Repository group memberships not recognized after migration to JAS SSO(Jazz Authorisation Server)
Hello,
Exactly the same problem:
CLM V.7.0.2, JAS V.7.0.2
After migrating JTS to use JAS with help of repotool, I'm able to login to JTS, but I'm only recognized as guest and I'm not member of any repository group when login through JAS with an LDAP account. Any idea what could be wrong? I'm using the same LDAP setup than before the migration. A local file based registry is working. Local users defined and added to the local groups are working. The LDAP setup in JAS is working. I can run the test on the /oidc/endpoint/jazzop/registration URL. Also members are recognized in LDAP groups for the oauth-roles to manage application registrations within /jts/setup. The Liberty AdminCenter for JAS is also able to work with the LDAP groups defined in the <administrator-role> section. The Issue is that all CLM applications are NOT recognizing the repository groups through JAS. The setting in appConfig.xml, <application> section, is just "ignored". As well as the settings in the application.xml of the CLM applications, which was working before with direct LDAP. How does JTS recognize the group membership through JAS? What can I do to troubleshoot? Any Idea or configuration example? I read many documents and help pages but I do not have an idea anymore. Regards
Fabian.
|
