FEDICT IAM CONFIGURATION ET INSTALLATION

Transcription

1 FEDICT IAM CONFIGURATION ET INSTALLATION Fedict All Rights Reserved Unclassified

2 Table des matières

3 a) Contrôle du Document COPYRIGHT ET CLASSIFICATION Copyright à Fedict, avec All Rights Reserved. Unclassified. INITIATEUR Owner Title Organization Start Date End Date Luc Wijns Senior IAM & Infosec Architect Fedict IAM TBD REVISEURS Name Title Organization Luc Wijns Senior IAM & Infosec Architect Fedict VERSIONS Version Date Updated by Change Luc Wijns Creation of this document Date Reviewed by Remarks Approved by Remarks REVISIONS Version 0.01 APPROBATIONS Version Date

4 b) INTRODUCTION PORTÉE DU DOCUMENT La portée de ce document se limite à la description succincte de la plate-forme IAM en termes de logiciels et des éléments d infrastructure. Elle est également étendue à une vue opérationnelle et d installation. Vues architecturale et de configuration Nous décrivons l'architecture avec les vues suivantes: vue logique vue des exigences vue de mise en œuvre vue physique vue opérationnelle

5 c)vue d ensemble de la configuration VUE LOGIQUE Composants Logiciels Flots réseau

6

7 VUE D IMPLEMENTATION Logiciels de base Web-tier PUBRPROXIES Web-tier mutual SSL proxies App1, App2, App3 & App4tier Database Management SW Type SW Name Release OS RHEL Santiago RHEL 6.5 Webserver Apache SSL Mod_ssl OpenSSL 1.0.1e-fips 11 Feb 2013 OS RHEL Santiago RHEL 6.5 Webserver Apache SSL Mod_ssl OS RHEL Santiago RHEL 6.5 Webserver Apache Application server TOMEE (Tomcat 7) TOMEE Java version Oracle JDK Oracle JDK 7 database Oracle Oracle 11g Database Mysql MariaDB Monitoring Icinga Reporting Birt VUE PHYSIQUE Vue succincte des systèmes présents dans les différents environnements Test & Acceptance

8

9 Assurance Qualité

10 Intégration

11 Production

12 VUE OPÉRATIONNELLE

13 d) Vue d ensemble de l installation FAS («FEDERAL AUTHENTICATION SERVICE») La première section décrit les étapes qui sont nécessaires pour installer le FAS2 IDP et FAS2 STORK Proxy. La deuxième section décrit les étapes opérationnelles. Installation du FAS Présentation des projets Le processus de déploiement de SAF se fonde sur les projets Maven suivants: FAS2 (FAS2): est le projet parent de Maven. FAS2 authentification (FAS2-authentification): contient tout le code d'authentification. FAS2 War (FAS2-war): contient toutes les personnalisations du openam.war pour l'idp. FAS2 PROXY war (FAS2-proxywar): contient toutes les personnalisations du openam.war pour le Proxy STORK FAS2 Scripts (FAS2-scripts): contient tous les scripts. FAS2 Deploy (FAS2-deploy): contient tous les scripts de déploiement pour l'installation et la mise à jour, également utilisés pour créer un package à déployer sur chaque instance de serveur. Configuration de votre environnement Comme le déploiement est basé sur Maven, vous devez avoir une installation fonctionnelle Maven. Vous devez avoir une connexion Internet pour aller chercher toutes les dépendances Maven du dépôt central de Opérations du FAS. Construction du «package» Il ya deux types de «packages» «SNAPSHOT»: ce est un «instantané» du développement à un moment donné dans le temps. Ces paquets ne sont pas publiés dans le référentiel Nexus. «RELEASE»: il ne peut y avoir qu un «package» pour une certaine version. Ce package est publié dans le référentiel de Nexus. Une étiquette est créée aussi dans le dépôt Mercurial pour pouvoir récupérer l'état de tous les projets Maven au moment où cette «release» a été faite.

14 Fichier de configuration: FAS2_VERSION="8.1.0-SNAPSHOT" FAS2_BUILD=" " OPENAM_VERSION="11.0.2" OPENDJ_VERSION="2.6.1" TOMCAT_VERSION="7.0.55" FAS_SUPPORT_WS_VERSION="2.0.2" JOLOKIA_VERSION="1.0.6" OJDBC_VERSION=" " Faire un «SNAPSHOT» Depuis le projet parent FAS2, vous pouvez utiliser la commande Package Maven pour faire une «snapshot relese»: cd $PROJECT_HOME/fas2 mvn clean package Le résultat est: Scanning for projects Reactor Build Order: FAS2 FAS2 Authentication FAS2 War FAS2 Proxy War FAS2 Scripts FAS2 Deploy Building FAS SNAPSHOT maven-clean-plugin:2.5:clean fas Building FAS2 Authentication SNAPSHOT maven-clean-plugin:2.5:clean fas2-authentication -- Deleting /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-authentication/target --- maven-resources-plugin:2.6:resources fas2-authentication -- Using 'UTF-8' encoding to copy filtered resources. Copying 0 resource --- maven-compiler-plugin:3.0:compile fas2-authentication -- Changes detected - recompiling the module! Compiling 63 source files to /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2authentication/target/classes [WARNING] Note: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2authentication/src/main/java/be/fgov/fedict/iam/admin/adminTools.java uses or overrides a deprecated API. [WARNING] Note: Recompile with -Xlint:deprecation for details. [WARNING] Note: Some input files use unchecked or unsafe operations. [WARNING] Note: Recompile with -Xlint:unchecked for details. --- maven-resources-plugin:2.6:testresources fas2-authentication -- Using 'UTF-8' encoding to copy filtered resources. skip non existing resourcedirectory /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2authentication/src/test/resources --- maven-compiler-plugin:3.0:testcompile fas2-authentication -- Changes detected - recompiling the module! --- maven-surefire-plugin:2.12.4:test fas2-authentication maven-jar-plugin:2.4:jar fas2-authentication -- Building jar: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2authentication/target/fas2-authentication SNAPSHOT.jar Building FAS2 War SNAPSHOT maven-clean-plugin:2.5:clean fas2-war -- Deleting /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-war/target --- minify-maven-plugin:1.6:minify fas2-war ---

