nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Is it possible integrate my own user management instead of system console with iHub 3.1 Server

Srinivas Yarra

Hi,
 
Is it possible to integrate my own user management module instead of system console with iHub 3.1 Server?
 
use case: we need to merge or use single user management module for Application as well as iHub 3.1 server to avoid providing multiple times authorization stuff (application level and ihub3.1). Is it possible to use application authorization for ihub 3.1 server reports/dashboards?
 
Thanks,
Srinivas

Find more posts tagged with

Comments

JFreeman

You can configured iHub to use an external application such as Active Directory or an LDAP to manage the user authenticaiton and credentials instead of the built in iHub user management.
 
There is an LDAP Adapter configuration menu within system console for configuring this.

Srinivas Yarra

Hi Jesse,
 
Thank you for your reply.
 
LDAP Adapter will be take caring the authentication only or authorization support also means providing the resource(i.e reports/dashboards) privileges/access like read write or read only related stuff?
 
As per our use case, we are using the ldap for authentication purpose only and authorization will be at database side.
 
Could you please give clarification ?
 
Thanks in Adv.
 
Thanks,
Srinivas

JFreeman

I am not sure I'm clear on exactly what you are asking.
Could you please provide additional details on what you are wanting?

Srinivas Yarra

Hi Jesse,
 
Thank you for your reply.
 
We have been enabled the RSSE SOAP Service User Management in our iHub 3.1 Server using installed system console on tomcat 7 server. It is reading the Json file data for authentication and role information. But if user is trying to modify his profile data like password, description, mail etc. then it is not updating. 
 
How to save profile data from iportal and reloading the json file without restarting the tomcat server.
 
Kindly provide any example to update json file or delete user using CallOpenSecurityLibrary API or PassThrough RSSE API .
 
Thanks,
Srinivas

JFreeman

Is it a flat json file or are you receiving a json response from an LDAP server?
Are the users changing their settings from within the iHub and you are wanting the changes to be propagated to the json file?

Srinivas Yarra

Hi Jesse,
 
Thank you for your reply.
 
As of now, we are using flat file for knowing the RSSE functionality and work flow. Plan to use json response from ldap server in Production.
 
Yes Jesse, users may change his information like email, password, description and etc from iHub and changes need to be propagated into json file.
 
Thanks,
Srinivas

JFreeman

When an RSSE is setup to externalize these properties, they are propagated into iHub from the external source. However, I do not believe it works the other way around where the values can be changed in iHub and then be propagated back to the source.
 
I will do some digging, but I believe the changes need to be made at the source (in the LDAP or AD installation).

Srinivas Yarra

Hi Jesse,
 
Thank you Jesse for your great support.
 
We have gone through the passThrough method of SampleRSSE class, not sure when this method will be calling. As per logic we can reload data as well as save data to json file etc. Suppose if we add new user/ delete existing user in ldap server how it will affect at iHub server as per my understanding it will be loading at once and keeping in in-memory.
 
Once again thanks lot...
 
Thanks,
Srinivas

JFreeman

When a new user/group is added to the LDAP, the information is propagated to the iHub. When the information is propagated to the iHub, it is stored in the iHub's metadata database.

Srinivas Yarra

Hi Jesse,
 
Thank you for your reply.
 
Have you done anything for the propagated to iHub if user/group is added to LDAP level. We added a new user in flat json file but newly added user is not able to login in iportal. It means that flat file json data is not reloaded or anything we did mistake?
 
We got below log message for newly added user in json when we trying to login in portal:
"authenticate(): User user2 doesn't exist"
 
Can you please provide sample code when a new user/group is added to the LDAP, the information is propagated to the iHub ?
 
 
Thanks,
Srinivas

JFreeman

There is an RSSE cache timeout setting that controls how frequently the RSSE cache is updated. By default I believe it is 60 minutes. Every time this triggers, any changes should be propagated into the iHub. If you are in a test environment that does not receive heavy load, you can reduce the RSSE cache timeout to something smaller such as 1-5 minutes.

Srinivas Yarra

Thank you Jesse for your reply.

JFreeman

You're welcome.
 
Let us know if you have any additional questions.