RSDB Installation & Configuration. Now run the RSDB installer. Double click the file named [DTTM]_Install_Survey_Server.exe.

RSDB Installation&

Configuration

Now run the RSDB installer.Double click the file named ‘[DTTM]_Install_Survey_Server.exe’

Click ‘I Agree’

Change the Installation Path,if desired, and click ‘Next’

** NOTE: Do NOT install RSDB in a path containing aspace character, i.e. under “Program Files” or somethinglike it.

Click ‘Install’

The Installer will check for the requiredversion of Java 1.5

If NOT found the Java installer will berun automatically.

If found, the installer will continue to itsnext step.

Click ‘Close’

Installation of the AFRL RSDBis now complete.

The installer will now copy allRSDB files to the selected drive.When finished, “Completed” willbe shown in the installer windowand the Close button will be active.

End RSDB Installation

Next you will need to configure the Active Directory (LDAP) login module and start the database & server, then perform

some additional e-mail configuration.

Active Directory (LDAP) Login Module Configuration

You will need to know:+ The IP Address of the machine hosting your Active Directory services+ Whether SSL (secure-mode) is enabled for these services+ The ‘User Search Base’ path

EX: DC=jbi-dev,DC=rl,DC=af,DC=mil+ The ‘User Domain’

EX: @jbi-dev.rl.af.mil+ The attributes where certain information is stored including:

a) Common Name (i.e. Last, First, MI)b) E-Mail Addressc) Telephone Numberd) Assigned Unit Identifier (i.e. AFRL)

The Active Directory (LDAP) login-module is what controls the authentication processfor the RSDB. This needs to be configured to point to your local Active Directory serverto integrate existing user accounts with the RSDB system.

The login-module is found under the following path:[INSTALLATION-PATH-HERE]\jboss-4.2.2.GA\server\default\conf\login-config.xml

This file is written in XML (eXtensible Markup Language)

To modify the settings for the RSDB Active Directory integration, find the entry shown below:

<!-- RSDB LDAP login module --><!-- if ssl is enabled (true), url port must change from 389 to 636 --><application-policy name="JBIDomain"> <authentication> <login-module code="mil.af.rl.oim.server.security.loginmodules.OimLdapLoginModule" flag="sufficient"> <module-option name = "url">ldap://155.244.60.153:389</module-option> <module-option name = "userSearchBase">DC=jbi-dev,DC=rl,DC=af,DC=mil</module-option> <module-option name = "userDomain">@jbi-dev.rl.af.mil</module-option> <module-option name = "allowEmptyPasswords">false</module-option> <module-option name = "sslEnabled">false</module-option> <module-option name = "keyStore"></module-option> <module-option name = "commonNameAttr">commonName</module-option> <module-option name = "emailAttr">email</module-option> <module-option name = "phoneAttr">telephoneNumber</module-option> <module-option name = "unitAttr">department</module-option> </login-module> <login-module code="mil.af.rl.jbi.platform.server.security.util.SRSLoginModule" flag="required"> </login-module> </authentication></application-policy>

<!-- RSDB LDAP login module --><!-- if ssl is enabled (true), url port must change from 389 to 636 --><application-policy name="JBIDomain"> <authentication> <login-module code="mil.af.rl.oim.server.security.loginmodules.OimLdapLoginModule" flag="sufficient"> <module-option name = "url">ldap://155.244.60.153:389</module-option> <module-option name = "userSearchBase">DC=jbi-dev,DC=rl,DC=af,DC=mil</module-option> <module-option name = "userDomain">@jbi-dev.rl.af.mil</module-option> <module-option name = "allowEmptyPasswords">false</module-option> <module-option name = "sslEnabled">false</module-option> <module-option name = "keyStore"></module-option> <module-option name = "commonNameAttr">commonName</module-option> <module-option name = "emailAttr">email</module-option> <module-option name = "phoneAttr">telephoneNumber</module-option> <module-option name = "unitAttr">department</module-option> </login-module> <login-module code="mil.af.rl.jbi.platform.server.security.util.SRSLoginModule" flag="required"> </login-module> </authentication></application-policy>

If SSL (secure-mode) is enabled for your Active Directory services:1.) change the port to 636

<module-option name = "url">ldap://[YOUR-SERVER-IP-HERE]:636</module-option>

2.) change “sslEnabled” to true <module-option name = "sslEnabled">true</module-option>

1.) Start by changing the “url” to the IP Address of your local Active Directory server <module-option name = "url">ldap://[YOUR-SERVER-IP-HERE]:389</module-option>

