Partitioning Analytics Data Oracle Fusion Middleware Online Documentation Library

Managing the Announcements and Discussions Services 14-3

14.2.1.1 Discussions Server - High Availability Installation

To set up Oracle WebCenter Discussions for high availability, install the WC_Collaboration domain in a clustered environment. Then log on to the Oracle WebCenter Discussions admin console, go to the Cache Features page, and select to enable clustering Figure 14–1 . Figure 14–1 Cache Features - Clustering

14.2.2 Discussions Server - Configuration

You can view, set, and remove Oracle WebCenter Discussions server system properties with the following WLST commands: ■ getDiscussionsServerProperty ■ setDiscussionsServerProperty ■ removeDiscussionsServerProperty For command syntax and examples, see the section, addDiscussionsServerAdmin in Oracle Fusion Middleware WebLogic Scripting Tool Command Reference. Additionally, the addDiscussionsServerAdmin command grants system administrator permissions on the discussions server to a user or a group. This command is useful when you connect the discussions server to a new identity store that does not contain any of the current administrators. For command syntax and examples, see the section, addDiscussionsServerAdmin in Oracle Fusion Middleware WebLogic Scripting Tool Command Reference. The syncDiscussionServerPermissions command WebCenter Spaces only synchronizes discussion server permissions for subspaces that inherit security from their parent. For command syntax and examples, see the section, syncDiscussionsServerPermissions in Oracle Fusion Middleware WebLogic Scripting Tool Command Reference.

14.2.3 Discussions Server - Security Considerations

■ WS-Security establishes a trust relationship between your WebCenter application and Oracle WebCenter Discussions so that your WebCenter application can pass the user identity information to the server without knowing the users credentials. Configure OWSM WS-Security for WebCenter Discussions, depending on your topology, following either Section 32.1.3, Configuring the Discussions Server for a Simple Topology, Section 32.2.3, Configuring the Discussions Server for a Typical Note: To execute discussion server WLST commands, such as syncDiscussionServerPermissions, the user used to connect to the Admin Server must also have administrative privileges on the discussion server. 14-4 Oracle Fusion Middleware Administrators Guide for Oracle WebCenter Topology, or Section 32.3.3, Configuring the Discussions Server for a Complex Topology. ■ Oracle WebCenter Discussions-specific Web Services messages sent by WebCenter applications to Oracle WebCenter Discussions server are not encrypted. For message confidentiality, access the Discussions server URL over Secure Socket Layer SSL or protect the Web Service end points with an OWSM policy. For more information, see Chapter 31, Configuring SSL and Chapter 32, Configuring WS-Security. ■ By default, Oracle WebCenter Discussions is configured to use the embedded LDAP identity store: All users in the embedded LDAP store can log on to the discussions server, and all users in the Administrators group have administrative privileges on Oracle WebCenter Discussions. For your production environment, you must reassociate the identity store with an external LDAP server, as described in Section 28.1, Reassociating the Identity Store with an External LDAP Server. In addition, you must either move the Fusion Middleware administrator account to the external LDAP as described in Section 28.5, Moving the Administrator Account to an External LDAP Server , or if you choose not to move the administrator account, you must perform some additional steps to identify the new administrator account for the discussions server as described in Section 28.5.1, Migrating the WebCenter Discussions Server to Use an External LDAP. ■ You can configure Oracle WebCenter Discussions to leverage single sign-on security using Oracle Access Manager, Oracle Single Sign-On, or SAML-based single sign-on. For information, see Chapter 30, Configuring Single Sign-on. For additional Discussions-specific configuration instructions for Oracle Access Manager OAM, see also Chapter 30.2.6.2, Configuring the Discussions Server for SSO. ■ If WebCenter is not integrated with a single sign-on solution, then different login sessions are required for the owc_discussion user owc_discussions and the owc_discussion admin user owc_discussionsadmin. ■ User Identity: User identity management is handled by authentication providers settings specified in Oracle WebLogic Server using custom JPS Auth Factory. To check that the correct auth factory is running, go to Oracle WebCenter Discussions admin console Systems Properties page and confirm the following property values: – owc_discussions.setup.complete_11.1.1.2.0=true – AuthFactory.className=oracle.jive.security.JpsAuthFactory Note: If you set up SAML single sign-on, with WebCenter Spaces as the source application and Oracle WebCenter Discussions as the destination application, then you can access Oracle WebCenter Discussions administration pages from WebCenter Spaces as follows: ■ Space Settings Services page ■ Administration Configuration Services page However, because the administration pages of Oracle WebCenter Discussions do not participate in single sign-on, if you access the administration pages directly, you are required to log in to Oracle WebCenter Discussions again.