Web Policy Agents GuideSun™ ONE Identity Server Policy AgentsVersion2.1816-6772-10April 2005
Identity Server’s Documentation Set10 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Identity Server’s Documentation
Troubleshooting100 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004• You might have an existing installation of th
TroubleshootingChapter 3 Policy Agents on Microsoft Windows 101Unable to uninstall the agent from Windows Start menu > Settings > Control Panel
Troubleshooting102 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004The agent goes into an infinite loop if the use
TroubleshootingChapter 3 Policy Agents on Microsoft Windows 103h. Check your system path to ensure that the following directory is present:Agent_Insta
Troubleshooting104 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004The log is located by default at the Agent_Inst
Known ProblemsChapter 3 Policy Agents on Microsoft Windows 105b. Select the Application Log.c. Check foragentError messages with source as Sun ONEIden
Known Problems106 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004
107Chapter 4Policy Agents on Red Hat, SuSE, andDebian LinuxThis chapter explains how to installand configure Web Policy Agents available forthe web
Pre-installation Tasks108 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005• Supported Servers• Web Policy Agents• Java
Pre-installation TasksChapter 4 Policy Agents on Red Hat, SuSE, and Debian Linux 1092. Before you run configure, set an environment variable LIBS=-lpt
Documentation Conventions Used in This ManualAbout This Guide 11Typographic ConventionsThis book uses the following typographic conventions:• Italic t
Pre-installation Tasks110 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Policy Agents for IBM Lotus Domino 6.0.2 and
Pre-installation TasksChapter 4 Policy Agents on Red Hat, SuSE, and Debian Linux 111Stopping and Starting the Apache ServerThe command for starting th
Pre-installation Tasks112 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 20052. Ensure thatopenSSL is installed at/usr/lo
Installing the AgentChapter 4 Policy Agents on Red Hat, SuSE, and Debian Linux 113Stopping and Starting the Apache ServerThe command for starting the
Installing the Agent114 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 20052. Run the setup program. You’ll find the prog
Installing the AgentChapter 4 Policy Agents on Red Hat, SuSE, and Debian Linux 1156. When prompted, provide the following information about the web se
Installing the Agent116 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 20057. When all the information is entered correct
Installing the AgentChapter 4 Policy Agents on Red Hat, SuSE, and Debian Linux 11710. Review the installation summary to be sure that the information
Installing the Agent118 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 20055. Provide the following information about the
Post-installation TasksChapter 4 Policy Agents on Red Hat, SuSE, and Debian Linux 1197. To see log information, enter 1. To exit the Installation prog
Related Information12 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Related InformationIn addition to the documentat
Configuring the Agent for Multiple Web Server Instances120 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005For example
Configuring the Agent for Multiple Web Server InstancesChapter 4 Policy Agents on Red Hat, SuSE, and Debian Linux 121Configuring the Agent for Multipl
Using Secure Sockets Layer (SSL) with an Agent122 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Using Secure Sockets
Using Secure Sockets Layer (SSL) with an AgentChapter 4 Policy Agents on Red Hat, SuSE, and Debian Linux 123com.sun.am.trustServerCerts=falseInstallin
Setting the REMOTE_USER Server Variable124 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Setting the REMOTE_USER Ser
Shared Secret Encryption UtilityChapter 4 Policy Agents on Red Hat, SuSE, and Debian Linux 125The AMAgent.properties file contains a property namedcom
Uninstalling the Policy Agent126 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Uninstalling the Policy AgentThe foll
Uninstalling the Policy AgentChapter 4 Policy Agents on Red Hat, SuSE, and Debian Linux 127# ./uninstall_linux_apache_agent -nodisplayThe following te
Troubleshooting128 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005TroubleshootingError message displayed during start
129Chapter 5Single Sign-on Solution for OracleApplication ServersThis chapter explains how you can deploy the Single Sign-on (SSO) solution forOracl
13Chapter 1Read This FirstSunTM ONE Identity Server Policy Agents, version 2.1 comprises Web PolicyAgents and J2EE Policy Agents. This chapter provi
Integration with Sun ONE Identity Server130 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Integration with Sun ONE I
Deploying the Integrated SSO SolutionChapter 5 Single Sign-on Solution for Oracle Application Servers 131For Oracle Application Server 10gDeploying th
Deploying the Integrated SSO Solution132 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 20052. Modify the default externa
