ibm-cloud-architecture / refarch-integration-utilities

This project is for the sources of different script to manage a utility server used for IBM secure gateway client, jenkins and other things.

Integration Utility Server

This project is used to define a Utility server used to host the following components:

• IBM secure gateway client
• jenkins server for CI/CD
• LDAP server for simple user management

This project is part of the 'IBM Integration Reference Architecture' suite, available at https://github.com/ibm-cloud-architecture/refarch-integration

Server configuration

The image for this vm is ubuntu 16.10. The following steps can be done manually to create a VM with Ubuntu inside the vmware vSphere center.

• Create a vm machine for a Ubuntu (64 bits) OS using ESXi 5.5, set the max disk size to 16G
• Get the iso image for ubuntu 16.10
• Create a user brownuser (pwd is brownuser01)
• no http proxy
• be sure to select automattic security update
• no specific software package
• install GRUB loaded on main hard disk
• change root password using sudo passwd root
• setup ssh server
• disable firewall

To validate the OS version user

$ lsb_release -a

For details on how the installation is done see the following instructions.

Secure Gateway configuration

The article goes in details on how to configure IBM secure gateway service in Bluemix and the client configuration.

Continuous integration with Jenkins

See details in this note

LDAP configuration

The LDAP server used in this project is openLDAP. It was configured via the following instructions: https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-a-basic-ldap-server-on-an-ubuntu-12-04-vps The base DNs of the LDAP server is dc=csplab dc=local.

Once installed, PHPldapadmin was installed and configured following instructions from the link above. See config.php.

The following structure was done for testing:

To validate the LDAP server is working fine execute the command ldapsearch -x -LLL -h 172.16.50.9 -b "dc=csplab,dc=local", it should return something like:

dn: dc=csplab,dc=local
objectClass: top
objectClass: dcObject
objectClass: organization
o: csplab
dc: csplab

dn: cn=admin,dc=csplab,dc=local
objectClass: simpleSecurityObject
objectClass: organizationalRole
cn: admin
description: LDAP administrator

dn: ou=csplab,dc=csplab,dc=local
objectClass: organizationalUnit
objectClass: top
ou: csplab

dn: cn=csplab-group,ou=csplab,dc=csplab,dc=local
gidNumber: 500
cn: csplab-group
objectClass: posixGroup
objectClass: top

dn: cn=boyerje,cn=csplab-group,ou=csplab,dc=csplab,dc=local
givenName: Jerome
gidNumber: 500
homeDirectory: /home/users/boyerje
sn: boyer
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: top
uidNumber: 1002
uid: boyerje
cn: boyerje
...