15 Skipping merge step. Creating minified file [fas.min.css]. Creating minified file [fas-ie.min.css]. Creating minified file [fas-ie6.min.css]. Creating minified file [fas-ie7.min.css]. --- minify-maven-plugin:1.6:minify fas2-war -- Processing source file [jquery min.js]. Processing source file [jquery.validate.min.js]. Processing source file [jquery.numeric.js]. Processing source file [jquery.cookie.js]. Processing source file [spin.min.js]. Processing source file [fedictcommon.js]. Processing source file [fedictlogin.js]. Processing source file [auth.js]. Processing source file [purl.js]. Creating merged file [fas.js]. Creating minified file [fas.min.js]. --- maven-assembly-plugin:2.2-beta-5:single fas2-war -- Reading assembly descriptor: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2war/../fas2-deploy/src/main/assembly/fas2-war-assembly_descriptor.xml [WARNING] Cannot include project artifact: be.fgov.fedict.fas:fas2-war:pom:5.0.0-snapshot; it doesn't have an associated file or directory. already added, skipping fas already added, skipping fas/js already added, skipping fas/style already added, skipping Building tar : /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-war/target/fas2-war5.0.0-SNAPSHOT.tar.bz2 already added, skipping fas already added, skipping fas/js already added, skipping fas/style already added, skipping Building FAS2 Proxy War SNAPSHOT maven-clean-plugin:2.5:clean fas2-proxywar -- Deleting /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-proxywar/target --- minify-maven-plugin:1.6:minify fas2-proxywar -- Processing source file [jquery min.js]. Processing source file [jquery.cookie.js]. Processing source file [spin.min.js]. Processing source file [fedictcommon.js]. Processing source file [fedictproxy.js]. Creating merged file [fas-proxy.js]. Creating minified file [fas-proxy.min.js]. --- maven-assembly-plugin:2.2-beta-5:single fas2-proxywar -- Reading assembly descriptor: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2proxywar/../fas2-deploy/src/main/assembly/fas2-proxywar-assembly_descriptor.xml already added, skipping fas already added, skipping fas/js already added, skipping fas/style already added, skipping fas/style/img already added, skipping Building tar : /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-proxywar/target/fas2proxywar SNAPSHOT.tar.bz2 already added, skipping fas already added, skipping fas/js already added, skipping fas/style already added, skipping fas/style/img already added, skipping Building FAS2 Scripts SNAPSHOT maven-clean-plugin:2.5:clean fas2-scripts -- Deleting /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-scripts/target --- maven-resources-plugin:2.6:resources fas2-scripts -- Using 'UTF-8' encoding to copy filtered resources. Copying 0 resource --- maven-compiler-plugin:3.0:compile fas2-scripts -- Changes detected - recompiling the module! Compiling 2 source files to /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2scripts/target/classes [WARNING] Note: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2scripts/src/main/java/be/fgov/fedict/iam/fas/tools/crl/eidCRLManagerLite.java uses unchecked or unsafe operations. [WARNING] Note: Recompile with -Xlint:unchecked for details.

16 --- maven-resources-plugin:2.6:testresources fas2-scripts -- Using 'UTF-8' encoding to copy filtered resources. skip non existing resourcedirectory /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2scripts/src/test/resources --- maven-compiler-plugin:3.0:testcompile fas2-scripts -- No sources to compile --- maven-surefire-plugin:2.12.4:test fas2-scripts -- No tests to run. --- maven-jar-plugin:2.4:jar fas2-scripts -- Building jar: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-scripts/target/fas2scripts SNAPSHOT.jar --- maven-assembly-plugin:2.2-beta-5:single fas2-scripts -- Reading assembly descriptor: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2scripts/../fas2-deploy/src/main/assembly/fas2-scripts-assembly_descriptor.xml Building tar : /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-scripts/target/fas2scripts SNAPSHOT.tar.bz Building FAS2 Deploy SNAPSHOT maven-clean-plugin:2.5:clean fas2-deploy -- Deleting /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target --- maven-resources-plugin:2.6:resources fas2-deploy -- Using 'UTF-8' encoding to copy filtered resources. skip non existing resourcedirectory /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/src/main/resources --- maven-compiler-plugin:3.0:compile fas2-deploy -- Changes detected - recompiling the module! Compiling 4 source files to /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/target/classes [WARNING] Note: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/src/main/java/be/fgov/fedict/iam/fas/tools/translations/Xlsx2Ldif.java uses unchecked or unsafe operations. [WARNING] Note: Recompile with -Xlint:unchecked for details. --- maven-resources-plugin:2.6:testresources fas2-deploy -- Using 'UTF-8' encoding to copy filtered resources. skip non existing resourcedirectory /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/src/test/resources --- maven-compiler-plugin:3.0:testcompile fas2-deploy -- No sources to compile --- maven-surefire-plugin:2.12.4:test fas2-deploy -- No tests to run. --- maven-jar-plugin:2.4:jar fas2-deploy -- Building jar: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/fas2deploy SNAPSHOT.jar --- exec-maven-plugin:1.2.1:exec fas2-deploy --+ Reading XLS file in /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/src/main/xls/ui-translations.xlsx [1] errorpage_title [2] errorpage_loginpagelink [3] errormessagegeneric [4] errormessageeidocsp_crlfailed [5] errormessageeidthumprintfailed [6] errormessagepagenotfound [7] errormessageexception [8] errormessagecertnottrusted [9] errormessageotpexpired [10] errormessageotpfailed [11] errormessageotpgatewaydown [12] errormessageotpnophone [13] errormessagetokenfailed [14] errormessagetokennotoken [16] errormessagetripletfailed [17] errormessagetripletbackenderror [18] errormessageuserlocked [19] errormessageuserpassfailed [20] errormessagesessiontimeout [21] errormessagecurrentprofilenotmatching [22] errormessageotherexistingsessioninbrowser [25] errorvalidation_title [26] errorvalidate_usernamerequired [27] errorvalidate_passwordrequired [28] errorvalidate_tokenrequired