Deploying the Integrated SSO SolutionChapter 5 Single Sign-on Solution for Oracle Application Servers 1333. Runssonete.sqlon the first computer to con
Deploying the Integrated SSO Solution134 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Deploying the Solution for Or
Deploying the Integrated SSO SolutionChapter 5 Single Sign-on Solution for Oracle Application Servers 1355. Install the policy agent, version 2.1 for
Deploying the Integrated SSO Solution136 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005import java.io.PrintWriter;im
Deploying the Integrated SSO SolutionChapter 5 Single Sign-on Solution for Oracle Application Servers 1378. Add the following lines to your CLASSPATH
Configuring the Agent138 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005❍ DEBUG: log details about program execution
Configuring the AgentChapter 5 Single Sign-on Solution for Oracle Application Servers 139do_sso_onlySet this value totrue so that the agent will just
Web Policy Agents14 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005• An agent on a human resources server prevents no
Configuring the Agent140 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005hostname where SunONEIdentity Server isinstal
Configuring the AgentChapter 5 Single Sign-on Solution for Oracle Application Servers 141logout.urlThis value specifies the logout URLs of Login Serve
Configuring the Agent142 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Policy Agent for Oracle Application Server 10
Configuring the AgentChapter 5 Single Sign-on Solution for Oracle Application Servers 143notenforcedListSince the propertyreverse_the_meaning_of_noten
Verifying the Deployment144 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005logout.cookie_reset_listThis property list
Troubleshooting TipsChapter 5 Single Sign-on Solution for Oracle Application Servers 145Troubleshooting Tips• If the integration fails, look for debug
Troubleshooting Tips146 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005
147Chapter 6Single Sign-On Solution for SAPInternet Transaction Server 2.0This chapter describesthe steps neededto integrate SunONE Identity Serveri
Architecture Details148 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Sun ONE Identity Server along with Sun ONE Ide
Installing PASChapter 6 Single Sign-On Solution for SAP Internet Transaction Server 2.0 149• Configure at least one SAP system to issue SAP SSO (SSO2
Supported ServersChapter 1 Read This First 15Figure 1-1 An Agent’s Interaction With Sun ONE Identity ServerSupported ServersWeb Policy Agents, version
Configuring the SAP Systems150 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Configuring the SAP SystemsTo set up th
Configuring the SAP SystemsChapter 6 Single Sign-On Solution for SAP Internet Transaction Server 2.0 151• Entry for certificate activated3. Create a g
Configuring the SAP Systems152 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 20053. Set the following parameters in the
Configuring the SAP SystemsChapter 6 Single Sign-On Solution for SAP Internet Transaction Server 2.0 1532. On all of the component systems’ applicatio
Configuring the SAP Systems154 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005The sapdll.srvc service file must be co
Installing and Configuring the Policy AgentChapter 6 Single Sign-On Solution for SAP Internet Transaction Server 2.0 155Installing and Configuring the
SAP Template Files156 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005SAP Template FilesAlong with the SAP Service fil
SAP Template FilesChapter 6 Single Sign-On Solution for SAP Internet Transaction Server 2.0 157<!--// SAP AG 2002// here an example for LDAP DN str
SAP Template Files158 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005<option value="en">No allowed la
SAP Template FilesChapter 6 Single Sign-On Solution for SAP Internet Transaction Server 2.0 159Template file extautherror.html‘end‘<tr><td>
Supported Servers16 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005IBM Lotus Domino 6.0.1 Solaris 8Microsoft Windows
SAP Template Files160 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Template file redirect.htmlCode Example 6-3 Temp
161Appendix AAMAgent PropertiesThe configuration of WebPolicyAgents is largelydeterminedbya set ofpropertiespresent in the file AMAgent.properties. Th
162 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004Valid ValuesThe URL for the naming serviceExamplecom.sun.am.na
Appendix A AMAgent Properties 163Valid ValuesURL of the Sun ONE Identity Server login page where the agent library mustauthenticate.Examplecom.sun.am.
164 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004com.sun.am.logLevelsDescriptionThis property allows to set the
Appendix A AMAgent Properties 165com.sun.am.policy.am.usernameDescriptionThis property stores the user name to use for the Application authenticationm
166 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004Valid ValuesThe absolute path to the directory.Examplecom.sun.
