Sun Java �лx     �W�@��      �ؿ�      �d�      �U�@��     

Sun �лx
Sun Java System Communications Express 6 2005Q1 �޲z��n 

�� 4 ��
��{�榸�n�J

�榸�n�J��@��ϥΪ̥u���q�L�@���{�ҡA�Y�i�ϥΦh��3�ε{���A�Ӥ����g�L���s�{�ҡC�Ҧp�A�n�J Communications Express ��A�p�G��ƾ�M�l��3�ε{�����w�ҥγ榸�n�J�\��A�z�������s�q�L�{�ҧY�i�ϥΦ�ƾ�M�l��3�ε{���C�z�i�H�b Communications Express �����U�C�榸�n�J�����G

�����]�t�H�U�U�`�G


�]�w Identity Server �榸�n�J

���`���Ѧ���p��]�w Communications Express �M Messenger Express �H�K�ϥ� Identity Server �榸�n�J�ۤ��q�T����T�C

�p�G�A�w�g��ܱĥ� Sun Java System LDAP Schema, v.2 �@���Ҧ��ҫ��A�z�ݭn�b Communications Express ���ҥ� Identity Server�A�H�K�ϥ� Identity Server ���榸�n�J���Ө�o���Ī��ϥΪ̶��q�@�~�C

�Y�n�� Communication Express �ϥΪ̨ϥ� Identity Server �榸�n�J�s�� Messenger Express �Ҵyø���l��ҲաA�z�ݭn�ϥΦ�� msg-svr_install_root/sbin/configutil �� configutil �u��ӭק�S�w�� Messenger Express ���ѼơC�w�ˤ���A��T�]�w�S�w�� Messenger Express ���ѼƬO�ܭ��n���A�]���w�˵{�����|�]�w�o�ǰѼơC�p�ݨϥ� configutil �u�㪺��h��T�A�аѾ\�uSun Java System Messaging Server �޲z��n�v���� 4 ���u�t�m�@��T���ǰe�\��v(��� http://docs.sun.com/doc/819-1057)�C

�]�w Identity Server �榸�n�J�ɡA�i�H�b�ۦP�� Web �e����ҩΤ��P�� Web �e����Ҥ��A�H SSL �M�D SSL �Ҧ����p Communications Express �� Identity Server�C�b���P�� Web �e����Ҥ����p Identity Server �� Communications Express �ɡA�z�ݭn�b���p Communications Express ���t�ΤW�t�m Identity Server ���� SDK�C�U���C�X���O�b���P Web �e����Ҥ��A�H SSL �P�D SSL �Ҧ����p Identity Server �� Communications Express �����p�רҡC

    �� Identity Server �b Communications Express ���ҥγ榸�n�J�\��
  1. �}�� uwc-deployed-path/WEB-INF/config/uwcauth.properties �ɮסC
  2. �b uwcauth.properties �ɮפ��ק�U�C Communications Express �ѼơA�H�ҥ� Identity Server SSO�C
  3. �Ѽ�

    �γ~

    uwcauth.identity.enabled

    ��w�O�_�w�ҥ� Identity server�C

    �̪�b�t�m�{�����]�w�ȡC

    �N�ݩʳ]�w�� true�A�H�ҥ� Identity Server�C

    �N�ݩʳ]�w�� false�A�H���� Identity Server�C

    uwcauth.identity.login.url

    ��w Identity Server �n�J URL ���ѼơC

    �Ҧp�Auwcauth.identity.login.url=http://siroe.example.com:85/amserver/UI/login

    uwcauth.identity.cookiename

    ��w Identity Server �ҥΪ� cookie �W�١C

    uwcauth.identity.cookiename ����3�ӻP�b Identity Server �t�m�{������w���ȹ�M�C

    Identity Server �ϥΪ��w�] cookie �W�٬O iPlanetDirectoryPro

    uwcauth.identity.binddn

    ��w amadmin ������ DN�C

    �Ҧp�A

    uid=amAdmin, ou=People, o=siroe.example.com, o=example.com

    �Ƶ�Guwcauth.identity.binddn �P uwcauth.identity.bindcred ��3�ӹ�3��w�� Identity Server �ɩҿ�J���ȡC

