Product Documentation
Abstract
This supplements the Component Manager abilties and allow a more robust highly available solution.
Content
In Process Engine 5.0 and prior versions, a component queue polls and dispatches work using the Java Authentication and Authorization Service (JAAS) credentials which are configured using the Process Configuration Console. This credential is also used upon restart of the adaptor to "unlock" previously locked work items for recovery in cases where the component adaptor process might have crashed.
In a multiple Component Manager environment, with the same component adaptors polling the same component queues, this could cause a race condition and work which is being processed by one Component Manager instance can be inadvertently unlocked and reworked by another Component Manager. To mitigate this situation, the component adaptor from each of the multiple Component Managers can be configured to use a different user's credentials. However, there is no way to save the different user credentials and so each time the Component Manager is restarted, the alternate user credentials would need to be re-entered.
Starting with Fix Pack 4.5.1.3-P8PE-FP003 for Process Engine 4.5.1, and Fix Pack 5.0.0.1-P8PE-FP001 for Process Engine 5.0, each component adaptor can be configured to store user credentials, while keeping the same JAAS credential security model as previous versions. The configuration is done at the Component Manager level. Each Component Manager will need to be configured if there are multiple CM instances, local or remote.
Configuring user credentials for individual adaptors
A new panel named "Adaptors" has been added to the Component Manager user interface in the Application Engine's Process Task Manager application
This panel is available per Component Manager instance and will list the configured adaptors which has been assigned an alternate credential for use when that instance of the Component Manager is started.
The tool bar in the new panel provides the following functions, but will only be available when the Component Manager is stopped.
Add - Allows the user to add credentials for an adaptor. When the button is clicked, an Adaptor dialog is presented to let the user pick the adaptor name from a combo box. The user should provide a user name, password, and password confirmation. Note that there is no verification of the information entered. Selecting the same adaptor as one that has been given in the adaptor list will overwrite the previous information. Only the queues which were configured for the specific Component Manager will be available for selection in the Adaptor dialog.
Modify – Allows the user to modify the adaptor’s credentials. The Adaptor dialog is presented, similarly to the Add, with the exception that the adaptor name is not selectable.
Refresh – Allows the list of the adaptor names to be retrieved from the Process Engine. For Component Manager instances configured for specific queues, the list is taken from those queue names, and no Process Engine access is required.
Delete – Removes the adaptor’s name from the list.
When the Component Manager is started, it will first look for any configured credentials and use those credentials as oppose to the default, which is configured in the Process Configuration Console.
Was this topic helpful?
Document Information
Modified date:
17 June 2018
UID
swg27022417