How to switch from non-LDAP to LDAP with Tomcat and RTC 4 or 5?
I see some instructions for setting up RTC on Tomcat with LDAP to start with, but couldn't find instructions for switching over. We have kept login IDs roughly the same between LDAP and Tomcat. I say roughly because LDAP has some IDs in mixed case while all our Tomcat logins are the same ID but all lower case. If necessary, we will likely change the ID to all lower case in LDAP if that creates a problem. Aside from case, though, the IDs are the same. The more automated I can make the migration, the better.
I know at the least I need to create 4 LDAP groups to match the groups in RTC (
JazzAdmins,
JazzDWAdmins,
JazzUsers,
JazzGuests) and then add people to the same groups they are already on in RTC. Beyond that, I don't know what to do. I also don't know what I need to do (if anything) about accounts that don't exist in LDAP because they aren't actual people (such as the accounts that interface with the database). Would greatly appreciate some advise.
|
One answer
Ralph Schoon (62.3k●3●36●43)
| answered Oct 30 '14, 6:24 a.m.
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER
Mike, the general outline would be:
If you need to, either enable ignorecase for the IDs or better, look into http://rsjazz.wordpress.com/2012/10/12/changing-the-jazz-user-id-using-the-rtc-plain-java-client-libraries/ for how to change the ID's prior to switching over to LDAP.
If all goes well, the users should now be able to use their LDAP ID and password to log in.
I would suggest trying this on a test system with Tomcat and Derby. The setup page for LDAP provides you with a link to a support page that describes how to test that the LDAP expressions work. I strongly recommend to follow that.
I think we described the process here as well: https://jazz.net/library/article/831
Comments We followed those instructions some weeks ago, and in general it was fine.
|