    �Ҧp�Auwcauth.identity.binddn=uid=amAdmin, ou=People, o=siroe.example.com, o=example.com �� uwcauth.identity.bindcred=password�C

    uwcauth.identity.bindcred

    ��w amadmin ���K�X�C

    uwcauth.http.port

    ��w��D SSL �s����W�t�m Communications Express �ɡACommunications Express ��ť���s���𸹽X�C

    �w�]�s���𸹽X�O 80�C

    uwcauth.https.port

    ��w�� SSL �s����W�t�m Communications Express �ɡACommunications Express ��ť�� HTTPS �s���𸹽X�C

    �w�] HTTPS �s���𸹽X�O 443�C

    identitysso.singlesignoff

    ��w�榸�n�X���A�C

    �p�G�]�w�� true�A�h�b�ϥΪ̵n�X�ɷ|�����l�� Identity Server ���q�@�~�A�åB�ѻP�o�� Identity Server ���q�@�~���Ҧ�3�ε{�����|�n�X�C

    �p�G�]�w�� false�A�u�|�l�� Communications Express ���q�@�~�A�åB�|�N�ϥΪ̤޾ɦܦb identitysso.portalurl ���Ұt�m�� URL�C

    �w�]���A�O true�C

    identitysso.portalurl

    ��w�n�N Communications Express ���s�ɦV�ܪ� URL�C

    �p�G�ҥ� Identity Server�A�ñN�榸�n�X�]�w�� false�ACommunications Express �|���s�ɦV�ܦb identitysso.portalurl���� URL�C

    �̹w�]�ACommunications Express �|���s�ɦV�� http://www.sun.com�C

  4. �� Identity Server �榸�n�J�]�w Communications Express �ɡA�N uwcauth.messagingsso.enable �Ѽƪ��ȳ]�w�� false�C
  5. Communications Express �{�b�|�ϥ� Identity Server ���榸�n�J���Ө�o���Ī��ϥΪ̶��q�@�~�C

    �Y�n�b�ۦP�� Web �e����Ҥ����p Identity Server �P Communications Express
  1. �}�� IS-SDK-BASEDIR/lib/AMConfig.properties �ɮסC
  2. IS-SDK-BASEDIR ���d�ҬO /opt/SUNWam/lib�C

  3. �T�w�b AMConfig.properties �ɮפ��w�]�w�U�C�S�ʡG
  4. com.iplanet.am.jssproxy.trustAllServerCerts=true

    AMConfig.properties �b IS-SDK-BASEDIR/lib ��

    �Ҧp�A/opt/SUNWam/lib

  5. ���s�Ұ� Web �e���A���ܧ�ͮġC
  6. �H SSL �Ҧ����p�b�ۦP Web �e����Ҥ��� Identity Server �� Communications Express�A�{�b�i�H�ϥ� Identity Server ���榸�n�J���Ө�o���Ī��ϥΪ̶��q�@�~�C

    �Y�n�b���P�� Web �e����Ҥ����p Identity Server �P Communications Express
  1. �ܧ�� IS-INSTALL-DIR/bin�C
  2. �ƻs Identity Server �� IS-INSTALL-DIR/bin/amsamplesilent �ɮסC
  3. cp amsamplesilent amsamplesilent.uwc

  4. �s��b�e�@�ӨB�J���إߪ� amsamplesilent �ƥ��C
  5. �]�w�ѼơA�H��3���p���ԲӸ�T�C

    �p�G�z�b Web �e�������p Identity Server SDK�A�p Sun Java System Web Server �� Sun Java System Application Server�A�бN DEPLOY_LEVEL ���ȳ]�w�� 4�A�]�N�O��� [SDK �ȥΩ�e���t�m] �ﶵ�C

  6. �N AM_ENC_PWD ���ȳ]�w���w�� Identity Server �v��ϥΪ��K�X�[�K�K�_�C
  7. �[�K�K�_�x�s�b�U�C��m�� am.encryption.pwd �ѼƤ��G

    ${IS_INSTALL_DIR}/lib/AMConfig.properties

  8. �N NEW_INSTANCE �]�w�� true�C
  9. �p�G�z�b Sun Java System Web Server �����p Identity Server SDK�A�бN WEB_CONTAINER �]�w�� WS6�C
  10. �p�G�z�b Sun Java System Application Server �����p Identity Server SDK�A�бN WEB_CONTAINER �]�w�� AS7 �� AS8�C

