Page History

...

1. update cadi.properties with the correct information for your environment.
       /opt/onap/appc/data/properties/cadi.properties
   

       properties include:

           hostname= usually machine hostname, should be unique

            aaf_url= AAF instance to connect to

           aaf_id= id used to connect to AAF

           aaf_password= password associated with aaf_id

           cadi_keyfile= keyfile used for password encryption

2. edit aaa-aap-config.xml

       /opt/opendaylight/current/etc/opendaylight/datastore/initial/config/aaa-app-config.xml

   1. swap commenting for tokenAuthRealm

          <main>

              <pair-key>tokenAuthRealm</pair-key>

              <pair-value>org.opendaylight.aaa.shiro.realm.TokenAuthRealm</pair-value>

              <!--         <pair-value>org.onap.aaf.cadi.shiro.AAFRealm</pair-value> -->

          </main>

      To

          <main>

              <pair-key>tokenAuthRealm</pair-key>

              <!--         <pair-value>org.opendaylight.aaa.shiro.realm.TokenAuthRealm</pair-value> -->

              <pair-value>org.onap.aaf.cadi.shiro.AAFRealm</pair-value>

          </main>

      
      

   2. swap urls for urls to be secured by AAF. NOTE: DO THIS FOR ALL URLS USING authcBasic

              <urls>

                  <pair-key>/**</pair-key>

                  <pair-value>authcBasic, roles[admin]</pair-value>

                  <!--         <pair-value>authcBasic, roles[org.onap.appc.odl|odl-api|*]</pair-value> -->

              </urls>

      To

              <urls>

                  <pair-key>/**</pair-key>

                  <!--         <pair-value>authcBasic, roles[admin]</pair-value> -->

                  <pair-value>authcBasic, roles[org.onap.appc.odl|odl-api|*]</pair-value>

              </urls>

         

3. When you save the aaa-app-config.xml shiro should automatically reload the new configuration, if not you may need to restart APPC

...