Configuring Central User Management

hi,

I’m trying to Configuring Central User Management on the IS console.
but the “9-8_Integration_Server_Administrators_Guide.pdf” refer to the 9-8_Administering_My_webMethods_Server.pdf…

Could you give me some details please ?

I have to deploy SOURCE to TARGET but I met some warnings on this, but I don’t know what to do :
GROUPS
system\My webMethods Administrators
system\My webMethods Users

my IS-ADMIN-preproduction (deployment) is set :
Central User Management : Configured

my IS dev -SOURCE is set :
Central User Management : Configured

My IS-preproduction - TARGET is :
Central User Management : Not Configured

Regards

Hi Cedric,

can you precise the warnings for the groups?

Please check your preproduction IS for Settings → JDBC Pools, if there is database connection configured for the CentralUsers function.

Was the corresponding MWS for preproduction installed and startet at least once to initialize the user database?

Regards,
Holger

Hi Holger,

In JDBC Pools No CentralUsersPool are configured on the Preproduction Server (3).

The MWS, is not installed (neither started) on that server, because for our configuration, we choose to dedicate a whole server (1) for administration tasks (Deployment, Administration and configuration).

The MWS and CentralUsersPool are installed and configured on our server-ADMIN-preprod (1).

So, I can imagine it is normal that the Deployer shows me these 2 warnings ?

Maybe I just have to ignore them in ckecking the “Ignore” option ?

Regards

  • (1) is our ADMIN-Preproduction server (IS, MWS Administration and Deployer)
  • (2) is our DEV server - (SOURCE for deployment)
  • (3) is our Preproduction server - (TARGET for deployment)

Hi Cedric,

are the preproduction and ADMIN-preproducttion Users the same?

If this is the fact, you can point the central users pool on preproduction to the database schema of the ADMIN-preproduction MWS.

After restarting the preproduction IS these warnings should be gone and you can define the references to “Exists”.

Regards,
Holger

I think yes.
But the company (and SAG :wink: ) who make the installation, decided to install
the CentralUsersPool Alias on the Preproduction Server ADMIN, only.
So I don’t know if I have to overwrite the initial official installation.

On Production, it is the same thing

Hi Cedric,

some more questions:

Where is the SAML-URL from preproduction IS pointing to?
ADMIN-MWS?

The same question applies to the WmMonitor package (and the WmTaskClient package if used).

Eventually this helps to decide your last question.

Regards,
Holger

hum…where I can find this information, on the IS about ?
unfortunately, I’m not sure to see what you mean with that SAML-URL :oops:

Hi Cedric,

you will find the SAML URL under Settings → Resources → Single Sign-On with My webMethods Server

This information is neccessary when using Monitor (you will need the Central-User JDBC Pool for this too) as Monitor performs its permission checks against the MWS User Database.

Regards,
Holger

On Server ADMIN-Preprod :
MWS SAML Resolver URL http://localhost:8585/services/SAML

On Server Preprod, same thing :
MWS SAML Resolver URL http://localhost:8585/services/SAML

Hi Cedric,

and where is the MWS running?
On the same box as IS ADMIN-preprod and IS preprod?
Using the port 8585?

If so this shold work.
If not there have been some flaws during the installation.

Regards,
Holger

In fact, the MWS is only running on the Server-ADMIN-Preprod.

It is not installed on the Server-Preprod.
Server-Preprod has only 2 services running : IS anf platform Manager

Regards

Hi Cedric,

this definitely looks like if there has been overseen or omitted during the installations of the services.

Additionally, it is not recommended to rely on the localhost address when configuring connections between the different services.

Regards,
Holger

Hi Holger,

Please could you be more precise, and explain me exactly what I have ton install and configure, on each machine
(to be sure to not make any error :wink: ) ?

Regards

Hi Cedric,

create a JDBC Pool on preproduction IS to point to MWS ADMIN-preproduction DB-Schema.

Assign this pool to the Central Users function.

How is the MWS frontend URL configured?
In MWS under Administration → My webMethods → Cluster Settings.

Hopefully it is not pointing to localhost:8585.

Replace the host part in the SAML-Resolver URL with the appropriate part of the frontend URL.

Regards,
Holger

Hi,

On the MWS Fronted (IS Admin Preproduction), in Cluster Settings I have :

In “partitions cluster” : default : http://localhost:8585
URL MWS display : http://localhost:8585

Is something wrong ?

Regards

Hi Cedric,

these values should match the real name of the box where MWS is installed.

Use this value wherever a pointer to MWS is neccessary:

  • SAML-URL,
  • WmMonitor

Regards,
Holger

Thanks Holger.

Regards