5.13 Configuring the Connector for IBM FileNet

AEM forms supports IBM FileNet, versions 5.0 and 5.2 only. Make sure your ECM is upgraded accordingly.

Note: AEM forms supports FileNet 5.2 Content Engine; FileNet 5.2 Process Engine is not supported.

If you installed Connector for IBM FileNet as part of your AEM forms, you must configure the service to connect to the FileNet object store.

Complete the following procedure to configure Connector for IBM FileNet.

Log in to WebSphere Administrative Console, click Servers > Server Types > WebSphere application servers , and then click the name of the server instance to configure (for example, server1).
Under Server Infrastructure, click Java and forms workflow > Process Definition .
Under Additional Properties, click Java Virtual Machine .
Click Apply and then click Save to Master Configuration .
Locate the adobe-component-ext.properties file in the [appserver root] /profiles/[profile name] folder (if the file does not exist, create it).
Add a new system property that provides the location of these FileNet Application Engine JAR files:

For FileNet 5.x add following JAR files
- Jace.jar
- javaapi.jar
- log4j.jar
- pe.jar
- stax-api.jar
- xlxpScanner.jar
- xlxpScannerUtils.jar
Note: Add the pe.jar file only if your deployment uses the IBMFileNetProcessEngineConnector service. The new system property should reflect this structure:
```
[component id].ext=[JAR files and/or folders]
```
For example, using a default FileNet Application Engine installation on a Windows operating system, add the following system property on a new line with no line breaks and end the line with a carriage return:

Note: The following text contains formatting characters for line breaks. If you copy this text to a location outside this document, remove the formatting characters when you paste it to the new location.
```
com.adobe.livecycle.ConnectorforIBMFileNet.ext= 
C:/Program Files/FileNet/AE/CE_API/lib2/javaapi.jar, 
C:/Program Files/FileNet/AE/CE_API/lib2/log4j-1.2.13.jar
```
(FileNet Process Engine Connector only) Configure the connection properties for the process engine as follows:
- Using a text editor, create a file with the following content as a single line and end the line with a carriage return:
  
  (FileNet 5.0 only)
```
RemoteServerUrl = cemp:http://[contentserver_IP]:[contentengine_port]/wsi/FNCEWS40DIME/
```
  (FileNet 5.2 only)
```
RemoteServerUrl = cemp:http://[contentserver_IP]:[contentengine_port]/wsi/FNCEWS40MTOM/
```
- Save the file as WcmApiConfig.properties in a separate folder, and add the location of the folder that contains the WcmApiConfig.properties file to the adobe-component-ext.properties file.
  
  For example, if you save the file as c:/pe_config/WcmApiConfig.properties, add the path c:/pe_config to the adobe-component-ext.properties file.
  
  Note: The filename is case-sensitive.

Locate the file wsjaas.conf and add the following lines:

FileNetP8 {com.filenet.api.util.WSILoginModule required;}; 
FileNetP8WSI {com.filenet.api.util.WSILoginModule required;}; 
FileNetP8Engine 
    {com.ibm.ws.security.common.auth.module.proxy.WSLoginModuleProxy 
    required delegate=com.ibm.ws.security.common.auth.module. 
    WSLoginModuleImpl;}; 
FileNetP8Server 
    {com.ibm.ws.security.common.auth.module.proxy.WSLoginModuleProxy 
    required delegate=com.ibm.ws.security.common.auth.module. 
    WSLoginModuleImpl;}; 
FileNetP8KerberosService 
    {com.ibm.ws.security.common.auth.module.proxy.WSLoginModuleProxy 
    required delegate=com.filenet.engine.authentication.kerberos.login. 
    KrbServiceLoginModule; 
    com.ibm.ws.security.common.auth.module.proxy.WSLoginModuleProxy required 
    delegate=com.ibm.ws.security.server.lm.ltpaLoginModule; 
    com.ibm.ws.security.common.auth.module.proxy.WSLoginModuleProxy required  
    delegate=com.ibm.ws.security.server.lm. 
    wsMapDefaultInboundLoginModule;};

Note: By default, the wsjaas.conf file is located in the folder [appserver root] /profiles/ [profile name]/properties/.

If the application server is not currently running, start the server. Otherwise, stop and then restart the server.
( Applicable only if IBM FileNet and AEM forms are installed on the same WebSphere application server ) Verify that these settings have been implemented correctly in the WebSphere Administrative Console by doing the following:
- In the WebSphere Administrative Console navigation tree, click Security > Global security.
- Under Authentication, click Java Authentication and Authorization Service > Application logins .
- Click the FileNetP8 application login, and then click JAAS login modules .
  
