How to switch from non-LDAP to LDAP with Tomcat and RTC 4 or 5?
I see some instructions for setting up RTC on Tomcat with LDAP to start with, but couldn't find instructions for switching over. We have kept login IDs roughly the same between LDAP and Tomcat. I say roughly because LDAP has some IDs in mixed case while all our Tomcat logins are the same ID but all lower case. If necessary, we will likely change the ID to all lower case in LDAP if that creates a problem. Aside from case, though, the IDs are the same. The more automated I can make the migration, the better.
I know at the least I need to create 4 LDAP groups to match the groups in RTC (
JazzAdmins,
JazzDWAdmins,
JazzUsers,
JazzGuests) and then add people to the same groups they are already on in RTC. Beyond that, I don't know what to do. I also don't know what I need to do (if anything) about accounts that don't exist in LDAP because they aren't actual people (such as the accounts that interface with the database). Would greatly appreciate some advise.
One answer
Mike, the general outline would be:
- Setup LDAP and configure the group membership for the users.
- You need to have at least one user with JazzAdmin Group and an ID that is identical to to a user ID you already have in Tomcat.
- If you have that, you configure LDAP in the JTS/RTC setup. With Tomcat the instructions include generating some files and replacing the original ones in the deployed apps to enable LDAP
- You log in with LDAP and the Administrative user
If you need to, either enable ignorecase for the IDs or better, look into http://rsjazz.wordpress.com/2012/10/12/changing-the-jazz-user-id-using-the-rtc-plain-java-client-libraries/ for how to change the ID's prior to switching over to LDAP.
If all goes well, the users should now be able to use their LDAP ID and password to log in.
I would suggest trying this on a test system with Tomcat and Derby. The setup page for LDAP provides you with a link to a support page that describes how to test that the LDAP expressions work. I strongly recommend to follow that.
I think we described the process here as well: https://jazz.net/library/article/831
Comments
