|
| |
| Sun Java(TM) Systems Identity Manager 7.1 Installation Guide | |
Chapter 6
Installing Identity Manager for Sun ONE Application Server 7Use the following information and procedures to install Identity Manager for use with the Sun ONE Application Server 7. This chapter includes:
Before You BeginDuring installation, you will need to know:
Installation StepsFollow these installation and configuration steps, located in this chapter and following sections:
Step 1: Install the Sun ONE Application Server Software
You may need to perform one or more of these general steps when installing the software:
Step 2: Install the Identity Manager Software
Follow these procedures to install the software.:
- You may install the software using one of two methods:
On UNIX systems, change directory to the software location. Enter the following command to activate the installer in nodisplay mode:
install -nodisplay
The installer displays the Welcome text. The installer then presents a list of questions to gather installation information in the same order as the Graphic User Interface installer in these procedures.
- Click Next. The installer displays the Install or Upgrade? panel.
- Leave the New Installation option selected, and then click Next.
The installer displays the Select Installation Directory panel.
- Replace the displayed directory location with the location where you want to install Identity Manager. This could be a staging location or a specific folder. Enter the location (or click Browse to locate it), and then click Next.
Note
If the directory you enter does not exist, Identity Manager prompts for confirmation, and then creates the directory.
- Click Next to begin installation.
After installing the files, the installer displays the Launch Setup panel.
Caution
Before you continue, if you plan to use an index database, you may need to copy one or more files to the idm\WEB-INF\lib directory. For example, you may need to place into idm/WEB-INF/lib a JAR file containing a JDBC driver (for a DriverManager connection) or a JAR file containing a JNDI InitialContextFactory (for a DataSource connection). To determine the steps you may need to perform before you go on, see Index Database Reference. When finished, click Launch Setup to launch the Setup Wizard and continue with setup steps.
If you click Launch Setup before copying your index database files, setup will not proceed correctly. If this happens, quit the installation program, and then use the lh setup command to restart the setup portion of the installation process.
- Click Next on the Setup Wizard panel.
Identity Manager displays the Locate the Repository panel.
- Select an index database:
- Oracle (JDBC Driver)
- Oracle (Data Source)
- MySQL (JDBC Driver)
- MySQL (Data Source)
- DB2 (JDBC Driver)
- DB2 (Data Source)
- SQL Server (JDBC Driver)
- SQL Server (Data Source)
- LocalFiles
Depending on your selection, setup prompts for additional setup information.
Note
See Index Database Reference, for selections and setup instructions.
- Click Next.
- The Continue Identity Manager Demo Setup? panel appears.
- If this is a non-demo installation click No, I will configure Identity Manager myself. Go to Step 19.
- If appropriate, click Yes, I would like to continue setting up a demonstration environment.
This allows you to quickly configure users and enter environment and server information.
- Enter the following personal information:
- Enter the following Approver information:
- Click Next.
- Select the Server Type from the list.
Select None if your environment has no server to manage. If there is a server you wish to manage, select the appropriate server type. You will be prompted for further server information as appropriate.
- If you have an email SMTP server, click SMTP Host and enter the server address. If desired, click Test Server to verify communication to the SMTP server.
- If you would like email notifications to be written to a file, click Notification File. Click Browse to select another notification file.
- Click Next.
- The installer displays the Import Save Configuration panel.
- Click Execute to perform all the listed functions. If desired, click Hide Details.
- When all functions complete, click Done in the setup panel.
Getting More Information
When installation completes, Identity Manager displays the Installation Summary panel. For detailed information about the installation, click Details.
Not all messages may not be displayed here. View the log file (identified in details) for more information.
When finished, click Close to exit the installer.
After completing installation, continue by optionally installing the Sun Identity Manager Gateway.
Step 3. Deploy Identity Manager into Sun ONE Application Server
Follow these steps to deploy the Identity Manager application into Sun ONE Application Server. For additional information about deploying applications under Sun Java One Application Server, refer to the Sun Java One Application Server documentation.
