Federating LSF with Landmark

 1 Replies
 1 Subscribed to this topic
 27 Subscribed to this forum
Sort:
Author
Messages
DavidV
Veteran Member
Posts: 101
Veteran Member

    We have Landmark and IPA running on windows server: Landmark 10.1.1.25

    We have LSF running on AIX server  LSF 10.0.7 and Apps 10.0.6

    We are using ISS 11.0.0.261

    All are running great.  All the smoke tests and validation URLs work

    This is our last phase of the Lawson 10 Upgrade and we are now trying to federate Landmark with LSF

    First question.  When they say backup before federating are they referring to the .sso and authen files on each respective system?  Or is there more?

    Second question. Do we need to do the LDAP bind on the Landmark/IPA server?  The assumption is that was for a standalone system. Since we will be federating with LSF using SSOP as the primary authentication service then that is not needed?  Note we did the ldapbind with LSF and it's working fine.  However, the build of landmark had copies of the .sso, authen.dat, sevice.xml, actors.xml, and services.xml prior the ldapbind performed on LSF.  Will that be an issue?  The assumption here is once we synch with LSF SSOP as the primary that this would all be corrected and that it would use the ldapbind from LSF.

    Third question. Just want to confirm we don't need to load DSP on the Landmark/IPA server. 

    Fourth question.  One set of instructions tell us to use the Landmark lawsec.jar and another set tells us you can use the LSF lawsec.jar.  It looks like we would be ok using the LSF lawsec.jar

    Fifth question. It tells us to edit the lsservice.properties file and add isprimary=false and server.authservicename=SSOPV2 -- It we are using ISS and we are using SSOP as primary is this necessary?

    Any help is greatly appreciated.

     

    Carl.Seay
    Veteran Member
    Posts: 109
    Veteran Member

      For future reference, I would Federate as soon as LSF and Landmark are installed. I've saved it for last several times, and it never works out well. 

       

      1. You will want to backup .sso files, authen.dat, lsservice.properties, and the GEN database on both Landmark and LSF. Also backup the LSF LDAP. 

      2. I say yes, because I've done the federation without the Landmark being LDAP bound and it did not set SSOP with the LDAP Login Scheme on the Landmark side. However, my co-worker says it not required. So... flip a coin  You can always set it using secadm though. 

      3. Correct, no DSP on Landmark. 

      4. Use the LSF lawsec.jar. I believe the Landmark one is for coupled systems. 

      5. That is probably in the Coupling / Landmark as Primary section. You do not need to set those. 

       

      Good Luck