2.) Next change the “userSearchBase” to the one for your specific Active Directory tree <module-option name = "userSearchBase">[YOUR-SEARCH-BASE-HERE]</module-option>

3.) Next change the “userDomain” to reflect your user domain setting <module-option name = "userDomain">@[YOUR-USER-DOMAIN-HERE]</module-option>

4.) Finally change the “commonNameAttr”, “emailAttr”, “phoneAttr”, & “unitAttr” to their respectivecounterparts within your Active Directory tree, if necessary (some may be the same)

<module-option name = "commonNameAttr">[COMMON-NAME-ATTR-ID-HERE]</module-option><module-option name = "emailAttr">[EMAIL-ATTR-ID-HERE]</module-option><module-option name = "phoneAttr">[PHONE-#-ATTR-ID-HERE]</module-option><module-option name = "unitAttr">[UNIT-ID-ATTR-ID-HERE]</module-option>

Starting the RSDB

To start the RSDB server, double click the ‘Run_Apollo_Server.bat’ file

This will result in 2windows opening.

1 is the database1 is the application server

Look for the messagescircled here to tell youthat both have startedsuccessfully.

E-Mail Integration

This section explains how to set the necessary properties for successful e-mail integration between the AFRL RSDB and your local MS Exchange e-mail server.

You will need:+ The IP Address of your Exchange E-Mail server+ Your exchange server MUST be set to allow SMTP receive of e-mail messages

Open your web browser and go to:https://[IP-ADDRESS-OF-SERVER-HERE]:8443/web-console

When asked to proceed, select ‘Yes’

When prompted enter the Administrator user name and password and click ‘OK’.The default password for this account is ‘moniker’

If asked, accept any certificates and allow anything from the ‘JBI Crew’to be run (as shown below)

The web console you are loading is a Java applet and needs yourpermission to execute, that is why you are being prompted.

The IP Address of the machine running the RSDB will appear here

At the top left there will be a ‘System’ label, expand this using the tick mark.If the ‘System’ label does not appear, go to Slide 41 to configure the workflow servicemanually (will require a restart of the RSDB server).

Expand the ‘JMX MBeans’ label.

Scroll all the way down to the bottom of the shown choices and expand the label:mil.af.rl.oim.server.sws.mbean

Click once on the ‘mil.af.rl.oim.server.sws.mbean:service’ entry that appearsThis loads the settings for the selected service in the main browser area.

Enter the IP or Common Name address of your Exchange E-mail server in theSmtpServerAddress field and click the ‘Apply Changes’ button.

To test the e-mail integration, scroll down and find the method named‘sendTestMessage()’ Enter a valid e-mail address and click ‘Invoke’

If ‘sendTestMessage()’ FAILS – Go to Slide 23 for Troubleshooting

STOP! Complete the steps detailed on this slide ONLY if the ‘System’ label Failed to appear in the web browser window as shown in Slide 36

1.) Shutdown JBoss and Berkeley by clicking once on the respective windows and hitting CTRL+C

2.) Wait for the message shown below in both windows, type ‘y’ and hit ‘Enter’

3.) Open the file at this location in a text editor: [INSTALL-PATH-HERE]/jboss-4.2.2.GA/bin/cot/workflow-config.xml

Workflow-config.xml<?xml version="1.0" encoding="UTF-8"?><workflow> <ExpiryYearOffset value="5"/> <SmtpServerAddress value="fohfwb003.oh.afmc.af.mil"/> <Password value="moniker"/> <LoggingLevel value="1"/> <CotTypeName value="mil.af.rl.cot"/> <CotVersionNumber value="1.0"/></workflow>

4.) Change the ‘value’ attribute of the ‘SmtpServerAddress’ node to be the address of your SMTP e-mail server

5.) Save and close the file

6.) See slides 23-25 for instructions on how to start the RSDB server

7.) If using this method because the ‘System’ label failed to appear in the web browser, the only way to test the e-mail integration is to publish a new survey as an Author.

Troubleshooting SMTP E-Mail Connectivity

• AFRL Server– McAffee

• Access Protections– Allow Access for Port 25

• Exchange Server– McAffee

• Access Protections– Allow Access for Port 25

– MS Exchange• Allow Anonymous Access• Enable No Authentication• Add the AFRL Server IP to Relay Mail Allow List

End E-Mail Integration

Workflow Groups

• The necessary workflow groups will be created the first time the JBoss server is successfully started.

• Default Groups– Authors– Ops– Intel– Reviewers– Approvers

End RSDB Configuration