Red Hat NETSCAPE DIRECTORY SERVER 6.02 - DEPLOYMENT Installationsanleitung Seite 1

Web Policy Agents GuideSun™ ONE Identity Server Policy AgentsVersion2.1816-6772-10April 2005

Identity Server’s Documentation Set10 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Identity Server’s Documentation

Troubleshooting100 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004• You might have an existing installation of th

TroubleshootingChapter 3 Policy Agents on Microsoft Windows 101Unable to uninstall the agent from Windows Start menu > Settings > Control Panel

Troubleshooting102 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004The agent goes into an infinite loop if the use

TroubleshootingChapter 3 Policy Agents on Microsoft Windows 103h. Check your system path to ensure that the following directory is present:Agent_Insta

Troubleshooting104 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004The log is located by default at the Agent_Inst

Known ProblemsChapter 3 Policy Agents on Microsoft Windows 105b. Select the Application Log.c. Check foragentError messages with source as Sun ONEIden

Known Problems106 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004

107Chapter 4Policy Agents on Red Hat, SuSE, andDebian LinuxThis chapter explains how to installand configure Web Policy Agents available forthe web

Pre-installation Tasks108 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005• Supported Servers• Web Policy Agents• Java

Pre-installation TasksChapter 4 Policy Agents on Red Hat, SuSE, and Debian Linux 1092. Before you run configure, set an environment variable LIBS=-lpt

Documentation Conventions Used in This ManualAbout This Guide 11Typographic ConventionsThis book uses the following typographic conventions:• Italic t

Pre-installation Tasks110 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Policy Agents for IBM Lotus Domino 6.0.2 and

Pre-installation TasksChapter 4 Policy Agents on Red Hat, SuSE, and Debian Linux 111Stopping and Starting the Apache ServerThe command for starting th

Pre-installation Tasks112 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 20052. Ensure thatopenSSL is installed at/usr/lo

Installing the AgentChapter 4 Policy Agents on Red Hat, SuSE, and Debian Linux 113Stopping and Starting the Apache ServerThe command for starting the

Installing the Agent114 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 20052. Run the setup program. You’ll find the prog

Installing the AgentChapter 4 Policy Agents on Red Hat, SuSE, and Debian Linux 1156. When prompted, provide the following information about the web se

Installing the Agent116 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 20057. When all the information is entered correct

Installing the AgentChapter 4 Policy Agents on Red Hat, SuSE, and Debian Linux 11710. Review the installation summary to be sure that the information

Installing the Agent118 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 20055. Provide the following information about the

Post-installation TasksChapter 4 Policy Agents on Red Hat, SuSE, and Debian Linux 1197. To see log information, enter 1. To exit the Installation prog

Related Information12 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Related InformationIn addition to the documentat

Configuring the Agent for Multiple Web Server Instances120 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005For example

Configuring the Agent for Multiple Web Server InstancesChapter 4 Policy Agents on Red Hat, SuSE, and Debian Linux 121Configuring the Agent for Multipl

Using Secure Sockets Layer (SSL) with an Agent122 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Using Secure Sockets

Using Secure Sockets Layer (SSL) with an AgentChapter 4 Policy Agents on Red Hat, SuSE, and Debian Linux 123com.sun.am.trustServerCerts=falseInstallin

Setting the REMOTE_USER Server Variable124 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Setting the REMOTE_USER Ser

Shared Secret Encryption UtilityChapter 4 Policy Agents on Red Hat, SuSE, and Debian Linux 125The AMAgent.properties file contains a property namedcom

Uninstalling the Policy Agent126 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Uninstalling the Policy AgentThe foll

Uninstalling the Policy AgentChapter 4 Policy Agents on Red Hat, SuSE, and Debian Linux 127# ./uninstall_linux_apache_agent -nodisplayThe following te

Troubleshooting128 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005TroubleshootingError message displayed during start

129Chapter 5Single Sign-on Solution for OracleApplication ServersThis chapter explains how you can deploy the Single Sign-on (SSO) solution forOracl

13Chapter 1Read This FirstSunTM ONE Identity Server Policy Agents, version 2.1 comprises Web PolicyAgents and J2EE Policy Agents. This chapter provi

Integration with Sun ONE Identity Server130 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Integration with Sun ONE I

Deploying the Integrated SSO SolutionChapter 5 Single Sign-on Solution for Oracle Application Servers 131For Oracle Application Server 10gDeploying th

Deploying the Integrated SSO Solution132 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 20052. Modify the default externa

