- Manage the run time environment.
- Deploy integration solutions.
- Manage integration solution resources that are deployed to a run time environment.
- Manage configurable services.
- Manage operational policies.
- Analyze and tune the performance of your integration solutions.
- Analyze and tune the performance of the resources used by your integration solutions.
For more information, see IBM Integration Bus web user interface.
Start the WebUI
In the IBM Integration Toolkit, you start the WebUI as follows:
Right-click the integration node and then select Start Web User Interface from the menu.
Show more information
When the default integration node is created, the web user interface is enabled automatically and assigned to port 4414.
Check the status of the WebUI
mqsireportproperties integrationNodeName -b webadmin -o server -a
For example, in Windows, you run the command in the IBM Integration Console:
Enable the WebUI
mqsichangeproperties integrationNodeName -b webadmin -o server -n enabled -v true
Disable the WebUI
mqsichangeproperties integrationNodeName -b webadmin -o server -n enabled -v false
Change the port used by an integration node
To change the port that an integration node uses, you must run the following command in the system where the integration node is available:
mqsichangeproperties integrationNodeName -b webadmin -o HTTPConnector -n port -v portValue
When you change the port of the integration node, the WebUI associated to that integration node uses that same port number.
Control access to data and resources in a local integration node by using file-based authorization
To control access to data and resources in the WebUI, complete the following steps:
- Step 1: Enable administration security
1.1 Start the IBM Integration ConsoleTo start the IBM Integration Console in Windows, use the Windows menu option Start IBM Integration Console 10.0.0.0
1.2 Stop the integration nodeTo stop the integration node, you can run the following command in the IBM Integration Console:
1.3. Run the mqsichangeauthmode command to enable administration securityYou can configure the integration node to use file-based authorization or to use queue-based authorization (mq mode).
To configure the file-based authorization mode for a local integration node, you run the mqsichangeauthmode command.
To enable administration security with the file-based authorization mode for the TESTNODE_MachineA integration node, enter the following command:
mqsichangeauthmode TESTNODE_MachineA -s active -m file
where -s active enables administration security for the integration node, and -m file specifies the file-based authorization mode.
For more information, see mqsichangeauthmode command.
Use the mqsireportauthmode command to view the mode of administration security currently in effect for granting and revoking administration authority.
For more information, see mqsireportauthmode command.
1.4. Start the integration nodeTo start the integration node, you can run the following command in the IBM Integration Console:
- [Optional] Step 2: Define the roles and their associated permissions
When the integration node is configured to use file-based authorization (file mode), you define the roles and associated permissions on the integration node, by using the mqsichangefileauth command.
Show more informationIBM Integration Bus supports three levels of authorization: read, write, and execute.
For a list of available tasks and the administration permissions required, see Tasks and authorizations for administration security.
- You can assign permissions to a role by specifying the type of permission followed by a plus (+) to grant permissions, or a minus (-) to revoke permissions. For example: read+
- You specify the permissions as a comma-separated list of values. For example: read+,execute-
- These permissions can be applied to each role for the following types of objects:
- Integration node resources
- Integration server resources
- Data capture objects (record-replay)
- If you grant permissions to a role at the integration node level, that permission is not applied to the node’s integration servers. You must set permissions explicitly for individual integration servers.
- If you grant permissions associated with integration server resources or data capture objects to users that use the web user interface, you must also grant the users read access to the integration node.
2.1 Define a role and its associated permissions
To define a group, named iibObserver, with permissions to see resources, you can use the following command to define this observers role:
mqsichangefileauth TESTNODE_MachineA -r iibObserver -p read+
To define a group, named iibAdmins, with permissions to manage resources, you can use the following command to define this admins role:
mqsichangefileauth TESTNODE_MachineA -r iibAdmins -p all+
For more information, see mqsichangefileauth command.
2.2 Check the file-based administration security permissions for an integration nodeTo check the file-based administration security permissions for an integration node, you can use the mqsireportfileauth command. For example:
mqsireportfileauth TESTNODE_MachineA -l
where l indicates that you want the complete list of groups and permissions defined on an integration node.
For more information, see mqsireportfileauth command.
Related task: Delete a role and its associated permissionsTo delete a group, you run the following command:
mqsichangefileauth TESTNODE_MachineA -r iibAdmins -p all-
where -r indicates the group that you want to delete and -p all- is required to remove all permissions to that group and to delete the group.
- Step 3: Create the web users
Use the mqsiwebuseradmin command to create your web user accounts and optionally assign them to the appropriate roles.
3.1 Create a WebUI user account
- When you create a WebUI account, you can only associate the account with a single role.
- You can have multiple WebUI user accounts assigned to the same role.
To create an account, you must run the following command:
mqsiwebuseradmin TESTNODE_MachineA -c -u jk -p password -r iibAdmins
where -c indicates that you want to create the user, -p indicates the password, -r indicates the role to which you want to add the user.NOTE: You can also create users without specifying a role. Assigning a user to a group is optional.
Related task: Delete a WebUI user accountTo delete a WebUI user account, you must run the following command:
mqsiwebuseradmin TESTNODE_MachineA -d -u jk -p password -r iibAdmins
where -d indicates that you want to delete the user, -p indicates the password, -r indicates the role from which you want to remove the user.
Related task: As an administrator, change the password of a WebUI user account by using the mqsiwebuseradmin commandYou can change the password by using the mqsiwebuseradmin command.
You can run the following command:
mqsiwebuseradmin TESTNODE_MachineA -m -u jk -p password1 -r iibAdmins
where -m indicates that you want to modify the user, -p indicates the new password, -r indicates the role of the user.
Related task: As a user, change the password of your userid to access the WebUIAs a user, you can change your password once you log in into the WebUI.
To change your password, you can complete the following steps:
- Select Edit profile.
- In the Password section, click Change.
- Enter your new password and click Save.