Chapter 3: Configuring Additional Options for CABI
The additional configuration is not required for CABI N-tier install, but you can perform them on product server.
This section contains the following topics:
Configure CABI Tomcat for SSL (HTTPS) (see page 43) Integrate CA Business Intelligence with LDAP (see page 47)
Install and Configure Apache Load Balancer for CABI Web Application Tiers (see page 58)
Configure CABI Tomcat for SSL (HTTPS)
The Tomcat web server for CABI provides a non-SSL connector by default. However, you can configure Tomcat to use SSL, which secures the communication between CA Business Intelligence web servers and client environments.
Follow these steps:
1. Log in to the CABI first Web Tier server.
2. Open the Central Configuration Manager application and stop the Apache Tomcat service.
3. Open the command prompt and navigate to the %JAVA_HOME/bin folder.
Note: The default location is C:\Program
Files(x86)\CA\SC\CommonReporting3\javasdk\bin.
4. Run the command %JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSA and provide the information for the following questions:
■ Enter keystore password
■ What is your first and last name
Configure CABI Tomcat for SSL (HTTPS)
44 N-Tier Implementation and Configuration Guide
■ What is the name of the organizational unit
■ What is the name of the organization
■ What is the name of your city or locality
■ What is the name of your state or province
■ What is the two-letter country code for this unit
5. Enter yes on the confirmation prompt and press the Enter key.
6. Press Enter for the Enter key password for <tomcat> to use the same password.
A .keystore file is created under C:\Users\Logged_In_User home folder.
7. Copy the .keystore file to the C:\Program Files (x86)\CA\SC\CommonReporting3 folder.
8. Open Server.xml under C:\Program Files
(x86)\CA\SC\CommonReporting3\Tomcat55\conf folder using the text editor.
9. Find the following section, which is commented out.
10. Uncomment the connector port section and add the following line:
keystoreFile="C:/Program Files (x86)/CA/SC/CommonReporting3/.keystore" keystorePass="password"
11. Comment the default connector section for port 8080.
Configure CABI Tomcat for SSL (HTTPS)
Chapter 3: Configuring Additional Options for CABI 45 12. Start the Tomcat service from the Central Configuration Manager application.
These steps disable the InfoView and CMC on port 8080 and enable on port 8443.
New InfoView URL:
https://<Web Tier>:8443/InfoView App/logon.jsp New CMC URL:
https://<Web Tier>:8443/CmcApp/logon.face
Important! This procedure is required for configuring for SSL.
1. Open Windows Explorer and navigate to the folder C:\Program Files
(x86)\CA\SC\CommonReporting3\BusinessObjects Enterprise 12.0\win32_x86.
2. Right-click on the cmc.url and select Properties section.
3. Change the URL for CMC app and click Apply.
4. Launch CMC from the Start menu and verify whether the changed URL is working.
5. Navigate to the folder C:\Program Files
(x86)\CA\SC\CommonReporting3\Tomcat55\bobjsetup.
6. Right-click on the InfoView .url and select Properties section.
7. Change the URL for InfoView app and click Apply.
8. Launch CMC from the Start menu and verify whether the changed URL is working.
9. Repeat the Configure CABI Tomcat for SSL procedure and Steps 1 to 8 on second Web Tier to enable the second Web Tier for SSL.
Configure Applications to Use the New InfoView URL
After configuring the CABI Web Server for SSL, reconfigure the products that are integrating with CABI, to use the new HTTPS URL. The following sections provide detailed steps for configuring different CA products to use the new URL.
■ Configure CA Service Desk Manager
■ Configure CA Service Catalog
■ Configure CA Clarity
■ Configure CA Service Operations Insight
Configure CABI Tomcat for SSL (HTTPS)
46 N-Tier Implementation and Configuration Guide
Configure CA Service Desk Manager
Follow these steps:
1. Log in to the CA Service Desk Manager (SDM) web interface as an Administrator user.
2. Click Administration, Options Manager, and Web Report.
3. Change the value for bo_server_location from http://<Web Tier>:8080 to https://<Web Tier>:8443.
4. Restart the CA Service Desk Manager service.
Configure CA Service Catalog
Follow these steps:
1. Log in to the CA Service Catalog as an Administrator user.
2. Click Administration, Configuration, and CA Business Intelligence (CABI) and change the values as shown in the following screen.
