CONFIGURATIE EN INSTALLATIE VAN FEDICT IAM

Transcription

2 Inhoud

3 a) Documentcontrole COPYRIGHT EN CLASSIFICATIE Copyright Fedict met 'All Rights Reserved'. Unclassified'. INITIATOR Owner Title Organization Start Date End Date Luc Wijns Senior IAM & Infosec Architect Fedict IAM 01/04/2010 TBD REVISOREN Name Title Organization Luc Wijns Senior IAM & Infosec Architect Fedict VERSIES Version Date Updated by Change /2015 Luc Wijns Creation of this document Date Reviewed by Remarks Approved by Remarks REVISIES Version 0.01 GOEDKEURINGEN Version Date

4 b) INLEIDING SCOPE VAN HET DOCUMENT De scope van dit document beperkt zich tot een beknopte beschrijving van het IAM-platform op het vlak van software en infrastructuurelementen. Daarnaast komen ook de operationele kant en de installatie aan bod. De architectuur wordt vanuit de volgende oogpunten besproken: Logica Vereisten Uitvoering Fysiek Operationeel

5 c)overzicht van de configuratie LOGICA Softwareonderdelen Netwerkstromen

6

7 IMPLEMENTATIE Basissoftware Web-tier PUBRPROXIES Web-tier mutual SSL proxies App1, App2, App3 & App4tier Database Management SW Type SW Name Release OS RHEL Santiago RHEL 6.5 Webserver Apache SSL Mod_ssl OpenSSL 1.0.1e-fips 11 feb 2013 OS RHEL Santiago RHEL 6.5 Webserver Apache SSL Mod_ssl OS RHEL Santiago RHEL 6.5 Webserver Apache Application server TOMEE (Tomcat 7) TOMEE Java version Oracle JDK Oracle JDK 7 Database Oracle Oracle 11g Database Mysql MariaDB Monitoring Icinga Reporting Birt FYSIEK Hier vindt u een beknopt overzicht van de systemen in de verschillende omgevingen. Test & Acceptance

8

9 Kwaliteitsborging

10 Integratie

11 Productie

12 OPERATIONEEL

13 d) Overzicht van de installatie FAS ('FEDERAL AUTHENTICATION SERVICE') In het eerste deel vindt u de stappen die doorlopen moeten worden voor de installatie van de FAS2 IDP en FAS2 STORK Proxy. In het tweede deel vindt u de operationele stappen. Installatie van de FAS Voorstelling van de projecten Het implementatieproces voor de FAS is gebaseerd op de volgende Maven-projecten: FAS2 (FAS2): het Maven-hoofdproject FAS2 authentification (FAS2-authentification): bevat de volledige authenticatiecode. FAS2 War (FAS2-war): bevat alle customisaties van openam.war voor de IDP. FAS2 PROXY war (FAS2-proxywar): bevat alle customisaties van openam.war voor de Proxy STORK. FAS2 Scripts (FAS2-scripts): bevat alle scripts. FAS2 Deploy (FAS2-deploy): bevat alle implementatiescripts voor de installatie en het updaten, die ook gebruikt worden voor het aanmaken van een package om op elke serverinstantie te plaatsen. Configuratie van uw omgeving Aangezien de implementatie gebaseerd is op Maven, hebt u een werkende Maven-installatie nodig. U hebt een internetverbinding nodig om te zoeken naar alle Maven-afhankelijkheden van de centrale repository voor operaties van de FAS. Constructie van het 'package' Er zijn twee types 'packages': 'SNAPSHOT': dit is een momentopname van de ontwikkeling. Deze pakketten worden niet gepubliceerd in het Nexus-referentiesysteem. 'RELEASE': er mag hiervan slechts één 'package' zijn voor een bepaalde versie. Dit package wordt in het Nexus-referentiesysteem gepubliceerd. Er wordt ook een tag aangemaakt in de Mercurial repository om de status van alle Maven-projecten na de uitvoering van deze 'release' te kunnen ophalen. Configuratiebestand: FAS2_VERSION="8.1.0-SNAPSHOT" FAS2_BUILD=" "

14 OPENAM_VERSION="11.0.2" OPENDJ_VERSION="2.6.1" TOMCAT_VERSION="7.0.55" FAS_SUPPORT_WS_VERSION="2.0.2" JOLOKIA_VERSION="1.0.6" OJDBC_VERSION=" " Een 'SNAPSHOT' maken U kunt via het FAS2-hoofdproject de opdracht Package Maven gebruiken om een 'snapshot release' uit te voeren: cd $PROJECT_HOME/fas2 mvn clean package Het resultaat is als volgt: Scanning for projects Reactor Build Order: FAS2 FAS2 Authentication FAS2 War FAS2 Proxy War FAS2 Scripts FAS2 Deploy Building FAS SNAPSHOT maven-clean-plugin:2.5:clean fas Building FAS2 Authentication SNAPSHOT maven-clean-plugin:2.5:clean fas2-authentication -- Deleting /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-authentication/target --- maven-resources-plugin:2.6:resources fas2-authentication -- Using 'UTF-8' encoding to copy filtered resources. Copying 0 resource --- maven-compiler-plugin:3.0:compile fas2-authentication -- Changes detected - recompiling the module! Compiling 63 source files to /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2authentication/target/classes [WARNING] Note: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2authentication/src/main/java/be/fgov/fedict/iam/admin/adminTools.java uses or overrides a deprecated API. [WARNING] Note: Recompile with -Xlint:deprecation for details. [WARNING] Note: Some input files use unchecked or unsafe operations. [WARNING] Note: Recompile with -Xlint:unchecked for details. --- maven-resources-plugin:2.6:testresources fas2-authentication -- Using 'UTF-8' encoding to copy filtered resources. skip non existing resourcedirectory /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2authentication/src/test/resources --- maven-compiler-plugin:3.0:testcompile fas2-authentication -- Changes detected - recompiling the module! --- maven-surefire-plugin:2.12.4:test fas2-authentication maven-jar-plugin:2.4:jar fas2-authentication -- Building jar: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2authentication/target/fas2-authentication SNAPSHOT.jar Building FAS2 War SNAPSHOT maven-clean-plugin:2.5:clean fas2-war -- Deleting /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-war/target --- minify-maven-plugin:1.6:minify fas2-war -- Skipping merge step. Creating minified file [fas.min.css]. Creating minified file [fas-ie.min.css]. Creating minified file [fas-ie6.min.css].

