Page History
...
- The JS7 - Identity Services provide local management of user accounts for authentication and authorization.
- The JS7 - Shiro Identity Service is was a built-in service available from the JOC Cockpit.
- The Shiro Identity Service is was available for early releases of JS7.
- The Shiro Identity Service is has been discontinued:
Display feature availability EndingWithRelease 2.4.0
- Migration tools are The JS7 - Shiro Identity Service Migration Tool is available for users who upgrade from early JS7 2.0, 2.1 releases and from JS1 1.12, 1.13 releases.
- A Shiro Identity Service configuration will be migrated to a JS7 - JOC Identity Service.
- Migration tools will remain in place and can be applied throughout future JS7 2.x releases independently of the fact that the Shiro Identity Service has been discontinued.
...
Code Block | ||||
---|---|---|---|---|
| ||||
/opt/sos-berlin.com/js7/joc/install/joc_manage_identity_service.sh import <shiro-configuration-file> |
Code Block | ||||
---|---|---|---|---|
| ||||
C:\Program Files\sos-berlin.com\js7\joc\install\joc_manage_identity_service.cmd import <shiro-configuration-file> |
...
- Add an Identity Service with Service Type
JOC
and the nameJOC-FROM-SHIRO:
- For each LDAP realm included with the
<shiro-configuration-file>
a corresponding Identity Service is created form the name of the LDAP realm.
- For each LDAP realm included with the
- Populate roles of the
JOC-FROM-SHIRO
Identity Service:- Any roles and permissions from the
<shiro-configuration-file>
are added to theJOC-FROM-SHIRO
Identity Service.
- Any roles and permissions from the
- Populate accounts of the
JOC-FROM-SHIRO
Identity Service:- Any user accounts from the
<shiro-configuration-file>
are added to theJOC-FROM-SHIRO
Identity Service. - This includes adding assignments of roles to user accounts provided that assignments and roles are specified.
- This includes adding hashed passwords available from stored in the
<shiro-configuration-file>
.- JS7 implements its own password hashing algorithm. However, password hashes migrated from Shiro can be used with JS7.
- When a user changes the password then the JS7 password hashing algorithm is applied.
- This procedure is intended for smooth migration that which does not force users to change passwords.
- Any user accounts from the
- Should the management script find existing configuration items with the same name in the
JOC-FROM-SHIRO
Identity Service, for example, matching names of roles or user accounts, then they will not be overwritten from the<shiro-configuration-file>
.
...
Overview
Content Tools