3. Restart the CA Service Catalog service.
Configure CA Clarity
Follow these steps:
1. Log in to the CA Clarity NSA as an Administrator user.
2. Click Servers and click Properties section.
3. Click Reporting.
4. Change the value for Service URL http://<Web
Tier>:8080/dswsbobje/services/session to https://<Web Tier>:8443/dswsbobje/services/session.
5. Change the value for Web URL from http://<Web Tier>:8080 to https://<Web Tier>:8443.
6. Restart the CA Clarity services.
7. Log in to the CA Clarity application to verify whether reports are running.
Integrate CA Business Intelligence with LDAP
Chapter 3: Configuring Additional Options for CABI 47
Configure CA Service Operations Insight
Follow these steps:
1. Log in to the CA Service operations Insight (SOI) as an Administrator user.
2. Expand the CA Service Operations Insight UI server configuration, ServerName, Report Configuration.
3. Change the following values:
■ Report port: 8443
■ Enable SSL: yes 4. Save the changes.
5. Restart CA SOI services.
6. Log in to the CA SOI to verify whether the dashboard and reports hyperlinks are working.
Integrate CA Business Intelligence with LDAP
A new group in the active directory named CABIUsers is created to map the users in CABI during configuration.
Note: A new active directory server is created to configure LDAP integration in the same DVNAT environment with the server name as LDAP Server.
Follow these steps:
1. Log in to the first Web Tier.
2. Launch the Central Management Console application.
3. Log in using Administrator user name and password credentials.
4. Click Authentication in the Manage section of the CMC Home page.
The Authentication dialog opens.
Integrate CA Business Intelligence with LDAP
48 N-Tier Implementation and Configuration Guide 5. Double-click on LDAP.
The LDAP configuration wizard opens.
6. Click Start LDAP Configuration Wizard.
7. Type the host name and the port of LDAP server in the form of hostname:port In the Add LDAP host box and click Add.
8. Click Next.
9. Select Microsoft Active Directory from the LDAP Server Type drop down.
10. Click Show Attribute Mappings.
The section expands displaying the LDAP Server Attribute Mappings details.
Integrate CA Business Intelligence with LDAP
Chapter 3: Configuring Additional Options for CABI 49 11. Change the following mapping values in the LDAP Server Attribute Mappings
section and click Next to proceed.
■ Username : sAMAccountName
■ Default User Search Attribute: sAMAccountName
12. Enter dc=itg,dc=local in the Base LDAP Distinguished Name field.
Integrate CA Business Intelligence with LDAP
50 N-Tier Implementation and Configuration Guide
13. Enter the distinguished name of Administrator user in the Distinguished Name text field.
Example: CN=Administrator,CN=Users,DC=itg,DC=local.
14. Type the Administrator user password in the Password text box and click Next to set the SSL settings.
15. Select Basic (No SSL) for SSL and click Next to set the SSO settings.
16. Select Basic (No SSO) for Authentication and click Next.
17. Select the Create a new account for every added LDAP alias option under the New Alias Options section.
Integrate CA Business Intelligence with LDAP
Chapter 3: Configuring Additional Options for CABI 51 18. Select the Create new aliases when the Alias Update occurs option under the Alias
Update Options section.
19. Click Finish.
20. Type the CABIUsers group name (created earlier) in the Add LDAP group text box.
21. Select the Import Full Name and Email Address, and Give LDAP attribute binding priority over AD attribute binding options on the same dialog.
Integrate CA Business Intelligence with LDAP
52 N-Tier Implementation and Configuration Guide 22. Click Update.
The CABIUsers group CN is updated automatically.
Integrate CA Business Intelligence with Tivoli Directory Server
CABI can integrate with different LDAP servers. Integrating with the Active Directory is described in the previous section. This section describes the process to integrate with the IBM Tivoli Directory Server.
Perform the following tasks to integrate the CA Business Intelligence with Tivoli Directory Server:
1. Create Group in Tivoli Directory Server.
2. Configure LDAP Authentication.
Create Group in Tivoli Directory Server
Create a group and add the required users to the group in Tivoli Directory Server. After the group is created, this group gets mapped in CABI and the respective users are imported.