15 Creating minified file [fas-ie7.min.css]. --- minify-maven-plugin:1.6:minify fas2-war -- Processing source file [jquery min.js]. Processing source file [jquery.validate.min.js]. Processing source file [jquery.numeric.js]. Processing source file [jquery.cookie.js]. Processing source file [spin.min.js]. Processing source file [fedictcommon.js]. Processing source file [fedictlogin.js]. Processing source file [auth.js]. Processing source file [purl.js]. Creating merged file [fas.js]. Creating minified file [fas.min.js]. --- maven-assembly-plugin:2.2-beta-5:single fas2-war -- Reading assembly descriptor: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2war/../fas2-deploy/src/main/assembly/fas2-war-assembly_descriptor.xml [WARNING] Cannot include project artifact: be.fgov.fedict.fas:fas2-war:pom:5.0.0-snapshot; it doesn't have an associated file or directory. already added, skipping fas already added, skipping fas/js already added, skipping fas/style already added, skipping Building tar : /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-war/target/fas2-war5.0.0-SNAPSHOT.tar.bz2 already added, skipping fas already added, skipping fas/js already added, skipping fas/style already added, skipping Building FAS2 Proxy War SNAPSHOT maven-clean-plugin:2.5:clean fas2-proxywar -- Deleting /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-proxywar/target --- minify-maven-plugin:1.6:minify fas2-proxywar -- Processing source file [jquery min.js]. Processing source file [jquery.cookie.js]. Processing source file [spin.min.js]. Processing source file [fedictcommon.js]. Processing source file [fedictproxy.js]. Creating merged file [fas-proxy.js]. Creating minified file [fas-proxy.min.js]. --- maven-assembly-plugin:2.2-beta-5:single fas2-proxywar -- Reading assembly descriptor: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2proxywar/../fas2-deploy/src/main/assembly/fas2-proxywar-assembly_descriptor.xml already added, skipping fas already added, skipping fas/js already added, skipping fas/style already added, skipping fas/style/img already added, skipping Building tar : /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-proxywar/target/fas2proxywar SNAPSHOT.tar.bz2 already added, skipping fas already added, skipping fas/js already added, skipping fas/style already added, skipping fas/style/img already added, skipping Building FAS2 Scripts SNAPSHOT maven-clean-plugin:2.5:clean fas2-scripts -- Deleting /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-scripts/target --- maven-resources-plugin:2.6:resources fas2-scripts -- Using 'UTF-8' encoding to copy filtered resources. Copying 0 resource --- maven-compiler-plugin:3.0:compile fas2-scripts -- Changes detected - recompiling the module! Compiling 2 source files to /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2scripts/target/classes [WARNING] Note: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2scripts/src/main/java/be/fgov/fedict/iam/fas/tools/crl/eidCRLManagerLite.java uses unchecked or unsafe operations. [WARNING] Note: Recompile with -Xlint:unchecked for details. --- maven-resources-plugin:2.6:testresources fas2-scripts -- Using 'UTF-8' encoding to copy filtered resources.

16 skip non existing resourcedirectory /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2scripts/src/test/resources --- maven-compiler-plugin:3.0:testcompile fas2-scripts -- No sources to compile --- maven-surefire-plugin:2.12.4:test fas2-scripts -- No tests to run. --- maven-jar-plugin:2.4:jar fas2-scripts -- Building jar: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-scripts/target/fas2scripts SNAPSHOT.jar --- maven-assembly-plugin:2.2-beta-5:single fas2-scripts -- Reading assembly descriptor: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2scripts/../fas2-deploy/src/main/assembly/fas2-scripts-assembly_descriptor.xml Building tar : /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-scripts/target/fas2scripts SNAPSHOT.tar.bz Building FAS2 Deploy SNAPSHOT maven-clean-plugin:2.5:clean fas2-deploy -- Deleting /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target --- maven-resources-plugin:2.6:resources fas2-deploy -- Using 'UTF-8' encoding to copy filtered resources. skip non existing resourcedirectory /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/src/main/resources --- maven-compiler-plugin:3.0:compile fas2-deploy -- Changes detected - recompiling the module! Compiling 4 source files to /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/target/classes [WARNING] Note: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/src/main/java/be/fgov/fedict/iam/fas/tools/translations/Xlsx2Ldif.java uses unchecked or unsafe operations. [WARNING] Note: Recompile with -Xlint:unchecked for details. --- maven-resources-plugin:2.6:testresources fas2-deploy -- Using 'UTF-8' encoding to copy filtered resources. skip non existing resourcedirectory /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/src/test/resources --- maven-compiler-plugin:3.0:testcompile fas2-deploy -- No sources to compile --- maven-surefire-plugin:2.12.4:test fas2-deploy -- No tests to run. --- maven-jar-plugin:2.4:jar fas2-deploy -- Building jar: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/fas2deploy SNAPSHOT.jar --- exec-maven-plugin:1.2.1:exec fas2-deploy --+ Reading XLS file in /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/src/main/xls/ui-translations.xlsx [1] errorpage_title [2] errorpage_loginpagelink [3] errormessagegeneric [4] errormessageeidocsp_crlfailed [5] errormessageeidthumprintfailed [6] errormessagepagenotfound [7] errormessageexception [8] errormessagecertnottrusted [9] errormessageotpexpired [10] errormessageotpfailed [11] errormessageotpgatewaydown [12] errormessageotpnophone [13] errormessagetokenfailed [14] errormessagetokennotoken [16] errormessagetripletfailed [17] errormessagetripletbackenderror [18] errormessageuserlocked [19] errormessageuserpassfailed [20] errormessagesessiontimeout [21] errormessagecurrentprofilenotmatching [22] errormessageotherexistingsessioninbrowser [25] errorvalidation_title [26] errorvalidate_usernamerequired [27] errorvalidate_passwordrequired [28] errorvalidate_tokenrequired [29] errorvalidate_otprequired [31] errorvalidate_nrnrequired [32] errorvalidate_invalidnrn

