Configuring SkyVault on JBoss with Solr installed on a Tomcat instance

This section describes how to configure Solr to communicate with SkyVault deployed on JBoss. The steps describe how to allow Solr to communicate with SkyVault deployed on JBoss 5.1 EAP.

Solr must be deployed on a separate Tomcat instance.

Ensure that SkyVault is installed on JBoss using the instructions described in the section Installing SkyVault on JBoss.

These steps assume that you know the path of the JBoss directory, which is represented as <JBOSS_HOME>.

Create a file called tomcat-users.xml in the <JBOSS_HOME>/server/default/conf directory.

Enter the following content in the tomcat-users.xml file:

<?xml version='1.0' encoding='utf-8'?>
<!--
  Licensed to the Apache Software Foundation (ASF) under one or more
  contributor license agreements.  See the NOTICE file distributed with
  this work for additional information regarding copyright ownership.
  The ASF licenses this file to You under the Apache License, Version 2.0
  (the "License"); you may not use this file except in compliance with
  the License.  You may obtain a copy of the License at

      http://www.apache.org/licenses/LICENSE-2.0

  Unless required by applicable law or agreed to in writing, software
  distributed under the License is distributed on an "AS IS" BASIS,
  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  See the License for the specific language governing permissions and
  limitations under the License.
-->
<tomcat-users>
  <user username="CN=SkyVault Repository Client, OU=Unknown, O=SkyVault Software Ltd., L=Maidenhead, ST=UK, C=GB" roles="repoclient" password="null"/>
</tomcat-users>

Create a folder called <JBOSS_HOME>/server/default/keystore and then copy all of the files from<alfresco.war>/WEB-INF/classes/alfresco/keystore to the new folder.

Configure the SSL connector by adding the following to the <JBOSS_HOME>/server/default/deploy/jbossweb.sar/server.xml file (should be a child of the <Service> tag):

   <Connector port="8443"
        protocol="HTTP/1.1" SSLEnabled="true" maxThreads="150" scheme="https"    
        keystoreFile="<JBOSS_HOME>/server/default/keystore/ssl.keystore"
        keystorePass="kT9X6oe68t" keystoreType="JCEKS" secure="true"
        connectionTimeout="240000" clientAuth="false" sslProtocol="TLS"
        truststoreFile="<JBOSS_HOME>/server/default/keystore/ssl.truststore"
        truststorePass="kT9X6oe68t" truststoreType="JCEKS"
        address="${jboss.bind.address}"/>

Configure the JBoss realm by adding the following to the <JBOSS_HOME>/server/default/deploy/jbossweb.sar/server.xml file (should be a child of the <Host> tag):
```
<Realm className="org.apache.catalina.realm.MemoryRealm" 
       pathname="<JBOSS_HOME>/server/default/conf/tomcat-users.xml" />
```

Edit the <JBOSS_HOME>/server/default/conf/alfresco-global.properties file by adding following properties:

dir.keystore=<JBOSS_HOME>/server/default/keystore
index.subsystem.name=solr
solr.host=<host_of_tomcat_inctance_where_solr_is_running>
solr.port=8080
solr.port.ssl=8443

Start the SkyVault server.

You may see a message on the JBoss console similar to the following:

12:23:15,713 WARN  [JSSESocketFactory] SSL renegotiation is disabled, closing connection

You may find that Solr search and/or the Solr tracking is not working.

In this situation, use the following steps:

Add the allowUnsafeLegacyRenegotiation="true" option to the JBoss SSL connector.
Add the -Dsun.security.ssl.allowUnsafeRenegotiation=true option to JAVA_OPTS.

Search form

Search form

You are here

Configuring SkyVault on JBoss with Solr installed on a Tomcat instance