Deploying the Integrated SSO SolutionChapter 5 Single Sign-on Solution for Oracle Application Servers 1333. Runssonete.sqlon the first computer to con

Deploying the Integrated SSO Solution134 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Deploying the Solution for Or

Deploying the Integrated SSO SolutionChapter 5 Single Sign-on Solution for Oracle Application Servers 1355. Install the policy agent, version 2.1 for

Deploying the Integrated SSO Solution136 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005import java.io.PrintWriter;im

Deploying the Integrated SSO SolutionChapter 5 Single Sign-on Solution for Oracle Application Servers 1378. Add the following lines to your CLASSPATH

Configuring the Agent138 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005❍ DEBUG: log details about program execution

Configuring the AgentChapter 5 Single Sign-on Solution for Oracle Application Servers 139do_sso_onlySet this value totrue so that the agent will just

Web Policy Agents14 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005• An agent on a human resources server prevents no

Configuring the Agent140 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005hostname where SunONEIdentity Server isinstal

Configuring the AgentChapter 5 Single Sign-on Solution for Oracle Application Servers 141logout.urlThis value specifies the logout URLs of Login Serve

Configuring the Agent142 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Policy Agent for Oracle Application Server 10

Configuring the AgentChapter 5 Single Sign-on Solution for Oracle Application Servers 143notenforcedListSince the propertyreverse_the_meaning_of_noten

Verifying the Deployment144 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005logout.cookie_reset_listThis property list

Troubleshooting TipsChapter 5 Single Sign-on Solution for Oracle Application Servers 145Troubleshooting Tips• If the integration fails, look for debug

Troubleshooting Tips146 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005

147Chapter 6Single Sign-On Solution for SAPInternet Transaction Server 2.0This chapter describesthe steps neededto integrate SunONE Identity Serveri

Architecture Details148 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Sun ONE Identity Server along with Sun ONE Ide

Installing PASChapter 6 Single Sign-On Solution for SAP Internet Transaction Server 2.0 149• Configure at least one SAP system to issue SAP SSO (SSO2

Supported ServersChapter 1 Read This First 15Figure 1-1 An Agent’s Interaction With Sun ONE Identity ServerSupported ServersWeb Policy Agents, version

Configuring the SAP Systems150 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Configuring the SAP SystemsTo set up th

Configuring the SAP SystemsChapter 6 Single Sign-On Solution for SAP Internet Transaction Server 2.0 151• Entry for certificate activated3. Create a g

Configuring the SAP Systems152 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 20053. Set the following parameters in the

Configuring the SAP SystemsChapter 6 Single Sign-On Solution for SAP Internet Transaction Server 2.0 1532. On all of the component systems’ applicatio

Configuring the SAP Systems154 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005The sapdll.srvc service file must be co

Installing and Configuring the Policy AgentChapter 6 Single Sign-On Solution for SAP Internet Transaction Server 2.0 155Installing and Configuring the

SAP Template Files156 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005SAP Template FilesAlong with the SAP Service fil

SAP Template FilesChapter 6 Single Sign-On Solution for SAP Internet Transaction Server 2.0 157<!--// SAP AG 2002// here an example for LDAP DN str

SAP Template Files158 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005<option value="en">No allowed la

SAP Template FilesChapter 6 Single Sign-On Solution for SAP Internet Transaction Server 2.0 159Template file extautherror.html‘end‘<tr><td>

Supported Servers16 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005IBM Lotus Domino 6.0.1 Solaris 8Microsoft Windows

SAP Template Files160 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Template file redirect.htmlCode Example 6-3 Temp

161Appendix AAMAgent PropertiesThe configuration of WebPolicyAgents is largelydeterminedbya set ofpropertiespresent in the file AMAgent.properties. Th

162 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004Valid ValuesThe URL for the naming serviceExamplecom.sun.am.na

Appendix A AMAgent Properties 163Valid ValuesURL of the Sun ONE Identity Server login page where the agent library mustauthenticate.Examplecom.sun.am.

164 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004com.sun.am.logLevelsDescriptionThis property allows to set the

Appendix A AMAgent Properties 165com.sun.am.policy.am.usernameDescriptionThis property stores the user name to use for the Application authenticationm

166 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004Valid ValuesThe absolute path to the directory.Examplecom.sun.