17 [33] errorvalidate_eidcardnumberrequired [34] errorvalidate_invalideidcardnumber [35] errorvalidate_siscardnumberrequired [36] errorvalidate_invalidsiscardnumber [37] errorvalidate_storkagree [38] errorvalidate_choosecontext [41] fedictcustomrightauthenticationtitle [42] fedictcustomrightinfotext [43] targetgrouprightinfotext [46] profile_citizen [47] profile_stork [48] profile_civilservant [49] profile_enterprise [50] steplabel [52] profile_title_citizen [53] profile_title_stork [54] profile_title_civilservant [55] profile_title_enterprise [56] profile_title_orkey [58] auth_title_password [59] auth_title_eid [60] auth_title_commercial [61] auth_title_comcertnoid [62] auth_title_otp [63] auth_title_token [64] auth_title_civiservanttoken [65] auth_title_triplet [67] app_titlemy [68] app_titleegovlogin [69] app_titleinformation [70] app_copyright [72] app_pleasewait [73] app_pleasewaittext [74] app_helpmoreinfo [79] LoginButton_Next [80] LoginButton_Finish [81] LoginButton_Choose [84] default_ds_idtoken1 [85] default_ds_idtoken2 [87] default_contextselection_title [88] default_contextselection_idtoken0 [89] default_contextselection_idtoken1 [90] default_contextselection_idtoken2 [92] default_contextselection_helptitle [93] default_contextselection_helptext [94] default_storkattrselection_subtitle [95] default_storkattrselection_title [96] default_storkattrselection_helptitle [97] default_storkattrselection_helptext [99] passwordservice_linktitle [100] passwordservice_ds_title [101] passwordservice_ds_subtitle [103] passwordservice_default_helptitle [104] passwordservice_default_helptext [107] citizentokenservice_linktitle [108] citizentokenservice_default_title [109] citizentokenservice_default_helptitle [111] citizentokenservice_ds_subtitle [112] citizentokenservice_tokencitizen_idtoken1 [113] citizentokenservice_ds_helptext [114] citizentokenservice_tokencitizen_subtitle [115] citizentokenservice_tokencitizen_helptext [117] civilservanttokenservice_linktitle [118] civilservanttokenservice_default_title [119] civilservanttokenservice_default_helptitle [120] civilservanttokenservice_ds_subtitle [121] civilservanttokenservice_ds_helptext [122] civilservanttokenservice_tokencivilservant_subtitle [125] civilservanttokenservice_tokencivilservant_idtoken1 [126] civilservanttokenservice_tokencivilservant_helptext [129] eidlinkservice_linktitle [130] eidlinkservice_default_title [131] eidlinkservice_default_subtitle [132] eidlinkservice_default_helptitle [133] eidlinkservice_default_helptext [134] eidlinkservice_default_moreinfo [136] eidservice_linktitle [137] eidservice_default_title [138] eidservice_default_subtitle [139] eidservice_default_helptitle [140] eidservice_default_helptext [141] eidservice_default_moreinfo [143] commerciallinkservice_linktitle [144] commerciallinkservice_default_title [145] commerciallinkservice_linkcommercial_subtitle [147] commerciallinkservice_linkcommercial_helptitle

18 [148] [150] [151] [152] [154] [155] [157] [158] [159] [160] [163] [164] [165] [166] [167] [168] [169] [170] [171] [173] [174] [175] [176] [177] [178] [179] [180] [181] [184] [185] [186] [187] [188] [189] [190] [191] [194] [195] [196] [197] [198] [199] [202] [203] [204] [205] [206] [207] [208] [209] [210] [211] [212] [213] [214] [215] [216] [217] [218] [219] [220] [221] [222] [223] [224] [226] [227] [228] [229] [230] [231] [232] [233] [234] [235] [236] [237] [238] [239] [240] [241] [242] [244] [245] [246] [247] commerciallinkservice_linkcommercial_helptext commerciallinknoidservice_linktitle commerciallinknoidservice_default_title commerciallinknoidservice_default_subtitle commerciallinknoidservice_default_helptitle commerciallinknoidservice_default_helptext commercialservice_default_title commercialservice_default_subtitle commercialservice_default_helptitle commercialservice_default_helptext otpservice_message otpservice_linktitle otpservice_default_title otpservice_default_helptitle otpservice_ds_subtitle otpservice_ds_helptext otpservice_otp_subtitle otpservice_otp_helptext otpservice_otp_idtoken1 citizentokenservice_linkdescription civilservanttokenservice_linkdescription commerciallinkservice_linkdescription commerciallinknoidservice_linkdescription eidlinkservice_linkdescription otpservice_linkdescription passwordservice_linkdescription storkservice_linkdescription tripletservice_linkdescription tripletservice_linktitle tripletservice_default_title tripletservice_default_subtitle tripletservice_default_helptitle tripletservice_default_helptext tripletservice_default_idtoken1 tripletservice_default_idtoken2 tripletservice_default_idtoken3 storkservice_default_subtitle storkservice_default_title storkservice_helptext storkservice_linktitle storkservice_default_helptitle storkservice_default_helptext stork_select stork_select_all stork_select_none stork_agree_message stork_title_attributes stork_attribute_eidentifier stork_attribute_ stork_attribute_givenname stork_attribute_surname stork_attribute_gender stork_attribute_dateofbirth stork_attribute_countrycodeofbirth stork_attribute_nationalitycode stork_attribute_maritalstatus stork_attribute_textresidenceaddress stork_attribute_pseudonym stork_attribute_inheritedfamilyname stork_attribute_adoptedfamilyname stork_attribute_canonicalresidenceaddress stork_attribute_age stork_attribute_isageover stork_attribute_residencepermit stork_attribute_title globallogout_title_singleapp globallogout_title_multipleapp globallogout_infotext_singlectxt_singleapp globallogout_infotext_singlectxt_multipleapp globallogout_infotext_multiplectxt_singleapp globallogout_infotext_multiplectxt_multipleapp globallogout_warningtext_singleapp globallogout_warningtext_multipleapp globallogout_afterlisttext_singleapp globallogout_afterlisttext_multipleapp globallogout_logoutbutton_singleapp globallogout_logoutbutton_multipleapp globallogout_cancelbutton_singleapp globallogout_cancelbutton_multipleapp globallogout_pleasewait_singleapp globallogout_pleasewait_multipleapp globallogout_pleasewaittext globallogout_logoutbox_title_singleapp globallogout_logoutbox_title_multipleapp globallogout_logoutbox_text_singleapp globallogout_logoutbox_text_multipleapp

