ibm-messaging / mq-container

Container images for IBM® MQ
Apache License 2.0
255 stars 189 forks source link

Configuring Acitive Directory integration for the Web Console #570

Open aheyers opened 4 months ago

aheyers commented 4 months ago

We are trying to integrate the web console with Active Directory but encountering issues. I checked the path /var/mqm/web/installations/Installation1/servers/mqweb/ but there is no change in configuration.

We have created below config map and gave its reference in IBM MQ helm chart.

We defined this in the values.yaml as in the example.

`` values.yaml

web: enabled: true manualConfig: configMap: name: mywebconfig items:

And added a configmap.

mywebconfig.yaml

kind: ConfigMap apiVersion: v1 metadata: name: mywebconfig data: mqwebuser.xml: |-

appSecurity-2.0 ldapRegistry-3.0 basicAuthenticationMQ-1.0

`` So my question is if the file somewhere else or is there some missing step to apply changes? What is the correct configuration needed to successfully integrate the web console with AD?

arthurbarr commented 4 months ago

You mention that you are using a Helm chart. Are you using the sample Helm chart here? The formatting of the YAML in your example has gotten lost, but the documentation on supplying web configuration doesn't specify an items element. The indentation is also important here.

From a container perspective (rather than the Helm chart perspective), then the files from /etc/mqm/web/ are copied over to /var/mqm/web when the container starts up. The Helm chart mounts the ConfigMap into that location. So the file should be showing up under /var/mqm/web/installations/Installation1/servers/mqweb/mqwebuser.xml — if it's not, then the problem is probably with the Helm chart mounting it correctly (you can also check in /etc/mqm/web.