Appendix A AMAgent Properties 167com.sun.am.notificationEnabledDescriptionThis policy determines if thepolicy SDKshould usethe Identity Server notific

168 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004Valid Valuestrue orfalseExamplecom.sun.am.policy.am.urlCompari

Appendix A AMAgent Properties 169com.sun.am.policy.am.fetchHeadersDescriptionThis property enables/disables the additional policy response attributes

Before You Begin InstallationChapter 1 Read This First 17Before You Begin InstallationRead the following sections carefully before you start the insta

170 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004com.sun.am.policy.am.loadBalancer_enableDescriptionThis proper

Appendix A AMAgent Properties 171Examplecom.sun.am.policy.agents.logAccessType = LOG_DENYcom.sun.am.policy.agents.agenturiprefixDescriptionThe agent u

172 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004com.sun.am.policy.agents.instanceNameDescriptionThis property

Appendix A AMAgent Properties 173Examplecom.sun.am.policy.agents.accessDeniedURL=http://nila.eng.example.com:58080/urlaccessdenied.htmlcom.sun.am.poli

174 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004Valid ValuesThe fully qualified domain name of the machine whe

Appendix A AMAgent Properties 175At runtime, the agent refers tothis map in order to take corrective actions for userswho may have typed in a URL with

176 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004Examplecom.sun.am.policy.agents.cookie_reset_enabled=truecom.s

Appendix A AMAgent Properties 177com.sun.am.policy.agents.unauthenticatedUserDescriptionThis property stores the User Id to be returned if a user is a

178 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004Valid ValuesThe list of URLs for which authentication is requi

Appendix A AMAgent Properties 179Examplecom.sun.am.policy.agents.notenforced_client_IP_address_list =194.164.10.2com.sun.am.policy.agents.is_postdatap

Before You Begin Installation18 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Remote Web ServersYou can use the inst

180 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004com.sun.am.policy.agents.cdsso-enabledDescriptionThis property

Appendix A AMAgent Properties 181Valid Valuestrue orfalseExamplecom.sun.am.policy.agents.client_ip_validation_enable = falsecom.sun.am.policy.agents.l

182 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004Examplecom.sun.am.policy.agents.logout.cookie_reset_list =iPla

Appendix A AMAgent Properties 183com.sun.am.policy.agents.getClientHostnameDescriptionThis property indicates whether to get the client’s hostname thr

184 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004com.sun.am.policy.am.fetchFromRootResourceDescriptionBy defaul

185IndexAagent cacheupdating 19agentscache updatehybrid cache 19cache updates 19failover protection 18how they work 13installationCLI-based 38GUI-base

Section E186 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Eencryptionshared_secreton Windows 92shared_secret on Lin

Section RIndex 187Rremote web server 18REMOTE_USER variableon Linux 124SSAPtemplate files 156SAP ITS agentshared libraries 155SAP systemsconfiguringfo

Section W188 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005

Appendix B Error Codes 189Appendix BError CodesThis appendix lists the error codes you may encounter while installing andconfiguring Web Policy Agents

Before You Begin InstallationChapter 1 Read This First 19com.sun.am.policy.am.loginURL= http://primary_Identity_Server.example.com:58080/amserver/UI/L

1905. AM_SESSION_FAILUREThe session operation did not succeed. The operation may be any of the operationsprovided by the session API.6. AM_POLICY_FAIL

Appendix B Error Codes 19118. AM_INVALID_SESSIONThe session token provided to the API was invalid. The session may have timedout or the token is corru

192 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 200527. AM_NOTIF_NOT_ENABLEDThis error is thrown if the notification r

Sun Microsystems, Inc.4150 Network CircleSanta Clara, CA 95054 U.S.A.Copyright 2004 Sun Microsystems, Inc. All rights reserved.Sun, Sun Microsystems,

Before You Begin Installation20 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005The agent sets a timeout period on its

Before You Begin InstallationChapter 1 Read This First 21Here are a few examples:Scenario 1:com.sun.am.policy.agents.reverse_the_meaning_of_notenforce

Before You Begin Installation22 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Forwarding LDAP User Attributes via HT

Before You Begin InstallationChapter 1 Read This First 23By default, some LDAP user attribute names and HTTP header names are set tosample values.To f

Before You Begin Installation24 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005The Agent Properties FileThe AMAgent.p

Before You Begin InstallationChapter 1 Read This First 25Changing the AMAgent.properties file can have serious and far-reaching effects.Remember that

Before You Begin Installation26 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005a valid hostname in the URL, it redire

Before You Begin InstallationChapter 1 Read This First 27Say you want your server to be addressed as xyz.hostname.com whereas theactual name of the se

Before You Begin Installation28 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005By default, this property is set to fa

