it is always recommended that even if we are not able to migrate to the newer version we can always patch our current base environment so if I show you the patches that are currently leveraged there currently there again I will go to compass so if I go to compass I will show the recent patch so for like for our base version what we were using for base version we were leveraging our board file for our patching we are going to leave rage ours our file so we will do patching using as our file and this we will be picking up tomorrow so for patching we will be leveraging as our file which we will be deploying on our application server again this patch will be applied on top of a base version and this will be deployed on our application server but this time we will be leveraging as our file so over here what you can see that if I go to identity IQ if I go to the download section now say the latest patch over here is so they have a p1 patch and they have the latest patch 7.3 p2 so if I go inside this particular patch 7.3 p2 you can see they are saying that they have fixed one security vulnerability over here and this is a wonder ability that they have fixed they have given links of the vulnerability and further you can see there are updates to the connector over here so different updates to different connectors are recorded over here and for this what we will be leveraging we will be leave the edging this is our file for doing our patching exercises so this will be picking up in our next session section session over here

Channel: IAM Trainer

Views: 9,817

Rating: 4.9703703 out of 5

Keywords:

Id: RHfJGBuIAMg

Length: 54min 44sec (3284 seconds)

Published: Fri Dec 06 2019