  11. �p�� amsamplesilent �ɮפ���L�Ѽƪ���h�ԲӴy�z�A�H�Φp��t�m Identity Server ���� SDK �Ѽƪ���T�A�аѾ\�U�C��m���uSun Java System Identity Server Administration Guide�v�G
  12. http://docs.sun.com/source/817-5709/ConfigScripts.html

  13. �b Web �e�����t�m Identity Server SDK�C
  14. �T�w Identity Server �ϥΪ� Directory Server ���b���C

  15. �ҰʱN�n���p Identity Server SDK �� Web �e����ҡC
  16. �N�ؿ��ܧ�� IS-SDK-BASEDIR/bin�C
  17. ���U�C��O�G
  18. ./amconfig -s amsamplesilent.uwc

  19. ���s�Ұ� Web �e����ҡA�ϰt�m�ͮġC
  20. �H SSL �Ҧ��ΫD SSL �Ҧ����p�b���P Web �e����Ҥ��� Identity Server �� Communications Express�A�{�b�i�H�ϥ� Identity Server ���榸�n�J���Ө�o���Ī��ϥΪ̶��q�@�~�C


�Ƶ�

�Y�ݦb���p Communications Express ����ҥΩΰ��� Identity Server ������A�аѾ\���� A�C


    �� Identity Server �b Messenger Express ���ҥγ榸�n�J�\��
  1. ��� configutil �u��C
  2. msg-svr_install_root/sbin/configutil

  3. �]�w�U�C Messenger Express �ѼơA�� Communication Express �ϥΪ̨ϥ� Identity Server �榸�n�J�s�� Messenger Express�C
  4. �Ѽ�

    �γ~

    local.webmail.sso.amnamingurl

    ���t�m�ҥ� Identity Server ���� SSO �\��C

    �Ѽ�3��� Identity Server ���R�W�A�Ȫ� URL�C

    �Ҧp�A

    configutil -o local.webmail.sso.amnamingurl -v http://siroe.example.com:85/amserver/namingservice

    local.webmail.sso.uwcenabled

    �ҥ� Communications Express �s�� Messenger Express�C

    �Y�n���ΡA�бN�ѼƳ]�w�� 0�C

    local.webmail.sso.uwclogouturl

    ��w Messenger Express �ΨӨ� Communications Express ���q�@�~���Ī� URL�C

    �p�G�z�w�g�b Messenger Express ����T�a�t�m�F local.webmail.sso.uwclogouturl�A�h�|�ϥγo�ӭȨӵn�X�C�_�h�AMessenger Express �|�ھڽШD���D���� HTTP �D��ӫغc�n�X URL�C

    �Ҧp�A

    http://siroe.example.com:85/base/UWCmain?op=logout

    �� Communications Express �����p�b / ���U�ɡA�p /uwc�A�o�ӰѼƪ��ȷ|�ݰ_�Ӧp�U�ҥܡG

    http://siroe.example.com:85/uwc/base/UWCmain?op=logout

    local.webmail.sso.uwcport

    ��w Communications Express ���s����C

    �Ҧp�A85�C

    local.webmail.sso.uwccontexturi

    ��w���p Communications Express ����|�C

    �u���� Communications Express �����p�b / ���U�ɡA�~��w�o�ӰѼơC

    �Ҧp�A�p�G Communications Express ���p�b /uwc���A�h local.webmail.sso.uwccontexturi=uwc

     

    local.webmail.sso.amcookiename

    ��w Identity Sever ���q�@�~�� cookie �W�١C

    �T�w�b uwcauth.properties �ɮפ��A uwcauth.identity.cookiename ���ȳ]�� local.webmail.sso.amcookiename ���ȡC

    �Ҧp�AiPlanetDirectoryPro

    local.webmail.sso.uwchome

    ��w�s���s���һݭn�� URL�C

    �@���]�w�F�S�w�� Messenger Express ���ѼơACommunication Express �ϥΪ̴N�i�H�ϥ� Identity Server �榸�n�J�Ӧs�� Messenger Express�C


�]�w�T���ǰe�榸�n�J

���`����p��]�w Communications Express �H�ϥΰT���ǰe�榸�n�J�C�p�G�z��ܱĥ� Sun Java System LDAP Schema, v.1 �@���Ҧ��ҫ��A�z�ݭn�b Communications Express ���ҥ� Messaging SSO�A�H�ϥΰT���ǰe�榸�n�J���ӻ{�ҡC

