It's all about the answers!

Ask a question
QuestionsTagsUsersBadges
Guidelines | FAQ
Follow this question
Question details

×4,304
×2,346
×1,688
×29

question asked: Nov 09 '17, 1:52 a.m.
question was seen: 2,117 times
last updated: Nov 09 '17, 7:57 a.m.

Related questions

LDAP integration on Jazz Authorization server - Liberty

0
Binoy Niclavose (11●3) | asked Nov 09 '17, 1:52 a.m.
retagged Nov 09 '17, 6:18 a.m. by Shubjit Naik (1.5k●1●6●13)

Hello everyone,

I'm trying to install RDNG with Jazz authorization server which works on local registry at the moment, but not on LDAP.

It says config files are not found and they get created. The files are there under jazzop server, but start up script is looking directly under servers folder. Even I copied config files to servers folder, but it still doesn't work. can someone advise why the start up is taking config from another directory?

[root@lexbz3108 ~]# ls -l /opt/IBM/JazzAuthServer/wlp/usr/servers/jazzop/.xml
-rw-r--r-- 1 root root 5552 Nov  9 04:35 /opt/IBM/JazzAuthServer/wlp/usr/servers/jazzop/appConfig.xml
-rw-r--r-- 1 root root 1054 Nov  9 03:54 /opt/IBM/JazzAuthServer/wlp/usr/servers/jazzop/ldapUserRegistry.xml
-rw-r--r-- 1 root root 1297 Nov  8 07:48 /opt/IBM/JazzAuthServer/wlp/usr/servers/jazzop/localUserRegistry.xml
-rw-r--r-- 1 root root 1453 Nov  9 04:18 /opt/IBM/JazzAuthServer/wlp/usr/servers/jazzop/server.xml

[root@lexbz3108 ~]# /opt/IBM/JazzAuthServer/stop-jazz
Server appConfig.xml does not exist.
Stopping server jazzop.
Server jazzop stopped.
Server ldapUserRegistry.xml does not exist.
Server ldapUserRegistry.xml_orig does not exist.

[root@lexbz3108 ~]# /opt/IBM/JazzAuthServer/start-jazz
Creating the /opt/IBM/JazzAuthServer/wlp/usr/servers/appConfig.xml/ configuration file - customize as needed
cp: cannot stat /opt/IBM/JazzAuthServer/wlp/usr/servers/appConfig.xml/defaults/*': Not a directory <br> Server appConfig.xml does not exist. <br> Starting server jazzop. <br> Server jazzop started with process ID 13013. <br> Creating the /opt/IBM/JazzAuthServer/wlp/usr/servers/ldapUserRegistry.xml/* configuration file - customize as needed <br> cp: cannot stat/opt/IBM/JazzAuthServer/wlp/usr/servers/ldapUserRegistry.xml/defaults/': Not a directory
Server ldapUserRegistry.xml does not exist.
Creating the /opt/IBM/JazzAuthServer/wlp/usr/servers/ldapUserRegistry.xml_orig/ configuration file - customize as needed
cp: cannot stat /opt/IBM/JazzAuthServer/wlp/usr/servers/ldapUserRegistry.xml_orig/defaults/*': Not a directory <br> Server ldapUserRegistry.xml_orig does not exist. <br> Creating the /opt/IBM/JazzAuthServer/wlp/usr/servers/localUserRegistry.xml/* configuration file - customize as needed <br> cp: cannot stat/opt/IBM/JazzAuthServer/wlp/usr/servers/localUserRegistry.xml/defaults/*': Not a directory
Server localUserRegistry.xml does not exist.

One answer

Most liked answers ↑|Newest answers|Oldest answers

0
permanent link
Shubjit Naik (1.5k●1●6●13) | answered Nov 09 '17, 6:17 a.m.

Hi Binoy


The configurations for what type of registry to use with JAS would be appConfig.xml. Prior to start you would have to copy the xml files from the defaults folder to one level up.

Here is an article that would help in the configurations:

Best Regards
Shubjit

Comments
Binoy Niclavose commented Nov 09 '17, 7:44 a.m.

Thanks Shubjit. I have followed the link and files are copied from default and modified accordingly.

Meanwhile, is it necessary to have Jazz Authorization server if we're using an LDAP server of our own? We have configured the LDAP server on WAS full profile where JTS is running. Can we use same server for authentication and remove Jazz authentication server altogether?

Regards,
Binoy

Shubjit Naik commented Nov 09 '17, 7:57 a.m.

Hi Binoy


If you have configured JTS (Run Setup) with Jazz Authorization Server already, then NO you cannot revert back to plain LDAP configuration. If you have not yet run the JTS setup and want to use your WAS Authentication via LDAP, then that should be ok to discard JAS. 

JAS is one of our new offering that is based on OpenID Connect. This article explains the different types of Authentication and SSO options.

Best Regards
Shubjit

Your answer

Register or to post your answer.


Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.