19 [248] globallogout_logoutbox_confirm [249] globallogout_logoutbox_cancel [251] globallogout_cancelbox_title_singleapp [252] globallogout_cancelbox_title_multipleapp [253] globallogout_cancelbox_text_singleapp [254] globallogout_cancelbox_text_multipleapp [255] globallogout_cancelbox_confirm [256] globallogout_cancelbox_cancel [258] globallogout_cancel_title_singleapp [259] globallogout_cancel_title_multipleapp [260] globallogout_cancel_text_singleapp [261] globallogout_cancel_text_multipleapp [263] alternativelogin_linktitle [264] alternativelogin_linkdescription [265] alternativelogin_choose [267] app_helpmoreinfotargetgroup [268] alternativelogin_helptitle [269] alternativelogin_helptext + Generating LDIF files o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nFAS-DEV.ldif o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nFAS-INT.ldif o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nFAS-TA.ldif o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nFAS-PR.ldif + Finished --- exec-maven-plugin:1.2.1:exec fas2-deploy --+ Reading XLS file in /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/src/main/xls/ui-translations.xlsx [1] app_titlemy [2] app_titleegovlogin [3] app_titleinformation [4] app_aboutlink [5] app_copyright [7] app_pleasewait [8] app_pleasewaittext [9] app_helpmoreinfo [11] errormessagegeneric [12] proxy_loginretrylink [13] proxy_selecttitle [14] proxy_selectsubtitle [15] proxy_selectsubtitleinactive [16] proxy_countryidp_title [18] proxy_global_helptitle [19] proxy_global_helptext [20] proxy_countryidp_helptitle [21] proxy_countryidp_helptext [23] country_at_name [24] country_bg_name [25] country_cy_name [26] country_cz_name [27] country_dk_name [28] country_ee_name [29] country_fi_name [30] country_fr_name [31] country_de_name [32] country_gr_name [33] country_hu_name [34] country_ir_name [35] country_it_name [36] country_lv_name [37] country_lt_name [38] country_lu_name [39] country_mt_name [40] country_nl_name [41] country_pl_name [42] country_pt_name [43] country_ro_name [44] country_sk_name [45] country_si_name [46] country_es_name [47] country_se_name [48] country_uk_name [49] country_hr_name + Generating LDIF files o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nPROXY-DEV.ldif o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nPROXY-INT.ldif o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nPROXY-TA.ldif o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nPROXY-PR.ldif

20 + Finished --- maven-assembly-plugin:2.2-beta-5:single fas2-deploy -- Reading assembly descriptor: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/../fas2-deploy/src/main/assembly/fas2-deploy-full-assembly_descriptor.xml Building tar : /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/fas2deploy SNAPSHOT.tar.bz Reactor Summary: FAS2... SUCCESS [0.155s] FAS2 Authentication... SUCCESS [5.663s] FAS2 War... SUCCESS [4.055s] FAS2 Proxy War... SUCCESS [2.336s] FAS2 Scripts... SUCCESS [5.281s] FAS2 Deploy... SUCCESS [24.460s] BUILD SUCCESS Total time: s Finished at: Thu Oct 31 09:52:07 CET 2013 Final Memory: 57M/123M Als de constructie gelukt is, krijgt u op het einde het bericht 'BUILD SUCCESS' te zien en kunt u het te implementeren pakket terugvinden in de doelmap FAS2 Deploy: cd $PROJECT_HOME/fas2-deploy/target ls fas2-deploy*.tar.bz2 fas2-deploy snapshot.tar.bz2 U hebt dit pakket nodig om de instanties FAS2 en FAS2 STORK proxy te installeren of updaten. Meer informatie over het implementatieproces vindt u verder in dit document. Een 'Release' uitvoeren U kunt via het FAS2-hoofdproject de opdracht Maven Release gebruiken om een 'release' uit te voeren: cd $PROJECT_HOME/fas2 mvn clean release:clean release:prepare Het resultaat is als volgt: Scanning for projects Reactor Build Order: FAS2 FAS2 FAS2 FAS2 FAS2 FAS2 Authentication War Proxy War Scripts Deploy Building FAS maven-clean-plugin:2.4.1:clean fas Building FAS2 Authentication maven-clean-plugin:2.4.1:clean fas2-authentication Building FAS2 War maven-clean-plugin:2.4.1:clean fas2-war Building FAS2 Proxy War maven-clean-plugin:2.4.1:clean fas2-tools ---

21 Building FAS2 Scripts maven-clean-plugin:2.4.1:clean fas2-scripts Building FAS2 Deploy maven-clean-plugin:2.4.1:clean fas2-deploy Building FAS maven-release-plugin:2.3.2:clean fas2 -- Cleaning up after release maven-release-plugin:2.3.2:prepare fas2 -- Verifying that there are no local modifications... ignoring changes on: **/pom.xml.backup, **/release.properties, **/pom.xml.branch, **/pom.xml.next, **/pom.xml.releasebackup, **/pom.xml.tag EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2 && hg status Checking dependencies and plugins for snapshots... Maven vraagt u het versienummer van de release, de tag die aangemaakt moet worden in de Mercurial repository en het versienummer van de 'next snapshot' in te geven: What is the release version for "FAS2"? (be.fgov.fedict.fas:fas2) 5.0.0: : What is SCM release tag or label for "FAS2"? (be.fgov.fedict.fas:fas2) fas : : What is the new development version for "FAS2"? (be.fgov.fedict.fas:fas2) SNAPSHOT: : Het 'release build process' wordt gestart: Transforming 'FAS2'... Transforming 'FAS2 Authentication'... Transforming 'FAS2 War'... Transforming 'FAS2 Proxy War'... Transforming 'FAS2 Scripts'... Transforming 'FAS2 Deploy'... Not generating release POMs Executing goals 'clean deploy'... [WARNING] Maven will be executed in interactive mode, but no input stream has been configured for this MavenInvoker instance. Scanning for projects Reactor Build Order: FAS2 FAS2 Authentication FAS2 War FAS2 Proxy War FAS2 Scripts FAS2 Deploy Building FAS maven-clean-plugin:2.5:clean fas Building FAS2 Authentication maven-clean-plugin:2.5:clean fas2-authentication -- Deleting /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-authentication/target --- maven-resources-plugin:2.6:resources fas2-authentication -- Using 'UTF-8' encoding to copy filtered resources. Copying 0 resource --- maven-compiler-plugin:3.0:compile fas2-authentication -- Changes detected - recompiling the module! Compiling 63 source files to /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2authentication/target/classes [WARNING] Note: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2authentication/src/main/java/be/fgov/fedict/iam/admin/adminTools.java uses or overrides a deprecated API. [WARNING] Note: Recompile with -Xlint:deprecation for details. [WARNING] Note: Some input files use unchecked or unsafe operations. [WARNING] Note: Recompile with -Xlint:unchecked for details.

