Chapter 18 Post-Installation Procedures
18.2 Application Process Settings
This section explains how to set application process setting.
18.2.1 Registering an Application Process Assessor
Add all infrastructure administrators and dual-role administrators to the directory service IflowUsers group in order to use application processes. Use the LDIF file to register an application process assessor at the directory server. Follow the procedure below to register as application process assessor.
1.
Create an infrastructure administrator or dual-role administrator.2.
Add the infrastructure administrator or dual-role administrator as a member of the IflowUsers group.Note
-
Infrastructure administrators and dual-role administrators who have not been registered in the "IflowUsers" group cannot conduct assessment in application processes. Also, if infrastructure administrators and dual-role administrators not registered in the "IflowUsers" group select the Request tab in the ROR Console, the following error message appears:Error message : Failed to authenticate the user.
-
Administrators (dual-role administrators) created during installation are not registered in the "IflowUsers" group. Add them to the "IflowUsers" group.-
If an email address is not set, assessment request emails are not sent, and reservation notification emails are not sent when an error occurs.-
If no infrastructure administrators or dual-role administrators are registered in the IflowUsers group, the following message is displayed after the application is forwarded from the Forward screen window when the user subscribes to the service:PCS1002
An error occurred while processing application. Please contact the infrastructure administrator.
18.2.1.1 Creating an Infrastructure Administrator/Dual-role Administrator
Use the following procedure to register infrastructure administrators and dual-role administrators.
1.
Check if user information is registered in the directory service. If no user information is registered, register it. This operation is not necessary when using internal authentication in Basic mode.2.
In the ROR console, select [Settings]-[User Accounts]. The [User Accounts] dialog is displayed.3.
Click <Add>.The [Add User Account] dialog is displayed.
4.
Set the following:User ID
Specify a user ID registered in the directory service.
E-mail address
Specify the email address of the user.
Specify a string using up to 64 alphanumeric characters or symbols.
User Groups
Select the user group to configure for the user account from the already created user group. Select the "supervisor" user group to register as an application process assessor.
Scopes/Roles (Optional) Access Scope
Role
Select the role to set for the user account.
Label (Optional)
Enter a label for the user account. Enter a maximum of 32 characters.
Comment (Optional)
Enter any comments for the user group. Enter a maximum of 256 characters.
5.
Click <OK>.The user account is created.
When using user operations to register users also in the directory service in Resource Orchestrator, use the rcxadm user create command after checking the settings of the definition file for directory service operations (ldap_attr.rcxprop). For details on the definition file for directory service operations, refer to "8.6.1 Settings for Tenant Management and Account Management" in the "Operation Guide CE". For details on the rcxadm user create command, refer to "7.1 rcxadm user" in the "Reference Guide (Command/XML) CE".
18.2.1.2 Adding an Infrastructure Administrator/Dual-role Administrator to IflowUsers
Group
Follow the procedure below to add an infrastructure administrator or dual-role administrator as a member of the IflowUsers group.
For OpenDS
1.
Create an LDIF file.Edit a sample LDIF file to create the file. An example of an LDIF file is shown below.
# Add manager to IflowUsers
dn: cn=IflowUsers,ou=group,dc=fujitsu,dc=com changetype: modify
add: member
member: cn=manager,ou=users,dc=fujitsu,dc=com
2.
Execute the ldapmodify command.Before executing the ldapmodify command of OpenDS, set JAVA_HOME as the path of Java SE 6. [Windows Manager]
Specify the created LDIF file, and then execute the ldapmodify command.
<OpenDS installation directory>\bat\ldapmodify.bat" -p <port number> -f <ldif file> -D < administrator user DN> -w <password>
An execution example is shown below.
c:\> c:\Program Files (x86)\Fujitsu\ServerView Suite\opends\bat\ldapmodify -p 1473 -f c:\ldif \adduser2group.ldif -D "cn=Directory Manager" -w admin
Processing MODIFY request for cn=IflowUsers,ou=group,dc=fujitsu,dc=com MODIFY operation successful for DN cn=IflowUsers,ou=group,dc=fujitsu,dc=com
[Linux Manager]
Specify the created LDIF file, and then execute the ldapmodify command.
# <OpenDS installation directory>/bin/ldapmodify" -p <port number> -f <ldif file> -D <administrator user DN> -w <password>
An execution example is shown below.
# /opt/fujitsu/ServerViewSuite/opends/bin/ldapmodify -p 1473 -D "cn=Directory Manager" -f /tmp/ ldif/adduser2group.ldif -w admin
Processing MODIFY request for cn=IflowUsers,ou=group,dc=fujitsu,dc=com MODIFY operation successful for DN cn=IflowUsers,ou=group,dc=fujitsu,dc=com
Note
-
In the command input line, enter the command as one line without entering any line feeds.-
For the directory service port number, administrator DN, and administrator DN password, enter the values that were set during installation.-
When working with ServerView Operations Manager V5.5 or later, the message "The directory name is invalid" may be displayed - you can still proceed.For Active Directory
1.
From the Start menu, open [Control Panel]-[Administrative Tools]-[Active Directory Users and Computers].2.
Select the name of a domain that is managed by Active Directory.3.
Right-click "IflowUsers" of the organizational unit "Group", and select [Property].4.