Appendix A AMAgent Properties 167com.sun.am.notificationEnabledDescriptionThis policy determines if thepolicy SDKshould usethe Identity Server notific
168 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004Valid Valuestrue orfalseExamplecom.sun.am.policy.am.urlCompari
Appendix A AMAgent Properties 169com.sun.am.policy.am.fetchHeadersDescriptionThis property enables/disables the additional policy response attributes
Before You Begin InstallationChapter 1 Read This First 17Before You Begin InstallationRead the following sections carefully before you start the insta
170 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004com.sun.am.policy.am.loadBalancer_enableDescriptionThis proper
Appendix A AMAgent Properties 171Examplecom.sun.am.policy.agents.logAccessType = LOG_DENYcom.sun.am.policy.agents.agenturiprefixDescriptionThe agent u
172 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004com.sun.am.policy.agents.instanceNameDescriptionThis property
Appendix A AMAgent Properties 173Examplecom.sun.am.policy.agents.accessDeniedURL=http://nila.eng.example.com:58080/urlaccessdenied.htmlcom.sun.am.poli
174 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004Valid ValuesThe fully qualified domain name of the machine whe
Appendix A AMAgent Properties 175At runtime, the agent refers tothis map in order to take corrective actions for userswho may have typed in a URL with
176 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004Examplecom.sun.am.policy.agents.cookie_reset_enabled=truecom.s
Appendix A AMAgent Properties 177com.sun.am.policy.agents.unauthenticatedUserDescriptionThis property stores the User Id to be returned if a user is a
178 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004Valid ValuesThe list of URLs for which authentication is requi
Appendix A AMAgent Properties 179Examplecom.sun.am.policy.agents.notenforced_client_IP_address_list =194.164.10.2com.sun.am.policy.agents.is_postdatap
Before You Begin Installation18 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Remote Web ServersYou can use the inst
180 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004com.sun.am.policy.agents.cdsso-enabledDescriptionThis property
Appendix A AMAgent Properties 181Valid Valuestrue orfalseExamplecom.sun.am.policy.agents.client_ip_validation_enable = falsecom.sun.am.policy.agents.l
182 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004Examplecom.sun.am.policy.agents.logout.cookie_reset_list =iPla
Appendix A AMAgent Properties 183com.sun.am.policy.agents.getClientHostnameDescriptionThis property indicates whether to get the client’s hostname thr
184 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004com.sun.am.policy.am.fetchFromRootResourceDescriptionBy defaul
185IndexAagent cacheupdating 19agentscache updatehybrid cache 19cache updates 19failover protection 18how they work 13installationCLI-based 38GUI-base
Section E186 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Eencryptionshared_secreton Windows 92shared_secret on Lin
Section RIndex 187Rremote web server 18REMOTE_USER variableon Linux 124SSAPtemplate files 156SAP ITS agentshared libraries 155SAP systemsconfiguringfo
Section W188 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005
Appendix B Error Codes 189Appendix BError CodesThis appendix lists the error codes you may encounter while installing andconfiguring Web Policy Agents
Before You Begin InstallationChapter 1 Read This First 19com.sun.am.policy.am.loginURL= http://primary_Identity_Server.example.com:58080/amserver/UI/L
1905. AM_SESSION_FAILUREThe session operation did not succeed. The operation may be any of the operationsprovided by the session API.6. AM_POLICY_FAIL
Appendix B Error Codes 19118. AM_INVALID_SESSIONThe session token provided to the API was invalid. The session may have timedout or the token is corru
192 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 200527. AM_NOTIF_NOT_ENABLEDThis error is thrown if the notification r
Sun Microsystems, Inc.4150 Network CircleSanta Clara, CA 95054 U.S.A.Copyright 2004 Sun Microsystems, Inc. All rights reserved.Sun, Sun Microsystems,
Before You Begin Installation20 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005The agent sets a timeout period on its
Before You Begin InstallationChapter 1 Read This First 21Here are a few examples:Scenario 1:com.sun.am.policy.agents.reverse_the_meaning_of_notenforce
Before You Begin Installation22 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Forwarding LDAP User Attributes via HT
Before You Begin InstallationChapter 1 Read This First 23By default, some LDAP user attribute names and HTTP header names are set tosample values.To f
Before You Begin Installation24 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005The Agent Properties FileThe AMAgent.p
Before You Begin InstallationChapter 1 Read This First 25Changing the AMAgent.properties file can have serious and far-reaching effects.Remember that
Before You Begin Installation26 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005a valid hostname in the URL, it redire
Before You Begin InstallationChapter 1 Read This First 27Say you want your server to be addressed as xyz.hostname.com whereas theactual name of the se
Before You Begin Installation28 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005By default, this property is set to fa
Before You Begin InstallationChapter 1 Read This First 29Figure 1-2 Sun ONE Identity Server Login Page2.Check the file AMAgent.properties. Make sure t
3ContentsAbout This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Before You Begin Installation30 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005
Chapter 2 Policy Agents on Solaris and HP-UX 31Chapter 2Policy Agents on Solaris and HP-UXSunTM ONE Identity Server Policy Agents work in tandem wit
Before You Begin32 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Before You BeginBe sure that you are familiar with
Installing the AgentChapter 2 Policy Agents on Solaris and HP-UX 33Installing the Policy Agent for a Web ServerYou must have root permissions when you
Installing the Agent34 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Apache Binary Directory: Select the directory w
Installing the AgentChapter 2 Policy Agents on Solaris and HP-UX 35❍ Apache web server with mod_ssl and EAPI flag enabled.9. When you have entered all
Installing the Agent36 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Agent Identity Server Shared Secret: Enter the
Installing the AgentChapter 2 Policy Agents on Solaris and HP-UX 375. To search for the directory where you would like to install the agent, clickBrow
Installing the Agent38 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Failover Server Port: Enter the port number of
Installing the AgentChapter 2 Policy Agents on Solaris and HP-UX 392. Set your JAVAHOME environment variable to a JDK version 1.3.1_04 orhigher. The i
4 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Verifying a Successful Installation . . . . . . . . . . . . . . . .
