|
ITCAM FP4 Security
|
 |
This question is not answered.
|
|
Replies:
3
-
Pages:
1
-
Last Post:
Oct 28, 2009 1:06 PM
Last Post By: pradeep_nambiar
|
|
|
Posts:
18
Registered:
Oct 14, 2009 03:08:14 AM
|
|
|
|
ITCAM FP4 Security
Posted:
Oct 28, 2009 06:10:28 AM
|
|
|
|
Hi all,
With the advent of FP4 for ITCAM for Websphere, security is enabled automatically, can it be disabled on a application level?
|
|
Posts:
28
Registered:
Jul 02, 2005 11:19:03 PM
|
|
|
|
Re: ITCAM FP4 Security
Posted:
Oct 28, 2009 09:36:23 AM
in response to: NedbankWebSpherethread.responsepost
|
|
|
|
I presume you mean the WAS Security is enabled for the WAS profile where we install ITCAM for WAS Console application (also known as Visualization Engine - VE). This is true.
When you say security for applications, do you mean the applications that you want to monitor ?
If you have installed ITCAM for WAS VE on the same WAS profile where you also have your applications to monitor, then this is not a recommended installation. Ideally you should install the ITCAM for WAS VE on to a separate profile by itself. In this scenario it should not affect the application security of your application since they are on a different WAS profile.
Hope that answers your question.
|
|
Posts:
18
Registered:
Oct 14, 2009 03:08:14 AM
|
|
|
|
Re: ITCAM FP4 Security
Posted:
Oct 28, 2009 10:29:09 AM
in response to: pradeep_nambiarthread.responsepost
|
|
|
|
The VE is installed on a separate WAS instance, but even with WAS globel security off, the ITCAM monitoring console still requires a password.
I would like to put the security off for the ITCAM monitoring console.
It seems like WAS global security MUST be enabled for ITCAMfWAS FP4.
I am specifically referring to the security of the ITCAM application.
We use an external LDAP for WAS security and if user SAITM is not in the LDAP repository, we cannot sign on to the Application monitoring console.
Hence, I want to diable security for ITCAM and WAS, add the respective admin user to the monitoring console and re-enable WAS global security.
As it is now, I cannot.
Hope I make sense.
|
|
Posts:
28
Registered:
Jul 02, 2005 11:19:03 PM
|
|
|
|
Re: ITCAM FP4 Security
Posted:
Oct 28, 2009 01:06:12 PM
in response to: NedbankWebSpherethread.responsepost
|
|
|
|
WAS Security has options to use local registry (file), OS or LDAP.
If you want to configure your WAS (where VE is installed) to use the LDAP then you will need to have those users in LDAP. Now the userid you specify for ITCAM Console need not be the exact same in LDAP. There is a mapping from userid in ITCAM for WAS to LDAP ID. When you create the users it asks for userids and corresponding mapping to the WAS user registry which again could be file, OS or LDAP.
I will not recommend turning off security.
So I think you should first deterine what kind of user registry you want i.e file, OS or LDAP.
Since you indicated you don't want LDAP, go with the other two options. Then install ITCAM for WAS VE into that profile and create necessary users.
Hope that helps.
If this doesn't answer, I suggest you open a PMR with IBM Support and let them guide you through the possible options.
|
|
|
|
|
