CA Service Management

 View Only
  • 1.  Unified Self Service Authentication without EEM

    Posted Mar 16, 2015 12:22 PM

    Hi,

    in an 14.1 installation we have installed SDM first without Unified Self-Service.

    Customer does not want to have EEM installed.

     

    How is it possible to install Unified Self Service without authentication via EEM?

    Integration with EEM would also integrate SDM with EEM what customer does not like.

     

    I created a local windows user CASMAdmin.

    After installing USS I cannot login with CASMAdmin.

     

    What can I do?

    How can I configure USS using windows-authentication?

     

    Regards,

    Peter



  • 2.  Re: Unified Self Service Authentication without EEM

    Broadcom Employee
    Posted Mar 17, 2015 02:27 PM

    Hello Peter,

    using EEM to USS for authentican is just an Option. Out of the box you can/may use the Build in Enterprise authentication or AD etc. The USS Sdm interface is using Pkw authentication.

     Regards Ferldinand



  • 3.  Re: Unified Self Service Authentication without EEM

    Broadcom Employee
    Posted Mar 17, 2015 05:07 PM

    Peter, I think you can't use the CASM setup for this purpose as the setup in root directory does not provide you this option to not use

    EEM for USS and SDM. You would need to run the setup/install scripts from individual products for SDM and USS and then manually integrate

    them. Thanks _Chi



  • 4.  Re: Unified Self Service Authentication without EEM

    Posted Mar 18, 2015 02:32 AM

    Hello Chi,

    I found a way to install and configure it without EEM but it's not the way it should be done normally.

    I've manipulated the eem-enable-flag in the database and after that I could login against USS.

     

    Thanks and regards,

    Peter



  • 5.  Re: Unified Self Service Authentication without EEM

    Broadcom Employee
    Posted Mar 18, 2015 11:11 AM

    Peter, I am glad that you "worked around" this. Is it possible that

    you shed light on some details on how you manipulated the

    eem-enable-flag? I think many in this user community would like to

    know because the CASM installer does not provide the option for USS

    to not use eiam and not everyone would like to use eiam for USS

    authentication. Regards _Chi



  • 6.  Re: Unified Self Service Authentication without EEM

    Posted Mar 18, 2015 11:43 AM

    Hi Chi,

    to unset the flag you have to do the following steps carefully:

    1. Search the dataset in the DB:

     

    SELECT portalPreferencesId, ownerId, ownerType, preferences

    FROM PortalPreferences

                WHERE (preferences LIKE '%eiamadmin%')


    2. Manipulate the entry:  change from true to false

                 <preference><name>eem.authentication.enabled</name><value>true</value></preference>


    3. Restart CA Unified self-Service Server


    After that you can login as CASMAdmin against  USS_mdb-user


    Regards,

    Peter


    PS.:  To be sure save USS_mdb before doing that



  • 7.  Re: Unified Self Service Authentication without EEM

    Broadcom Employee
    Posted Mar 20, 2015 11:26 AM

    Peter, thank you for sharing this info with us. I will keep note for this.

    Regards _Chi



  • 8.  Re: Unified Self Service Authentication without EEM

    Posted May 20, 2016 02:28 PM

    That was a great tip for me!  I originally set up USS without EEM and then enabled it for testing but I had forgot to add CASDMAdmin to the EEM User Store and had not designated an alternate admin that did exist in the User Store.  Noob mistake.  This allowed me back in.

     

    J.W.



  • 9.  Re: Unified Self Service Authentication without EEM

    Posted Mar 18, 2015 02:33 AM

    Hello Ferdinand,

    it's not so easy to install USS without using EEM.

    Look, what I've done in my answer to Chi.

     

    Thanks and regards,

    Peter



  • 10.  Re: Unified Self Service Authentication without EEM

    Broadcom Employee
    Posted Mar 20, 2015 01:30 AM
    As Shows in the Screenshots I've Sent to you. For Sdm it is.

    This Problem Seen to be USS - sc installed specific.