Before You Begin InstallationChapter 1 Read This First 29Figure 1-2 Sun ONE Identity Server Login Page2.Check the file AMAgent.properties. Make sure t

3ContentsAbout This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Before You Begin Installation30 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005

Chapter 2 Policy Agents on Solaris and HP-UX 31Chapter 2Policy Agents on Solaris and HP-UXSunTM ONE Identity Server Policy Agents work in tandem wit

Before You Begin32 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Before You BeginBe sure that you are familiar with

Installing the AgentChapter 2 Policy Agents on Solaris and HP-UX 33Installing the Policy Agent for a Web ServerYou must have root permissions when you

Installing the Agent34 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Apache Binary Directory: Select the directory w

Installing the AgentChapter 2 Policy Agents on Solaris and HP-UX 35❍ Apache web server with mod_ssl and EAPI flag enabled.9. When you have entered all

Installing the Agent36 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Agent Identity Server Shared Secret: Enter the

Installing the AgentChapter 2 Policy Agents on Solaris and HP-UX 375. To search for the directory where you would like to install the agent, clickBrow

Installing the Agent38 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Failover Server Port: Enter the port number of

Installing the AgentChapter 2 Policy Agents on Solaris and HP-UX 392. Set your JAVAHOME environment variable to a JDK version 1.3.1_04 orhigher. The i

4 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Verifying a Successful Installation . . . . . . . . . . . . . . . .

Installing the Agent40 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005❍ Failover Server Port❍ Failover Server Deploym

Installing the AgentChapter 2 Policy Agents on Solaris and HP-UX 412. When prompted, provide the following information:Have you read, and do you accep

Post-installation Tasks42 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005❍ CDSSO EnabledFor more information on each

Post-installation TasksChapter 2 Policy Agents on Solaris and HP-UX 432. From the listed servers, select the required server.3. Click Internet Protoco

Configuring the Agent for Multiple Web Server Instances44 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Additionally

Configuring the Agent for Multiple Web Server InstancesChapter 2 Policy Agents on Solaris and HP-UX 451. To configurethe agentfor additional web serve

Using Secure Sockets Layer (SSL) With an Agent46 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Deploying the Agent w

Using Secure Sockets Layer (SSL) With an AgentChapter 2 Policy Agents on Solaris and HP-UX 471. Create a new key database using the key management uti

Using Secure Sockets Layer (SSL) With an Agent48 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Disabling the Agent’s

Using Secure Sockets Layer (SSL) With an AgentChapter 2 Policy Agents on Solaris and HP-UX 49Installing the Root CA Certificate on the RemoteWeb Serve

5Creating the Microsoft IIS 6.0 Agent Configuration File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76Creating the Apache 2

Using Secure Sockets Layer (SSL) With an Agent50 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005❍ cert-file is the ba

Using Secure Sockets Layer (SSL) With an AgentChapter 2 Policy Agents on Solaris and HP-UX 513. Install root CA certificate.# /Agent_Install_Dir/SUNWa

Using Secure Sockets Layer (SSL) With an Agent52 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005❍ cert-name can be an

Setting the REMOTE_USER Server VariableChapter 2 Policy Agents on Solaris and HP-UX 533. In the command above, the variables represent the following:❍

POST Data Preservation54 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005The AMAgent.properties file contains a proper

Shared Secret Encryption UtilityChapter 2 Policy Agents on Solaris and HP-UX 55Shared Secret Encryption UtilityThe policy agent stores the shared secr

Uninstalling a Policy Agent56 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005WS_TYPE can be es6, proxy, apache or dom

Uninstalling a Policy AgentChapter 2 Policy Agents on Solaris and HP-UX 577. Open the Domino console and restart the server by entering the followingc

Troubleshooting58 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 20052. When prompted, What next? enter 1 to begin uninst

TroubleshootingChapter 2 Policy Agents on Solaris and HP-UX 59• You might have a previously-installed agent and did not use the agent'suninstalla

6 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Shared Secret Encryption Utility . . . . . . . . . . . . . . . . .