17 [29] errorvalidate_otprequired [31] errorvalidate_nrnrequired [32] errorvalidate_invalidnrn [33] errorvalidate_eidcardnumberrequired [34] errorvalidate_invalideidcardnumber [35] errorvalidate_siscardnumberrequired [36] errorvalidate_invalidsiscardnumber [37] errorvalidate_storkagree [38] errorvalidate_choosecontext [41] fedictcustomrightauthenticationtitle [42] fedictcustomrightinfotext [43] targetgrouprightinfotext [46] profile_citizen [47] profile_stork [48] profile_civilservant [49] profile_enterprise [50] steplabel [52] profile_title_citizen [53] profile_title_stork [54] profile_title_civilservant [55] profile_title_enterprise [56] profile_title_orkey [58] auth_title_password [59] auth_title_eid [60] auth_title_commercial [61] auth_title_comcertnoid [62] auth_title_otp [63] auth_title_token [64] auth_title_civiservanttoken [65] auth_title_triplet [67] app_titlemy [68] app_titleegovlogin [69] app_titleinformation [70] app_copyright [72] app_pleasewait [73] app_pleasewaittext [74] app_helpmoreinfo [79] LoginButton_Next [80] LoginButton_Finish [81] LoginButton_Choose [84] default_ds_idtoken1 [85] default_ds_idtoken2 [87] default_contextselection_title [88] default_contextselection_idtoken0 [89] default_contextselection_idtoken1 [90] default_contextselection_idtoken2 [92] default_contextselection_helptitle [93] default_contextselection_helptext [94] default_storkattrselection_subtitle [95] default_storkattrselection_title [96] default_storkattrselection_helptitle [97] default_storkattrselection_helptext [99] passwordservice_linktitle [100] passwordservice_ds_title [101] passwordservice_ds_subtitle [103] passwordservice_default_helptitle [104] passwordservice_default_helptext [107] citizentokenservice_linktitle [108] citizentokenservice_default_title [109] citizentokenservice_default_helptitle [111] citizentokenservice_ds_subtitle [112] citizentokenservice_tokencitizen_idtoken1 [113] citizentokenservice_ds_helptext [114] citizentokenservice_tokencitizen_subtitle [115] citizentokenservice_tokencitizen_helptext [117] civilservanttokenservice_linktitle [118] civilservanttokenservice_default_title [119] civilservanttokenservice_default_helptitle [120] civilservanttokenservice_ds_subtitle [121] civilservanttokenservice_ds_helptext [122] civilservanttokenservice_tokencivilservant_subtitle [125] civilservanttokenservice_tokencivilservant_idtoken1 [126] civilservanttokenservice_tokencivilservant_helptext [129] eidlinkservice_linktitle [130] eidlinkservice_default_title [131] eidlinkservice_default_subtitle [132] eidlinkservice_default_helptitle [133] eidlinkservice_default_helptext [134] eidlinkservice_default_moreinfo [136] eidservice_linktitle [137] eidservice_default_title [138] eidservice_default_subtitle [139] eidservice_default_helptitle [140] eidservice_default_helptext [141] eidservice_default_moreinfo [143] commerciallinkservice_linktitle

18 [144] [145] [147] [148] [150] [151] [152] [154] [155] [157] [158] [159] [160] [163] [164] [165] [166] [167] [168] [169] [170] [171] [173] [174] [175] [176] [177] [178] [179] [180] [181] [184] [185] [186] [187] [188] [189] [190] [191] [194] [195] [196] [197] [198] [199] [202] [203] [204] [205] [206] [207] [208] [209] [210] [211] [212] [213] [214] [215] [216] [217] [218] [219] [220] [221] [222] [223] [224] [226] [227] [228] [229] [230] [231] [232] [233] [234] [235] [236] [237] [238] [239] [240] [241] [242] [244] commerciallinkservice_default_title commerciallinkservice_linkcommercial_subtitle commerciallinkservice_linkcommercial_helptitle commerciallinkservice_linkcommercial_helptext commerciallinknoidservice_linktitle commerciallinknoidservice_default_title commerciallinknoidservice_default_subtitle commerciallinknoidservice_default_helptitle commerciallinknoidservice_default_helptext commercialservice_default_title commercialservice_default_subtitle commercialservice_default_helptitle commercialservice_default_helptext otpservice_message otpservice_linktitle otpservice_default_title otpservice_default_helptitle otpservice_ds_subtitle otpservice_ds_helptext otpservice_otp_subtitle otpservice_otp_helptext otpservice_otp_idtoken1 citizentokenservice_linkdescription civilservanttokenservice_linkdescription commerciallinkservice_linkdescription commerciallinknoidservice_linkdescription eidlinkservice_linkdescription otpservice_linkdescription passwordservice_linkdescription storkservice_linkdescription tripletservice_linkdescription tripletservice_linktitle tripletservice_default_title tripletservice_default_subtitle tripletservice_default_helptitle tripletservice_default_helptext tripletservice_default_idtoken1 tripletservice_default_idtoken2 tripletservice_default_idtoken3 storkservice_default_subtitle storkservice_default_title storkservice_helptext storkservice_linktitle storkservice_default_helptitle storkservice_default_helptext stork_select stork_select_all stork_select_none stork_agree_message stork_title_attributes stork_attribute_eidentifier stork_attribute_ stork_attribute_givenname stork_attribute_surname stork_attribute_gender stork_attribute_dateofbirth stork_attribute_countrycodeofbirth stork_attribute_nationalitycode stork_attribute_maritalstatus stork_attribute_textresidenceaddress stork_attribute_pseudonym stork_attribute_inheritedfamilyname stork_attribute_adoptedfamilyname stork_attribute_canonicalresidenceaddress stork_attribute_age stork_attribute_isageover stork_attribute_residencepermit stork_attribute_title globallogout_title_singleapp globallogout_title_multipleapp globallogout_infotext_singlectxt_singleapp globallogout_infotext_singlectxt_multipleapp globallogout_infotext_multiplectxt_singleapp globallogout_infotext_multiplectxt_multipleapp globallogout_warningtext_singleapp globallogout_warningtext_multipleapp globallogout_afterlisttext_singleapp globallogout_afterlisttext_multipleapp globallogout_logoutbutton_singleapp globallogout_logoutbutton_multipleapp globallogout_cancelbutton_singleapp globallogout_cancelbutton_multipleapp globallogout_pleasewait_singleapp globallogout_pleasewait_multipleapp globallogout_pleasewaittext globallogout_logoutbox_title_singleapp