22 --- maven-resources-plugin:2.6:testresources fas2-authentication -- Using 'UTF-8' encoding to copy filtered resources. skip non existing resourcedirectory /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2authentication/src/test/resources --- maven-compiler-plugin:3.0:testcompile fas2-authentication -- Changes detected - recompiling the module! --- maven-surefire-plugin:2.12.4:test fas2-authentication maven-jar-plugin:2.4:jar fas2-authentication -- Building jar: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2authentication/target/fas2-authentication jar Building FAS2 War maven-clean-plugin:2.5:clean fas2-war -- Deleting /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-war/target --- minify-maven-plugin:1.6:minify fas2-war -- Skipping merge step. Creating minified file [fas.min.css]. Creating minified file [fas-ie.min.css]. Creating minified file [fas-ie6.min.css]. Creating minified file [fas-ie7.min.css]. --- minify-maven-plugin:1.6:minify fas2-war -- Processing source file [jquery min.js]. Processing source file [jquery.validate.min.js]. Processing source file [jquery.numeric.js]. Processing source file [jquery.cookie.js]. Processing source file [spin.min.js]. Processing source file [fedictcommon.js]. Processing source file [fedictlogin.js]. Processing source file [auth.js]. Processing source file [purl.js]. Creating merged file [fas.js]. Creating minified file [fas.min.js]. --- maven-assembly-plugin:2.2-beta-5:single fas2-war -- Reading assembly descriptor: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2war/../fas2-deploy/src/main/assembly/fas2-war-assembly_descriptor.xml [WARNING] Cannot include project artifact: be.fgov.fedict.fas:fas2-war:pom:5.0.0-snapshot; it doesn't have an associated file or directory. already added, skipping fas already added, skipping fas/js already added, skipping fas/style already added, skipping Building tar : /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-war/target/fas2-war5.0.0.tar.bz2 already added, skipping fas already added, skipping fas/js already added, skipping fas/style already added, skipping Building FAS2 Proxy War maven-clean-plugin:2.5:clean fas2-proxywar -- Deleting /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-proxywar/target --- minify-maven-plugin:1.6:minify fas2-proxywar -- Processing source file [jquery min.js]. Processing source file [jquery.cookie.js]. Processing source file [spin.min.js]. Processing source file [fedictcommon.js]. Processing source file [fedictproxy.js]. Creating merged file [fas-proxy.js]. Creating minified file [fas-proxy.min.js]. --- maven-assembly-plugin:2.2-beta-5:single fas2-proxywar -- Reading assembly descriptor: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2proxywar/../fas2-deploy/src/main/assembly/fas2-proxywar-assembly_descriptor.xml already added, skipping fas already added, skipping fas/js already added, skipping fas/style already added, skipping fas/style/img already added, skipping Building tar : /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-proxywar/target/fas2proxywar tar.bz2 already added, skipping

23 fas already added, skipping fas/js already added, skipping fas/style already added, skipping fas/style/img already added, skipping Building FAS2 Scripts maven-clean-plugin:2.5:clean fas2-scripts -- Deleting /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-scripts/target --- maven-resources-plugin:2.6:resources fas2-scripts -- Using 'UTF-8' encoding to copy filtered resources. Copying 0 resource --- maven-compiler-plugin:3.0:compile fas2-scripts -- Changes detected - recompiling the module! Compiling 2 source files to /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2scripts/target/classes [WARNING] Note: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2scripts/src/main/java/be/fgov/fedict/iam/fas/tools/crl/eidCRLManagerLite.java uses unchecked or unsafe operations. [WARNING] Note: Recompile with -Xlint:unchecked for details. --- maven-resources-plugin:2.6:testresources fas2-scripts -- Using 'UTF-8' encoding to copy filtered resources. skip non existing resourcedirectory /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2scripts/src/test/resources --- maven-compiler-plugin:3.0:testcompile fas2-scripts -- No sources to compile --- maven-surefire-plugin:2.12.4:test fas2-scripts -- No tests to run. --- maven-jar-plugin:2.4:jar fas2-scripts -- Building jar: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-scripts/target/fas2scripts jar --- maven-assembly-plugin:2.2-beta-5:single fas2-scripts -- Reading assembly descriptor: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2scripts/../fas2-deploy/src/main/assembly/fas2-scripts-assembly_descriptor.xml Building tar : /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-scripts/target/fas2scripts tar.bz Building FAS2 Deploy maven-clean-plugin:2.5:clean fas2-deploy -- Deleting /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target --- maven-resources-plugin:2.6:resources fas2-deploy -- Using 'UTF-8' encoding to copy filtered resources. skip non existing resourcedirectory /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/src/main/resources --- maven-compiler-plugin:3.0:compile fas2-deploy -- Changes detected - recompiling the module! Compiling 4 source files to /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/target/classes [WARNING] Note: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/src/main/java/be/fgov/fedict/iam/fas/tools/translations/Xlsx2Ldif.java uses unchecked or unsafe operations. [WARNING] Note: Recompile with -Xlint:unchecked for details. --- maven-resources-plugin:2.6:testresources fas2-deploy -- Using 'UTF-8' encoding to copy filtered resources. skip non existing resourcedirectory /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/src/test/resources --- maven-compiler-plugin:3.0:testcompile fas2-deploy -- No sources to compile --- maven-surefire-plugin:2.12.4:test fas2-deploy -- No tests to run. --- maven-jar-plugin:2.4:jar fas2-deploy -- Building jar: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/fas2deploy jar --- exec-maven-plugin:1.2.1:exec fas2-deploy --+ Reading XLS file in /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/src/main/xls/ui-translations.xlsx [1] errorpage_title

24 [2] errorpage_loginpagelink [3] errormessagegeneric [4] errormessageeidocsp_crlfailed [5] errormessageeidthumprintfailed [6] errormessagepagenotfound [7] errormessageexception [8] errormessagecertnottrusted [9] errormessageotpexpired [10] errormessageotpfailed [11] errormessageotpgatewaydown [12] errormessageotpnophone [13] errormessagetokenfailed [14] errormessagetokennotoken [16] errormessagetripletfailed [17] errormessagetripletbackenderror [18] errormessageuserlocked [19] errormessageuserpassfailed [20] errormessagesessiontimeout [21] errormessagecurrentprofilenotmatching [22] errormessageotherexistingsessioninbrowser [25] errorvalidation_title [26] errorvalidate_usernamerequired [27] errorvalidate_passwordrequired [28] errorvalidate_tokenrequired [29] errorvalidate_otprequired [31] errorvalidate_nrnrequired [32] errorvalidate_invalidnrn [33] errorvalidate_eidcardnumberrequired [34] errorvalidate_invalideidcardnumber [35] errorvalidate_siscardnumberrequired [36] errorvalidate_invalidsiscardnumber [37] errorvalidate_storkagree [38] errorvalidate_choosecontext [41] fedictcustomrightauthenticationtitle [42] fedictcustomrightinfotext [43] targetgrouprightinfotext [46] profile_citizen [47] profile_stork [48] profile_civilservant [49] profile_enterprise [50] steplabel [52] profile_title_citizen [53] profile_title_stork [54] profile_title_civilservant [55] profile_title_enterprise [56] profile_title_orkey [58] auth_title_password [59] auth_title_eid [60] auth_title_commercial [61] auth_title_comcertnoid [62] auth_title_otp [63] auth_title_token [64] auth_title_civiservanttoken [65] auth_title_triplet [67] app_titlemy [68] app_titleegovlogin [69] app_titleinformation [70] app_copyright [72] app_pleasewait [73] app_pleasewaittext [74] app_helpmoreinfo [79] LoginButton_Next [80] LoginButton_Finish [81] LoginButton_Choose [84] default_ds_idtoken1 [85] default_ds_idtoken2 [87] default_contextselection_title [88] default_contextselection_idtoken0 [89] default_contextselection_idtoken1 [90] default_contextselection_idtoken2 [92] default_contextselection_helptitle [93] default_contextselection_helptext [94] default_storkattrselection_subtitle [95] default_storkattrselection_title [96] default_storkattrselection_helptitle [97] default_storkattrselection_helptext [99] passwordservice_linktitle [100] passwordservice_ds_title [101] passwordservice_ds_subtitle [103] passwordservice_default_helptitle [104] passwordservice_default_helptext [107] citizentokenservice_linktitle [108] citizentokenservice_default_title [109] citizentokenservice_default_helptitle [111] citizentokenservice_ds_subtitle [112] citizentokenservice_tokencitizen_idtoken1