- Open a command prompt, and then change to the staging directory where you installed the Identity Manager files.
- Create a .war file with the Identity Manager files by using the jar.exe command:
c:\java1.4\bin\jar.exe cvf ..\idm.war *
- Launch and log in to the Sun ONE Admin Console. For example, to start a domain:
- In the Common Task Panel (left panel), go to Applications, and then Web Applications.
- In the Web Applications window, click Deploy.
- In the Deploy Web Module window, do one of the following:
- Click Next.
- Deploy the application.
- In the Common Task Panel (left panel), go to Configurations, expand
server-config (Admin Config), and then select JVM Settings.- Under the JVM Options tab, add the following JVM option:
-Dwaveset.home=domain_home/applications/j2ee-modules
/StagedIDMNameFor example:
-Dwaveset.home=/var/opt/SUNWappserver/domains/domain1/
applications/j2ee-modules/idm- If you are using specific resource drivers, you may need to add them in the Classpath Suffix under the JVM Settings, Path Settings tab. For example, if you are using the Oracle jdbc driver, add:
DomainHome/applications/j2ee-modules/idm/
WEB-INF/lib/ojdbc14.jar- Configure the security policy to allow Identity Manager to operate. See Step 5. Edit the server.policy File for recommended permissions settings.
- Restart your domain instance. For example:
./asadmin stop-domain Domain1
./asadmin start-domain --user User --password Password
DomainName- To verify setup, log in to Identity Manager on port 8081 (the application server default port setting).
Step 4. Install the Sun Identity Manager Gateway
If you plan to set up Windows Active Directory, Novell NetWare, Novell GroupWise, Exchange 5.5, Remedy, or RSA ACE/Server resources, you should install the Sun Identity Manager Gateway. Follow the procedures in Install the Sun Identity Manager Gateway.
Step 5: Edit the server.policy File
When running Identity Manager on a Sun ONE server with Java 1.4 or 1.5, Identity Manager must be given permissions to perform certain actions.
Add the following lines to the server.policy file for the domain in which Identity Manager is installed (located in ApplicationServerHome/domains/domainName/config):
grant {
permission java.lang.RuntimePermission "accessClassInPackage.sun.io";
permission java.lang.RuntimePermission "getClassLoader";
permission java.lang.RuntimePermission "createClassLoader";
permission java.lang.RuntimePermission "accessDeclaredMembers";
permission com.waveset.repository.test.testConcurrentLocking "read";
permission java.net.SocketPermission "*", "connect,resolve";
permission java.io.FilePermission "*", "read";
permission java.util.PropertyPermission "*", "read,write";
};
grant codeBase "file:${waveset.home}/-" {
permission java.util.PropertyPermission "waveset.home", "read,write";
permission java.util.PropertyPermission "security.provider", "read,write";
permission java.io.FilePermission "${waveset.home}${/}
*", "read,write,execute";
permission java.io.FilePermission "$(java.io.tmpdir)$(/)*", "read,write,delete";
permission java.util.PropertyPermission "*", "read,write";
permission java.lang.RuntimePermission "accessClassInPackage.sun.io";
permission java.net.SocketPermission "*", "connect,resolve";
};If you want to run with Identity Manager Service Provider Edition, add the following permissions to the above server.policy file entries.
grant {
permission java.lang.RuntimePermission "shutdownHooks";
permission java.io.FilePermission "${waveset.home}/WEB-INF/spe/config/spe.tld", "read";
};If you want to run with trace set to write to a file, you will need to add the following additional permissions to the server.policy file.
permission java.io.FilePermission "$(java.io.tmpdir)$(/)*", "read,write,delete";
permission java.util.PropertyPermission "trace.file", "read";
permission java.util.PropertyPermission "trace.destination", "read";
permission java.util.PropertyPermission "trace.enabled", "read";
};where FilePermission is the actual path of the trace file. Adjust the path to the output file as needed.