5 Replies Latest reply: Nov 7, 2011 10:46 AM by Alex NameToUpdate RSS

    Atrium SSO with JBOSS and Linux

    Alex NameToUpdate

      Hello,

       

      We have our ARSystem running on Linux using JBoss as a midtier.  We are looking at using Atrium SSO and I have some questions

       

      1) Is it worth using Atrium SSO when we are just using ARSystem.  We MIGHT use other components down the line but as of now we are just using ARSystem

      2) Does Atrium SSO work with JBoss?  I only see Tomcat references in the documentation

      3) Are we able to install all components (Tomcat-if needed for Atrium SS), ARSystem and JBoss on one Linux machine

       

      Thank you,


      Alex

        • 1. Atrium SSO with JBOSS and Linux
          John Baker

          Alex,

           

          1. AtriumSSO doesn't provide SSO for the BMC Mid Tier. See this link: http://www.javasystemsolutions.com/jss/ssoplugin/comparisons

           

          2. JBoss uses a Tomcat engine, so any Tomcat based application should run in JBoss. The exact versioning of Tomcat/JBoss is a little tedious, because JBoss 4.2.3 is very old but has bits of Tomcat 5.5 in it. So the Tomcat component will accept the OpenSSO (which is AtriumSSO) JEE filter. BMC won't have tested it though.

           

          3. BMC recommend separate hardware for AtriumSSO. You could run it all together on one machine, but OpenSSO is a huge beast of a product (ie 650Mb of code that no-one understands), so you'll need something powerful.

           

           

          John Baker

          --

          SSO Plugin: Bringing BMC products together

          http://www.javasystemsolutions.com/jss/ssoplugin

          • 2. Atrium SSO with JBOSS and Linux
            Matt Laurenceau

            Hi Alex.

             

            1. Is it worth running Atrium SSO with only AR?

             

            While the real merit of Atrium SSO is the ability to support SSO between BMC products, adding Atrium SSO to an AR System brings in additional authentication capabilities. For example, Atrium SSO 7.6.04 supports RSA SecurId and CAC, in addition to LDAP/AD. Also, differing authentication modules can be combined using chaining to perform as a single authentication source.

             

            Even if the decision to not use Atrium SSO now with a single AR Server is made, Atrium SSO can be added to the system later when the capabilities provided can be put to better use.

             

            2. Does Atrium SSO work with JBoss?

             

            Yep, tested and supported.

            The Atrium SSO server runs in a Tomcat v6 container on Windows, Linux, or Solaris. However, the BMC products which integrate with Atrium SSO run on all of these platforms along with AIX and HP/UX, and, in addition, the containers JBoss 4 & 5, Tomcat 5.5, Websphere 6 & 7, Weblogic 10, and ServletExec 5 & 6.

             

            3. Can I run all three components on same Linux machine?

             

            It depends. The main limiting factors would be the number of AR applications desired, the number of users accessing system, and the amount of load those users would generate.

             

            Countering these factors would of course be the hardware used to run the components.

             

            Generally, the load on the Atrium SSO server isn't very much (as compared to the AR server, mid-tier, or the AR database) as the SSO server is mainly used for login and then to validate sessions during the users work time.

             

            Bench ideas: on a small dev box (4gb, 2-3.0GHz CPU) showed Atrium SSO could support 4,000+ simultaneous users WITH caching turned off (default cache is 3 minutes) AND the system never came near 100% load (60%-70%).

             

            ~ Matt Laurenceau

            Senior Community Ambassador, BMC Communities

            Matthieu_laurenceau@bmc.com

            Follow me @Matt_L

            Skype: matt.laurenceau

            • 3. Atrium SSO with JBOSS and Linux
              John Baker

              Matt

               

              It's important that users understand AtriumSSO, also known as OpenSSO, was never designed for AR System and does not bring BMC products together. Each one has a separate user repository, and with AtriumSSO, users have to manage a user repository for each product.

               

              Indeed, there are knowledge base articles on the issue, discussed in this ARSlist post: http://www.javasystemsolutions.com/arslist/view/89041729

               

               

              John Baker

              --

              SSO Plugin: Bringing BMC products together

              http://www.javasystemsolutions.com/jss/ssoplugin

              • 4. Atrium SSO with JBOSS and Linux
                Matt Laurenceau

                Alex, is there something else you need ?

                • 5. Atrium SSO with JBOSS and Linux
                  Alex NameToUpdate

                  Thank you all for the information.  This has definitely helped in what we are trying to accomplish