5 Replies Latest reply: Nov 7, 2011 10:46 AM by Alex NameToUpdate RSS

Atrium SSO with JBOSS and Linux

Alex NameToUpdate

Hello,

 

We have our ARSystem running on Linux using JBoss as a midtier.  We are looking at using Atrium SSO and I have some questions

 

1) Is it worth using Atrium SSO when we are just using ARSystem.  We MIGHT use other components down the line but as of now we are just using ARSystem

2) Does Atrium SSO work with JBoss?  I only see Tomcat references in the documentation

3) Are we able to install all components (Tomcat-if needed for Atrium SS), ARSystem and JBoss on one Linux machine

 

Thank you,


Alex

  • 1. Atrium SSO with JBOSS and Linux
    John Baker

    Alex,

     

    1. AtriumSSO doesn't provide SSO for the BMC Mid Tier. See this link: http://www.javasystemsolutions.com/jss/ssoplugin/comparisons

     

    2. JBoss uses a Tomcat engine, so any Tomcat based application should run in JBoss. The exact versioning of Tomcat/JBoss is a little tedious, because JBoss 4.2.3 is very old but has bits of Tomcat 5.5 in it. So the Tomcat component will accept the OpenSSO (which is AtriumSSO) JEE filter. BMC won't have tested it though.

     

    3. BMC recommend separate hardware for AtriumSSO. You could run it all together on one machine, but OpenSSO is a huge beast of a product (ie 650Mb of code that no-one understands), so you'll need something powerful.

     

     

    John Baker

    --

    SSO Plugin: Bringing BMC products together

    http://www.javasystemsolutions.com/jss/ssoplugin

  • 2. Atrium SSO with JBOSS and Linux
    Matt Laurenceau

    Hi Alex.

     

    1. Is it worth running Atrium SSO with only AR?

     

    While the real merit of Atrium SSO is the ability to support SSO between BMC products, adding Atrium SSO to an AR System brings in additional authentication capabilities. For example, Atrium SSO 7.6.04 supports RSA SecurId and CAC, in addition to LDAP/AD. Also, differing authentication modules can be combined using chaining to perform as a single authentication source.

     

    Even if the decision to not use Atrium SSO now with a single AR Server is made, Atrium SSO can be added to the system later when the capabilities provided can be put to better use.

     

    2. Does Atrium SSO work with JBoss?

     

    Yep, tested and supported.

    The Atrium SSO server runs in a Tomcat v6 container on Windows, Linux, or Solaris. However, the BMC products which integrate with Atrium SSO run on all of these platforms along with AIX and HP/UX, and, in addition, the containers JBoss 4 & 5, Tomcat 5.5, Websphere 6 & 7, Weblogic 10, and ServletExec 5 & 6.

     

    3. Can I run all three components on same Linux machine?

     

    It depends. The main limiting factors would be the number of AR applications desired, the number of users accessing system, and the amount of load those users would generate.

     

    Countering these factors would of course be the hardware used to run the components.

     

    Generally, the load on the Atrium SSO server isn't very much (as compared to the AR server, mid-tier, or the AR database) as the SSO server is mainly used for login and then to validate sessions during the users work time.

     

    Bench ideas: on a small dev box (4gb, 2-3.0GHz CPU) showed Atrium SSO could support 4,000+ simultaneous users WITH caching turned off (default cache is 3 minutes) AND the system never came near 100% load (60%-70%).

     

    ~ Matt Laurenceau

    Senior Community Ambassador, BMC Communities

    Matthieu_laurenceau@bmc.com

    Follow me @Matt_L

    Skype: matt.laurenceau

  • 3. Atrium SSO with JBOSS and Linux
    John Baker

    Matt

     

    It's important that users understand AtriumSSO, also known as OpenSSO, was never designed for AR System and does not bring BMC products together. Each one has a separate user repository, and with AtriumSSO, users have to manage a user repository for each product.

     

    Indeed, there are knowledge base articles on the issue, discussed in this ARSlist post: http://www.javasystemsolutions.com/arslist/view/89041729

     

     

    John Baker

    --

    SSO Plugin: Bringing BMC products together

    http://www.javasystemsolutions.com/jss/ssoplugin

  • 4. Atrium SSO with JBOSS and Linux
    Matt Laurenceau

    Alex, is there something else you need ?

  • 5. Atrium SSO with JBOSS and Linux
    Alex NameToUpdate

    Thank you all for the information.  This has definitely helped in what we are trying to accomplish