Portal, V6.1

---

 

Configure a property extension database on Windows

Configure IBM WebSphere Portal to use a property extension to store additional attributes that cannot be stored in the LDAP user registry. Ensure that the server1 and WebSphere_Portal servers are started before starting this task.

To configure a property extension for your user registry model:

1. Choose one of the following task options to install the necessary .ear file for adding properties:

   Option	Description
   Stand-alone environment	Run the ConfigEngine.bat wp-la-install-ear -DWasPassword=wpsadmin ... from the WP_PROFILE\ConfigEngine.
   Clustered environment	Run the ConfigEngine.bat wp-la-install-ear -DWasPassword=wpsadmin -DServerName=server -DNodeName=node task only on the primary node ...from the WP_PROFILE\ConfigEngine.

2. Set up a new database, including creating a new user with appropriate WebSphere Portal privileges for accessing the database. The following is an example for DB2 and Oracle:

   See the appropriate database files in the WebSphere Portal Information Center about setting up databases and creating users for detailed information.

   Option	Description
   DB2	To create a DB2 database: Install DB2. Open a DB2 command window and type db2 create database db_name using codeset UTF-8 territory US. Enter the following database tuning commands: db2 "CREATE DB dbname using codeset UTF-8 territory us PAGESIZE 8192" db2 "UPDATE DB CFG FOR dbname USING applheapsz 4096" db2 "UPDATE DB CFG FOR dbname USING app_ctl_heap_sz 1024" db2 "UPDATE DB CFG FOR dbname USING stmtheap 16384" db2 "UPDATE DB CFG FOR dbname USING dbheap 2400" db2 "UPDATE DB CFG FOR dbname USING locklist 1000" db2 "UPDATE DB CFG FOR dbname USING logfilsiz 4000" db2 "UPDATE DB CFG FOR dbname USING logprimary 12" db2 "UPDATE DB CFG FOR dbname USING logsecond 20" db2 "UPDATE DB CFG FOR dbname USING logbufsz 32" db2 "UPDATE DB CFG FOR dbname USING avg_appls 5" db2 "UPDATE DB CFG FOR dbname USING locktimeout 30" db2 "UPDATE DB CFG FOR dbname using AUTO_MAINT off"
   Oracle	Install Oracle, which also installs the databases.

3. To define the DbDriver and DbLibrary parameter values:

   1. Edit wkplc_dbtype.properties file, in WP_PROFILE\ConfigEngine\properties.

   2. Enter a value for the following parameters under the appropriate database type properties heading:

      • db_type.DbDriver

      • db_type.DbLibrary

   3. Save changes.

   Limitation: The WAS UserManagement component (VMM) requires used database libraries in the WAS server classpath (appserver/lib). This limitation will be addressed with PK66195. In the meantime if you want to use the VMM database functions such as Property Extension or database user registry, copy the following library files into the appserver/lib directory prior to starting the server:

   • DB2 Type 2 driver: db2java.zip

   • DB2 Type 4 driver: db2jcc.jar;db2jcc_license_cu.jar

   • DB2 for z/OS Type 2 driver: db2java.zip

   • DB2 for z/OS Type 4 driver: db2jcc.jar;db2jcc_license_cisuz.jar;db2jcc_javax.jar

   • Oracle: ojdbc14.jar

4. Edit wkplc.properties located inWP_PROFILE\ConfigEngine\properties.

5. Enter a value for the following required parameters in the wkplc.properties file under the VMM Property Extension Properties heading:

   See the wkplc.properties file for specific information about the required parameters and for advanced parameters.

   • la.JdbcProviderName

   • la.DbType

   • la.DbUrl

   • la.DbName

   • la.DataSourceName

   • la.DbUser

   • la.DbPassword

6. Save changes to the wkplc.properties file.

7. Edit soap.client.props file, located in the wp_profile\properties. Change the com.ibm.SOAP.requestTimeout value to 1000 and then save your changes.

8. Perform the following steps in a clustered environment:

   1. Run the ConfigEngine.bat wp-prep-vmm-db-secured-environment -DWasPassword=wpsadmin -DDbDomain=la|federated.db -Ddb_type.DmgrDbLibrary=local path of the database jars on the Deployment Manager -DDmgrNodeName=dmgr_node from the WP_PROFILE\ConfigEngine directory to create the local Deployment Manager WebSphere variable used to access the database jars.

      Where DbDomain is either la or federated.db depending on whether you are using a property extension database (la) or a database user registry (federated.db). The db_type in db_type.DmgrDbLibrary should be set to the type of database you are using, for example db2. The local path of the database jars on the Deployment Manager should be one of the following options:

      • DB2 Type 2 driver: db2java.zip

      • DB2 Type 4 driver: db2jcc.jar;db2jcc_license_cu.jar

      • DB2 for z/OS Type 2 driver: db2java.zip

      • DB2 for z/OS Type 4 driver: db2jcc.jar;db2jcc_license_cisuz.jar;db2jcc_javax.jar

      • Oracle: ojdbc14.jar

   2. Run the following task for EACH WebSphere Portal node that participates in the cluster to set up access to the database drivers; if multiple nodes share the same database library path you can submit a comma separated list of node names:

      This task does not need to be executed from the node identified in the VmmNodeName parameter.

      1. Set the property value for federated.db.DbType if using a database user registry or if the cell is migrated from a previous version and set the property value for la.DbType if using a property extension database in the wkplc.properties file.