Installing the Agent40 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005❍ Failover Server Port❍ Failover Server Deploym
Installing the AgentChapter 2 Policy Agents on Solaris and HP-UX 412. When prompted, provide the following information:Have you read, and do you accep
Post-installation Tasks42 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005❍ CDSSO EnabledFor more information on each
Post-installation TasksChapter 2 Policy Agents on Solaris and HP-UX 432. From the listed servers, select the required server.3. Click Internet Protoco
Configuring the Agent for Multiple Web Server Instances44 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Additionally
Configuring the Agent for Multiple Web Server InstancesChapter 2 Policy Agents on Solaris and HP-UX 451. To configurethe agentfor additional web serve
Using Secure Sockets Layer (SSL) With an Agent46 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Deploying the Agent w
Using Secure Sockets Layer (SSL) With an AgentChapter 2 Policy Agents on Solaris and HP-UX 471. Create a new key database using the key management uti
Using Secure Sockets Layer (SSL) With an Agent48 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Disabling the Agent’s
Using Secure Sockets Layer (SSL) With an AgentChapter 2 Policy Agents on Solaris and HP-UX 49Installing the Root CA Certificate on the RemoteWeb Serve
5Creating the Microsoft IIS 6.0 Agent Configuration File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76Creating the Apache 2
Using Secure Sockets Layer (SSL) With an Agent50 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005❍ cert-file is the ba
Using Secure Sockets Layer (SSL) With an AgentChapter 2 Policy Agents on Solaris and HP-UX 513. Install root CA certificate.# /Agent_Install_Dir/SUNWa
Using Secure Sockets Layer (SSL) With an Agent52 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005❍ cert-name can be an
Setting the REMOTE_USER Server VariableChapter 2 Policy Agents on Solaris and HP-UX 533. In the command above, the variables represent the following:❍
POST Data Preservation54 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005The AMAgent.properties file contains a proper
Shared Secret Encryption UtilityChapter 2 Policy Agents on Solaris and HP-UX 55Shared Secret Encryption UtilityThe policy agent stores the shared secr
Uninstalling a Policy Agent56 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005WS_TYPE can be es6, proxy, apache or dom
Uninstalling a Policy AgentChapter 2 Policy Agents on Solaris and HP-UX 577. Open the Domino console and restart the server by entering the followingc
Troubleshooting58 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 20052. When prompted, What next? enter 1 to begin uninst
TroubleshootingChapter 2 Policy Agents on Solaris and HP-UX 59• You might have a previously-installed agent and did not use the agent'suninstalla
6 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Shared Secret Encryption Utility . . . . . . . . . . . . . . . . .
