Appreciations accepted

Vladlen Litvinov, the author: If you have some job offer for me, I'm ready to discuss it. View Vladlen Litvinov's profile on LinkedIn

Password

Showing posts with label BPM security. Show all posts
Showing posts with label BPM security. Show all posts

Monday, April 20, 2015

Incorrect displaying of user's Full Name when you use default settings in IBM BPM 8.5.6

When you use IBM BPM 8.5.6 you can observe some incorrect situation:
Full Name of some internal user (created through IBM BPM not from LDAP repository) is displayed incorrectly. In Process Portal you can see login name (uid) instead Full Name.

Wednesday, February 18, 2015

How to recreate some deleted internal user in IBM BPM 7.5-8.0

In IBM BPM 7.5-8.0 internal users are stored in BPMDB.
If you delete some of them - the full information about it will not delete from the database and you can to recreate it.
The information about internal users are stored in two tables:lsw_usr_xref and lsw_usr
and this information is deleted from lsw_usr only.

Monday, January 12, 2015

How to find out how many users are working in Process Portal at the given time (for 8.5 and later version)?

If you use IBM BPM version 8.5 and later, you can find out the number of users connected to Process Portal using the table BPM_USR_RUNTIME_PROPS.

Friday, November 21, 2014

How can I change the hostname in an already configured Business Process Manager environment? The way of real geek.

Have You Tried Turning It Off And On Again?
"The IT Crowd"
 
Undoubtedly, IBM support are good guys but they have not enough a fantasy, a flight of mind, an imagination. They are limited by official guides and reglaments.
Not so long ago they created a new portal named dwAnswers, and now they are inventing questions and answering themself on them.
Yesterday I saw a good question and the typical answer of IBM support. Let's look at it:

Saturday, October 18, 2014

WebSphere Application Server password decoder (decryptor). Total recall.

I have already written about decoding WAS passwords here:
http://bpmadmin.blogspot.com/2012/12/how-to-restore-was-bpm-administration.html

Now,  you need not remember the big commands. On any page of my blog you can decrypt your password.
Just enter it into the field and press the button "Decode". Save your time!

It's impossible to open Administration Console for Content Platform Engine in IBM BPM 8.5.5

If you use the username not-a-DEadmin in IBM BPM 8.5.5 - you cannot open Administration Console for Content Platform Engine. The URL is https://<hostname>:<port>/acce.
You get the message in your browser:

Error Page Exception
SRVE0260E: The server cannot use the error page specified for your application to handle the Original Exception printed below.
 

Original Exception:
Error Message: com.ibm.ws.security.web.WebSecurityException: AuthorizationFailed
Error Code: 403


Monday, May 12, 2014

How to restrict an access for users for creating of new process applications

The disclaimer: This solution was not checked from all points of view, but I did not notice any problems with it. I will be glade to any remarks.

By default, all Process Designer users can create new process appplications and toolkits.
But sometimes we need to restrict this. IBM BPM hasn't such possibility at first glance.
Try to solve it.

Friday, April 25, 2014

How to add some user to some group in IBM BPM through DB

Sometimes you need to add some user to some group in BPM.
You can do this through admin console certainly.
But imagine that you have not any access to admin console.

Tuesday, December 24, 2013

SPNEGO SSO in IBM BPM clustered environment

As you know, for Windows client Integrated Authentication in IBM WAS the mechanism called SPNEGO (The Simple and Protected GSS-API Negotiation Mechanism) is used.
Our BPM users can access to portals without input of username and password, using their Windows account.  

I won't give a detail guide because the old guide you can find here
But there is not a way for clustered environments here what are used in productive most frequently.
I can fill this defect.
I describe the features for clusters.

Thursday, November 28, 2013

ORA-01407: cannot update ("BPMDB"."LSW_SNAPSHOT"."LAST_MODIFIED_BY_USER_ID") to NULL

Something else about a bugtracking in BPM. I have thought about an issue recently.
After transfering of PA from one Process Center to another and its starting we got such error:

Sunday, November 17, 2013

How to restore WAS BPM 8.5 administration password?

I have already written about restoring of BPM Admin password here
There are some changes in BPM 8.5 securuty.

Wednesday, October 16, 2013

The password of database user expired and you don't have an access in BPM. What to do?

At first some theory.
A standalone BPM environment (7.5-8.0) uses a database-base internal repository (DBR) for storing of accounts by default. If your database is down you cannot enter into BPM.
A clustered BPM environment does not use DBR by default, it uses WebSphere file-based user repository (FBR). A standalone environment contains FBR too, but it is not active.

I had this problem when I started to use Oracle DB as BPM database. Default user profile in Oracle has two settings: a password will be expired after 120 days and the user account will be locked 7 days after password expiration. So, if you use Oracle you must change these setting to UNLIMITED at once.
But others databases have analogical problems too.

What do do in these case:

Monday, May 20, 2013

How to use userPrincipalName (UPN) for logging to BPM

I have worked with one BPM environment recently.
There is the LDAP repository (GC mode) in it and several domains are included.

Sunday, March 10, 2013

How to disable BPM's internal repository

The best practice is not using of internal repository of users in BPM's production environment.

How to do this?
Very simply.

Saturday, March 2, 2013

Friday, December 14, 2012

How to restore WAS BPM administration password?

You are coming to office on Monday and finding the note from your Senior Administrator:
«I hate this job. Departed to Goa. Don’t search me».
But you don’t know any administrative passwords.
What to do?

Action 1. You want to know password of WAS BPM administrator and tw_admin password