LTPA configuration for liberty 26.0.0.6

Author: mmouly

.pre-commit-config.yaml

@@ -4,7 +4,7 @@ repos:
     # You are encouraged to use static refs such as tags, instead of branch name
     #
     # Running "pre-commit autoupdate" automatically updates rev to latest tag
-    rev: 0.13.1+ibm.62.dss
+    rev: 0.13.1+ibm.64.dss
     hooks:
       - id: detect-secrets # pragma: whitelist secret
         # Add options for detect-secrets-hook binary. You can run `detect-secrets-hook --help` to list out all possible options.

.secrets.baseline

@@ -3,7 +3,7 @@
     "files": "^.secrets.baseline$",
     "lines": null
   },
-  "generated_at": "2026-06-18T07:59:08Z",
+  "generated_at": "2026-07-15T14:57:59Z",
   "plugins_used": [
     {
       "name": "AWSKeyDetector"
@@ -260,57 +260,57 @@
         "hashed_secret": "642c4d230c27058424a132dbff9a0d1317fd0deb",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 125,
+        "line_number": 132,
         "type": "Secret Keyword",
         "verified_result": null
       },
       {
         "hashed_secret": "fa9beb99e4029ad5a6615399e7bbae21356086b3",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 128,
+        "line_number": 135,
         "type": "Secret Keyword",
         "verified_result": null
       },
       {
         "hashed_secret": "07313f0e320f22cbfa35cfc220508eb3ff457c7e",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 131,
+        "line_number": 138,
         "type": "Secret Keyword",
         "verified_result": null
       },
       {
         "hashed_secret": "dece3177de6ef53ccd2138fa6a36213476061cb3",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 142,
+        "line_number": 149,
         "type": "Secret Keyword",
         "verified_result": null
       }
     ],
     "common/security/ltpa.keys": [
       {
-        "hashed_secret": "918d9b0d5223bdc535f423634ebd0096ff7f41a2",
+        "hashed_secret": "dd49e8bdb791e266a6d8ff41cc99b8212827ac1f",
         "is_secret": false,
         "is_verified": false,
         "line_number": 4,
         "type": "Base64 High Entropy String",
         "verified_result": null
       },
       {
-        "hashed_secret": "116395f4a93d5d81b2203d2eddf8450df78aed28",
+        "hashed_secret": "dac48138d8a36eb7c2e2b32a6da49d728eea9628",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 6,
+        "line_number": 5,
         "type": "Base64 High Entropy String",
         "verified_result": null
       },
       {
-        "hashed_secret": "b696024dc5ba255d8bffbb3233940efacd824604",
+        "hashed_secret": "102f2db27cf272b9254b7e38f1f6fbaf2dfa220d",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 8,
+        "line_number": 6,
         "type": "Base64 High Entropy String",
         "verified_result": null
       }
@@ -1304,7 +1304,7 @@
       }
     ]
   },
-  "version": "0.13.1+ibm.62.dss",
+  "version": "0.13.1+ibm.64.dss",
   "word_list": {
     "file": null,
     "hash": null

common/config/ltpa.xml

@@ -0,0 +1,3 @@
+<server>
+	<ltpa expiration="8h" keysFileName="${server.config.dir}/resources/security/ltpa.keys" keysPassword="{aes}ARARn2Jof9C/AP5vHmaNgPmiXUk+vzbPXbQBwRC0NH/6rth5XW4rhpH+YGhIiRhFpsEy85m6fSZL0c/mtxmQ7gbQlsAXUJIuUPWxzg2xBQPzwWPkoGvsaKbZKDc8499abHefhkwESgVgg58=" />
+</server>

