Before installing PTF, we must apply several online configurations.
To generate the error message above, my “anonymous node” User ID was ANONYMOUS_NODE. Notice the error message specifically identifies this user as not having access to the PTTST_CONFIG_NO_SSL Service Operation. This makes sense. When we connect to PTF, we provide our credentials. We would not want PTF passing these credentials along to Integration Broker over an insecure connection unless we previously configured PTTST_CONFIG_NO_SSL. Therefore, the anonymous user must be able to invoke this Service Operation without requiring credentials.
Every role added to the ANONYMOUS node user increases your security attack surface. In production, the anonymous node’s user should only have access to truly public information. You should not have this role enabled for the ANONYMOUS node user in production. PTF, therefore, would not be available in production.
Both web profile settings cause PeopleSoft to generate HTML with information helpful to bad actors searching for vulnerabilities. Therefore, these settings should be disabled in a production environment.
Available configuration options are listed in PeopleBooks at Lifecycle Management Tools > Test Framework > Installing and Configuring PTF > Configuring an Environment for PTF > Defining PTF Configuration Options.
For security reasons, we recommend using SSL. In this class, we turned off SSL for convenience reasons. When considering enabling or disabling SSL, think about protecting your credentials and your data. Ideally, your test systems will contain test data and test credentials. In real life, however, most test systems are clones of production. If this is your situation, be sure to protect your test environment just as you would protect production.
Be sure to check the Routing Status box for Any-to-Local Exists. If it is not present, or if the routing appears incorrect, be sure to check the Generate Any–to–Local or Regenerate Any–to–Local check box (whichever is present) in the Routing Actions Upon Save box. When in doubt, check the Regenerate Any-to-Local checkbox. It doesn’t hurt to regenerate, but failure to generate at all will keep PTF from connecting to your database.