19 [245] globallogout_logoutbox_title_multipleapp [246] globallogout_logoutbox_text_singleapp [247] globallogout_logoutbox_text_multipleapp [248] globallogout_logoutbox_confirm [249] globallogout_logoutbox_cancel [251] globallogout_cancelbox_title_singleapp [252] globallogout_cancelbox_title_multipleapp [253] globallogout_cancelbox_text_singleapp [254] globallogout_cancelbox_text_multipleapp [255] globallogout_cancelbox_confirm [256] globallogout_cancelbox_cancel [258] globallogout_cancel_title_singleapp [259] globallogout_cancel_title_multipleapp [260] globallogout_cancel_text_singleapp [261] globallogout_cancel_text_multipleapp [263] alternativelogin_linktitle [264] alternativelogin_linkdescription [265] alternativelogin_choose [267] app_helpmoreinfotargetgroup [268] alternativelogin_helptitle [269] alternativelogin_helptext + Generating LDIF files o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nFAS-DEV.ldif o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nFAS-INT.ldif o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nFAS-TA.ldif o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nFAS-PR.ldif + Finished --- exec-maven-plugin:1.2.1:exec fas2-deploy --+ Reading XLS file in /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/src/main/xls/ui-translations.xlsx [1] app_titlemy [2] app_titleegovlogin [3] app_titleinformation [4] app_aboutlink [5] app_copyright [7] app_pleasewait [8] app_pleasewaittext [9] app_helpmoreinfo [11] errormessagegeneric [12] proxy_loginretrylink [13] proxy_selecttitle [14] proxy_selectsubtitle [15] proxy_selectsubtitleinactive [16] proxy_countryidp_title [18] proxy_global_helptitle [19] proxy_global_helptext [20] proxy_countryidp_helptitle [21] proxy_countryidp_helptext [23] country_at_name [24] country_bg_name [25] country_cy_name [26] country_cz_name [27] country_dk_name [28] country_ee_name [29] country_fi_name [30] country_fr_name [31] country_de_name [32] country_gr_name [33] country_hu_name [34] country_ir_name [35] country_it_name [36] country_lv_name [37] country_lt_name [38] country_lu_name [39] country_mt_name [40] country_nl_name [41] country_pl_name [42] country_pt_name [43] country_ro_name [44] country_sk_name [45] country_si_name [46] country_es_name [47] country_se_name [48] country_uk_name [49] country_hr_name + Generating LDIF files o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nPROXY-DEV.ldif o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nPROXY-INT.ldif

20 o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nPROXY-TA.ldif o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nPROXY-PR.ldif + Finished --- maven-assembly-plugin:2.2-beta-5:single fas2-deploy -- Reading assembly descriptor: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/../fas2-deploy/src/main/assembly/fas2-deploy-full-assembly_descriptor.xml Building tar : /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/fas2deploy SNAPSHOT.tar.bz Reactor Summary: FAS2... SUCCESS [0.155s] FAS2 Authentication... SUCCESS [5.663s] FAS2 War... SUCCESS [4.055s] FAS2 Proxy War... SUCCESS [2.336s] FAS2 Scripts... SUCCESS [5.281s] FAS2 Deploy... SUCCESS [24.460s] BUILD SUCCESS Total time: s Finished at: Thu Oct 31 09:52:07 CET 2013 Final Memory: 57M/123M Si la construction est réussie, vous devriez obtenir un message BUILD SUCCESS à la fin et vous trouverez le paquet à déployer dans le répertoire cible FAS2 Deploy : cd $PROJECT_HOME/fas2-deploy/target ls fas2-deploy*.tar.bz2 fas2-deploy snapshot.tar.bz2 Ce sera le paquet nécessaire pour installer ou mettre à jour les instances FAS2 et FAS2 STORK proxy. Pour plus d'informations sur le processus de déploiement, voir plus loin dans le document. Procéder à une «Release» Depuis le projet parent FAS2, vous pouvez utiliser la commande Maven Release pour procéder à une «release» : cd $PROJECT_HOME/fas2 mvn clean release:clean release:prepare Le résultat est: Scanning for projects Reactor Build Order: FAS2 FAS2 FAS2 FAS2 FAS2 FAS2 Authentication War Proxy War Scripts Deploy Building FAS maven-clean-plugin:2.4.1:clean fas Building FAS2 Authentication maven-clean-plugin:2.4.1:clean fas2-authentication Building FAS2 War maven-clean-plugin:2.4.1:clean fas2-war ---

21 Building FAS2 Proxy War maven-clean-plugin:2.4.1:clean fas2-tools Building FAS2 Scripts maven-clean-plugin:2.4.1:clean fas2-scripts Building FAS2 Deploy maven-clean-plugin:2.4.1:clean fas2-deploy Building FAS maven-release-plugin:2.3.2:clean fas2 -- Cleaning up after release maven-release-plugin:2.3.2:prepare fas2 -- Verifying that there are no local modifications... ignoring changes on: **/pom.xml.backup, **/release.properties, **/pom.xml.branch, **/pom.xml.next, **/pom.xml.releasebackup, **/pom.xml.tag EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2 && hg status Checking dependencies and plugins for snapshots... Maven demande de donner le numéro de version de cette «release», le «tag» à créer dans le «Mercurial repository» et le numéro de version du «next snapshot» : What is the release version for "FAS2"? (be.fgov.fedict.fas:fas2) 5.0.0: : What is SCM release tag or label for "FAS2"? (be.fgov.fedict.fas:fas2) fas : : What is the new development version for "FAS2"? (be.fgov.fedict.fas:fas2) SNAPSHOT: : Ensuite, le «release build process» commence : Transforming 'FAS2'... Transforming 'FAS2 Authentication'... Transforming 'FAS2 War'... Transforming 'FAS2 Proxy War'... Transforming 'FAS2 Scripts'... Transforming 'FAS2 Deploy'... Not generating release POMs Executing goals 'clean deploy'... [WARNING] Maven will be executed in interactive mode, but no input stream has been configured for this MavenInvoker instance. Scanning for projects Reactor Build Order: FAS2 FAS2 Authentication FAS2 War FAS2 Proxy War FAS2 Scripts FAS2 Deploy Building FAS maven-clean-plugin:2.5:clean fas Building FAS2 Authentication maven-clean-plugin:2.5:clean fas2-authentication -- Deleting /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-authentication/target --- maven-resources-plugin:2.6:resources fas2-authentication -- Using 'UTF-8' encoding to copy filtered resources. Copying 0 resource --- maven-compiler-plugin:3.0:compile fas2-authentication -- Changes detected - recompiling the module! Compiling 63 source files to /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2authentication/target/classes