      2. Run the ConfigEngine.bat wp-node-prep-vmm-db-secured-environment -DWasPassword=wpsadmin -DDbDomain=la|federated.db -DVmmNodeName=node -Ddb_type.NodeDbLibrary/path/to/DB/jars from the WP_PROFILE\ConfigEngine directory on each node to create the variable used to access the VMM database jars.

         Where DbDomain is either la or federated.db depending on whether you are using a property extension database (la) or a database user registry (federated.db). VmmNodeName is a list of one or more WebSphere Portal nodes names in the cell which share the same database driver paths. The db_type in db_type.NodeDbLibrary should be set to the type of database you are using, for example db2. The local full path of the database jars should be one of the following options:

         • DB2 Type 2 driver: db2java.zip

         • DB2 Type 4 driver: db2jcc.jar;db2jcc_license_cu.jar

         • DB2 for z/OS Type 2 driver: db2java.zip

         • DB2 for z/OS Type 4 driver: db2jcc.jar;db2jcc_license_cisuz.jar;db2jcc_javax.jar

         • Oracle: ojdbc14.jar

   3. Run ConfigEngine.bat wp-connect-database-vmm -DWasPassword=wpsadmin -DDbDomain=la|federated.db task to connect to the VMM database, where DbDomain is either la or federated.db depending on whether you are using a property extension database (la) or a database user registry (federated.db).

   4. Stop and restart the deployment manager, the node agent(s), server1, and the WebSphere_Portal servers.

9. Run the ConfigEngine.bat wp-configure-la-complete -DWasPassword=wpsadmin

   ...from WP_PROFILE\ConfigEngine directory to add a property extension repository to the federated or stand-alone LDAP repository.

10. To propagate the security changes:

    Option	Description
    Stand-alone environment	cd WP_PROFILE/bin ./stopServer.sh server1 -username adminid -password passwd ./stopServer.sh WebSphere_Portal -username adminid -password passwd ./startServer.sh server1 ./startServer.sh WebSphere_Portal
    Clustered environment	cd dmgr_profile_root\bin ./stopManager.sh cd WP_PROFILE/bin ./stopNode.sh -username adminid -password passwd ./stopServer.sh server1 -username adminid -password passwd ./stopServer.sh WebSphere_Portal -username adminid -password passwd cd dmgr_profile_root\bin ./startManager.sh cd WP_PROFILE/bin ./startNode.sh ./startServer.sh server1 ./startServer.sh WebSphere_Portal

11. Enter a value for the following required parameters in the wkplc.properties file under the VMM Property Extension Properties heading:

    See the wkplc.properties file for specific information about the required parameters and for advanced parameters.

    • la.providerURL

    • la.propertyName

    • la.entityTypes

    • la.dataType

    • la.multiValued

12. Run the ConfigEngine.bat wp-add-la-property -DWasPassword=wpsadmin

    ...from WP_PROFILE\ConfigEngine directory to add a new property to the property extension configuration.

    This task performs an EJB call to WAS, which must authenticate against WAS. Depending on the configuration in the sas.client.props file, you may receive a popup window or a command line prompt asking for user identity and password. Enter the WAS user ID and password.

13. To propagate the security changes:

    Option	Description
    Stand-alone environment	cd WP_PROFILE/bin ./stopServer.sh server1 -username adminid -password passwd ./stopServer.sh WebSphere_Portal -username adminid -password passwd ./startServer.sh server1 ./startServer.sh WebSphere_Portal
    Clustered environment	cd dmgr_profile_root\bin ./stopManager.sh cd WP_PROFILE/bin ./stopNode.sh -username adminid -password passwd ./stopServer.sh server1 -username adminid -password passwd ./stopServer.sh WebSphere_Portal -username adminid -password passwd cd dmgr_profile_root\bin ./startManager.sh cd WP_PROFILE/bin ./startNode.sh ./startServer.sh server1 ./startServer.sh WebSphere_Portal

14. Perform the following steps if you use any of the following WCM features:

    • Web content user profiling

    • Category selection trees

    • Federated content elements and components

    1. Enter the la.providerURL parameter value in the wkplc.properties file if you have not already provided a value for the parameter.

    2. Run the ConfigEngine.bat add-wcm-la-attributes -DWasPassword=wpsadmin

       ....

15. To propagate the security changes:

    Option	Description
    Stand-alone environment	cd WP_PROFILE/bin ./stopServer.sh server1 -username adminid -password passwd ./stopServer.sh WebSphere_Portal -username adminid -password passwd ./startServer.sh server1 ./startServer.sh WebSphere_Portal
    Clustered environment	cd dmgr_profile_root\bin ./stopManager.sh cd WP_PROFILE/bin ./stopNode.sh -username adminid -password passwd ./stopServer.sh server1 -username adminid -password passwd ./stopServer.sh WebSphere_Portal -username adminid -password passwd cd dmgr_profile_root\bin ./startManager.sh cd WP_PROFILE/bin ./startNode.sh ./startServer.sh server1 ./startServer.sh WebSphere_Portal

If you configured your property extension database on the out-of-the-box security configuration and then configured your LDAP user registry, the properties that you added to the property extension, before configuring your LDAP user registry, will not be available. Manually add the new property to the wimconfig.xml file. For example, if the new property is prop1, add the following text to the wimconfig.xml file: <config:propertiesNotSupported name="prop1"/>.

 

Parent topic

Updating your user registry on Windows

---