The ADMIN/ADMIN id mysteriously disappeared after LDAP setup in Jazz Team Server
![]()
Hi,
I configured LDAP integration with JTS and left the "disable ADMIN id" box unchecked so that the id would stay around. However, after restarting the server, the ADMIN id does not show up in the list of ids on the JTS Users and this has created an urgent problem because it's the only id that works on one of the two applications that use the JTS. There's a tech note at How to re-enable ADMIN default access to Jazz Team Server that describes changing a couple of config files but those config files were already correct so that didn't help. There's another forum post that describes using the advanced properties page to change the directory type from LDAP to UNSUPPORTED, allowing changes to ids so I tried creating an ADMIN id but it said that the id already exists even though it's not visible in either the Active or Archive list of ids. I'm running the following:
Thanks, Jack |
2 answers
![]()
Benjamin worked offline with me on this and eventually figured out that I had to do two things:
1. Switch the directory source back to Tomcat. 2. In ...\JazzTeamServer\server\tomcat\conf\server.xml, uncomment this line: <Realm className="org.apache.catalina.realm.UserDatabaseRealm" digest="SHA-1" digestEncoding="UTF-8" resourceName="UserDatabase"/> and comment out this line: <!--Realm className="org.apache.catalina.realm.JNDIRealm" connectionName="" connectionURL="ldap://bluepages.ibm.com:389" debug="99" roleBase="ou=memberList, ou=ibmgroups, o=ibm.com" roleName="cn" roleSearch="(uniquemember={0})" roleSubtree="true" userBase="ou=bluepages, o=ibm.com" userSearch="(preferredIdentity={0})" userSubtree="true"/--> Comments I converted this from a comment to an answer (since it is the right answer for the question) but some text was lost in the conversion. I opened the defect Converted a comment to an answer and some text was lost (79852).
|
![]()
Benjamin Silverman (4.1k●6●10)
| answered Feb 04 '13, 3:34 p.m.
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER
Hi Jack,
After switching to LDAP, you should now be authenticating as an LDAP user who is mapped to the JazzAdmins repository role. The ADMIN user exists in the Tomcat directory from the previous configuration which is why you no longer see it listed. If you are not able to log in to an application as a user mapped to JazzAdmins, it sounds like the LDAP configuration is not complete for that application. Which application are you unable to log in to and what error are you getting? Comments Hi Benjamin,
|
Your answer
Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.