Reconfiguring the Auth Server URL

On a standard AMP installation, there is one ADS instance that is the "Auth Server" - that is, it provides login authentication for all managed instances, both local and remote.

On a Standalone installation, that is the local ADS instance. On a Target installation, that is the Controller ADS.

If the IP or port of the Auth Server ADS is changed (eg if the ADS's port is changed using the ampinstmgr rebind command), then AMP's configuration needs to be updated.

Updating existing instances

The configuration of existing instances can be updated either:

• manually by editing instances.json and each instance's AMPConfig.conf; or
• preferably, by using the command line (in the case of Docker instances, manual updating may be required, particularly if you are not using host networking). You can use the command line to update instances individually, or all at once.

Updating an individual instance

To change one instance's configuration on the command line, use the following as the relevant AMP user (eg amp on Linux or AMP on Windows):

ampinstmgr reconfigure INSTANCENAME +Core.Login.AuthServerURL http://ADS_IP:ADS_PORT

Substitute the relevant INSTANCENAME, ADS_IP and ADS_PORT as appropriate. For Standalone instances, and for local instances on a Hybrid installation, use localhost as the ADS_IP (except if those instances are in Docker and not using host networking). Note that 0.0.0.0 is not a valid IP.

If you are using AMP's internal HTTPS (rather than HTTPS through a reverse proxy), the URL should be https://ADS_DOMAIN:ADS_PORT (substituting ADS_DOMAIN and ADS_PORT as appropriate).

Updating all instances

To change all local instances at once on the command line, use the following as the relevant AMP user (eg amp on Linux or AMP on Windows):

ampinstmgr reconfiguremultiple * +Core.Login.AuthServerURL http://ADS_IP:ADS_PORT

Substitute the relevant INSTANCENAME, ADS_IP and ADS_PORT as appropriate. Again, for Standalone instances, and for local instances on a Hybrid installation, use localhost as the ADS_IP (except if those instances are in Docker and not using host networking). Note that 0.0.0.0 is not a valid IP.

If you are using AMP's internal HTTPS (rather than HTTPS through a reverse proxy), the URL should be https://ADS_DOMAIN:ADS_PORT (substituting ADS_DOMAIN and ADS_PORT as appropriate).

Updating new instances

For instances to be created in the future, update the "Default auth server" setting in the Configuration->New Instance Defaults menu for the ADS. This should match what is used for existing instances as per the above.