CA Identity Manager Connector Guides › Connectors Guide › Managing Connectors

Managing Connectors

This section contains the following topics:

Deploy a Connector

Restart a Connector

Add a Third-Party Library to a Connector

Add a Certificate for a Connector

Find the Version of a Connector

Customize the Configuration for a Connector

Deploy a Connector

CA IAM Connector Server lets you hot-deploy connectors. This means that you can add, start, stop, and remove connectors while CA IAM Connector Server is running.

You can deploy connectors that came with your product, and connectors that you downloaded from the CA Support site.

Follow these steps:

1. If required, install the connector.
2. Log in to CA IAM Connector Server.
3. At the top, click the Connector Servers tab.
4. In the Connector Server Management area, click the Bundles tab.
5. In the Bundles area on the right, click Add.
6. Browse to a connector bundle JAR, then select the connector server on which this connector will be available.

   You can select Start Bundle to have it start automatically after loading, or you can start it yourself later.

7. Click OK.

   The new bundle appears in the Bundles list.

8. Right-click its name in the list, then choose Start from the popup menu.

Restart a Connector

Restarting a connector is useful when you have changed some configuration and you want the connector to use the new setting.

These instructions apply to connectors that CA IAM Connector Server manages.

Follow these steps:

1. Log in to CA IAM Connector Server.
2. Click the Connector Servers tab.
3. Click the Bundles tab.
4. Select the correct connector server from the Server Filter list.
5. Right-click on the connector, then select Refresh Imports.

   The selected connector restarts, and any bundles that depend on that connector also restart.

Add a Third-Party Library to a Connector

The following connectors require libraries that do not ship with CA IAM Connector Server:

• SecurID RSA 7
• SAP R3
• Oracle PeopleSoft
• Lotus Domino

If you want to use one of these connectors, you must add the required libraries to the connector bundle.

Follow these steps:

1. Download the required libraries.
2. Run the relevant script in this location:

   cs-home/bin
   

   The script prompts for the location of the files that you downloaded.

   The script creates a bundle for the libraries, and saves the bundle in the same folder as the script.

3. Log in to CA IAM Connector Server.
4. At the top, click the Connector Servers tab.
5. In the Connector Server Management area, click the Bundles tab.
6. Add the new bundle:

   Note: You can deploy the OSGI bundle from the connector server GUI or copy the jar files to ca-home/jcs/data/bundles/restore. Then restart the connector server and wait up to ten minutes for it to load.

   1. In the Bundles area on the right, click Add.
   2. Browse to the bundle that the script created, then select the connector server on which this connector will be available.
   3. Click OK.

      The new bundle appears in the Bundles list.

7. Find the main connector bundle in the Bundles list, then right-click its name in the list and select Refresh Imports from the popup menu.

The connector can now use the third-party library bundle.

Add a Certificate for a Connector

CA IAM Connector Server has its own keystore. You can add trusted certificates (either standalone certificates or keystores) to this keystore, using the Certificates tab.

When you work with CA IAM Connector Server certificates, your changes apply only to the connector server that you are logged in to. The certificates for any peer connector servers remain unchanged.

Follow these steps:

1. Log in to CA IAM Connector Server.
2. Click the Certificates tab.

   This tab lists all of the certificates in the CA IAM Connector Server keystore. To filter the list of certificates by their names, type in the Certificate Filter box.

3. Click Add, then enter the details of the certificate:
   1. Select Certificate if the target is a standalone certificate file, or Key Store, if it is saved in a keystore.
   2. Browse to the certificate, select it, and click Add.
   3. Enter the alias. If you selected Key Store, this alias identifies the certificate in the keystore.
   4. If you selected Key Store, enter the keystore password.

The certificate or keystore is added to the CA IAM Connector Server keystore, and the certificate is available for use by connectors.

Note the following information:

• To download a certificate, select it then click Download. You can download a certificate for either a private key or trusted certificate. You can then import this file another component, such as another instance of CA IAM Connector Server.
• To delete a certificate from the CA IAM Connector Server keystore, select it then click Remove. You can remove any trusted certificate from the CA IAM Connector Server keystore. However, you cannot remote private key entries, because these keys are required by CA IAM Connector Server.
• You cannot use the Certificates tab to manage private keys. Instead, update the Java keystore file and restart CA IAM Connector Server.

Find the Version of a Connector

To determine the version of a connector that is already installed, use CA IAM Connector Server.

The version of a bundle has the following format:

n.n.n.yyyymmdd

The first three numbers are separated by periods. These numbers represent the version of CA IAM Connector Server that the connector was supplied with. The remaining digits represent the release date of the connector itself.

In this example, the connector was released on 21 January 2013, and it was released with CA IAM Connector Server 1.1.0:

1.1.0.20130121

Follow these steps:

1. Log in to CA IAM Connector Server.
2. Click the Bundles tab.

   The version of each bundle is shown in the Version tab.

Customize the Configuration for a Connector

The configuration for each connector is stored in connector.xml in cs_home/jcs/conf/. Each connector also has the following files in cs_home/jcs/conf/override/connector:

• connector.xml—Use this file to override settings. By default this file is identical to the main version of connector.xml.
• SAMPLE.connector.xml—This template file contains common customizations.

Follow these steps:

1. Rename connector.xml so that you can revert to it later if you need to.
2. Copy SAMPLE.connector.xml and rename the copy to connector.xml.
3. Edit the newly renamed file.
4. Restart the connector.

Change Pool Settings

To maximize scalability for a connector by configuring it to match expected usage patterns, you can change pool-related settings.

Connection pooling is configured through the connector.xml file for an individual connector, rather than in the server_jcs.xml global configuration file.

Most connectors use a connection pool configured in connector.xml, for example, through:

• poolConfig for JNDI and most connectors.

  Note: For more information, see the Class GenericObjectPool on http://jakarta.apache.org

• dataSourceConfigProps for JDBC

  Note: For more information, see http://jakarta.apache.org for a complete list and documentation of available configuration parameters.

Follow these steps:

1. Copy cs_home/conf/override/jdbc/SAMPLE.connector.xml and rename the copy to connector.xml.
2. Edit the connector.xml file.
3. Restart the connector.