How do you configure TRIRIGA for Tivoli Directory Integrator (TDI)?

You can configure TRIRIGA to use Tivoli Directory Integrator as its ETL runtime engine to run ETLJobItems from within TRIRIGA.

Before you begin

Install Tivoli Directory Integrator, if not already installed, on all the TRIRIGA systems that could run a TDI ETL Job Item.  During the TDI install:

• Make note of the installation directory you enter on the Destination panel. You will enter this value later in TRIRIGAWEB.properties.
• Select either installation type. TRIRIGA requires only the TDI Server component.
• When prompted for the location of the Solution Directory, you can select any option. TRIRIGA specifies its own solution directory at runtime.  However selecting the option “Use Install Directory” may simplify troubleshooting.
• Make note of the value you enter in the Server Port field on the Server Port Values Panel. You will enter this value later in TRIRIGAWEB.properties.
• Clear the “Start the Configuration Editor” check box on the Install Complete panel.
• Note: This step is very important for TDI/TRIRIGA integration to work. After you have installed Tivoli Directory Integrator, update it with the recommended fix packs (per TRIRIGA support matrix). TDI must be at least at FP04 (7.1.1.4) or it  will not automatically start the TririgiaETLDispatch.xml assembly line which will result in ETL job items failing to run successfully.

Procedure

1. Edit TRIRIGAWEB.properties file to enable TRIRIGA to manage TDI server.  Set the following properties…
2. Install a JDBC driver library so that Tivoli Directory Integrator can use it to access TRIRIGA database…
3. Edit TDI global.properties file to allow TRIRIGA to check and stop the TDI server from localhost without requiring authentication and authorization certificates. Set the api.remote.ssl.on property to false to tell TDI to trust requests from localhost…
4. Start Tivoli Directory Integrator Agent from TRIRIGA Admin Console and verify that it starts successfully…

[Admin: This post is related to the 08.03.16 post about installing, upgrading, or uninstalling TRIRIGA TDI, and the 05.01.16 post about documentation on developing TDI with TRIRIGA. To see other related posts, use the TDI tag.]

Advertisements

Do you need to clear server cache if floor plans aren’t visible?

After performing a TRIRIGA platform upgrade, some of the floor plans are not visible in the forms. Why aren’t they visible?

The TRIRIGA server cache needs to be refreshed. In other words, you need to clear the caches and restart the server. Here are more-detailed steps to clear your TRIRIGA cache and log folder:

1. Login to the Admin Console.
2. Go to the “Cache Manager” managed object.
3. Click on the “All Caches (Global)” link and then “Hierarchy Tree Data – with rebuild” link. The process might take some time.
4. Go to the “Database Manager” managed object, and click on the “Reprocess published drawings” link. Give the process some time to finish. Go to the current server log, and look for a related entry saying that the reprocess published drawing actions are finished. You will find a message similar to the following:
   “INFO [com.tririga.platform.graphics.vector.drawing.DrawingService](http-0.0.0.0-21001-7) Finished re-processing drawings”
5. Logout of the Admin Console.
6. Stop the TRIRIGA JVMs via the WebSphere Admin Console.
7. Delete the logs in the <TRIRIGA install>/log folder that has server.log.
8. Clear the WebSphere temporary cache folder.
9. Restart the TRIRIGA JVMs via the WebSphere Admin Console.

[Admin: This post is related to the 07.15.16 post about floor plan graphics disappearing after an upgrade, and the 09.29.14 post about clearing the TRIRIGA application server cache area. To see other related posts, use the “floor plan” or “clear cache” search phrase.]

IV96795: User without access can add security via Admin Console

A user who has limited access to people records (such as an External Vendor Admin), and who should not have access to add/delete licenses and security groups, is able to add licenses and security groups to an external vendor by running a command in the TRIRIGA Admin Console.

Moving forward, a client-side vulnerability that could allow a user to escalate their privilege, has been resolved.

[Admin: To see other related posts, use the Vulnerability tag or CVE tag.]

How do you use the “Lock” status in the TRIRIGA Admin Console?

In the TRIRIGA Admin Console, under “System Manager”, there is an option to “lock” the server so that maintenance can be done. When the server is up and in a “locked” status, users will not be able to log into TRIRIGA, but administrators can. Users will get a message when they attempt to log in that the system is “locked”.

It is important to know that if your agents are all stopped when you put the system in a “lock” status, and you restart your server, the server will not start back up. This is by design, because the server thinks an upgrade is being done, and you do not want to start up your server if an upgrade is in process.

[Admin: This post is related to the 11.28.12 post about disabling user logins to perform system maintenance.]

IV95382: Agent performance monitors not working properly

In the Admin Console, Performance Monitor, when monitoring a single value, it returns bad results. Returns wrong agent’s status. Returns “false” for an agent status even if the agent is running. Returns “0” for the number of agents running even if multiple agents are running.

We needed to update the calls to various platform status APIs. Moving forward, we updated the Admin Console, Performance Monitor, Single Value to correctly obtain the status of the active agents. This means the AGENTS_RUNNING_COUNT, OBJECT_PUBLISH_AGENT_RUNNING, SCHEDULER_AGENT_RUNNING, and all other agent-related monitors will now correctly report the agent status and count. We also removed the calls to KEYWORD_PARSER_AGENT_RUNNING and WAREHOUSE_AGENT_RUNNING as these no longer exist.

[Admin: This post is related to the 04.08.15 post about performance monitoring tools, and the 02.10.17 post about performance best practices.]

Is there a way to set Admin Console access without TRIRIGA access?

Some of our Admin users need access to the Admin Console to monitor different parameters from there. On the other hand, they must not login to TRIRIGA (or access direct URLs) with business data with Admin access. Is there a way to do this?

Currently, a user must be part of the Admin Group to access the Admin Console page. Please create a request for enhancement (RFE) with business justification and it will be reviewed by the TRIRIGA team.

IV94974: Security change in 3.5.2 has issues with TRIRIGA as service

I have installed TRIRIGA 10.5.2/3.5.2 OOB in Sandbox 1. One thing I noticed is that I used to be able to run the TRIRIGA service as “SVC-CBRES-IWMS-DEV” and I used to display the following in a web page, but in 3.5.2, I am not getting the expected “Sign In Required” error.

In TRIRIGA 3.5.2, a security change was filtering out the Performance Monitor (Single Values) URL. We needed to remove the filtering of monitor.jsp. Moving forward, a security issue was fixed which made the performance monitors unable to work externally from the TRIRIGA Admin Console.

[Admin: This post is related to the 04.08.15 post about performance monitoring tools.]