Database domain

Posted by wcastles on 02-Oct-2014 02:19

We have a requirement to set up multiple authentication system domains within our application database across our customer base. 
To facilitate this we would like to make it an automated step that runs as a part of our service pack process.
Does anyone out there know a way to set up an authentication system domain against a progress database with 4GL code, maybe calling a standard progress 4GL routine?

 

All Replies

Posted by wcastles on 02-Oct-2014 02:19

Oh, any any assistance much appreciated!

Posted by brucecraigie on 02-Oct-2014 03:22

Are you using the _oeusertable domain type with the standard _user authentication?

We may be able to help a little but we're not using _user for our regular user authentication in our first experiments with multi tenant databases

Posted by wcastles on 02-Oct-2014 04:52

Hey Bruce.  Long time no speak!

We're not using the _user for the legacy product but I believe our new product base on the Fluid framework might.  We're also not doing multi tenant at this stage.  As the new framework required a domain, our lagecy logins end up with a blank user ID when you view via proshut.  The solution is simple, create a second domain via the CHUI tools and code that into the legacy login program.  This works great but we were hoping to automate that task of adding the domains so we don't have to manually do it on all servers, probably about 150 all up.
 

[collapse]
On 2 October 2014 18:23, brucecraigie <bounce-brucecraigie@community.progress.com> wrote:
Reply by brucecraigie

Are you using the _oeusertable domain type with the standard _user authentication?

We may be able to help a little but we're not using _user for our regular user authentication in our first experiments with multi tenant databases

Stop receiving emails on this subject.

Flag this post as spam/abuse.




--

Warren Castles

Business Consultant

Sterland Computing Pty Ltd



 

T +61 2 4365 7400

M +61 412 266633
+61 2 4365 6544

Skype warren.castles.sterland
PO Box 3382, Erina NSW 2250

www.sterland.com.au

Refer to the Sterland Knowledge Base (skb.sterland.com) to view and search for all Sterland product information including Training Manuals, User Guides, FAQs and Videos.


Confidentiality

This email intended for the recipients named above may contain privileged and confidential information. Accordingly, if you are not the person named or authorised by them you must not copy, distribute or take any action thereon. If you have received this message by mistake please let us know by reply email and then delete it from your system.


[/collapse]

Posted by Michael Jacobs on 02-Oct-2014 05:09

The Data Admin utility does this Domain & System maintenance using standard ABL code.    It's just tables that any user connection with ABL "Security Administrator" privileges can access.

_sec-authentication-domain

_sec-authentication-system

Look at the "Domain Security" dump files from your Data Admin utility, that will show you what would go where.

Posted by wcastles on 02-Oct-2014 05:12

Thanks Michael,

Will give that a go and report back.

[collapse]
On 2 October 2014 20:09, Michael Jacobs <bounce-mjacobs@community.progress.com> wrote:
Reply by Michael Jacobs

The Data Admin utility does this Domain & System maintenance using standard ABL code.    It's just tables that any user connection with ABL "Security Administrator" privileges can access.

_sec-authentication-domain

_sec-authentication-system

Look at the "Domain Security" dump files from your Data Admin utility, that will show you what would go where.

Stop receiving emails on this subject.

Flag this post as spam/abuse.




--

Warren Castles

Business Consultant

Sterland Computing Pty Ltd



 

T +61 2 4365 7400

M +61 412 266633
+61 2 4365 6544

Skype warren.castles.sterland
PO Box 3382, Erina NSW 2250

www.sterland.com.au

Refer to the Sterland Knowledge Base (skb.sterland.com) to view and search for all Sterland product information including Training Manuals, User Guides, FAQs and Videos.


Confidentiality

This email intended for the recipients named above may contain privileged and confidential information. Accordingly, if you are not the person named or authorised by them you must not copy, distribute or take any action thereon. If you have received this message by mistake please let us know by reply email and then delete it from your system.


[/collapse]

Posted by Tim Kuehn on 02-Oct-2014 07:35

Starting with 11.0 the platform includes API code that'll automate things like adding domains and the like. I think you can find references to it in the programming interfaces docs.

[collapse]
On Oct 2, 2014 5:53 AM, "wcastles" <bounce-wcastles@community.progress.com> wrote:
Reply by wcastles
Hey Bruce.  Long time no speak!

We're not using the _user for the legacy product but I believe our new product base on the Fluid framework might.  We're also not doing multi tenant at this stage.  As the new framework required a domain, our lagecy logins end up with a blank user ID when you view via proshut.  The solution is simple, create a second domain via the CHUI tools and code that into the legacy login program.  This works great but we were hoping to automate that task of adding the domains so we don't have to manually do it on all servers, probably about 150 all up.
 

[collapse]
On 2 October 2014 18:23, brucecraigie <bounce-brucecraigie@community.progress.com> wrote:
Reply by brucecraigie

Are you using the _oeusertable domain type with the standard _user authentication?

We may be able to help a little but we're not using _user for our regular user authentication in our first experiments with multi tenant databases

Stop receiving emails on this subject.

Flag this post as spam/abuse.




--

Warren Castles

Business Consultant

Sterland Computing Pty Ltd



 

T +61 2 4365 7400

M +61 412 266633
+61 2 4365 6544

Skype warren.castles.sterland
PO Box 3382, Erina NSW 2250

www.sterland.com.au

Refer to the Sterland Knowledge Base (skb.sterland.com) to view and search for all Sterland product information including Training Manuals, User Guides, FAQs and Videos.


Confidentiality

This email intended for the recipients named above may contain privileged and confidential information. Accordingly, if you are not the person named or authorised by them you must not copy, distribute or take any action thereon. If you have received this message by mistake please let us know by reply email and then delete it from your system.


Stop receiving emails on this subject.

Flag this post as spam/abuse.

[/collapse][/collapse]

Posted by Peter Judge on 02-Oct-2014 07:46

I did a couple of talks at the US PUG Challenge last year on this, with some supporting code.
The first was on the Basics of Identity Management in OE and the second on authorisation and other topics
(both links to slides).

There's also some working sample code at https://github.com/nwahmaet/IdM_Sample. You'll need at least OE 11.1 for this.

hth,

-- peter

This thread is closed