common/security/ltpa.keys

@@ -1,9 +1,8 @@
-#Fri Aug 18 16:34:44 CEST 2017
-com.ibm.websphere.CreationDate=Fri Aug 18 16\:34\:44 CEST 2017
-com.ibm.websphere.ltpa.version=1.0
-com.ibm.websphere.ltpa.3DESKey=GBnAYLem0lKBrhYQWJpx3wADu2OsMb5c3/cGjIn+mR4\=
+#Thu Apr 09 12:14:15 GMT 2026
+com.ibm.websphere.CreationDate=Thu Apr 09 12\:14\:15 GMT 2026
 com.ibm.websphere.CreationHost=localhost
-com.ibm.websphere.ltpa.PrivateKey=roQcr4hL02teYu/t4VD7yJ9n1AAgyj6WSzY9RuIJN6tvEg5zGFSQ3i+IfofCiNIPXkTepJKtaHA0V1gSgq3XKYqZUNq50/+oFdOc4o7XswxvoD8XLKbrCaUaN29IB8nq/DnMvH5BYxc+Ifw4ZR2X4kMBy5ppBApkJtVSnnKOMdb7JxEnpZc2sr3lj5HqmMcP0eGRbMCbFgScqRGYMht8uiizX0MiVXHHE+HEMatc5m3mmgYNzSsaqx07F2VhZEpc4QcG6rvXSem9VRhm/iba9qSOQXzQM+uLD0WuJkjTDJKTAw1KDudZcChtCDY++vbjGSNBkO+D1ZcIHnS5Xw8KZoE7AwLxaw9YfuwZym5+M2g\=
+com.ibm.websphere.ltpa.3DESKey=m3BKkqQXLQMyJ1S2c+6HSU58IW1W9oREziVDl5Z7FH0\=
+com.ibm.websphere.ltpa.PrivateKey=MYVqHGOVWAYr5jVBojyJp5OLwVUHLFKv1Rsi2yGzkDg2bMM5vU/88/MWhud4DqqwR3UZf8CdGIWgEB0S1GKSQjq9QWBi+4FRHUYGv/TwqsnuyAtBZyNaPtoGQ8PHhqJdNCpxD0emG9GQ+goSvVJIVlFR4F2EPX4DoAdVZQ5kInFGu+ZhALp6R58I8m6lABVWiIkjjRZVxEiTWKYcFHDecOnBbYKcPtx2HSQJ5YWQQa3KD6OfOmOB3nJinmP24MhJomt7hEyZXpH1dZod1Su/6h+td0oHdMrBngooKI4H+J6qsKdG6H5zV8aQM7XQzz/mNMyt+SGXBtNphHumb48ci7QzBcbhI3jrXNB+6aGUxhM\=
+com.ibm.websphere.ltpa.PublicKey=AIuNhWwTQcVoftGiZE+5AG52toPbyl6pmTMCc7FFq81FK1y9p+4MtM4wh9TjFs129fjWQW9fHkUD4GYJyitbTD2w4EiXD2F8ni0xR8h4LmRd5drv+cwZu5+JaZbiIcILqbyeH96w7i9z8IO441sgJ/0mICptcuWDONHxb+u3ndbPAQAB
 com.ibm.websphere.ltpa.Realm=defaultRealm
-com.ibm.websphere.ltpa.PublicKey=AO/MSlEP0ZxyC3pFmXkzlSvqlRHB3xaEUD1Li988UkaeOQrtb2H7PAu4IvRGXjPc0lQ2cDQqNqf4emwo4qPQd8MbVQKKMmJBLXas4UPK0FL0u/SelLFUlP9qdy/dOI/y859y9AYHyFqZr3HFLVvfHMqeVGOURGeALuJBI1bkI3WDAQAB
-
+com.ibm.websphere.ltpa.version=1.0

decisioncenter/config/server.xml

@@ -8,6 +8,7 @@
 
 	<!-- http session config -->
 	<include optional="true" location="./httpSession.xml"/>
+    <include optional="true" location="./ltpa.xml"/>
 
 	<!-- datasource config -->
 	<include optional="true" location="./datasource.xml"/>

decisionserver/decisionrunner/config/server.xml

@@ -8,6 +8,7 @@
 
 	<!-- http session config -->
 	<include optional="true" location="./httpSession.xml"/>
+        <include optional="true" location="./ltpa.xml"/>
 
 	<!-- datasource config -->
 	<include optional="true" location="./datasource.xml"/>

decisionserver/decisionserverconsole/config/server.xml

@@ -8,6 +8,7 @@
 
 	<!-- http session config -->
 	<include optional="true" location="./httpSession.xml"/>
+        <include optional="true" location="./ltpa.xml"/>
 
 	<!-- datasource config -->
 	<include optional="true" location="./datasource.xml"/>

decisionserver/decisionserverruntime/config/server.xml

@@ -8,7 +8,8 @@
 
 	<!-- http session config -->
 	<include optional="true" location="./httpSession.xml"/>
-
+    <include optional="true" location="./ltpa.xml"/>
+	
 	<!-- datasource config -->
 	<include optional="true" location="./datasource.xml"/>
 

standalone/Dockerfile

@@ -119,7 +119,7 @@ COPY --chown=1001:0 ${ODMDOCKERDIR}/common/security/keystore.jks /config/securit
 COPY --chown=1001:0 ${ODMDOCKERDIR}/common/security/truststore.jks /config/security/truststore.jks
 COPY --chown=1001:0 ${ODMDOCKERDIR}/standalone/config /config
 COPY --chown=1001:0 ${ODMDOCKERDIR}/common/config/jvm/jvm.options /config/configDropins/overrides/jvm.options
-
+COPY --chown=1001:0 ${ODMDOCKERDIR}/common/config/ltpa.xml /config/ltpa.xml
 RUN chmod -R 777 /config
 
 FROM ${FROMLIBERTY}

standalone/config/server.xml

@@ -3,6 +3,9 @@
 	<!-- feature manager -->
 	<include optional="true" location="./featureManager.xml"/>
 
+	<!-- SSO configuration -->
+	<include optional="true" location="./ltpa.xml"/>
+
 	<!-- Datasource and libraries -->
 	<include optional="true" location="./datasource.xml"/>