JAS needs to be added in IHS and be registered in JTS?
Accepted answer
Hi Tojan,
Not sure what you configured for Oracle DB. JAS?
Server renaming would have to be done if you change the public URL. But this is not required to change the JAS URL.
Not sure what you configured for Oracle DB. JAS?
Server renaming would have to be done if you change the public URL. But this is not required to change the JAS URL.
Since JAS runs on Liberty the info
https://jazz.net/wiki/bin/view/Deployment/CreateIHSPLUGINFORLIBERTYPROFILE
applies as well, especially the part about merging multiple plugin-cfg.xml
The JAS will still be available over its hosted server URL. To test the new (public URI conform) access URL use the links mentioned in https://www.ibm.com/support/knowledgecenter/SSYMRC_6.0.5/com.ibm.jazz.install.doc/topics/c_jsasso_jas_deploy_start.html
If
applies as well, especially the part about merging multiple plugin-cfg.xml
The JAS will still be available over its hosted server URL. To test the new (public URI conform) access URL use the links mentioned in https://www.ibm.com/support/knowledgecenter/SSYMRC_6.0.5/com.ibm.jazz.install.doc/topics/c_jsasso_jas_deploy_start.html
If
gives the same answer ashttps://<JASServerName>:9643/oidc/endpoint/jazzop/.well-known/openid-configurationhttps://<ProxiedJASServerName>/oidc/endpoint/jazzop/.well-known/openid-configuration
when you replace the content between <> with your actual URLs
then you are good to change to the new JAS proxy URL.
Actually you have to change the JAS URL in each teamserver.properties for jts and all apps.
So
* server.shutdown.sh
* backup, then edit each .../server/conf/<app>/teamserver.properties
(the line com.ibm.team.repository.servlet.sso_as= ...)
* server.startup.sh
* try to connect to https://<publicURI>/<app> for each installed app (jts, rm, qm, ccm ...)
If you look at the main .../jts/admin page --> manage server the JAS status and URL should be displayed there.
Comments
1 vote
One other answer
Hi,
according to the recommended topologies you would also route the JAS URL through the reverse proxy (IHS). Technically you do not need to, but I would not consider setup complete unless you did.
Have you installed CLM 6.0.5 right away with the SSO option? In that case you should be good as long as the JTS teamserver.properties has the right URL to the JAS (the rerouted one if you "hide" it behind the IHS).
Be sure to have all the right security certificates in place. If you configure JAS for LDAP JTS also needs to have the proper LDAP parameters during setup (for LDAP sync jobs).
More info cp. https://jazz.net/wiki/bin/view/Deployment/JazzAuthorizationServer and especially https://www.ibm.com/support/knowledgecenter/SSYMRC_6.0.5/com.ibm.jazz.install.doc/topics/c_jsasso_jas_deploy_start.html
If this is helpful please mark the answer as accepted. As a small courtesy could I ask you to please change the title of your post to a question? Thank you.
gg,
Arne
gg,
Arne