Forums » Interstage BPM Server

• Ivar Alexander

  
   

  May 9, 2011 6:31:30 AM PDT

  I have a situation where the corporate LDAP server cannot be "manipulated" for BPM usage (cannot create specific groups for BPM), and so we need to use the BPM user directory for some of the user setup.
  
  I recall that BPM had some capabilities to use the remote users + groups, but to be able to add local groups around those remote users + groups. I am thinking about somehow being able to define local groups, and have those local groups point to remote users and/or groups (local or remote).
  
  Does this sound doable...? How does this work? Are there any limitations involved?
  

  Author: Ivar Alexander
  Attachment:

• admin admin

  
   

  May 9, 2011 6:49:40 AM PDT

  Here is how you should proceed:

  
  

  Step 1:  Install IBPM using local store.

  Step 2:  Go to Tenant Manager console and update the system property of the default tenant to switch to use the Active Directory.  Below is a sample tenant system property to use against FAI's Active Directory:

  
  

  #Interstage BPM - Properties

  #Mon May 09 11:46:25 PDT 2011

  AdminRole=cychen

  AnalyticsLogFile=logs/AnalyticsError.log

  DDFrameWorkImplClass=com.fujitsu.iflow.ddframeworkee.impl.AuthenticateHelper

  DMSFileSeparator=/

  DebugLevel=3

  DirectoryImplClass=com.fujitsu.iflow.diradapter.jndiimpl.DirSessionImpl

  DirectoryService=3

  EmailListenerAutoReplyEnabled=true

  EmailListenerDeleteInvalidMessages=true

  EmailListenerEmailAddress= 

  EmailListenerEnabled=false

  EmailListenerPOPPort=110

  EmailListenerPassword= 

  EmailListenerPollingInterval=900

  EmailListenerPropertiesFile= 

  EmailListenerServerHost=mailhost.fsw.fujitsu.com

  EmailListenerUserName= 

  EmailNotificationEnabled=true

  EmailStyleSheetFile= 

  IBPMUserStoreActive=false

  LDAPAccessUserID=CN=Chien-Yu Chen,OU=FSW,OU=North America,OU=FJCS,DC=Corp,DC=FC,DC=LOCAL

  LDAPAccessUserPassword=ELBo+LZeatbUl54p3gc4Qg==

  LDAPContextFactory=com.sun.jndi.ldap.LdapCtxFactory

  LDAPDBSuffix=OU=North America,OU=FJCS,DC=Corp,DC=FC,DC=LOCAL

  LDAPFilter=cn=*

  LDAPGroupCacheAgeSec=3600

  LDAPGroups=OU=FSW

  LDAPGroupsDN=OU=FSW,OU=North America,OU=FJCS,DC=Corp,DC=FC,DC=LOCAL

  LDAPPeople=OU=FSW

  LDAPServer=ldap://corp.fc.local:389

  LDAPUseDefUsersGroups=No

  LDAPUsersDN=OU=FSW,OU=North America,OU=FJCS,DC=Corp,DC=FC,DC=LOCAL

  LDAPuid= 

  LogFileRecycleNumber=100

  LogFileRecycleSize=10000

  ManagerAttribute=manager

  MetadataRepositoryPassword= 

  MetadataRepositoryURL= 

  MetadataRepositoryUserName= 

  RequiredUserAttribute=uid:local,iflownotification:local,email:local,dmsdir:local,manager:local:cache,favorites:local,dashboard:local,cn:local:cache,title:local:cache

  SWAPLinkagePassword=ELBo+LZeatbUl54p3gc4Qg==

  SWAPLinkageUserName=cychen

  SecuritySwitch=false

  SendAnalyticEvents=true

  ServerEmailAddress=cychen@us.fujitsu.com

  ServerEmailClientPage= 

  ServerLogFile=logs/IBPMServer.log

  ServerLogFileRecycle=true

  ServerNotificationUserProfileField=iflownotification

  ServerPassword=ELBo+LZeatbUl54p3gc4Qg==

  ServerReassignMode=regular

  ServerUserName=cychen

  TeamAttribute= 

  TemplatePublishers=IFlowPublishers 

  UDDIBusinessName= 

  UDDIInquiryURL= 

  UDDIPublishURL= 

  UDDIPublisherPassword= 

  UDDIPublisherUserName= 

  WIResponsible=User

  WebDAVKeyStore= 

  
  

  Author: null
  Attachment: