- Manage the run time environment.
- Deploy integration solutions.
- Manage integration solution resources that are deployed to a run time environment.
- Manage configurable services.
- Manage operational policies.
- Analyze and tune the performance of your integration solutions.
- Analyze and tune the performance of the resources used by your integration solutions.
For more information, see IBM Integration Bus web user interface.
Right-click the integration node and then select Start Web User Interface from the menu.
By default, when you start IBM Integration Toolkit, an integration node is created.
When the default integration node is created, the web user interface is enabled automatically and assigned to port 4414.
To check the status of the web user interface associated with an integration node, you run the mqsireportproperties command in a command line.
mqsireportproperties integrationNodeName -b webadmin -o server -a
For example, in Windows, you run the command in the IBM Integration Console:
To enable the web user interface for an integration node, you run the following command:
mqsichangeproperties integrationNodeName -b webadmin -o server -n enabled -v true
To disable the the web user interface for an integration node, you run the following command:
mqsichangeproperties integrationNodeName -b webadmin -o server -n enabled -v false
To change the port that an integration node uses, you must run the following command in the system where the integration node is available:
mqsichangeproperties integrationNodeName -b webadmin -o HTTPConnector -n port -v portValue
When you change the port of the integration node, the WebUI associated to that integration node uses that same port number.
To control access to data and resources in the WebUI, complete the following steps:
- Step 1: Enable administration security
To start the IBM Integration Console in Windows, use the Windows menu option Start IBM Integration Console 10.0.0.0
To stop the integration node, you can run the following command in the IBM Integration Console:
You can configure the integration node to use file-based authorization or to use queue-based authorization (mq mode).
To configure the file-based authorization mode for a local integration node, you run the mqsichangeauthmode command.
To enable administration security with the file-based authorization mode for the TESTNODE_MachineA integration node, enter the following command:
mqsichangeauthmode TESTNODE_MachineA -s active -m file
where -s active enables administration security for the integration node, and -m file specifies the file-based authorization mode.
For more information, see mqsichangeauthmode command.
Use the mqsireportauthmode command to view the mode of administration security currently in effect for granting and revoking administration authority.
For more information, see mqsireportauthmode command.
To start the integration node, you can run the following command in the IBM Integration Console:
- [Optional] Step 2: Define the roles and their associated permissions
When the integration node is configured to use file-based authorization (file mode), you define the roles and associated permissions on the integration node, by using the mqsichangefileauth command.IBM Integration Bus supports three levels of authorization: read, write, and execute.
For a list of available tasks and the administration permissions required, see Tasks and authorizations for administration security.
- You can assign permissions to a role by specifying the type of permission followed by a plus (+) to grant permissions, or a minus (-) to revoke permissions. For example: read+
- You specify the permissions as a comma-separated list of values. For example: read+,execute-
- These permissions can be applied to each role for the following types of objects:
- Integration node resources
- Integration server resources
- Data capture objects (record-replay)
- If you grant permissions to a role at the integration node level, that permission is not applied to the node’s integration servers. You must set permissions explicitly for individual integration servers.
- If you grant permissions associated with integration server resources or data capture objects to users that use the web user interface, you must also grant the users read access to the integration node.
To define a group, named iibObserver, with permissions to see resources, you can use the following command to define this observers role:
mqsichangefileauth TESTNODE_MachineA -r iibObserver -p read+
To define a group, named iibAdmins, with permissions to manage resources, you can use the following command to define this admins role:
mqsichangefileauth TESTNODE_MachineA -r iibAdmins -p all+
For more information, see mqsichangefileauth command.
To check the file-based administration security permissions for an integration node, you can use the mqsireportfileauth command. For example:
mqsireportfileauth TESTNODE_MachineA -l
where l indicates that you want the complete list of groups and permissions defined on an integration node.
For more information, see mqsireportfileauth command.
To delete a group, you run the following command:
mqsichangefileauth TESTNODE_MachineA -r iibAdmins -p all-
where -r indicates the group that you want to delete and -p all- is required to remove all permissions to that group and to delete the group.
- Step 3: Create the web users
Use the mqsiwebuseradmin command to create your web user accounts and optionally assign them to the appropriate roles.
- When you create a WebUI account, you can only associate the account with a single role.
- You can have multiple WebUI user accounts assigned to the same role.
To create an account, you must run the following command:
mqsiwebuseradmin TESTNODE_MachineA -c -u jk -p password -r iibAdmins
where -c indicates that you want to create the user, -p indicates the password, -r indicates the role to which you want to add the user.NOTE: You can also create users without specifying a role. Assigning a user to a group is optional.
To delete a WebUI user account, you must run the following command:
mqsiwebuseradmin TESTNODE_MachineA -d -u jk -p password -r iibAdmins
where -d indicates that you want to delete the user, -p indicates the password, -r indicates the role from which you want to remove the user.
You can change the password by using the mqsiwebuseradmin command.
You can run the following command:
mqsiwebuseradmin TESTNODE_MachineA -m -u jk -p password1 -r iibAdmins
where -m indicates that you want to modify the user, -p indicates the new password, -r indicates the role of the user.
As a user, you can change your password once you log in into the WebUI.
To change your password, you can complete the following steps:
- Select Edit profile.
- In the Password section, click Change.
- Enter your new password and click Save.