22 [WARNING] Note: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2authentication/src/main/java/be/fgov/fedict/iam/admin/adminTools.java uses or overrides a deprecated API. [WARNING] Note: Recompile with -Xlint:deprecation for details. [WARNING] Note: Some input files use unchecked or unsafe operations. [WARNING] Note: Recompile with -Xlint:unchecked for details. --- maven-resources-plugin:2.6:testresources fas2-authentication -- Using 'UTF-8' encoding to copy filtered resources. skip non existing resourcedirectory /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2authentication/src/test/resources --- maven-compiler-plugin:3.0:testcompile fas2-authentication -- Changes detected - recompiling the module! --- maven-surefire-plugin:2.12.4:test fas2-authentication maven-jar-plugin:2.4:jar fas2-authentication -- Building jar: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2authentication/target/fas2-authentication jar Building FAS2 War maven-clean-plugin:2.5:clean fas2-war -- Deleting /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-war/target --- minify-maven-plugin:1.6:minify fas2-war -- Skipping merge step. Creating minified file [fas.min.css]. Creating minified file [fas-ie.min.css]. Creating minified file [fas-ie6.min.css]. Creating minified file [fas-ie7.min.css]. --- minify-maven-plugin:1.6:minify fas2-war -- Processing source file [jquery min.js]. Processing source file [jquery.validate.min.js]. Processing source file [jquery.numeric.js]. Processing source file [jquery.cookie.js]. Processing source file [spin.min.js]. Processing source file [fedictcommon.js]. Processing source file [fedictlogin.js]. Processing source file [auth.js]. Processing source file [purl.js]. Creating merged file [fas.js]. Creating minified file [fas.min.js]. --- maven-assembly-plugin:2.2-beta-5:single fas2-war -- Reading assembly descriptor: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2war/../fas2-deploy/src/main/assembly/fas2-war-assembly_descriptor.xml [WARNING] Cannot include project artifact: be.fgov.fedict.fas:fas2-war:pom:5.0.0-snapshot; it doesn't have an associated file or directory. already added, skipping fas already added, skipping fas/js already added, skipping fas/style already added, skipping Building tar : /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-war/target/fas2-war5.0.0.tar.bz2 already added, skipping fas already added, skipping fas/js already added, skipping fas/style already added, skipping Building FAS2 Proxy War maven-clean-plugin:2.5:clean fas2-proxywar -- Deleting /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-proxywar/target --- minify-maven-plugin:1.6:minify fas2-proxywar -- Processing source file [jquery min.js]. Processing source file [jquery.cookie.js]. Processing source file [spin.min.js]. Processing source file [fedictcommon.js]. Processing source file [fedictproxy.js]. Creating merged file [fas-proxy.js]. Creating minified file [fas-proxy.min.js]. --- maven-assembly-plugin:2.2-beta-5:single fas2-proxywar -- Reading assembly descriptor: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2proxywar/../fas2-deploy/src/main/assembly/fas2-proxywar-assembly_descriptor.xml already added, skipping fas already added, skipping

23 fas/js already added, skipping fas/style already added, skipping fas/style/img already added, skipping Building tar : /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-proxywar/target/fas2proxywar tar.bz2 already added, skipping fas already added, skipping fas/js already added, skipping fas/style already added, skipping fas/style/img already added, skipping Building FAS2 Scripts maven-clean-plugin:2.5:clean fas2-scripts -- Deleting /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-scripts/target --- maven-resources-plugin:2.6:resources fas2-scripts -- Using 'UTF-8' encoding to copy filtered resources. Copying 0 resource --- maven-compiler-plugin:3.0:compile fas2-scripts -- Changes detected - recompiling the module! Compiling 2 source files to /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2scripts/target/classes [WARNING] Note: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2scripts/src/main/java/be/fgov/fedict/iam/fas/tools/crl/eidCRLManagerLite.java uses unchecked or unsafe operations. [WARNING] Note: Recompile with -Xlint:unchecked for details. --- maven-resources-plugin:2.6:testresources fas2-scripts -- Using 'UTF-8' encoding to copy filtered resources. skip non existing resourcedirectory /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2scripts/src/test/resources --- maven-compiler-plugin:3.0:testcompile fas2-scripts -- No sources to compile --- maven-surefire-plugin:2.12.4:test fas2-scripts -- No tests to run. --- maven-jar-plugin:2.4:jar fas2-scripts -- Building jar: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-scripts/target/fas2scripts jar --- maven-assembly-plugin:2.2-beta-5:single fas2-scripts -- Reading assembly descriptor: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2scripts/../fas2-deploy/src/main/assembly/fas2-scripts-assembly_descriptor.xml Building tar : /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-scripts/target/fas2scripts tar.bz Building FAS2 Deploy maven-clean-plugin:2.5:clean fas2-deploy -- Deleting /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target --- maven-resources-plugin:2.6:resources fas2-deploy -- Using 'UTF-8' encoding to copy filtered resources. skip non existing resourcedirectory /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/src/main/resources --- maven-compiler-plugin:3.0:compile fas2-deploy -- Changes detected - recompiling the module! Compiling 4 source files to /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/target/classes [WARNING] Note: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/src/main/java/be/fgov/fedict/iam/fas/tools/translations/Xlsx2Ldif.java uses unchecked or unsafe operations. [WARNING] Note: Recompile with -Xlint:unchecked for details. --- maven-resources-plugin:2.6:testresources fas2-deploy -- Using 'UTF-8' encoding to copy filtered resources. skip non existing resourcedirectory /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/src/test/resources --- maven-compiler-plugin:3.0:testcompile fas2-deploy -- No sources to compile --- maven-surefire-plugin:2.12.4:test fas2-deploy -- No tests to run. --- maven-jar-plugin:2.4:jar fas2-deploy ---

24 Building jar: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/fas2deploy jar --- exec-maven-plugin:1.2.1:exec fas2-deploy --+ Reading XLS file in /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/src/main/xls/ui-translations.xlsx [1] errorpage_title [2] errorpage_loginpagelink [3] errormessagegeneric [4] errormessageeidocsp_crlfailed [5] errormessageeidthumprintfailed [6] errormessagepagenotfound [7] errormessageexception [8] errormessagecertnottrusted [9] errormessageotpexpired [10] errormessageotpfailed [11] errormessageotpgatewaydown [12] errormessageotpnophone [13] errormessagetokenfailed [14] errormessagetokennotoken [16] errormessagetripletfailed [17] errormessagetripletbackenderror [18] errormessageuserlocked [19] errormessageuserpassfailed [20] errormessagesessiontimeout [21] errormessagecurrentprofilenotmatching [22] errormessageotherexistingsessioninbrowser [25] errorvalidation_title [26] errorvalidate_usernamerequired [27] errorvalidate_passwordrequired [28] errorvalidate_tokenrequired [29] errorvalidate_otprequired [31] errorvalidate_nrnrequired [32] errorvalidate_invalidnrn [33] errorvalidate_eidcardnumberrequired [34] errorvalidate_invalideidcardnumber [35] errorvalidate_siscardnumberrequired [36] errorvalidate_invalidsiscardnumber [37] errorvalidate_storkagree [38] errorvalidate_choosecontext [41] fedictcustomrightauthenticationtitle [42] fedictcustomrightinfotext [43] targetgrouprightinfotext [46] profile_citizen [47] profile_stork [48] profile_civilservant [49] profile_enterprise [50] steplabel [52] profile_title_citizen [53] profile_title_stork [54] profile_title_civilservant [55] profile_title_enterprise [56] profile_title_orkey [58] auth_title_password [59] auth_title_eid [60] auth_title_commercial [61] auth_title_comcertnoid [62] auth_title_otp [63] auth_title_token [64] auth_title_civiservanttoken [65] auth_title_triplet [67] app_titlemy [68] app_titleegovlogin [69] app_titleinformation [70] app_copyright [72] app_pleasewait [73] app_pleasewaittext [74] app_helpmoreinfo [79] LoginButton_Next [80] LoginButton_Finish [81] LoginButton_Choose [84] default_ds_idtoken1 [85] default_ds_idtoken2 [87] default_contextselection_title [88] default_contextselection_idtoken0 [89] default_contextselection_idtoken1 [90] default_contextselection_idtoken2 [92] default_contextselection_helptitle [93] default_contextselection_helptext [94] default_storkattrselection_subtitle [95] default_storkattrselection_title [96] default_storkattrselection_helptitle [97] default_storkattrselection_helptext [99] passwordservice_linktitle [100] passwordservice_ds_title [101] passwordservice_ds_subtitle