  If the values on this page do not match the following, modify them:
  
  Module class name : "com.filenet.api.util.WSILoginModule"
  
  Authentication Strategy : REQUIRED
  
  Module Order : 1
  
  Click OK or Apply , and then click Save directly to master configuration .
Open a web browser and enter this URL:

http://[host]:[port]/adminui
Log in using the default user name and password:

User name : administrator

Password : password
Click Services > Connector for IBM FileNet .
Provide the Content Engine URL. For example, cemp:http://ContentEngineHostNameorIP:port/wsi/FNCEWS40MTOM?jaasConfigurationName=FileNetP8WSI
Provide all of the required FileNet repository information and, under Repository Service Provider Information, select IBM FileNet Repository Provider .

If your deployment uses the optional process engine service, under Process Engine Settings, select Use Process Engine Connector Service and specify the process engine settings. For more information, click the Help link in the upper-right corner of the page.

Note: The credentials that you provide in this step are validated later when you start the IBM FileNet repository services. If the credentials are not valid, an error is thrown and the services will not start.
Click Save and navigate to Services > Applications and Services > Service Management .
Select the check box next to each of these services and then click Start :
- IBMFileNetAuthProviderService
- IBMFileNetContentRepositoryConnector
- IBMFileNetRepositoryProvider
- IBMFileNetProcessEngineConnector (if configured)
If any of the services do not start correctly, verify the Process Engine settings.
Do one of the following tasks:
- To use the FileNet Authorization service (IBMFileNetAuthProviderService) to display content from a FileNet object store in the Resources view of Workbench, continue with this procedure. Using the FileNet Authorization service overrides the default AEM forms authorization and must be configured to log in to Workbench by using FileNet credentials.
- To use the AEM forms repository, log in to Workbench by using the super administrator credentials (by default, administrator and password ). The credentials provided in step 16 use the default AEM forms authorization service for accessing the default repository in this case.
Restart your application server.
Log in to administration console and click Settings > User Management > Domain Management .
Click New Enterprise Domain and then type a domain ID and name. The domain ID is the unique identifier for the domain. The name is a descriptive name for the domain.

When using DB2 for your AEM forms database, the maximum permitted length of the ID is 100 single-byte (ASCII) characters or 50 double-byte characters or 25 four-byte characters. (See “Adding enterprise domains” in Administration Help.)
Add a custom authentication provider:
- Click Add Authentication .
- In the Authentication Provider list, select Custom .
- Select IBMFileNetAuthProviderService and then click OK .
Add an LDAP authentication provider:
- Click Add Authentication .
- In the Authentication Provider list, select LDAP and then click OK .
Add an LDAP directory:
- Click Add Directory and, in the Profile Name box, type a unique name, and then click Next .
- Specify values for the Server , Port , SSL , Binding , and Populate page with options. If you select User for the Binding option, you must also specify values for the Name and Password fields.
- (Optional) Select Retrieve Base DN to retrieve base domain names, as required. When finished, click Next .
- Configure the user settings, click Next , configure group settings as required, and then click Next .
  
  For details about the settings, click Help link in the upper-right corner of the page.
Click OK to exit the Add Directory page, and then click OK again.
Select the new enterprise domain and click Sync Now . Depending on the number of users and groups in your LDAP network and the speed on your connection, the synchronization process may take several minutes.

(Optional) To verify the status of the synchronization, click Refresh and view the status in the Current Sync State column.
Navigate to Settings > User Management > Users and Groups .
Search for users that were synchronized from LDAP and perform these tasks:
- Select one or more users and click Assign Role .
- Select one or more AEM forms roles and click OK .
- Click OK a second time to confirm the role assignment.
Repeat this step for all users you want to assign roles to. For more information, click the Help link in the upper-right corner of the page.
Start Workbench and log in using the following credentials for the IBM FileNet repository:

User name: [username]@[repository_name]

Password: [password]

The FileNet object store should now be visible in the Resources view within Workbench. If you do not log in using the username @ repository name , Workbench attempts to log in to the default repository specified in step 16.
(Optional) If you intend to install the AEM forms Samples for Connector for IBM FileNet, create a FileNet object store named Samples and install the samples in that object store.

After you configure Connector for IBM FileNet, it is recommended that you see administration help for information about configuring Workbench functions properly with your FileNet repository.