RS02684: PROVIDE SPECIFIC DOCUMENTATION FOR JBOSS EAP 6.3 REGARDING "DELEGATING AUTHORIZATION TO DECISION CENTER"

IBM Operational Decision Manager V8.9.2.3 Fix Pack
IBM Operational Decision Manager for z/OS 8.9.2.3 Fix Pack
IBM Operational Decision Manager V8.10.4 Download Document
IBM Operational Decision Manager V8.10.4 Mod Pack
IBM Operational Decision Manager for z/OS 8.10.4 Mod Pack

APAR status

• Closed as documentation error.

Error description

• The knowledge Center page: "Access with authorization delegated
  
  to Decision Center" <a href="https://www.ibm.
  com/support/knowledgecenter/fr/SSQP76_8.8.1/com.ibm.odm.distrib.
  
  config.jboss61/config_dc_jboss/con_jboss6_security_bc.
  html">https://www.ibm.com/support/knowledgecenter/fr/SSQP76_8.8.
  
  1/com.ibm.odm.distrib.config.jboss61/config_dc_jboss/con_jboss6_
  
  security_bc.html</a>
  
  The Step 2 is not detailed enough and does not seem to apply
  for JBoss 6.3.
  
  Step 2: Set the security realm
  You must set the security realm so that the application server
  authenticates users and delegates authorization to Decision
  Center.
  To do so, add the allRolesMode="authOnly" parameter to the
  Realm configuration.
  Users from the user registry are all authenticated to log in to
  
  both Decision Center consoles, and are authorized the features
  of a basic user.
  

Local fix

Problem summary

• With JBOSS EAP 6.3 it is mandatory to run the application with
  the following option  -Dorg.apache.catalina.realm.RealmBase.
  ALL_ROLES_MODE=authOnly".
  

Problem conclusion

• The documentation will be updated
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels