Deploy Documentum Using Apache Tomcat

 

Deploy Documentum Using Apache Tomcat in RHEL

Release:

Redhat Enterprise Linux 5.x

Apache Tomcat 6.0.14

Problem:

Need to deploy Documentum using apache tomcat in RHEL

Solution:

1)      Download the Apache tomcat from the below link

            http://archive.apache.org/dist/tomcat/tomcat-6/

2)      Copy tomcat to the server and extract the zip folder

      # cd /documentum

      # tar -zxvf apache-tomcat-6.0.14.tar.gz

      # ln -s apache-tomcat-6.0.14 tomcat

Note: Here tomcat dump copied to the “/documentum” directory. Also here one soft link created for the future purpose.

3)      Mention the java and jre home path in tomcat also mention the “PermSize” details also.

      # vi /documentum/tomcat/bin/catalina.sh

      JAVA_HOME=/usr/java/jdk1.6.0_24

      JRE_HOME=/usr/java/jdk1.6.0_24/jre

      JAVA_OPTS="$JAVA_OPTS -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Xms1024m -Xmx3072m -XX:PermSize=256m -XX:MaxPermSize=512m"

Note: Here “Xms” means that initial heap size and “Xmx” means that maximum heap size.

4)      To access the tomcat Manager url add the below entries in the “tomcat-users.xml” file

      # vi /documentum/tomcat/conf/tomcat-users.xml

  

Note: For accessing tomcat manager ( http://IPADDRESS:8080/manager ) use the above authentication “username=tomcat” and “password=tomcat”

5)      Also enable pooling option to access the documentum URL from the web.xml file

      # vi /documentum/tomcat/conf/web.xml

6)      Deploy the webtop and DA war files. Copy both the war files to the webapps directory

     

            # cp Webtop.war DA.war /documentum/tomcat/webapps

7)      Star the Apache Tomcat server using the below command.

      # /documentum/tomcat/bin/startup.sh

Note : To stop the tomcat use “/documentum/tomcat/bin/shutdown.sh”

8)      Edit the dfc.properties file to mention the repository

# /documentum/tomcat/webapps/webtop/WEB-INF/classes/dfc.properties

dfc.session.max_count=1000

dfc.docbroker.host[0]=server.example.com

dfc.globalregistry.repository=Global

dfc.globalregistry.username=dm_bof_registry

dfc.globalregistry.password=MmKZP8KOlvrE6ndUolyl6Q\=\=

Note: Here “server.example.com” is the server hostname and the “Global”  is the repository name.

Add Verisign Trail Certificate to Tomcat Server

 

Add Verisign Trail Certificate to Tomcat Server

Release:

Apache Tomcat 5.5

Windows Enterprise Server 2003

JDK 1.3.1 or later

Problem:

Need to add Verisign Trial Certificate to Apache Tomcat Server

Solution:

Creating the CSR file:

1. Create a certificate keystore and private key by executing the below command

C:\Program Files\Java\jre1.5.0_12\bin>keytool -genkey -alias tomcat -keyalg RSA -keystore C:\keystore -keysize 2048

Enter keystore password:  sbs@123

What is your first and last name?

  [Unknown]: YOUR DOMAIN NAME

What is the name of your organizational unit?

  [Unknown]:  YOUR ORGANIZATION NAME

What is the name of your organization?

  [Unknown]:  YOUR ORGANIZATION NAME

What is the name of your City or Locality?

  [Unknown]:  CHENNAI

What is the name of your State or Province?

  [Unknown]:  TAMILNADU

What is the two-letter country code for this unit?

  [Unknown]:  IN

Is CN= DOMAIN NAME, OU= ORGANIZATION NAME, O= ORGANIZATION NAME, L=CHENNAI, ST=TAMILNADU, C=IN correct?

  [no]:  YES

Enter key password for

        (RETURN if same as keystore password):  sbs@123

2. Create a  CSR (Certificate Signing Request) using the below command

C:\Program Files\Java\jre1.5.0_12\bin>keytool -certreq -keyalg RSA -alias tomcat -file certreq.csr -keystore c:\keystore

Enter keystore password:  sbs@123

Note: The above command create a file in C drive in a name “certreq.csr”.

Enroll the CSR file:

3. To verify the CSR go to the below link and  check the status

https://ssl-tools.verisign.com/checker/

4. First time to start the enrollment go to the below link and create an account. If you have a login id, login to your account and submit the CSR to Verisign.

https://www.verisign.com/ssl/buy-ssl-certificates/index.html

Install CA Certificate:

5. After submitting your CSR, Verisign will send one mail with  the original certificate.

6. Copy the Primary Intermediate CA from the below link and save it in a notepad as “primary_inter.cer”, also import this to keystore

http://www.verisign.com/support/verisign-intermediate-ca/Trial_Secure_Server_Root/index.html

C:\Program Files\Java\jre1.5.0_12\bin>keytool -import -trustcacerts -alias root -keystore c:\keystore -file c:\primary_inter.cer

7. Copy the Secondary Intermediate CA from the below link and save it in a notepad as “secondary_inter.cer”, also import this to keystore

http://www.verisign.com/support/verisign-intermediate-ca/trial-secure-server-intermediate/index.html

C:\Program Files\Java\jre1.5.0_12\bin>keytool -import -trustcacerts -alias intermediate t -keystore c:\keystore -file c:\secondary_inter.cer

Install the SSL Certificate:

8. Copy and paste the Verisign send certificate to a notepad and save the file as “cert.cer”, also import the SSL Certificates

C:\Program Files\Java\jre1.5.0_12\bin>keytool -import –alias tomcat -keystore c:\keystore -trustcacerts -file c:\cert.cer

Edit server.xml to enable SSL in tomcat 5.5:

9. Open the server.xml using the notepad ( location: C:\Program Files\Apache Software Foundation\Tomcat 5.5\conf ) and edit the below

          

port="80" maxHttpHeaderSize="8192" maxThreads="150" minSpareThreads="25" maxSpareThreads="75" enableLookups="false" redirectPort="443" acceptCount="100" connectionTimeout="20000" disableUploadTimeout="true" />  

    

  

     maxThreads="150" minSpareThreads="25" maxSpareThreads="75"     enableLookups="false" disableUploadTimeout="true" acceptCount="100" scheme="https" secure="true" clientAuth="false" sslProtocol="TLS" keystoreFile="c:\keystore" keystorePass="sbs@123"/>

10. Now restart the Tomcat application from “Services”  ( Run → services.msc ) and check the application.