Ansible 能够安装OpenAm，但无法登录
我只想安装openAm，这样就可以通过ansible脚本（）安装openAm。我使用了maven存储库中的OpenAm版本14快照。但在成功运行脚本后，我无法使用凭据登录 管理员/密码 我重新检查，变量设置如下，位于 如果我还需要做什么，请告诉我 目标机器未显示错误迹象。但是登录失败了 我研究了创建的嵌入式ldap。我没有找到用户amAdmin 代码直接取自forgerock发布的github，但我已将其剥离为仅运行openam。请查找task/main.yml文件。所有依赖文件都可以假定在github中。目前，它可以连接到外部LDAP并创建嵌入式LDAP。脚本在运行期间成功Ansible 能够安装OpenAm，但无法登录,ansible,openam,Ansible,Openam,我只想安装openAm，这样就可以通过ansible脚本（）安装openAm。我使用了maven存储库中的OpenAm版本14快照。但在成功运行脚本后，我无法使用凭据登录 管理员/密码 我重新检查，变量设置如下，位于 如果我还需要做什么，请告诉我 目标机器未显示错误迹象。但是登录失败了 我研究了创建的嵌入式ldap。我没有找到用户amAdmin 代码直接取自forgerock发布的github，但我已将其剥离为仅运行openam。请查找task/main.yml文件。所有依赖文件都可以假定在
- file: path="{{ install_root}}" owner="{{ fr_user }}" state="directory"
- file: path={{ install_root}}/openam owner={{fr_user}} state="directory"
- name: Create staging directory
file: path=/var/staging state=directory owner={{ fr_user }} mode=0777
- name: Download openam snapshot
shell: 'wget http://maven.forgerock.org/repo/releases/org/forgerock/openam/openam-server/12.0.0/openam-server-12.0.0.war -O /var/staging/openam.war creates=/var/stag$
register: openam_downloaded
- name: Deploy war to tomcat
command: creates="{{ tomcat_openam_dir }}/webapps/openam" cp "{{ staging_dir }}/openam.war" "{{ tomcat_openam_dir}}/webapps/openam.war"
- name: copy service from openam to init.d to install it as service
template: src=openam.service dest="/etc/init.d/openam.service" mode=0777
- name: Updates all the release candidate as defaults
shell: 'update-rc.d openam.service defaults'
register: allRC_Updated
- file: path="{{ install_root}}" owner="{{ fr_user }}" state="directory"
- file: path={{ install_root}}/openam owner={{fr_user}} state="directory"
- name: Ensure openam tomcat instance is running
service: name="openam.service" state=restarted enabled=yes
- name: Wait for openam war to be fully deployed before running configurator
wait_for: port="{{openam_server_port}}" delay=10
- wait_for: port={{openam_server_port}} delay=30
- name: Run ssoconfigure
ssoconfigure: server_url="http://{{openam_fqdn}}:{{openam_server_port}}"
deployment_uri="/openam"
base_dir="{{install_root}}/openam"
directory_server="{{embedded_dj_host}}"
root_suffix="o=openam"
directory_admin_port="{{embedded_dj_admin_port}}"
directory_jmx_port="{{embedded_dj_jmx_port}}"
directory_port="{{embedded_dj_ldap_port}}"
ds_dirmgrdn="{{embedded_dj_dirmgr}}"
data_store="embedded"
ds_dirmgrpasswd="{{embedded_dj_password}}"
userstore_ssl="SIMPLE"
userstore_host="{{opendj_host}}"
userstore_port="{{opendj_ldap_port}}"
userstore_suffix="{{opendj_basedn}}"
userstore_mgrdn="{{opendj_dirmgr}}"
userstore_passwd="{{opendj_password}}"
amldapuserpasswd="{{amldapuser_password}}"
cookie_domain="{{openam_cookie_domain}}"
admin_pwd="{{amadmin_password}}"
acceptlicense="true"
am_enc_key="AQICY6Za5J5noktyqnhW10JiPVNUdKuiZYwS"
lb_site_name="sitea"
lb_primary_url="{{openam_site_url}}"
- file: recurse=yes state=directory owner="{{ fr_user }}" path="{{ install_root}}" mode=0775
- file: name="{{ install_root}}/ssoadmin" owner={{ fr_user }} state=directory
- name: Download ssoadmintools snapshot
shell: 'wget http://maven.forgerock.org/repo/releases/org/forgerock/openam/openam-distribution-ssoadmintools/12.0.0/openam-distribution-ssoadmintools-12.0.0.zip -O /$
register: ssoadmintools_downloaded
- unarchive: src={{ staging_dir }}/ssoadmintools.zip dest="{{ install_root}}/ssoadmin" copy=no
- file: path="{{ install_root }}/ssoadmin" owner="{{ fr_user}}" mode=0777 recurse=yes
- name: setup ssoadm tools
command: chdir={{ install_root }}/ssoadmin {{ install_root }}/ssoadmin/setup -p {{ install_root }}/openam --acceptLicense
environment:
JAVA_HOME: /opt/java/oracle/jdk1.7.0_71
- template: src=ssoadm-patch dest="{{install_root}}/ssoadmin/openam/bin/" mode=0755 owner={{fr_user}}
- command: chdir="{{install_root}}/ssoadmin/openam/bin" ./ssoadm-patch
- file: recurse=yes state=directory owner="{{ fr_user }}" path="{{ install_root}}/ssoadmin" mode=0775
您在安装时使用的cookie域是什么？ 在ansible脚本中，cookie域在名为“openam_cookie_domain”的属性中指定。您还可以通过转到“openam/json/serverinfo/*”来查看设置了哪个cookie域 “.amazonaws.com”被归类为顶级域，因此不能在其上设置cookies。如果OpenAM服务器无法正确设置cookies，身份验证将失败
最好的选择是完全使用不同的域（即“.example.com”），否则您可以使用amazon实例FQDN（“ec2 XXX.compute1.amazonaws.com”）作为您的cookie域。您必须使用基于主机的cookie（从platformservice中删除所有cookie域）在Amazon云中运行OpenAM时，Amazon将其列为公共后缀（请参阅），因此浏览器必须删除OpenAM发布的域cookie 您需要安装ssoadm并使用
ssoadm-u amadmin-f PATH_TO_PWDFILE remove attr defs-s iPlanetAMPlatformService-t global-a iplanet am platform cookie domains