Troubleshooting60 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005The uninstallation program does not remove entries f

Known ProblemsChapter 2 Policy Agents on Solaris and HP-UX 615. Take thepid from the previous step and dopldd pid of the process | grep mtmallocThe ou

Known Problems62 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005Policies not working with Sun ONE Web Proxy Server ag

63Chapter 3Policy Agents on Microsoft WindowsThis chapter explains how to installand configure Web Policy Agents available forthe web servers runnin

Before You Begin64 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004Before You BeginBe sure that your are familiar

Overview of Policy Agents for Microsoft WindowsChapter 3 Policy Agents on Microsoft Windows 65Furthermore, some variety exists among the policy agents

Overview of Policy Agents for Microsoft Windows66 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004The Agent Instal

Installing and Configuring the Installation Type I AgentsChapter 3 Policy Agents on Microsoft Windows 67Installing and Configuring the Installation Ty

Installing and Configuring the Installation Type I Agents68 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 20042. Run

Installing and Configuring the Installation Type I AgentsChapter 3 Policy Agents on Microsoft Windows 697. When all the information is entered correct

7com.sun.am.logFile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Installing and Configuring the Installation Type I Agents70 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 20048. Pro

Installing and Configuring the Installation Type I AgentsChapter 3 Policy Agents on Microsoft Windows 7112. When the installation is complete, you can

Installing Any Agent from the Command Line72 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004• Configure the filte

Installing Any Agent from the Command LineChapter 3 Policy Agents on Microsoft Windows 732. When prompted, provide the following information:Have you

Installing Any Agent from the Command Line74 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004❍ CDSSO feature enabl

Installing the Installation Type II AgentsChapter 3 Policy Agents on Microsoft Windows 75For the Installation Type I Agents, configuration is only nec

Configuring the Installation Type II Agents76 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 20041. Creating the agen

Configuring the Installation Type II AgentsChapter 3 Policy Agents on Microsoft Windows 77The script prompts for information as it progresses with the

Configuring the Installation Type II Agents78 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 20043. When prompted, pr

Configuring the Installation Type II AgentsChapter 3 Policy Agents on Microsoft Windows 79❍ CDSSO feature enabledFor details on these items, see the c

8 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005com.sun.am.policy.agents.logout.cookie_reset_list . . . . . . . . .

Configuring the Installation Type II Agents80 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 20043. When prompted, pr

Configuring the Installation Type II AgentsChapter 3 Policy Agents on Microsoft Windows 814. When prompted, provide the following information about th

Configuring the Installation Type II Agents82 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 20042. Run the following

Configuring the Installation Type II AgentsChapter 3 Policy Agents on Microsoft Windows 83where Identifier_1 is the identifier of the web site for whi

Using Secure Sockets Layer (SSL) with an Agent84 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 20043. Once the confi

Using Secure Sockets Layer (SSL) with an AgentChapter 3 Policy Agents on Microsoft Windows 85The Agent’s Default Trust BehaviorThis section only appli

Using Secure Sockets Layer (SSL) with an Agent86 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004Installing the Ro

Using Secure Sockets Layer (SSL) with an AgentChapter 3 Policy Agents on Microsoft Windows 87Agent_Install_Dir\bin\certutil -L -d cert-dirYou should s

Using Secure Sockets Layer (SSL) with an Agent88 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004❍ cert-file is th

Using Secure Sockets Layer (SSL) with an AgentChapter 3 Policy Agents on Microsoft Windows 894. To verify that the certificate is properly installed,

9About This GuideSunTM ONE Identity Server Policy Agents, version 2.1 comprise Web PolicyAgents and J2EE Policy Agents. This guide offers an introduct

Setting the REMOTE_USER Server Variable90 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004Setting the REMOTE_USER

POST Data PreservationChapter 3 Policy Agents on Microsoft Windows 91The AMAgent.properties file contains a property titledcom.sun.am.policy.agents.cl

Shared Secret Encryption Utility92 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004Shared Secret Encryption Utilit

Disabling, Uninstalling, and Unconfiguring Microsoft Windows Policy AgentsChapter 3 Policy Agents on Microsoft Windows 93Disabling the Policy Agent In

Disabling, Uninstalling, and Unconfiguring Microsoft Windows Policy Agents94 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • Sep

Disabling, Uninstalling, and Unconfiguring Microsoft Windows Policy AgentsChapter 3 Policy Agents on Microsoft Windows 95To uninstall the agent for Lo

Disabling, Uninstalling, and Unconfiguring Microsoft Windows Policy Agents96 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • Sep

Disabling, Uninstalling, and Unconfiguring Microsoft Windows Policy AgentsChapter 3 Policy Agents on Microsoft Windows 97Unconfiguring the Agent for M

Disabling, Uninstalling, and Unconfiguring Microsoft Windows Policy Agents98 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • Sep

TroubleshootingChapter 3 Policy Agents on Microsoft Windows 99Uninstalling Installation Type II Policy AgentsThe steps for uninstalling the agent are