Troubleshooting60 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005The uninstallation program does not remove entries f
Known ProblemsChapter 2 Policy Agents on Solaris and HP-UX 615. Take thepid from the previous step and dopldd pid of the process | grep mtmallocThe ou
Known Problems62 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Policies not working with Sun ONE Web Proxy Server ag
63Chapter 3Policy Agents on Microsoft WindowsThis chapter explains how to installand configure Web Policy Agents available forthe web servers runnin
Before You Begin64 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004Before You BeginBe sure that your are familiar
Overview of Policy Agents for Microsoft WindowsChapter 3 Policy Agents on Microsoft Windows 65Furthermore, some variety exists among the policy agents
Overview of Policy Agents for Microsoft Windows66 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004The Agent Instal
Installing and Configuring the Installation Type I AgentsChapter 3 Policy Agents on Microsoft Windows 67Installing and Configuring the Installation Ty
Installing and Configuring the Installation Type I Agents68 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 20042. Run
Installing and Configuring the Installation Type I AgentsChapter 3 Policy Agents on Microsoft Windows 697. When all the information is entered correct
7com.sun.am.logFile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Installing and Configuring the Installation Type I Agents70 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 20048. Pro
Installing and Configuring the Installation Type I AgentsChapter 3 Policy Agents on Microsoft Windows 7112. When the installation is complete, you can
Installing Any Agent from the Command Line72 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004• Configure the filte
Installing Any Agent from the Command LineChapter 3 Policy Agents on Microsoft Windows 732. When prompted, provide the following information:Have you
Installing Any Agent from the Command Line74 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004❍ CDSSO feature enabl
Installing the Installation Type II AgentsChapter 3 Policy Agents on Microsoft Windows 75For the Installation Type I Agents, configuration is only nec
Configuring the Installation Type II Agents76 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 20041. Creating the agen
Configuring the Installation Type II AgentsChapter 3 Policy Agents on Microsoft Windows 77The script prompts for information as it progresses with the
Configuring the Installation Type II Agents78 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 20043. When prompted, pr
Configuring the Installation Type II AgentsChapter 3 Policy Agents on Microsoft Windows 79❍ CDSSO feature enabledFor details on these items, see the c
8 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005com.sun.am.policy.agents.logout.cookie_reset_list . . . . . . . . .
Configuring the Installation Type II Agents80 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 20043. When prompted, pr
Configuring the Installation Type II AgentsChapter 3 Policy Agents on Microsoft Windows 814. When prompted, provide the following information about th
Configuring the Installation Type II Agents82 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 20042. Run the following
Configuring the Installation Type II AgentsChapter 3 Policy Agents on Microsoft Windows 83where Identifier_1 is the identifier of the web site for whi
Using Secure Sockets Layer (SSL) with an Agent84 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 20043. Once the confi
Using Secure Sockets Layer (SSL) with an AgentChapter 3 Policy Agents on Microsoft Windows 85The Agent’s Default Trust BehaviorThis section only appli
Using Secure Sockets Layer (SSL) with an Agent86 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004Installing the Ro
Using Secure Sockets Layer (SSL) with an AgentChapter 3 Policy Agents on Microsoft Windows 87Agent_Install_Dir\bin\certutil -L -d cert-dirYou should s
Using Secure Sockets Layer (SSL) with an Agent88 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004❍ cert-file is th
Using Secure Sockets Layer (SSL) with an AgentChapter 3 Policy Agents on Microsoft Windows 894. To verify that the certificate is properly installed,
9About This GuideSunTM ONE Identity Server Policy Agents, version 2.1 comprise Web PolicyAgents and J2EE Policy Agents. This guide offers an introduct
Setting the REMOTE_USER Server Variable90 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004Setting the REMOTE_USER
POST Data PreservationChapter 3 Policy Agents on Microsoft Windows 91The AMAgent.properties file contains a property titledcom.sun.am.policy.agents.cl
Shared Secret Encryption Utility92 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004Shared Secret Encryption Utilit
Disabling, Uninstalling, and Unconfiguring Microsoft Windows Policy AgentsChapter 3 Policy Agents on Microsoft Windows 93Disabling the Policy Agent In
Disabling, Uninstalling, and Unconfiguring Microsoft Windows Policy Agents94 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • Sep
Disabling, Uninstalling, and Unconfiguring Microsoft Windows Policy AgentsChapter 3 Policy Agents on Microsoft Windows 95To uninstall the agent for Lo
Disabling, Uninstalling, and Unconfiguring Microsoft Windows Policy Agents96 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • Sep
Disabling, Uninstalling, and Unconfiguring Microsoft Windows Policy AgentsChapter 3 Policy Agents on Microsoft Windows 97Unconfiguring the Agent for M
Disabling, Uninstalling, and Unconfiguring Microsoft Windows Policy Agents98 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • Sep
TroubleshootingChapter 3 Policy Agents on Microsoft Windows 99Uninstalling Installation Type II Policy AgentsThe steps for uninstalling the agent are
Komentarze do niniejszej Instrukcji