ardentkurt

6.5 starts out talking about how to configure CTS before they go into the tuning info. But those tuning global attributes seem to apply only to a predefined site. So, I would like to know whether I need to configure a site in order to take advantage of session failover. Or, would/could I configure a site with one server (server A) and then if it…[Read more]

I am working on Procedure 6.5 To Configure CTS in OpenAM for OpenAM 13.

Okay, listing the indexes for that dn seems to show all the indexes:

./dbtest list-index-status --backendID cfgStore --baseDN dc=cfgStore,dc=example,dc=com

Thanks, Rob and Michelle. I ended up moving to a deployment that separates the user and config data stores and running the remaining commands with a baseDN of dc=cfgStore,dc=example,dc=com. In order to verify that this is setup correctly, I am trying to verify the indexes that were created by running:

./verify-index --baseDN…[Read more]

Hi Rob,

Yes, this is a little confusing. The guide mentions that he following example procedure shows how to prepare a single OpenDJ directory server instance as an external configuration data store. The OpenDJ instance implements a single backend for the OpenAM configuration data. The procedure assumes that you have also prepared an external…[Read more]

Hi Gentjan,

I am at Procedure 1.4 — you are correct. I am not executing both commands though. Since I am using OpenDJ 2.6.4, I am running just the following command:

./dsconfig create-backend –backend-name cfgStore –set base-dn:dc=example,dc=com –set enabled:true –type local-db –port 4444 –bindDN “cn=Directory Manager” –bindPassword p…[Read more]

Hmm…ok, given that I’m following the installation manual, would it make sense to do something like this:

dc=openam,dc=example,dc=com

Or is there another baseDN that makes sense here?

Thanks!

And <service name>:<port on container> is the right way to access the opendj instance.

Following up on this thread, the cn=Directory Manager user was able to connect to the opendj instance. However, it required checking the “Load schema when finished” checkbox on the Data Stores tab.

The cn=OpenAM Administrator user still cannot connect.

Thanks, Rob. Just to be clear in order to load the schema when the data store is saved, I have to use the cn=Directory Manager account and not the cn=OpenAM Administrator account. And even after I load the schema, I am not able to connect to the external data store with the cn=OpenAM Administrator account. For some weird reason, I keep getting an…[Read more]

Restarting the directory server is not an option since its running in a Docker container; if stop-ds is run, then that causes the container to exit. That seems to have a permanent effect on the container so that it does not start up again afterwards.

Hmmm…I am configuring for dynamic schema updates and the manual says, “Continue by configuring your external identity repository as an OpenAM data store as described in Section 1.4.3, “Configuring OpenAM Data Stores That Access External Identity Repositories”.” That said, I foiund the step 11 that you’re referring to — it’s in section 1.5.

Not sure which step is step 11. I have run the openam-ds-admin-account.ldif:

dn: ou=admins,dc=example,dc=com
objectClass: top
objectClass: organizationalunit
ou: OpenAM Administrator

dn: uid=openam,ou=admins,dc=example,dc=com
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
cn: OpenAM…

[Read more]

I have tried both with cn=”Directory Manager” and cn=”OpenAM Administrator” and neither works.

Good idea. That unfortunately results in an authentication failed. This is the user created in opendj prior to connecting openam to this external data store:

dn: ou=admins,dc=example,dc=com
objectClass: top
objectClass: organizationalunit
ou: OpenAM Administrator

dn: uid=openam,ou=admins,dc=example,dc=com
objectClass: top
objectClass:…

[Read more]

Have not tried the IP address yet. I just tried to ping opendj (which is the service name) from the openam container and that does work so maybe this is already working and I just don’t know…

Was this ever resolved? How? I am running into the same issue. I am attempting to add the user data store after openam starts up.

Thanks!