Get the zip file: Crowd 1.2.2 (check site for latest stable version)

[root@idm-dev crowd-1.2.2]# ./start_crowd.sh 
Neither the JAVA_HOME nor the JRE_HOME environment variable is defined
At least one of these environment variable is needed to run this program

• Install Java SDK 1.5+ (got jdk-6u4-linux-i586-rpm.bin from sun)
• export JAVA_HOME=/usr/java/jdk1.6.0_04

start_crowd.sh

We modified the start up script thusly:

#! /bin/sh

# Set CATALINA_HOME so tomcat's start script knows where it is
export CATALINA_HOME=./apache-tomcat

# Set Java HOME:
export JAVA_HOME=/usr/java/jdk1.6.0_04

# Set Java JRE memory options:
export JAVA_OPTS="-Xms512m -Xmx512m"

# Execute tomcat
exec apache-tomcat/bin/catalina.sh run

SSL

We created a keystore containing the development keys supplied by the test AD environment (for the Crowd -> AD connector) and the cert offered by the Tomcat server that comes with Crowd using a tool called InstallCert. The same could be done using keytool.

• InstallCert.java: InstallCert Tool from Sun

java InstallCert 
java InstallCert idm-dev.unet.brandeis.edu:8095

Apache+Crowd

See the documentaiton here.

Until a Brandeis RPM is made containing all these use RPMForge for the perl-IPC-ShareLite package.

rpm -Uhv http://apt.sw.be/packages/rpmforge-release/rpmforge-release-0.3.6-1.el5.rf.i386.rpm

Additional yum provided packages needed are:

• perl-Digest-SHA1
• perl-URI
• perl-XML-Parser
• perl-IPC-ShareLite

SSL Error Connecting Crowd to ActiveDirectory^?

We modified the ldap.conf file (in or around /etc/openldap/ldap.conf) to be less strict on enforcing the SSL cert. This should not be done on the production system but is ok for development.

• Do not use /etc/ldap.conf

tls_checkpeer no
TLS_REQCERT allow

SOAP API

To use the SOAP API with python SOAPpy is needed. Get it here Other Dependencies Included:

• fpconst 0.6.0 or later
• pyXML 0.8.3 or later, <http://pyxml.sourceforge.net>

Additionally ZSI is being tested:

• Install setuptools
• Install PyXML from the YUM repository (this seemed to have no effect on the ZSI egg and it installs it again)
• Then download and install the correct ZSI Egg
  • Note ZSI tries to install PyXML but fails due to missing header files (provided by python-devel) and then missing gcc
  • Install python-devel and gcc from YUM, install the egg, then remove python-devel and gcc
• The Crowd WSDL file has an issue, see this ticket

Database

Setup the database before running the install wizard. If crowd is being run in a cluster be sure the MySQL cluster is thought out.

• MySQL via JDBC

-- ChristopherPepe - 20 Feb 2008