Information Server web console - Configuring roles for LDAP group with & in name.

Technote (troubleshooting)


Problem(Abstract)

The following error occurs when editting an LDAP group definition, using Information Server web console , if the group name contains an ampersand '&' character :

The ID you entered contains invalid characters, re-enter the ID with valid characters and try again.
For a list of valid characters, click the help icon.

Resolving the problem

Prior to 11..3. Customers could edit the isfconfig.properties file to modify the list of valid characters. Starting with IIS 11.3 and above, the isfconfig.properties file is no longer used.

The properties are now saved in the repository.

1- You can list the property by running:
sh-4.1# /opt/IBM/InformationServer/ASBServer/bin/iisAdmin.sh -display
-key com.ibm.iis.isf.security.directory.principalIdAllowedCharacters
com.ibm.iis.isf.security.directory.principalIdAllowedCharacters=_-,\
=$.@

2- You can set the new value by appending characters like / and & to
the end of the existing string:
/opt/IBM/InformationServer/ASBServer/bin/iisAdmin.sh -key
com.ibm.iis.isf.security.directory.principalIdAllowedCharacters -set
-value "_-,\ =$.@/&"

3- Stop and restart the WebSphere Application Server.

4- Confirm you are now able to edit roles assignments for LDAP groups
with / and & in name.

Popular posts from this blog

Shrink you container size up to 95%.

alma linux: dnf Module yaml error: Unexpected key in data