Select the [Members] tab, and click the [Add] button.5.
The [Select Users, Contacts, Computers, Or Groups] window will be displayed. Input the member list of the above table in the [Enter the object names to select] field, and click the [OK] button. If there is more than one member, separate them with semicolons.6.
After returning to the property window of the group, confirm that the members have been added correctly, and click the [OK] button.18.2.2 Stopping the Manager
Stop the manager before making settings for sending email.
Refer to "2.1 Starting and Stopping Managers" in the "Operation Guide CE" for information on how to stop the manager.
18.2.3 Setting Application Process Settings
This section explains how to modify the application process settings.
To change Application process settings
The procedure for changing the setting whether to use the application process is as follows.
Point
Setting Application process setting can be set by "Setup Wizard" on the ROR Console.
The "Setup Wizard" displays as three items the six items that are explained in this section and in "18.2.4 Setting Application Process to be Used". When items are not selected in the Setup Wizard, the corresponding items in this section are set to "false". When items are selected in the Setup Wizard, then the corresponding items in this section are set to "true".
Refer to "3.1 Setup Wizard" in the "User's Guide for Infrastructure Administrators CE" for information on "Setup Wizard".
1.
Open the following file. [Windows Manager]<installation_folder>\RCXCTMG\MyPortal\config\custom_config.xml
[Linux Manager]
/etc/opt/FJSVctmyp/config/custom_config.xml
2.
Set the following items:Setting item Description
enable-create-workflow Specify "true" if you want to use the application process for L-Platform subscriptions. Specify "false" to not use it.
"false" is set during installation.
enable-reconfigure-workflow Specify "true" if you want to use the application process for L-Platform modifications. Specify "false" to not use it.
"false" is set during installation.
enable-return-workflow Specify "true" if you want to use the application process for L-Platform cancellations. Specify "false" to not use it.
"false" is set during installation.
workflow-mode Specify "1" if you want to use the application process feature. Specify "0" to not use it. "0" is set during installation.
Note
The Application List tab of the ROR console is not displayed when display of the Application List is not permitted in the role definitions.
An example is shown below.
<?xml version="1.0" encoding="UTF-8"?> <properties> ... <entry key="workflow-mode">1</entry> <entry key="enable-create-workflow">true</entry> <entry key="enable-reconfigure-workflow">true</entry> <entry key="enable-return-workflow">true</entry> ... </properties>
18.2.4 Setting Application Process to be Used
This section explains how to modify the application process to be used.
To change the application process to be used
The modification procedure of the application process to be used is as follows.
Point
Setting Application process to be used can be set by "Setup Wizard" on the ROR Console.
The "Setup Wizard" displays as three items the six items that are explained in this section and in "18.2.3 Setting Application Process Settings". In this section, settings can be made for the items corresponding to those that were selected in the Setup Wizard. When items are not selected in the Setup Wizard, then the corresponding items in "18.2.3 Setting Application Process Settings" are set to false, so the corresponding settings in this section will be disabled.
Refer to "3.1 Setup Wizard" in the "User's Guide for Infrastructure Administrators CE" for information on "Setup Wizard".
1.
Open the following file. [Windows Manager]<installation_folder>\RCXCTMG\MyPortal\config\application_process.properties
[Linux Manager]
2.
Set the following items:Setting item Setting value
ServiceCreate_processName When applying to use L-Platform, enter "Default" if approval and assessment are to be performed, enter "ApproverOnly" if approval only is to be performed, and enter "JudgeOnly" if assessment only is to be performed.
"Default" is set during installation.
ServiceChange_processName When modifying L-Platform, enter "Default" if approval and assessment are to be performed, enter "ApproverOnly" if approval only is to be performed, and enter "JudgeOnly" if assessment only is to be performed.
"Default" is set during installation.
ServiceReturn_processName When canceling L-Platform, enter "Default" if approval and assessment are to be performed, enter "ApproverOnly" if approval only is to be performed, and enter "JudgeOnly" if assessment only is to be performed.
"Default" is set during installation. An example is shown below:
... ServiceCreate_applicationId=ctmgApplication ServiceCreate_processName=Default ServiceChange_applicationId=ctmgApplication ServiceChange_processName=Default ServiceReturn_applicationId=ctmgApplication ServiceReturn_processName=Default ...
18.2.5 Starting the Manager
Start the manager in order to enable the email settings set in "18.2.3 Setting Application Process Settings" and "18.2.4 Setting Application Process to be Used".
Refer to "2.1 Starting and Stopping Managers" in the "Operation Guide CE" for information on how to stop the manager.
18.2.6 Role Settings for the Display of the Application List Tab
This section explains customizing roles to display the [Application List] of the ROR console.
The [Application List] tab of the ROR console is not displayed when display of the [Application List] is not permitted in the role definitions. The default at installation is not to permit display.
When the procedure in "18.2.3 Setting Application Process Settings" is performed and the value of workflow-mode is changed to "1", add the permissions to display the [Application List] by customizing the role. Refer to "Chapter 3 Configuring Users and Customizing Roles" in the "User's Guide for Infrastructure Administrators (Resource Management) CE" for information on customizing roles.
Note that when "Enable" is selected for the Application process function in the setup wizard, the permissions to display the [Application List] are simultaneously added to the role definition for the corresponding basic role.