25 [113] [114] [115] [117] [118] [119] [120] [121] [122] [125] [126] [129] [130] [131] [132] [133] [134] [136] [137] [138] [139] [140] [141] [143] [144] [145] [147] [148] [150] [151] [152] [154] [155] [157] [158] [159] [160] [163] [164] [165] [166] [167] [168] [169] [170] [171] [173] [174] [175] [176] [177] [178] [179] [180] [181] [184] [185] [186] [187] [188] [189] [190] [191] [194] [195] [196] [197] [198] [199] [202] [203] [204] [205] [206] [207] [208] [209] [210] [211] [212] [213] [214] [215] [216] [217] [218] citizentokenservice_ds_helptext citizentokenservice_tokencitizen_subtitle citizentokenservice_tokencitizen_helptext civilservanttokenservice_linktitle civilservanttokenservice_default_title civilservanttokenservice_default_helptitle civilservanttokenservice_ds_subtitle civilservanttokenservice_ds_helptext civilservanttokenservice_tokencivilservant_subtitle civilservanttokenservice_tokencivilservant_idtoken1 civilservanttokenservice_tokencivilservant_helptext eidlinkservice_linktitle eidlinkservice_default_title eidlinkservice_default_subtitle eidlinkservice_default_helptitle eidlinkservice_default_helptext eidlinkservice_default_moreinfo eidservice_linktitle eidservice_default_title eidservice_default_subtitle eidservice_default_helptitle eidservice_default_helptext eidservice_default_moreinfo commerciallinkservice_linktitle commerciallinkservice_default_title commerciallinkservice_linkcommercial_subtitle commerciallinkservice_linkcommercial_helptitle commerciallinkservice_linkcommercial_helptext commerciallinknoidservice_linktitle commerciallinknoidservice_default_title commerciallinknoidservice_default_subtitle commerciallinknoidservice_default_helptitle commerciallinknoidservice_default_helptext commercialservice_default_title commercialservice_default_subtitle commercialservice_default_helptitle commercialservice_default_helptext otpservice_message otpservice_linktitle otpservice_default_title otpservice_default_helptitle otpservice_ds_subtitle otpservice_ds_helptext otpservice_otp_subtitle otpservice_otp_helptext otpservice_otp_idtoken1 citizentokenservice_linkdescription civilservanttokenservice_linkdescription commerciallinkservice_linkdescription commerciallinknoidservice_linkdescription eidlinkservice_linkdescription otpservice_linkdescription passwordservice_linkdescription storkservice_linkdescription tripletservice_linkdescription tripletservice_linktitle tripletservice_default_title tripletservice_default_subtitle tripletservice_default_helptitle tripletservice_default_helptext tripletservice_default_idtoken1 tripletservice_default_idtoken2 tripletservice_default_idtoken3 storkservice_default_subtitle storkservice_default_title storkservice_helptext storkservice_linktitle storkservice_default_helptitle storkservice_default_helptext stork_select stork_select_all stork_select_none stork_agree_message stork_title_attributes stork_attribute_eidentifier stork_attribute_ stork_attribute_givenname stork_attribute_surname stork_attribute_gender stork_attribute_dateofbirth stork_attribute_countrycodeofbirth stork_attribute_nationalitycode stork_attribute_maritalstatus stork_attribute_textresidenceaddress stork_attribute_pseudonym stork_attribute_inheritedfamilyname

26 [219] stork_attribute_adoptedfamilyname [220] stork_attribute_canonicalresidenceaddress [221] stork_attribute_age [222] stork_attribute_isageover [223] stork_attribute_residencepermit [224] stork_attribute_title [226] globallogout_title_singleapp [227] globallogout_title_multipleapp [228] globallogout_infotext_singlectxt_singleapp [229] globallogout_infotext_singlectxt_multipleapp [230] globallogout_infotext_multiplectxt_singleapp [231] globallogout_infotext_multiplectxt_multipleapp [232] globallogout_warningtext_singleapp [233] globallogout_warningtext_multipleapp [234] globallogout_afterlisttext_singleapp [235] globallogout_afterlisttext_multipleapp [236] globallogout_logoutbutton_singleapp [237] globallogout_logoutbutton_multipleapp [238] globallogout_cancelbutton_singleapp [239] globallogout_cancelbutton_multipleapp [240] globallogout_pleasewait_singleapp [241] globallogout_pleasewait_multipleapp [242] globallogout_pleasewaittext [244] globallogout_logoutbox_title_singleapp [245] globallogout_logoutbox_title_multipleapp [246] globallogout_logoutbox_text_singleapp [247] globallogout_logoutbox_text_multipleapp [248] globallogout_logoutbox_confirm [249] globallogout_logoutbox_cancel [251] globallogout_cancelbox_title_singleapp [252] globallogout_cancelbox_title_multipleapp [253] globallogout_cancelbox_text_singleapp [254] globallogout_cancelbox_text_multipleapp [255] globallogout_cancelbox_confirm [256] globallogout_cancelbox_cancel [258] globallogout_cancel_title_singleapp [259] globallogout_cancel_title_multipleapp [260] globallogout_cancel_text_singleapp [261] globallogout_cancel_text_multipleapp [263] alternativelogin_linktitle [264] alternativelogin_linkdescription [265] alternativelogin_choose [267] app_helpmoreinfotargetgroup [268] alternativelogin_helptitle [269] alternativelogin_helptext + Generating LDIF files o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nFAS-DEV.ldif o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nFAS-INT.ldif o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nFAS-TA.ldif o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nFAS-PR.ldif + Finished --- exec-maven-plugin:1.2.1:exec fas2-deploy --+ Reading XLS file in /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/src/main/xls/ui-translations.xlsx [1] app_titlemy [2] app_titleegovlogin [3] app_titleinformation [4] app_aboutlink [5] app_copyright [7] app_pleasewait [8] app_pleasewaittext [9] app_helpmoreinfo [11] errormessagegeneric [12] proxy_loginretrylink [13] proxy_selecttitle [14] proxy_selectsubtitle [15] proxy_selectsubtitleinactive [16] proxy_countryidp_title [18] proxy_global_helptitle [19] proxy_global_helptext [20] proxy_countryidp_helptitle [21] proxy_countryidp_helptext [23] country_at_name [24] country_bg_name [25] country_cy_name [26] country_cz_name [27] country_dk_name [28] country_ee_name [29] country_fi_name [30] country_fr_name [31] country_de_name

