IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  DSC and VHJ

    Posted 05/21/19 09:23 AM
    Hi community,

    I am configuring DSC but whenever I want to add a virtualhost junction and specify the replica set to use, I get an error saying the "-z" option is invalid. However, according to this link, it seems ok and I imagine the API is using pdadmin under the hood...

    error when configuring replica set

    My webseal config does specify the replica set:

    [replica-sets]
    # The name of the replica set used by this WebSEAL server.
    # This field has been auto configured.
    replica-set = default
    replica-set = internet

    Does anybody encountered the same? Is this a bug or did I overlook something?

    ------------------------------
    Kristof Goossens
    ------------------------------


  • 2.  RE: DSC and VHJ

    Posted 05/21/19 04:34 PM

    Hi Kristof,

    Make sure that the instance has actually been configured to use the DSC.  That error will be thrown if it is not configured to use it.
    Select the instance and Edit, In the Session tab check:

    [ ] Enable Distributed Session Cache



    ------------------------------
    Nick
    ISAM Level II Support
    ------------------------------



  • 3.  RE: DSC and VHJ

    Posted 05/22/19 01:29 AM
    Hi Nick,

    Thanks for your answer.
    In this particular case, dsess is actually enabled and I can see 2 servers in my replica set:

    #----------------------
    # DISTRIBUTED SESSION MANAGEMENT
    #----------------------
    # These entries together with the "dsess" stanza control how WebSEAL uses the
    # DSC to store and manage sessions.

    # Enable/disable use of the DSC. If this is set to yes the "dsess" stanza
    # must have information about how to communicate with the DSC.
    dsess-enabled = yes

    servers in replica set

    Kind regards

    ------------------------------
    Kristof Goossens
    ------------------------------

    Original Message


  • 4.  RE: DSC and VHJ

    Posted 05/22/19 02:53 AM
    I've been investigating a bit further and I noticed that issuing the pdadmin command to create a vhj (while specifying the replica set) fails when executed in the lmi container (We are using a docker environment) but does succeed in the webseal container.

    Therefore it really looks like an bug in LMI to me. I've raised a support case for it.

    Kind regards

    ------------------------------
    Kristof Goossens
    ------------------------------

    Original Message


  • 5.  RE: DSC and VHJ

    Posted 05/23/19 05:24 AM
    This indeed is a defect, described here: IBM IJ14735: IN A DOCKER ENVIRONMENT CREATING VIRTUALHOST JUNCTION WITH REPLICA SET (-Z ) OPTION FAILS ON CONFIG CONTAINER.

    According to support, a fix will be part of 9.0.7.0 but should also be available in 9.0.6.0 IF2.

    Kind regards

    ------------------------------
    Kristof Goossens
    ------------------------------

    Original Message


Related Content