Follow these steps:
1. Log in to the Tivoli Directory Server Web Administration Tool.
2. Enter User DN as root and password for root user on the Directory server login dialog.
The Tivoli Directory Server Web Administration Tool dialog opens.
3. Expand Users and groups and click Add Group on the left pane.
The Add group section opens on the right pane.
Integrate CA Business Intelligence with LDAP
Chapter 3: Configuring Additional Options for CABI 53 4. Enter the group name as CABIUsers and click Next.
5. Under Users click Add and select all users that are required to be part of the group, and click OK.
Integrate CA Business Intelligence with LDAP
54 N-Tier Implementation and Configuration Guide
Configuring LDAP Authentication
After you create the group and add the required users to the group in Tivoli Directory Server, configure LDAP authentication to complete the integration of the CABI with Tivoli Directory Server.
Follow these steps:
1. Log in to CABI as an Administrator.
2. Click Authentication under Manage section and open LDAP settings.
3. Enter the LDAM server name as follows servername:ldap port in the Add LDAP host field and click Add.
4. Select LDAP Server type to custom and click Show Attribute mappings.
Integrate CA Business Intelligence with LDAP
Chapter 3: Configuring Additional Options for CABI 55 5. Change the mapping information as follows and click Next.
■ User Name: uid
■ Default User Search Attribute: uid
6. Enter the search base or the Base LDAP Distinguished Name field and click Next.
Integrate CA Business Intelligence with LDAP
56 N-Tier Implementation and Configuration Guide
7. Enter the distinguished name of Administrator user as cn=root, in the Distinguished Name and password details in the Password fields.
8. Click Next to set the SSL settings.
9. Click Next to set the SSO settings.
10. Click Next on Authentication dialog.
11. Select the following LDAP alias options and click Next.
12. Click Finish.
Integrate CA Business Intelligence with LDAP
Chapter 3: Configuring Additional Options for CABI 57 13. Enter the group dn value created for CABI and click Add in the Add LDAP group
field.
14. Click Update.
The dialog displays with the added group name in the Add LDAP group section.
15. Close the LDAP setting and navigate to Users And Groups, Users List.
16. Verify whether all the users are imported.
17. Launch InfoView login dialog and verify whether the user is able to login as LDAP user and run a report.
Modify InfoView to Select Different Authentication Types
After integrating CABI with an external directory server, modify the InfoView application to select the different authentication types. The default setting for InfoView allows only Enterprise authentication.
Follow these steps:
1. Log in to first Web Tier.
2. Open Windows Explorer and open the WEB-INF folder from C:\Program Files (x86)\CA\SC\CommonReporting3\Tomcat55\webapps\InfoView App\.
Install and Configure Apache Load Balancer for CABI Web Application Tiers
58 N-Tier Implementation and Configuration Guide
3. Make a copy of web.xml file.
4. Change the value of the authentication.visible parameter from false to true.
5. Open the Central Configuration Manager application, and restart Apache Tomcat service.
6. Repeat Steps 1 to 5 on second Web Tier.
7. Launch the InfoView using URL 8. Provide the following login details:
Username
Specifies the username of LDAP user Password
Specifies the password Authentication
Select the LDAP
Install and Configure Apache Load Balancer for CABI Web Application Tiers
CABI N-tier environment has two web tiers running Tomcat web server. However, the load balancing feature is not available to distribute the load on two web servers. Hence, we recommend using Apache Load Balancer to distribute the user sessions between the two servers that are based on the priority.
Install and Configure Apache Load Balancer for CABI Web Application Tiers
Chapter 3: Configuring Additional Options for CABI 59
Pre-requisites
The following list is the prerequisites to install and configure Apache Load Balancer for CABI Web Tiers:
1. Download the Apache HTTP Server with SSL support
(httpd-2.2.22-win32-x86-openssl-0.9.8t.msi) from http://httpd.apache.org.
2. Download the Apache Tomcat Connectors
(tomcat-connectors-1.2.35-windows-i386-httpd-2.2.x.zip) from
http://tomcat.apache.org/download-connectors.cgi and extract the "mod_jk.so"
file.
