Network Deployment (Distributed operating systems), v8.0 > Secure applications and their environment > Secure Service integration > Secure service integration


Add unique names to the bus authorization policy

How to update the authorization policy for the service integration bus with unique name entries.

You should carry out this task if you are migrating from WAS v6 to WAS v7.0 or later. In this task, you manually run the populateUniqueNames command to query the user repository for a selected bus for unique names, and add them to the authorization policy. If you do not manually run this command, the messaging engine performs the query, and adds the missing unique names to the authorizations policy, which adversely affects the start up time.

When you migrate from a v6 node to a v7.0 or later node, the authorization policy only contains the user and group security names; it does not contain the names in the user registry that uniquely define each user and group. If an LDAP user registry is in use, the unique name is the distinguished name (DN). By default, only missing unique names are added to the authorization policy. If you set the -force parameter, all unique name entries added to the authorization policy


Procedure

  1. Run a scripting command. See Start the wsadmin scripting client using wsadmin.sh.
  2. At the wsadmin command prompt, type the populateUniquenames command. The following example syntax queries the user repository for the unique names that match the security names for a bus called Bus 1, and adds the missing unique names to the authorization policy .
    AdminTask.populateUniquenames('[-bus Bus1]')
    

  3. Save your changes to the master configuration repository. The following example presents the syntax:
    AdminConfig.save()
    


Results

The authorization policy for the bus is updated with the missing unique names.


Example

The following example updates all the unique name entries in the authorization policy for a bus called Bus 1.
AdminTask.populateUniqueNames(AdminTask.populateUniquenames('[-bus Bus1 -force TRUE]')


What to do next

Use the admin console to administer bus security authorizations.
Messaging security
Role-based authorization


Related


populateUniqueNames command

+

Search Tips   |   Advanced Search