Application Integrator Configuration
The following procedures describe how to configure Application Integrator:
- User and Role Authorizations: Describes how to create users and roles and set up authorizations for access to Application Integrator.
- Configuring a Proxy Server for the Application Integrator Web Interface: Describes how to configure a connection to a proxy server for the Application Integrator web interface.
-
Setting Application Integrator Log Levels: Describes how to set log levels and control the amount and severity of log messages issued by Application Integrator.
-
Configuring Job Output Files: Describes how to set the naming convention and permissions of the files that save the output from Application Integrator jobs.
-
Creating a Communication Configuration File: Describes how to change the default login GUI server through a communication configuration file if you have multiple GUI servers.
-
Setting Up SSL for Control-M Application Integrator on Agents: Describes how to set up SSL for Control-M Application Integrator jobs on the Control-M/Agents.
-
Configuring Application Integrator to Run Jobs through a Proxy Server: Describes how to configure Control-M Application Integrator on the Agents to run jobs through a proxy server.
Configuring a Proxy Server for the Application Integrator Web Interface
This procedure describes how to configure proxy server settings for the Application Integrator web interface. If the Application Integrator runs on a machine that has a Proxy server installed, you need to connect to the proxy server when accessing other machines. For example, when you import a WSDL.
Begin
-
From the Application Integrator title bar, click the name of the logged-in user, and select Settings.
The Settings window appears.
-
Under the Proxy Settings heading, select Enable proxy.
-
Type the Proxy Settings values, as described in Application Integrator Proxy Server Parameters.
-
Click Save.
Application Integrator Proxy Server Parameters
The following table describes the Proxy Server parameters.
Parameter |
Description |
---|---|
Enable SSL |
Enables SSL security between the proxy server and other authorized machines. |
Host name |
(Mandatory) Defines the proxy host. |
Port |
Defines the proxy server port. |
Non-proxy Hosts |
(Optional) Defines a list of hostnames where the proxy is not used. Hostnames in this list are separated by a | (vertical bar). The following value is specified in Non-proxy Hosts: mycompany.com|localhost This results in the exclusion of all of the following URLs: www.mycompany.com/rest/api www.mycompany.com/rest/api2/call https://localhost/rest/api/call |
Username |
Defines the username of the proxy host. |
Password |
Defines the password of the proxy host. |
Ensure that endpoints to the localhost and 127.0.0.1 IP addresses are not routed to the proxy server, as these endpoints are required by Control-M processes to facilitate communication between processes.
To bypass the redirection to the proxy:
-
UNIX: In the /etc/profile.d/proxy.sh file, set the following variable:
NO_PROXY=localhost,127.0.0.1
-
Windows: Consult your system administrator.
Setting Application Integrator Log Levels
This procedure describes how to define log levels for Control-M Application Integrator without the need to restart.
Begin
-
Do one of the following:
-
In the CCM, do the following:
-
Right-click the Application Integrator service and select Control Shell.
-
In the Control Shell dialog box, type the following control shell command line:
diagl -l=<log_level>In this command, <log_level> can be one of the following:
-
Error: Writes to the log file on the disk only when there is an issue with data consistency, network connectivity, or expected received data structure.
-
Warning: Writes to the log file all error-level messages and some uncommon behavior that might indicate problems.
-
Info: Writes both error and warning messages and messages that might explain a complete flow or an alert of requests to a server and their type.
-
Debug: Includes error, warning, and info messages and important information that might occur during every procedure.
Default: Error
Info and debug are used only during problem analysis, as they both consume high disk space resources.
-
-
-
In the services-cli utility, type the following command:
services-cli -s aisrv-web -i "all" -c diagl -level <log_level>
The following message appears:
Root log level is changed successfully to <log_level> -
Configuring Job Output Files
This procedure describes how to set the naming convention and permissions of the files that save the output from Application Integrator jobs.
Begin
-
Log in to the Control-M/Agent computer where Application Integrator is installed.
-
Add Job Output File Parameters or modify their values in the following configuration file:
-
Windows: <Agent install dir>\cm\AI\data\cm_container_conf.xml
-
UNIX: <Agent install dir>/cm/AI/data/cm_container_conf.xml
-
-
Stop and then start the Control-M/Agent by typing the following commands:
shut-ag
start-ag
Application Integrator starts automatically.
