Errors on Learning Portal Security page in Workplace Information Center
Technote (troubleshooting)
Problem
There are errors on the IBM® Workplace™ Collaborative Learning 2.7 Portal Security page in the Workplace Information Center that are preventing a successful deployment. This document identifies the errors and provides corrections.
Resolving the problem
This issue was reported to Quality Engineering as SPR# PRAV7A2JYK. You can work around this issue by editing specific files as follows: Files to be edited:
-- ConfigEngineInstallLocation (usually found at .../IBM/WebSphere/ConfigEngine)
-- was_profile_root (usually found at .../IBM/WebSphere/profiles/wp_profile)
Learning Security
-- Although they are usually the same, the Learning administrator ID might be different from the Portal administrator ID.
-- The Learning admin ID should be the same for both Learning components.
-- This is an operation that requires password properties to be passed to the configuration framework. Refer to password considerations for your deployment.
Learning Portal Security
1. Edit the ConfigEngineInstallLocation/properties/wkplc_comp.properties file and change the following values. Note the five distinct LDAP groups MUST be groups that already exist in LDAP.
2. Open a command/shell/QSH Window and change to the ConfigEngineInstallLocation directory.
3. Run the appropriate command as follows:
On Windows: ConfigEngine action-update-settings-learningportal -DWasUserid=<was_admin_id> -DWasPassword=<was_admin_password> -DPortalAdminId=<portal_admin_id> -DPortalAdminPwd=<portal_admin_password>
On Unix: ./ConfigEngine.sh action-update-settings-learningportal -DWasUserid=<was_admin_id> -DWasPassword=<was_admin_password> -DPortalAdminId=<portal_admin_id> -DPortalAdminPwd=<portal_admin_password>
On iSeries™: $configengine.sh -profileName portal_profile action-update-settings-learningportal -DWasUserid=<was_admin_id> -DWasPassword=<was_admin_password> -DPortalAdminId=<portal_admin_id> -DPortalAdminPwd=<portal_admin_password>
Learning Server Security
1. Edit the ConfigEngineInstallLocation/properties/wkplc_comp.properties file and change the following values. Note the five distinct LDAP groups MUST be groups that already exist in LDAP.
2. Open a command/shell/QSH Window and change to the ConfigEngineInstallLocation directory
3. Run the appropriate command
On Windows: ConfigEngine action-update-settings-learningserver -DWasUserid=<was_admin_id> -DWasPassword=<was_admin_password> -DPortalAdminId=<portal_admin_id> -DPortalAdminPwd=<portal_admin_password>
On Unix: ./ConfigEngine.sh action-update-settings-learningserver -DWasUserid=<was_admin_id> -DWasPassword=<was_admin_password> -DPortalAdminId=<portal_admin_id> -DPortalAdminPwd=<portal_admin_password>
On iSeries™: $configengine.sh -profileName portal_profile action-update-settings-learningserver -DWasUserid=<was_admin_id> -DWasPassword=<was_admin_password> -DPortalAdminId=<portal_admin_id> -DPortalAdminPwd=<portal_admin_password>
Learning Server user authentication common name unique ID
Some configurations authenticate users by their common name (cn) attribute and not by their UID attribute which is the default for the Learning Server. The system administrator may change this behavior by editing the Learning Server's settings.xml file, usually found at the following location:
1. The following lines inside the <commonschema> section of the <ldap> section in each file should be edited to replace the UID with CN to get the Learning Server to authenticate against the "cn" instead of the "uid" attribute value.
Original
<ldap>
<commonschema>
<mapping name="LdapId" wmmAttribute="uid"/>
<mapping name="UserId" wmmAttribute="uid"/>
</commonschema>
<ldap>
Revised
<ldap>
<commonschema>
<mapping name="LdapId" wmmAttribute="cn"/>
<mapping name="UserId" wmmAttribute="cn"/>
<commonschema>
<ldap>
2. Restart the server after make the above changes.
3. Restart WebSphere_Portal.
Copyright and trademark information
IBM, the IBM logo and ibm.com are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.
Rate this page
Please take a moment to complete this form to help us better serve you.
