Sunday, 7 February 2016

DataStage configuration (WebSphere and InfoSphere)

             
                     

                  How to configure DataStage after installation


     We need to configure datastage once the installation is completed.In the previous posts,We have discussed that you need to copy contents from dsenv on your current server to your new server and some of the other configuration files.

After copying the configuration files,We need to configure datastage .Below are the steps to configure datastage.

First,we need to configure security in WebSphere.

                                  WebSphere configuration



1. Login into WebSphere admin URL  https://hostname:9043/ibm/console/login.do  with existing admin user( Which you have provided during installation ex wasadmin)

2. Click on Security---> global security.

3. Choose standalone ldap registry in the pull down window for ‘Available realm definitions’ then click configure.

    Make sure Enable administrative security is checked in administrative secuirty.
    Enable application security is checked in Application security.
          On the right side LTPA should be selected in Authentication.
   
4. Provide primary administrative user name(It should be LDAP account)

5. Choose Microsoft Active Directory in Types of LDAP server.

6. Provide Domain.corp.dom in host field and port number in port field.

7. You can keep the search time out same as default.

8. In the Bind Distinguished Name (DN)
Bind dn: cn=adminid_from_AD,ou=users,dc=corp,dc=dom

(You can check these settings in your old environment.)

9. In the Bind password,Provide the password of the above id ,which you have mentioned in DN.


10. At the top hits save.

11.   Go to Administrative group roles, hit add, change the search string to the name of the group that will be WAS admins and click add, then save(optional).

12. Click apply and then save.

After making these changes,You can see all the LDAP groups and users through IIS URL.

Now,you can login into WebSphere admin console,only with the account which you have provided in primary administrative user name.

If you want to login with some other accounts also to monitor the activities,then you need to add Monitor Roles for all Authenticated users.

1. Click on Administrative group roles under Users and Groups.

2. Click on Add.

3. In the group,Choose ALL AUTHENTICATED

4. In the Roles,Choose monitor.

5.Click on Apply.

6. Now all the users,who have access to datastage,should be able to login into WebSphere admin console with their user id.


                           InfoSphere Configuration

Credential Mapping


1) Defining default credentials


1. Open the admin console URL https://servername:9445/ibm/iis/console/.

2. Login with the user id which you gave during installation (Example wasadmin).
    You must have suite administrator authority or IBM® InfoSphere® DataStage® and IBM      InfoSphere QualityStage® administrator authority.


The default credentials are used for any users who do not have their own credential mappings. If you do not want users who do not have mapped credentials to access the server, do not add default mapping credentials.

Procedure

  1. In the IBM InfoSphere Information Server Web console, click the Administration tab.
  2. In the Navigator pane, select Domain Management > Engine Credentials.
  3. Select the InfoSphere Information Server engine for which you want to specify the default credentials.
  4. Click Open Configuration.
  5. In the User Name field, type the user name to be used by all InfoSphere Information Server users for whom a specific mapping is not defined.
  6. In the Password field, type the corresponding password. The user name and password that you provide must be a valid user name and password for the operating system where the engine tier components are installed.
  7. Confirm the password.
  8. Click Save and Close.

2.) Configuring your credentials

 you can map the credentials for your own user account.

Steps
  1. In the  Information Server Web console, click the Administration tab.
  2. In the Navigation pane, select Domain Management > Engine Credentials.
  3. Select the InfoSphere Information Server engine that you want to configure.
  4. Click Open My Credentials.
  5. Type the user name and password that you want to use to connect to the IBM InfoSphere Information Server engine. The user name and password that you provide must be a valid user name and password for the operating system where the engine tier components are installed.
  6. Click Save and Close.
3.) Grant role to DataStage users/Groups

Steps

  1. Grant the required suite and suite component roles to the user in the Web console.
  2. Using a role that has administrative privileges, log in to the IBM InfoSphere Information Server Web console.
  3. Select the Administration tab.
  4. In the Navigation pane, select Users and Groups > Users.
  5. Select the user that you want to grant access to and click Open User.
  6. In the Roles pane, assign the following roles to the user.
  7. Suite User
  8. Required for all users in order to log in to any of the suite components.
  9. DataStage and QualityStage User
  10. Required for any user in order log in to any of the InfoSphere DataStage and InfoSphere QualityStage product modules.
  11. DataStage and QualityStage Administrator
  12. Optional. Grants full access to all projects and the administrative capability of InfoSphere DataStage and InfoSphere QualityStage.

Note: Same way ,you can assign riles to groups also.It is better to assign roles to groups instead of assigning to individual users.

If you want to add any other user as administrator who is not part of any group,Then you need to assign administrator role to that user individuals.