How to switch from non-LDAP to LDAP with Tomcat and RTC 4 or 5?
One answer
- Setup LDAP and configure the group membership for the users.
- You need to have at least one user with JazzAdmin Group and an ID that is identical to to a user ID you already have in Tomcat.
- If you have that, you configure LDAP in the JTS/RTC setup. With Tomcat the instructions include generating some files and replacing the original ones in the deployed apps to enable LDAP
- You log in with LDAP and the Administrative user
If you need to, either enable ignorecase for the IDs or better, look into http://rsjazz.wordpress.com/2012/10/12/changing-the-jazz-user-id-using-the-rtc-plain-java-client-libraries/ for how to change the ID's prior to switching over to LDAP.
If all goes well, the users should now be able to use their LDAP ID and password to log in.
I would suggest trying this on a test system with Tomcat and Derby. The setup page for LDAP provides you with a link to a support page that describes how to test that the LDAP expressions work. I strongly recommend to follow that.
I think we described the process here as well: https://jazz.net/library/article/831
Comments
We followed those instructions some weeks ago, and in general it was fine.
One "problem" we had, were the data warehouse jobs, as they used the built in users called dw_user or etl_user, in combination with a 3.0 installation where we couldn't change the license to the new user.
After moving to 4.0 we could change the license and some configurations in the DWH config has to be done, like setting the authentication from JTS to Form, and, of course changing the job settings to the new user.