How to rename an Identity Manager server or hostname?
search cancel

How to rename an Identity Manager server or hostname?

book

Article ID: 52400

calendar_today

Updated On:

Products

CA Directory CA Identity Manager CA Identity Governance CA Identity Portal CA Risk Analytics CA Secure Cloud SaaS - Arcot A-OK (WebFort) CLOUDMINDER ADVANCED AUTHENTICATION CA Secure Cloud SaaS - Advanced Authentication CA Secure Cloud SaaS - Identity Management CA Secure Cloud SaaS - Single Sign On CA Security Command Center CA Data Protection (DataMinder) CA User Activity Reporting

Issue/Introduction

Description

The purpose of this document is to explain the steps needed in order for IM to run properly after changing the server name or after switching hosts.

This document refers to changing the server name. If the IP address was used in the configuration files, it too might need to be changed.

Solution

Changing the Identity Manager Server Name

Environment
This example assumes the following system configuration is installed (your configuration may vary):

Application Server: Jboss
SiteMinder Policy Server User Interface on IIS 6.0
WebAgent (if installed) on IIS 6.0

Procedure:

Changing the WebAgent or Servet Filter Agent smhost configuration files

  1. Open smhost.conf file located in:

    For WebAgent: <install_dir>\netegrity\webagent\config
    For Servlet: <install_dir>\\CA\eTrust SiteMinder\agentframework\config
  2. Change the server name in "policy server" field.
  3. Run iisreset (or restart Apache Web Server, SunOne Web Server, etc.)

Modify the Agent objects (if SiteMinder server name was changed)

Modify the Agent object:
  1. open SiteMinder UI
  2. go to System tab
  3. choose Agents
  4. open the agent object properties (for sample agent: imsagent)
  5. change the server name in "IP address or host name" field to the SiteMinder server name


  • Modify the Host Configuration object
    1. open SiteMinder UI
    2. go to System tab
    3. choose Host Conf objects
    4. open the host conf object (for servlet agent : <your-machine> - hostConfig)
    5. change the server name in "PolicyServer" attribute to the SiteMinder server name

    Modify the Application Server Plugin

    JBOSS - Modify the Jakarta Plugin for IIS

    1. Modify the file workers.properties, located in Plugin folder (for example: c:\ISAPI).
    2. Change the field worker.jboss.host to the IM server name

    WebLogic - Modify WLS Plugin on IIS

    • Verify correct appserver(s) IP address(es) and port(s) are specified iisproxy.ini.

    WebLogic - Modify WLS plugin on Apache

    • Verify the correct application server is specified in the httpd.conf file, located in APACHE_HOME\conf\httpd.conf

    Modify the server name in Identity Manager

    1. Modify the Policy Server name in IM ear:
      1. go to <app server deployment folder>\IdentityMinder.ear\policyserver_rar\META-INF
      2. edit ra.xml
      3. change the server name in ConnectionURL property to the SiteMinder server name
    2. Modify the URL in the Identity Manager Environment:
      1. go to IM management console (for example: http://<server_name>/idmmanage)
      2. select Environments
      3. select <your env> (for sample environment select neteauto)
      4. change the server name in the field "Base Url" to the IM server name
    3. Modify Password Policy re-direct URL:
      1. open SiteMinder UI
      2. go to System tab
      3. go to Password Policies
      4. open the password policy matching your environment (for sample environment: "neteauto password policy")
      5. go to General tab
      6. change the server name in "redirection URL" field to the IM server name


Restart JBoss (or WebLogic) server.

Configuration change testing:

Login to the environment and create a new user.
Run the public task Forgotten Password. Try to login to the environment with the temporary password.
Then change the password, and make sure you're redirected to the environment.

Modify the server name in eTrust Admin

If provisioning is configured in the IM environment, the IM server name should be modified in the IM extensions for eTrust Admin:

  1. open eTrust Admin UI
  2. go to Namespaces
  3. change the object type to 'common program exit" and press the search button.
  4. open IMeTACallbackExit properties
  5. go to Authentication tab
  6. change IM server name in the "other ID" field.

Test this change by creating a user in CA Admin and making sure it was created in IM.

Environment

Release:
Component: IDMGR
Powered by Wolken Software