3. If IIS web server is installed on the Apache web server, perform the following steps:
a. Stop the World Wide Web Publishing Service, and change the Startup type to Manual.
b. Open the Services Control Panel, locate and right-click the World Wide Web Publishing Service, and select Properties section.
Install and Configure Apache Load Balancer for CABI Web Application Tiers
60 N-Tier Implementation and Configuration Guide
c. Change the Startup Type to Manual and click Stop.
d. Click OK.
e. Close the Services Control Panel.
Install and Configure Apache Load Balancer for CABI Web Application Tiers
Chapter 3: Configuring Additional Options for CABI 61
Install the Apache HTTP Server
Follow these steps:
1. Double-click the httpd-2.2.22-win32-x86-openssl-0.9.8t.msi file that was downloaded as part of a prerequisite.
The Apache HTTP Server 2.2 – Installation Wizard Welcome dialog opens.
2. Click Next.
The License Agreement dialog opens.
3. Accept the license agreement and click Next.
The Read This First dialog opens.
4. Read the text and click Next.
The Server Information dialog opens.
5. Provide the appropriate server parameters and click Next.
The Setup Type dialog opens.
6. Select the Custom setup type and click Next.
The Custom Setup dialog opens.
Install and Configure Apache Load Balancer for CABI Web Application Tiers
62 N-Tier Implementation and Configuration Guide
7. Keep the default features and click Change to change the destination folder.
The Change Current Destination folder dialog opens.
8. Change the installation drive to D: and click OK.
The Custom Setup dialog opens.
9. Click Next.
The Ready to Install the Program dialog opens.
10. Click Install.
After the installation is complete, the Installation Wizard Completed dialog opens.
11. Click Finish.
Install and Configure Apache Load Balancer for CABI Web Application Tiers
Chapter 3: Configuring Additional Options for CABI 63
Perform Post-Installation Steps
Open Internet Explorer and type the http://localhost URL.
On successful installation of the Apache HTTP Server, the following message displays:
Configure Apache HTTP Server
After you complete the installation and post-installation of the Apache HTTP server, configure the Apache HTTP server.
Follow these steps:
1. Copy the mod_jk.so file that was extracted as prerequisite, to the D:\Program Files (x86)\Apache Software Foundation\Apache2.2\modules folder.
2. Open the httpd.conf file from the D:\Program Files (x86)\Apache Software Foundation\Apache2.2\conf folder.
3. Add the following lines at the end of the file (after </If Module>) and save the file.
Install and Configure Apache Load Balancer for CABI Web Application Tiers
64 N-Tier Implementation and Configuration Guide
4. Create a worker.properties file in the D:\Program Files (x86)\Apache Software Foundation\Apache2.2\conf folder.
5. Add the following lines and save the file.
6. Create a uriworkermap.properties file in the D:\Program Files (x86)\Apache Software Foundation\Apache2.2\conf folder.
7. Add the following lines and save the file.
Install and Configure Apache Load Balancer for CABI Web Application Tiers
Chapter 3: Configuring Additional Options for CABI 65 8. Restart the Apache2.2 service from the Services control panel.
Configure CABI Web Tier
Installing and configuring the Apache HTTP server is complete after you configure the CABI Web Tier.
Follow these steps:
1. Log in to the first Web Tier.
2. Open the server.xml file from the C:\Program Files
(x86)\CA\SC\CommonReporting3\Tomcat55\conf folder using text editor.
3. Search and find the following line:
<!-- Define an AJP 1.3 Connector on port 8009 line.
4. Close the comment by adding --> at the end of the line as shown in the following dialog:
5. Delete the following line:
<Connector enableLookups="true"port="8009"protocol="AJP/1.3"redirectPort="8443"> -->
Install and Configure Apache Load Balancer for CABI Web Application Tiers
66 N-Tier Implementation and Configuration Guide
6. Add the following lines in the same section:
7. Find the followng line:
<!-- Define the top level container in our container hierarchy -->
8. Modify the Engine element to add the jvm route information as shown in the following screen:
9. Save the server.xml file.
10. Restart Apache Tomcat server from the Central Configuration Manager application.
11. Repeat Steps 1 to 10 on the second Web Tier.
Important! However, in Step 8, change the jvmroute to web07.
12. Open the URL in IE and verify whether CMC opens successfully.
13. Open the URL and verify whether InfoView opens successfully.