25 [103] [104] [107] [108] [109] [111] [112] [113] [114] [115] [117] [118] [119] [120] [121] [122] [125] [126] [129] [130] [131] [132] [133] [134] [136] [137] [138] [139] [140] [141] [143] [144] [145] [147] [148] [150] [151] [152] [154] [155] [157] [158] [159] [160] [163] [164] [165] [166] [167] [168] [169] [170] [171] [173] [174] [175] [176] [177] [178] [179] [180] [181] [184] [185] [186] [187] [188] [189] [190] [191] [194] [195] [196] [197] [198] [199] [202] [203] [204] [205] [206] [207] [208] [209] [210] [211] passwordservice_default_helptitle passwordservice_default_helptext citizentokenservice_linktitle citizentokenservice_default_title citizentokenservice_default_helptitle citizentokenservice_ds_subtitle citizentokenservice_tokencitizen_idtoken1 citizentokenservice_ds_helptext citizentokenservice_tokencitizen_subtitle citizentokenservice_tokencitizen_helptext civilservanttokenservice_linktitle civilservanttokenservice_default_title civilservanttokenservice_default_helptitle civilservanttokenservice_ds_subtitle civilservanttokenservice_ds_helptext civilservanttokenservice_tokencivilservant_subtitle civilservanttokenservice_tokencivilservant_idtoken1 civilservanttokenservice_tokencivilservant_helptext eidlinkservice_linktitle eidlinkservice_default_title eidlinkservice_default_subtitle eidlinkservice_default_helptitle eidlinkservice_default_helptext eidlinkservice_default_moreinfo eidservice_linktitle eidservice_default_title eidservice_default_subtitle eidservice_default_helptitle eidservice_default_helptext eidservice_default_moreinfo commerciallinkservice_linktitle commerciallinkservice_default_title commerciallinkservice_linkcommercial_subtitle commerciallinkservice_linkcommercial_helptitle commerciallinkservice_linkcommercial_helptext commerciallinknoidservice_linktitle commerciallinknoidservice_default_title commerciallinknoidservice_default_subtitle commerciallinknoidservice_default_helptitle commerciallinknoidservice_default_helptext commercialservice_default_title commercialservice_default_subtitle commercialservice_default_helptitle commercialservice_default_helptext otpservice_message otpservice_linktitle otpservice_default_title otpservice_default_helptitle otpservice_ds_subtitle otpservice_ds_helptext otpservice_otp_subtitle otpservice_otp_helptext otpservice_otp_idtoken1 citizentokenservice_linkdescription civilservanttokenservice_linkdescription commerciallinkservice_linkdescription commerciallinknoidservice_linkdescription eidlinkservice_linkdescription otpservice_linkdescription passwordservice_linkdescription storkservice_linkdescription tripletservice_linkdescription tripletservice_linktitle tripletservice_default_title tripletservice_default_subtitle tripletservice_default_helptitle tripletservice_default_helptext tripletservice_default_idtoken1 tripletservice_default_idtoken2 tripletservice_default_idtoken3 storkservice_default_subtitle storkservice_default_title storkservice_helptext storkservice_linktitle storkservice_default_helptitle storkservice_default_helptext stork_select stork_select_all stork_select_none stork_agree_message stork_title_attributes stork_attribute_eidentifier stork_attribute_ stork_attribute_givenname stork_attribute_surname stork_attribute_gender

26 [212] stork_attribute_dateofbirth [213] stork_attribute_countrycodeofbirth [214] stork_attribute_nationalitycode [215] stork_attribute_maritalstatus [216] stork_attribute_textresidenceaddress [217] stork_attribute_pseudonym [218] stork_attribute_inheritedfamilyname [219] stork_attribute_adoptedfamilyname [220] stork_attribute_canonicalresidenceaddress [221] stork_attribute_age [222] stork_attribute_isageover [223] stork_attribute_residencepermit [224] stork_attribute_title [226] globallogout_title_singleapp [227] globallogout_title_multipleapp [228] globallogout_infotext_singlectxt_singleapp [229] globallogout_infotext_singlectxt_multipleapp [230] globallogout_infotext_multiplectxt_singleapp [231] globallogout_infotext_multiplectxt_multipleapp [232] globallogout_warningtext_singleapp [233] globallogout_warningtext_multipleapp [234] globallogout_afterlisttext_singleapp [235] globallogout_afterlisttext_multipleapp [236] globallogout_logoutbutton_singleapp [237] globallogout_logoutbutton_multipleapp [238] globallogout_cancelbutton_singleapp [239] globallogout_cancelbutton_multipleapp [240] globallogout_pleasewait_singleapp [241] globallogout_pleasewait_multipleapp [242] globallogout_pleasewaittext [244] globallogout_logoutbox_title_singleapp [245] globallogout_logoutbox_title_multipleapp [246] globallogout_logoutbox_text_singleapp [247] globallogout_logoutbox_text_multipleapp [248] globallogout_logoutbox_confirm [249] globallogout_logoutbox_cancel [251] globallogout_cancelbox_title_singleapp [252] globallogout_cancelbox_title_multipleapp [253] globallogout_cancelbox_text_singleapp [254] globallogout_cancelbox_text_multipleapp [255] globallogout_cancelbox_confirm [256] globallogout_cancelbox_cancel [258] globallogout_cancel_title_singleapp [259] globallogout_cancel_title_multipleapp [260] globallogout_cancel_text_singleapp [261] globallogout_cancel_text_multipleapp [263] alternativelogin_linktitle [264] alternativelogin_linkdescription [265] alternativelogin_choose [267] app_helpmoreinfotargetgroup [268] alternativelogin_helptitle [269] alternativelogin_helptext + Generating LDIF files o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nFAS-DEV.ldif o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nFAS-INT.ldif o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nFAS-TA.ldif o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nFAS-PR.ldif + Finished --- exec-maven-plugin:1.2.1:exec fas2-deploy --+ Reading XLS file in /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/src/main/xls/ui-translations.xlsx [1] app_titlemy [2] app_titleegovlogin [3] app_titleinformation [4] app_aboutlink [5] app_copyright [7] app_pleasewait [8] app_pleasewaittext [9] app_helpmoreinfo [11] errormessagegeneric [12] proxy_loginretrylink [13] proxy_selecttitle [14] proxy_selectsubtitle [15] proxy_selectsubtitleinactive [16] proxy_countryidp_title [18] proxy_global_helptitle [19] proxy_global_helptext [20] proxy_countryidp_helptitle [21] proxy_countryidp_helptext [23] country_at_name [24] country_bg_name