Job Output File Parameters
The following table describes the parameters that are available for the management of Job Output files:
Parameter |
Description |
---|---|
SysoutFileFormat |
Determines the naming convention for Job Output files. Valid Values:
<SysoutFileFormat>JOBNAME</SysoutFileFormat> |
SysoutFileOwner |
Defines the file's user owner for access permissions on Linux. You can set a new value only if the Agent is running under root. Default: The user currently running the Agent <SysoutFileOwner>dbauser</SysoutFileOwner> |
SysoutFileGrp |
Defines the file's group owner for access permissions on Linux. You can set a new value only if the Agent is running under root. Default: The group of the user currently running the Agent <SysoutFileGrp>dbauser</SysoutFileGrp> |
Creating a Communication Configuration File
This procedure describes how to create a communication configuration file. This configuration file is necessary if you have multiple GUI servers defined in your environment and you want to change the default Server GUI Server that Application Integrator connects to.
If you do not need multiple GUI servers, you can stop them and delete them in the Control-M Configuration Manager.
Begin
-
Open a text editor and type the following:
CopyNsHost=<name server hostname>
NsPort=13075
GuiServer=<GUI server name> -
Save the file as ai.cfg and add it to one of the following directories:
-
UNIX: <EM_HOME>/etc/emweb/tomcat/AIRepo/_AICFG
-
Windows: <EM_HOME>\emweb\tomcat\AIRepo\_AICFG
-
-
Log in to Control-M Application Integrator.
Setting Up SSL for Control-M Application Integrator on Agents
This procedure describes how to set up SSL for Control-M Application Integrator jobs that run on the Control-M/Agents.
Begin
-
Import the new SSL certificate from CA to the keystore, using the following command:
$JAVA_HOME/bin/keytool -import -alias <alias_name> -keystore <Agent_instance>/cm/AI/data/security/apcerts -storepass appass -file <path/to/the/ssl_cert.cer>
Note that appass is the default password and it can be changed.
-
(Optional) Confirm the keystore content by typing the following command:
$JAVA_HOME/bin/keytool -list -v -keystore <Agent_instance>/cm/AI/data/security/apcerts > output_filename
-
Restart Application Integrator (the cm container process) for the action to take effect.
Configuring Application Integrator to Run Jobs through a Proxy Server
This procedure describes how to configure Control-M Application Integrator on the Agents to run jobs through a proxy server.
Begin
-
Navigate to the following directory:
-
UNIX: <Agent_instance>/cm/AI/data
-
Windows: <Agent_instance>\CM\AI\data
-
-
Create a file named aicm.properties.
(Windows only) Name the file aicm, and the .properties extension is appended automatically.
-
Include the following parameters in the aicm file with the required values:
Copyproxy.host=
proxy.port=
proxy.user=//if required
proxy.pass=//if required, base64 encoded
proxy.nonProxyHosts=//optional
proxy.ssl=//true or false (default is false)Do not include space characters before or after the = sign.
For descriptions of these parameters, see Proxy Server Parameters for Running Jobs.
-
Navigate to the following directory:
-
UNIX: <Agent_instance>/cm/AI/exe
-
Windows: <Agent_instance>\CM\AI\exe
-
-
Restart Control-M Application Integrator by running one of the following commands:
-
UNIX: ./cm_container stop
-
Windows: cm_container stop
-
Proxy Server Parameters for Running Jobs
The following table describes Proxy Server parameters for Application Integrator to run jobs on the Agents.
Parameter |
Description |
---|---|
proxy.host |
(Mandatory) Defines the proxy host. |
proxy.port |
Defines the proxy server port. |
proxy.user |
Defines the username of the proxy host. |
proxy.pass |
Defines the password of the proxy host. |
proxy.nonProxyHosts |
(Optional) Defines a list of hostnames where the proxy is not used. Hostnames in this list are separated by a | (vertical bar). The following value is specified in Non-proxy Hosts: mycompany.com|localhost This results in the exclusion of all of the following URLs: www.mycompany.com/rest/api www.mycompany.com/rest/api2/call https://localhost/rest/api/call |
proxy.ssl |
Enables SSL security between the proxy server and other authorized machines. Valid Values:
Default: false |