27 [32] country_gr_name [33] country_hu_name [34] country_ir_name [35] country_it_name [36] country_lv_name [37] country_lt_name [38] country_lu_name [39] country_mt_name [40] country_nl_name [41] country_pl_name [42] country_pt_name [43] country_ro_name [44] country_sk_name [45] country_si_name [46] country_es_name [47] country_se_name [48] country_uk_name [49] country_hr_name + Generating LDIF files o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nPROXY-DEV.ldif o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nPROXY-INT.ldif o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nPROXY-TA.ldif o output filename is /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/i18nPROXY-PR.ldif + Finished --- maven-assembly-plugin:2.2-beta-5:single fas2-deploy -- Reading assembly descriptor: /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2deploy/../fas2-deploy/src/main/assembly/fas2-deploy-full-assembly_descriptor.xml Building tar : /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-deploy/target/fas2deploy tar.bz Reactor Summary: FAS2... SUCCESS [0.155s] FAS2 Authentication... SUCCESS [5.663s] FAS2 War... SUCCESS [4.055s] FAS2 Proxy War... SUCCESS [2.336s] FAS2 Scripts... SUCCESS [5.281s] FAS2 Deploy... SUCCESS [24.460s] BUILD SUCCESS Total time: s Finished at: Thu Oct 31 09:52:07 CET 2013 Final Memory: 57M/123M Checking in modified POMs... EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2 && hg branch EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2 && hg outgoing EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2 && hg commit --message '[maven-release-plugin] prepare release fas ' /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2/pom.xml /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-authentication/pom.xml /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-war/pom.xml /Users/frederic/NetBeansProjects/Fedict/FAS2-dev/fas2-tools/pom.xml /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2-scripts/pom.xml /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2-deploy/pom.xml EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2 && hg push -rdefault Tagging release with the label fas EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev && hg tag --message '[maven-release-plugin] copy for tag fas ' fas EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev && hg branch EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev && hg outgoing EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev && hg push rdefault EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev && hg locate Transforming 'FAS2'... Transforming 'FAS2 Authentication'... Transforming 'FAS2 War'... Transforming 'FAS2 Proxy War'... Transforming 'FAS2 Scripts'... Transforming 'FAS2 Deploy'... Not removing release POMs Checking in modified POMs... EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2 && hg branch EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2 && hg outgoing

28 EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2 && hg commit --message '[maven-release-plugin] prepare for next development iteration' /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2/pom.xml /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2-authentication/pom.xml /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2-war/pom.xml /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2-proxywar/pom.xml /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2-scripts/pom.xml /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2-deploy/pom.xml EXECUTING: /bin/sh -c cd /Users/frederic/NetBeansProjects/Fedict/FAS2-dev /fas2 && hg push rdefault Release preparation complete Reactor Summary: FAS2... SUCCESS [2:14.501s] FAS2 Authentication... SUCCESS [0.005s] FAS2 War... SUCCESS [0.002s] FAS2 Proxy War... SUCCESS [0.005s] FAS2 Scripts... SUCCESS [0.003s] FAS2 Deploy... SUCCESS [0.007s] BUILD SUCCESS Total time: 2:15.218s Finished at: Wed Mar 06 16:06:03 CET 2013 Final Memory: 7M/81M Als de constructie gelukt is, krijgt u op het einde het bericht 'BUILD SUCCESS' te zien en kunt u het te implementeren pakket terugvinden in de doelmap FAS2 Deploy: cd $PROJECT_HOME/fas2-deploy/target ls fas2-deploy*.tar.bz2 fas2-deploy tar.bz2 Een instantie installeren Voorgaande vereisten De binaire installatiebestanden maken geen deel uit van het package. Ze moeten zich in de map /opt/openam/software/binaries bevinden: apache-tomcat tar.gz: tar-installatiebestand van Apache Tomcat o openam zip: zip-installatiebestand van OpenAM o opendj zip: zip-installatiebestand van OpenDJ o instantclient-basiclite-linux zip en instantclient-sqlplus-linux zip: zipinstallatiebestanden van Oracle Instant Client o o jdk-7u67-linux-x64.tar.gz: tar-installatiebestand van Oracle JDK 7 o

29 De binaire installatiebestanden kunnen hier teruggevonden worden: Kopieer de aangemaakte packages in de map /opt/openam/application. scp $PROJECT_HOME/fas2-deploy/target/fas2-deploy tar.bz2 iam3-openam1pr:/opt/openam/application scp $PROJECT_HOME/fas2-deploy/target/fas2-deploy SNAPSHOT.tar.bz2 iam3-openam3pr:/opt/openam/application Maak verbinding met de server (gebruik hiervoor de juiste toegangsrechten). $ rm rf /opt/openam/software/deploy $ mkdir /opt/openam/software/deploy $ cd /opt/openam/software/deploy $ tar xjf /opt/openam/application/fas2-deploy tar.bz2 $./make-fas2-links.sh * linking install-fas2.sh * linking install-fas2-proxy.sh * linking update-fas2.sh * linking update-fas2-proxy.sh * linking update-fas2-labels.sh * linking update-fas2-proxy-labels.sh * linking backup-fas2.sh * linking cleanup-install.sh De installatie starten opam@iam3-openam1-pr:/opt/openam/software/deploy>./install-fas2.sh ************************************************************************* *** *** Installing FAS2 OpenAM ( ) *** *** Hostname: iam3-openam1-pr *** Env: PR *** Instance NB: 1 *** ************************************************************************* *** Press ENTER to continue Gebruik van de FAS Apache Tomcat FAS Status (running) $ /opt/openam/software/openamctl status * ForgeRock OpenAM FAS (pid=14837) STARTED Status (not running) $ /opt/openam/software/openamctl status * ForgeRock OpenAM FAS STOPPED Start $ /opt/openam/software/openamctl start * Starting Tomcat FAS in /opt/openam/software/tomcat_fas...