27 [25] country_cy_name [26] country_cz_name [27] country_dk_name [28] country_ee_name [29] country_fi_name [30] country_fr_name [31] country_de_name [32] country_gr_name [33] country_hu_name [34] country_ir_name [35] country_it_name [36] country_lv_name [37] country_lt_name [38] country_lu_name [39] country_mt_name [40] country_nl_name [41] country_pl_name [42] country_pt_name [43] country_ro_name [44] country_sk_name [45] country_si_name [46] country_es_name [47] country_se_name [48] country_uk_name [49] country_hr_name + Generating LDIF files o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nPROXY-DEV.ldif o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nPROXY-INT.ldif o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nPROXY-TA.ldif o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nPROXY-PR.ldif + Finished --- maven-assembly-plugin:2.2-beta-5:single fas2-deploy -- Reading assembly descriptor: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/../fas2-deploy/src/main/assembly/fas2-deploy-full-assembly_descriptor.xml Building tar : /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/fas2deploy tar.bz Reactor Summary: FAS2... SUCCESS [0.155s] FAS2 Authentication... SUCCESS [5.663s] FAS2 War... SUCCESS [4.055s] FAS2 Proxy War... SUCCESS [2.336s] FAS2 Scripts... SUCCESS [5.281s] FAS2 Deploy... SUCCESS [24.460s] BUILD SUCCESS Total time: s Finished at: Thu Oct 31 09:52:07 CET 2013 Final Memory: 57M/123M Checking in modified POMs... EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2 && hg branch EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2 && hg outgoing EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2 && hg commit --message '[maven-release-plugin] prepare release fas ' /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2/pom.xml /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-authentication/pom.xml /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-war/pom.xml /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-tools/pom.xml /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2-scripts/pom.xml /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2-deploy/pom.xml EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2 && hg push -rdefault Tagging release with the label fas EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev && hg tag --message '[maven-release-plugin] copy for tag fas ' fas EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev && hg branch EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev && hg outgoing EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev && hg push rdefault EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev && hg locate Transforming 'FAS2'... Transforming 'FAS2 Authentication'... Transforming 'FAS2 War'... Transforming 'FAS2 Proxy War'... Transforming 'FAS2 Scripts'... Transforming 'FAS2 Deploy'...

28 Not removing release POMs Checking in modified POMs... EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2 && hg branch EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2 && hg outgoing EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2 && hg commit --message '[maven-release-plugin] prepare for next development iteration' /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2/pom.xml /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2-authentication/pom.xml /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2-war/pom.xml /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2-proxywar/pom.xml /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2-scripts/pom.xml /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2-deploy/pom.xml EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2 && hg push rdefault Release preparation complete Reactor Summary: FAS2... SUCCESS [2:14.501s] FAS2 Authentication... SUCCESS [0.005s] FAS2 War... SUCCESS [0.002s] FAS2 Proxy War... SUCCESS [0.005s] FAS2 Scripts... SUCCESS [0.003s] FAS2 Deploy... SUCCESS [0.007s] BUILD SUCCESS Total time: 2:15.218s Finished at: Wed Mar 06 16:06:03 CET 2013 Final Memory: 7M/81M Si la construction est réussie, vous devriez obtenir un message BUILD SUCCESS à la fin et vous trouverez le paquet à déployer dans le répertoire cible FAS2 Deploy : cd $PROJECT_HOME/fas2-deploy/target ls fas2-deploy*.tar.bz2 fas2-deploy tar.bz2 Installer une instance Pre-requis Les fichiers binaires d'installation ne font pas partie du package. Ils sont censés être dans le répertoire /opt/openam/software/binaries : apache-tomcat tar.gz: installation tar de Apache Tomcat o openam zip: installation zip de OpenAM o opendj zip: installation zip de OpenDJ o instantclient-basiclite-linux zip et instantclient-sqlplus-linux zip: installation zip de Oracle Instant Client. o o

29 jdk-7u67-linux-x64.tar.gz: installation tar de Oracle JDK 7 o Les binaires d installation peuvent être trouvés dans: Copier les packages créés dans le répertoire /opt/openam/application scp $PROJECT_HOME/fas2-deploy/target/fas2-deploy tar.bz2 iam3-openam1pr:/opt/openam/application scp $PROJECT_HOME/fas2-deploy/target/fas2-deploy SNAPSHOT.tar.bz2 iam3-openam3pr:/opt/openam/application Se connecter sur le serveur avec les droits appropriés $ rm rf /opt/openam/software/deploy $ mkdir /opt/openam/software/deploy $ cd /opt/openam/software/deploy $ tar xjf /opt/openam/application/fas2-deploy tar.bz2 $./make-fas2-links.sh * linking install-fas2.sh * linking install-fas2-proxy.sh * linking update-fas2.sh * linking update-fas2-proxy.sh * linking update-fas2-labels.sh * linking update-fas2-proxy-labels.sh * linking backup-fas2.sh * linking cleanup-install.sh Démarrer l installation opam@iam3-openam1-pr:/opt/openam/software/deploy>./install-fas2.sh ************************************************************************* *** *** Installing FAS2 OpenAM ( ) *** *** Hostname: iam3-openam1-pr *** Env: PR *** Instance NB: 1 *** ************************************************************************* *** Press ENTER to continue Opération du FAS Apache Tomcat FAS Status (running) $ /opt/openam/software/openamctl status * ForgeRock OpenAM FAS (pid=14837) STARTED Status (not running) $ /opt/openam/software/openamctl status * ForgeRock OpenAM FAS STOPPED Start

