Monday, June 13, 2011

Reflecting LDAP attribute changes in WebSphere Portal immediately

To fix this problem have to disabling VMM and Puma caching.

There are two scenarios from where LDAP values get changed and those value wouldn't reflect in Portal immediately :
a) Explictly made changes in ADS via some tool or using ADS console
b) Some time ads policies are enforced and sometimes changes in some attribute values change the other attribute value internally.
Like - If we change password for user then password_last_set timestamp value will get updated automatically.

To disable VMM and PUMA caching here are the steps:

a.       Add a new entry in WP Puma Store Service to disable PUMA cache
                                                               i.      Login to IBM console goto “Resource environment entries -> WP PumaStoreService -> Custom properties”
                                                             ii.      Set the property store.puma_default.userManagement.cacheMode to false to turn off the PUMA cache. Ex-
store.puma_default.userManagement.cacheMode        false
b.      Use the $AdminTask to update the cache properties accordingly. To turn off the cache for the LDAP in VMM
                                                               i.      Open a command prompt
                                                             ii.      Switch to wp_profile/bin and type wsadmin
                                                            iii.      Run the following command to disable attribute caching
1.       $AdminTask updateIdMgrLDAPAttrCache {-id TestADS -enabled false}
2.       $AdminConfig save
                                                           iv.      Run the following command to disable searchresult caching
1.       $AdminTask setIdMgrLDAPSearchResultCache {-id TestADS -enabled false}
2.       $AdminConfig save

I had followed this link also tuning of WebSphere Portal Caching is described on this page -
http://www-01.ibm.com/support/docview.wss?uid=swg21379992

1 comment:

  1. Great note! I need help in this issue.

    How can I get my "id" value?

    The one that you´re using as "TestADS"

    ReplyDelete