�t�m Communications Express �ɡA�t�m���F���|�]�w���j��ʪ� SSO ����ѼơC�z�ݭn��ʳ]�w�ݭn���ѼơA����p�U�C�t�Ъ`�N�AMessaging SSO ���䴩���:��A�ӥB Messenger Express �b�ҥ� Messaging SSO �ɡA���|�H SSL �Ҧ����C

�p�G�z�w�g�N Messenger Express ���p�� MEM�A�нT�w Messaging Server ���U�C�Ѽƪ��ȻP��ݩM�e�ݬۦP�G

    �ϥ� Messaging SSO �ҥ� Communications Express
  1. �}�� uwc-deployed-path/WEB-INF/config/uwcauth.properties �ɮסC
  2. �ק� uwcauth.properties �ɮפ��S�w��l�󪺤U�C�ѼơA�H�ҥ� Communications Express �s�� Messenger Express�C
  3. �Ѽ�

    �γ~

    uwcauth.appprefix

    ��w�e��A�ӫe��ΨӴM��榸�n�J�L�{���Ѩ�L�i�H��3�ε{���Ҳ��ͪ� cookie�C

    �e��O�ΨӴM��榸�n�J�L�{���Ѩ�L�i�H��3�ε{���Ҳ��ͪ� cookie�C

    �p�G���p�ϥ� Messaging SSO�A3�Ӭ����ݩʫ�w�b�T���ǰe�t�m�L�{���]�w�� local.webmail.sso.prefix �ȡC

    �w�]�ȬO iPlanetDirectoryPro�C

    uwcauth.appid

    ��w Communications Express ��3�ε{�� ID�C

    �w�]�ȬO uwc�C

    uwcauth.cookiedomain

    ��w�x�s���榸�n�J cookie �@���*����W�١C

    uwcauth.messagingsso.enable

     

    �ҥΩΰ��ΰT���ǰe�榸�n�J�\��C

    �N���ѼƳ]���utrue�v�i�ҥγ榸�n�J�A�]���ufalse�v�h���γ榸�n�J�C

    �t�~�A�T�w�� Identity Server �榸�n�J�]�w Communications Express �ɡA�N uwcauth.messagingsso.enable �]�w�� false�C

    �w�]�ȬO true�C

    uwcauth.messagingsso.cookiepath

    ��w�x�s�榸�n�J cookie �� URI ��|�C

    �w�]�ȬO /�C

    messagingsso.xxx.url

    ��w������ SSO cookie �� URL�C

    xxx ����3�ӥΦ�A����3�ε{�� ID ��N�C

    �Ҧp�A�p�G�n��3�ε{�� ID ���umsg60�v�� Messaging Server �ҥ� SSO �\��A�z�����[�J�U�C�t�m�ѼơG

    mesagingsso.msg60.url=http://servername/VerifySSO?

    ���B���Ϊ� xxx ��3�ӻP Messenger Express ���� local.webmail.sso.id ��w���ȧ����@�ˡC

    �w�]�ȬO http://servername/VerifySSO?�C

    messagingsso.uwc.url

     

     

    �� Communications Express �����p�b / ���U�ɡA�p /uwc�A�o�ӰѼƪ��ȷ|�ݰ_�Ӧp�U�G

    http://servername:85/uwc/VerifySSO?

    messagingsso.appid

    ��w Messaging Server ��3�ε{�� ID�C

    messagingsso.appid ����3�ӻP Messaging Server �t�m�L�{���]�w�� local.webmail.sso.id �@�ˡC

    �w�]�ȬO ims�C

    messagingsso.ipsecurity

    �M�w�O�_�n����q�@�~�s��n�J IP ��}�C

    �p�G�]�w�� true�A��ϥΪ̵n�J�ɡA��A���|�O�o�ϥΪ̥Ψӵn�J�� IP ��}�C�M��b�ϥ� Messaging Server �إ� SSO �ɡA��A���Ȥ��\�� IP ��}�ϥΥ��o���ϥΪ̪����q�@�~ cookie�C

    �p�G�]�w�� false�ACommunications Express ���|���o�� IP ��}�ˬd�A�í���s��q�@�~�C

    �w�]�ȬO true�C

    �@���]�w�F uwc-deployed-path/WEB-INF/config/uwcauth.properties �ɮפ����ѼơACommunication Express �ϥΪ̴N�i�H�ϥλ{�Ҫ��T���ǰe�榸�n�J���Ӧs�� Messenger Express�C