30 $ /opt/openam/software/openamctl start * Starting Tomcat FAS in /opt/openam/software/tomcat_fas... Stop $ /opt/openam/software/openamctl stop o waiting for Tomcat FAS to shutdown in /opt/openam/software/tomcat_fas Restart /opt/openam/software/openamctl restart o waiting for Tomcat FAS to shutdown in /opt/openam/software/tomcat_fas * Starting Tomcat FAS in /opt/openam/software/tomcat_fas... Apache Tomcat STORK Status (running) $ /opt/openam/software/storkproxyctl status * ForgeRock OpenAM STORK (pid=14837) STARTED Status (not running) $ /opt/openam/software/storkproxyctl status * ForgeRock OpenAM STORK STOPPED Start $ /opt/openam/software/storkproxyctl start * Starting Tomcat STORK in /opt/openam/software/tomcat_proxy... Stop $ /opt/openam/software/storkproxyctl stop o waiting for Tomcat STORK to shutdown in /opt/openam/software/tomcat_proxy Restart /opt/openam/software/openamctl restart o waiting for Tomcat STORK to shutdown in /opt/openam/software/tomcat_proxy * Starting Tomcat STORK in /opt/openam/software/tomcat_proxy... OpenDJ Status (running) $ /opt/openam/software/opendjctl status --- Server Status --Server Run Status: Started Open Connections: Server Details --Host Name: iam3-openam1-pr Administrative Users: cn=directory manager Installation Path: /opt/openam/software/opendj Version: OpenDJ Java Version: <not available> (*) Administration Connector: Port 4444 (LDAPS) --- Connection Handlers --Address:Port : Protocol : State : : : LDIF : Disabled :161 : SNMP : Disabled :636 : LDAPS : Disabled :1389 : LDAP : Enabled :1689 : JMX : Disabled :8080 : HTTP : Disabled

31 --- Data Sources --Base DN: dc=config Backend ID: userroot Entries: <not available> (*) Replication: Base DN: dc=openam Backend ID: userroot Entries: <not available> (*) Replication: * Information only available if you provide valid authentication information when launching the status command. Status (not running) $ /opt/openam/software/opendjctl status --- Server Status --Server Run Status: Stopped Open Connections: <not available> (*) --- Server Details --Host Name: iam3-openam1-pr Administrative Users: cn=directory manager Installation Path: /opt/openam/software/opendj Version: OpenDJ Java Version: <not available> (*) Administration Connector: Port 4444 (LDAPS) --- Connection Handlers --Address:Port : Protocol : State : : : LDIF : Disabled :161 : SNMP : Disabled :636 : LDAPS : Disabled :1389 : LDAP : Enabled :1689 : JMX : Disabled :8080 : HTTP : Disabled --- Data Sources --Base DN: dc=config Backend ID: userroot Entries: <not available> (*) Replication: Base DN: dc=openam Backend ID: userroot Entries: <not available> (*) Replication: * Information only available if server is running and you provide valid authentication information when launching the status command. Start $ /opt/openam/software/opendjctl start [31/Oct/2013:11:59: ] category=extensions severity=notice msgid= msg=loaded extension from file '/opt/openam/software/opendj/lib/extensions/snmp-mib2605.jar' (build 2.6.0, revision 9086) [31/Oct/2013:11:59: ] category=core severity=notice msgid= msg=opendj (build Z, R9086) starting up [31/Oct/2013:11:59: ] category=runtime_information severity=notice msgid= msg=installation Directory: /opt/openam/software/opendj [31/Oct/2013:11:59: ] category=runtime_information severity=notice msgid= msg=instance Directory: /opt/openam/software/opendj [31/Oct/2013:11:59: ] category=runtime_information severity=notice msgid= msg=jvm Information: 1.6.0_37-b06 by Sun Microsystems Inc., 32-bit architecture, bytes heap size [31/Oct/2013:11:59: ] category=runtime_information severity=notice msgid= msg=jvm Host: iam3-openam1-pr, running Linux el6.x86_64 i386, bytes physical memory size, number of processors available 1 [31/Oct/2013:11:59: ] category=runtime_information severity=notice msgid= msg=jvm Arguments: "-Xms128m", "-Xmx256m", "-Dorg.opends.server.scriptName=start-ds" [31/Oct/2013:11:59: ] category=jeb severity=notice msgid= msg=the database backend userroot containing 7 entries has started [31/Oct/2013:11:59: ] category=extensions severity=notice msgid= msg=digest-md5 SASL mechanism using a server fully qualified domain name of: openam3.fedictlab.be [31/Oct/2013:11:59: ] category=protocol severity=notice msgid= msg=started listening for new connections on Administration Connector port 4444 [31/Oct/2013:11:59: ] category=protocol severity=notice msgid= msg=started listening for new connections on LDAP Connection Handler port 1389 [31/Oct/2013:11:59: ] category=core severity=notice msgid= msg=the Directory Server has started successfully

32 [31/Oct/2013:11:59: ] category=core severity=notice msgid= msg=the Directory Server has sent an alert notification generated by class org.opends.server.core.directoryserver (alert type org.opends.server.directoryserverstarted, alert ID ): The Directory Server has started successfully Stop $ /opt/openam/software/opendjctl stop Stopping Server... [31/Oct/2013:11:57: ] category=backend severity=notice msgid= msg=the backend userroot is now taken offline [31/Oct/2013:11:57: ] category=core severity=notice msgid= msg=the Directory Server is now stopped OpenAM pour FAS OpenAM s exécute comme une application du serveur Apache Tomcat est démarrée et arrêtée par les commandes Apache Tomcat. Accès à la console OpenAM OpenAM pour STORK OpenAM s exécute comme une application du serveur Apache Tomcat est démarrée et arrêtée par les commandes Apache Tomcat. Accès à la console OpenAM

33 AS2 loadbalancer Le AS2 loadbalancer» est un «lightweight TCP load balancer» pour permettre la redondance du service AS2. Status (running) $ /opt/openam/software/as2balancerctl status * AS2 Load Balancer (pid=1974) STARTED Status (not running) $ /opt/openam/software/as2balancerctl status * AS2 Load Balancer STOPPED Start $ /opt/openam/software/as2balancerctl start * Starting AS2 Load Balancer * AS2 Load Balancer started as PID Stop $ /opt/openam/software/as2balancerctl stop * Stopping AS2 Load Balancer running as PID 1974 XMA (APPLICATIONS CONNEXES) Les applications xma (SMA, HMA, RMA et AS2) sont déployées sur une infrastructure similaire à l OpenAM. Elles s exécutent dans des serveurs d application Tomcat. La configuration du HW et de l OS est standardisée sur le même modèle que pour le FAS.