30 Stop $ /opt/openam/software/openamctl stop o waiting for Tomcat FAS to shutdown in /opt/openam/software/tomcat_fas Restart /opt/openam/software/openamctl restart o waiting for Tomcat FAS to shutdown in /opt/openam/software/tomcat_fas * Starting Tomcat FAS in /opt/openam/software/tomcat_fas... Apache Tomcat STORK Status (running) $ /opt/openam/software/storkproxyctl status * ForgeRock OpenAM STORK (pid=14837) STARTED Status (not running) $ /opt/openam/software/storkproxyctl status * ForgeRock OpenAM STORK STOPPED Start $ /opt/openam/software/storkproxyctl start * Starting Tomcat STORK in /opt/openam/software/tomcat_proxy... Stop $ /opt/openam/software/storkproxyctl stop o waiting for Tomcat STORK to shutdown in /opt/openam/software/tomcat_proxy Restart /opt/openam/software/openamctl restart o waiting for Tomcat STORK to shutdown in /opt/openam/software/tomcat_proxy * Starting Tomcat STORK in /opt/openam/software/tomcat_proxy... OpenDJ Status (running) $ /opt/openam/software/opendjctl status --- Server Status --Server Run Status: Started Open Connections: Server Details --Host Name: iam3-openam1-pr Administrative Users: cn=directory manager Installation Path: /opt/openam/software/opendj Version: OpenDJ Java Version: <not available> (*) Administration Connector: Port 4444 (LDAPS) --- Connection Handlers --Address:Port : Protocol : State : : : LDIF : Disabled :161 : SNMP : Disabled :636 : LDAPS : Disabled :1389 : LDAP : Enabled :1689 : JMX : Disabled :8080 : HTTP : Disabled --- Data Sources --Base DN: dc=config Backend ID: userroot Entries: <not available> (*)

31 Replication: Base DN: dc=openam Backend ID: userroot Entries: <not available> (*) Replication: * Information only available if you provide valid authentication information when launching the status command. Status (not running) $ /opt/openam/software/opendjctl status --- Server Status --Server Run Status: Stopped Open Connections: <not available> (*) --- Server Details --Host Name: iam3-openam1-pr Administrative Users: cn=directory manager Installation Path: /opt/openam/software/opendj Version: OpenDJ Java Version: <not available> (*) Administration Connector: Port 4444 (LDAPS) --- Connection Handlers --Address:Port : Protocol : State : : : LDIF : Disabled :161 : SNMP : Disabled :636 : LDAPS : Disabled :1389 : LDAP : Enabled :1689 : JMX : Disabled :8080 : HTTP : Disabled --- Data Sources --Base DN: dc=config Backend ID: userroot Entries: <not available> (*) Replication: Base DN: dc=openam Backend ID: userroot Entries: <not available> (*) Replication: * Information only available if server is running and you provide valid authentication information when launching the status command. Start $ /opt/openam/software/opendjctl start [31/Oct/2013:11:59: ] category=extensions severity=notice msgid= msg=loaded extension from file '/opt/openam/software/opendj/lib/extensions/snmp-mib2605.jar' (build 2.6.0, revision 9086) [31/Oct/2013:11:59: ] category=core severity=notice msgid= msg=opendj (build Z, R9086) starting up [31/Oct/2013:11:59: ] category=runtime_information severity=notice msgid= msg=installation Directory: /opt/openam/software/opendj [31/Oct/2013:11:59: ] category=runtime_information severity=notice msgid= msg=instance Directory: /opt/openam/software/opendj [31/Oct/2013:11:59: ] category=runtime_information severity=notice msgid= msg=jvm Information: 1.6.0_37-b06 by Sun Microsystems Inc., 32-bit architecture, bytes heap size [31/Oct/2013:11:59: ] category=runtime_information severity=notice msgid= msg=jvm Host: iam3-openam1-pr, running Linux el6.x86_64 i386, bytes physical memory size, number of processors available 1 [31/Oct/2013:11:59: ] category=runtime_information severity=notice msgid= msg=jvm Arguments: "-Xms128m", "-Xmx256m", "-Dorg.opends.server.scriptName=start-ds" [31/Oct/2013:11:59: ] category=jeb severity=notice msgid= msg=the database backend userroot containing 7 entries has started [31/Oct/2013:11:59: ] category=extensions severity=notice msgid= msg=digest-md5 SASL mechanism using a server fully qualified domain name of: openam3.fedictlab.be [31/Oct/2013:11:59: ] category=protocol severity=notice msgid= msg=started listening for new connections on Administration Connector port 4444 [31/Oct/2013:11:59: ] category=protocol severity=notice msgid= msg=started listening for new connections on LDAP Connection Handler port 1389 [31/Oct/2013:11:59: ] category=core severity=notice msgid= msg=the Directory Server has started successfully [31/Oct/2013:11:59: ] category=core severity=notice msgid= msg=the Directory Server has sent an alert notification generated by class org.opends.server.core.directoryserver (alert type org.opends.server.directoryserverstarted, alert ID ): The Directory Server has started successfully

32 Stop $ /opt/openam/software/opendjctl stop Stopping Server... [31/Oct/2013:11:57: ] category=backend severity=notice msgid= msg=the backend userroot is now taken offline [31/Oct/2013:11:57: ] category=core severity=notice msgid= msg=the Directory Server is now stopped OpenAM voor FAS OpenAM wordt uitgevoerd op de manier waarop een toepassing van de Apache Tomcat-server gestart wordt en wordt gestopt via de opdrachten van Apache Tomcat. Toegang tot de console OpenAM OpenAM voor STORK OpenAM wordt uitgevoerd op de manier waarop een toepassing van de Apache Tomcat-server gestart wordt en wordt gestopt via de opdrachten van Apache Tomcat. Toegang tot de console OpenAM

33 AS2 loadbalancer De 'AS2 loadbalancer' is een 'lightweight TCP load balancer' om de redundantie van de AS2-service mogelijk te maken. Status (running) $ /opt/openam/software/as2balancerctl status * AS2 Load Balancer (pid=1974) STARTED Status (not running) $ /opt/openam/software/as2balancerctl status * AS2 Load Balancer STOPPED Start $ /opt/openam/software/as2balancerctl start * Starting AS2 Load Balancer * AS2 Load Balancer started as PID Stop $ /opt/openam/software/as2balancerctl stop * Stopping AS2 Load Balancer running as PID 1974 XMA (AANVERWANTE TOEPASSINGEN) De xma-toepassingen (SMA, HMA, RMA en AS2) worden geïnstalleerd op een infrastructuur die gelijkaardig is aan OpenAM. Ze worden uitgevoerd op Tomcat-applicatieservers. De configuratie van de hardware en het besturingssysteem is gestandaardiseerd op basis van het model dat gebruikt wordt voor de FAS.