Esri / arcgis-cookbook

Chef cookbooks for ArcGIS
Apache License 2.0
298 stars 116 forks source link

Add Portal security recipe #145

Closed mtrameau closed 6 years ago

mtrameau commented 6 years ago

This commit enables the arcgis-enterprise cookbook to set Portal's identity store

Add a new recipe : portal_security

portal_security

Configures Portal identity stores

Attributes used by the recipe:

{
  "arcgis": {
    "portal": {
      "admin_username": "admin",
      "admin_password": "changeit",
      "security": {
        "user_store_config" : {
          "type" : "BUILTIN",
          "properties" : {
          }
        },
        "role_store_config" : {
          "type" : "BUILTIN",
          "properties" : {
          }
        }
      }
    }
  },
  "run_list": [
    "recipe[arcgis-enterprise::portal_security]"
  ]
}

New example file : roles\portal-windows-security.json

{
  "arcgis":{
    "run_as_password":"Run_As_Pa$$w0rd",
    "run_as_user":"arcgis",
    "version":"10.5",
    "portal":{
      "admin_username":"admin",
      "admin_password":"changeit",
      "admin_email":"admin@mydomain.com",
      "security_question":"Your favorite ice cream flavor?",
      "security_question_answer":"vanilla",
      "content_dir":"C:\\arcgisportal\\content",
      "setup":"C:\\ArcGIS\\10.5\\Portal\\Setup.exe",
      "authorization_file":"C:\\ArcGIS\\10.5\\Authorization_Files\\Portal.prvc",
      "keystore_file":"C:\\keystore\\mydomain_com.pfx",
      "keystore_password":"changeit",
      "security": {
        "user_store_config": {
          "type": "WINDOWS", 
          "properties": {
             "userPassword": "changeit",
             "isPasswordEncrypted": "false",
             "user": "DOMAIN\\user",
             "userFullnameAttribute": "cn",
             "userEmailAttribute": "mail",
             "caseSensitive": "false"
          }
        },
        "role_store_config": {
          "type": "WINDOWS", 
          "properties": {
            "user": "DOMAIN\\user",
            "userPassword": "changeit"
          }
        }
      }
    }
  },
  "run_list":[
    "recipe[arcgis-enterprise::portal_security]"
  ]
}