    �ϥ� Messaging SSO �ҥ� Messenger Express
  1. ��� configutil �u��C
  2. msg-svr_install_root/sbin/configutil

  3. �ϥ� configutil �u��ӳ]�w�U�C�S�w��l�󪺰ѼơC
  4. �Ѽ�

    �γ~

    local.sso.<uwc-appid>.verifyurl

    �� Communications Express �����p�b / ���U�ɡA�p /uwc�A�o�ӰѼƪ��w�]�ȷ|�ݰ_�Ӧp�U�G

    http://siroe.example.com:85/uwc/VerifySSO?

    local.webmail.sso.id

    ��w�ΨӨϨ�L3�ε{���ѧO Messenger Express ���ȡC

    local.webmail.sso.cookiedomain

    ���Ѽƪ��r��ȥΩ�]�w�� Messenger Express HTTP ��A���]�w�� SSO cookie �� cookie ���ȡC

    �?���X�檺�D��W�٬O siroe.example.com �ɡA�ȥ����H�y�� (.) �}�l�A�Ҧp�A�u.example.com�v�C

    �T�w�����Ѽƫ�w���ȻP�� uwcauth.cookiedomain ��J���ȬۦP�C

    �Ҧp�A .example.com

    local.webmail.sso.enable

    �ҥΩΰ��ΰT���ǰe�榸�n�J�\��C

    �N�ȳ]�w�� 0 �i���ΰT���ǰe�榸�n�J�\��C

    local.webmail.sso.prefix

    ��w�e��A�ӫe��ΨӴM��榸�n�J�L�{���Ѩ�L�i�H��3�ε{���Ҳ��ͪ� cookie�C

    �T�w���ȹ�3�� uwcauth.appprefix ����J�ȡC

    local.webmail.sso.singlesignoff

    �p�G�]�w�� 1�A��ϥΪ̵n�X�ɡA��A���|�����ŦX local.webmail.sso.apprefix �Ȫ��ϥΪ̪��Ҧ��榸�n�J cookies�C

    �p�G�]�� 0�A��A���u�|������榸�n�J�ϥΪ� cookie�C

    local.webmail.sso.uwcenabled

    �ҥΩΰ��αq Communications Express �� Messenger Express �s��C

    �]�w�� 1 �|�ҥαq Communications Express �� Messenger Express �s��C

    �]�w�� 0 �|���αq Communications Express �� Messenger Express �s��C

    local.webmail.sso.uwclogouturl

    ��w Messenger Express �ΨӨ� Communications Express ���q�@�~���Ī� URL�C

    �p�G�z�w�g�b Messenger Express ����T�a�t�m�F local.webmail.sso.uwclogouturl�A�h�|�ϥγo�ӭȨӵn�X�C�_�h�AMessenger Express �|�ھڽШD���D���� HTTP �D��ӫغc�n�X URL�C

    �Ҧp�Ahttp://siroe.example.com:85/base/UWCMain?op=logout

    �� Communications Express �����p�b / ���U�ɡA�p /uwc�A�o�ӰѼƪ��w�]�ȷ|�ݰ_�Ӧp�U�G

    http://siroe.example.com:85/uwc/base/UWCMain?op=logout

    local.webmail.sso.uwcport

    ��w Communications Express ���s����C

    �Ҧp�A85�C

    local.webmail.sso.uwccontexturi

    ��w���p Communications Express ����|�C

    �u���� Communications Express �����p�b /���U�ɡA�~��w�o�ӰѼơC�Ҧp�A�p�G Communications Express ���p�b /uwc���A�h local.webmail.sso.uwccontexturi=uwc

    �Ҧp�Auwc�C

    local.webmail.sso.uwchome

    ��w�s���s���һݭn�� URL�C

    �Ҧp�Ahttp://www.sun.com

    local.webmail.sso.ims.verifyurl

    ��w������ SSO cookie �� URL�C

    �Ҧp�Ahttp://siroe.example.com/VerifySSO?

    ���B���] webmail ���p��s���� 80 �W�C

Communications Express �ϥΪ̲{�b�i�H�ϥλ{�Ҫ��T���ǰe�榸�n�J���Ӧs�� Messenger Express�C



�W�@��      �ؿ�      �d�      �U�@��     


��󸹽X�G819-1104�C  Copyright 2005 Sun Microsystems, Inc. ���v�Ҧ��C