Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. update cadi.properties with the correct information for your environment. /opt/onap/appc/data/properties/cadi.properties

        properties include:

            hostname= usually machine hostname, should be unique

             aaf_url= AAF instance to connect to

            aaf_id= id used to connect to AAF

            aaf_password= password associated with aaf_id

            cadi_keyfile= keyfile used for password encryption

  2. edit aaa-aap-config.xml

        /opt/opendaylight/current/etc/opendaylight/datastore/initial/config/aaa-app-config.xml

    1. swap commenting for tokenAuthRealm

          <main>

              <pair-key>tokenAuthRealm</pair-key>

              <pair-value>org.opendaylight.aaa.shiro.realm.TokenAuthRealm</pair-value>

              <!--         <pair-value>org.onap.aaf.cadi.shiro.AAFRealm</pair-value> -->

          </main>

      To

          <main>

              <pair-key>tokenAuthRealm</pair-key>

              <!--         <pair-value>org.opendaylight.aaa.shiro.realm.TokenAuthRealm</pair-value> -->

              <pair-value>org.onap.aaf.cadi.shiro.AAFRealm</pair-value>

          </main>


    2. swap urls for urls to be secured by AAF. NOTE: DO THIS FOR ALL URLS USING authcBasic

              <urls>

                  <pair-key>/**</pair-key>

                  <pair-value>authcBasic, roles[admin]</pair-value>

                  <!--         <pair-value>authcBasic, roles[org.onap.appc.odl|odl-api|*]</pair-value> -->

              </urls>

      To

              <urls>

                  <pair-key>/**</pair-key>

                  <!--         <pair-value>authcBasic, roles[admin]</pair-value> -->

                  <pair-value>authcBasic, roles[org.onap.appc.odl|odl-api|*]</pair-value>

              </urls>

         

  3. When you save the aaa-app-config.xml shiro should automatically reload the new configuration, if not you may need to restart APPC

...