Sun Java logo     Previous      Contents      Index      Next     

Sun logo
Sun Java Enterprise System 2003Q4 Deployment Example Series: Evaluation Scenario 

Chapter 7
Configuring Proxy Authentication

This chapter describes how to configure proxy authentication for the portal desktop, the messaging service, and the calendar service.

This chapter contains the following sections:

About Proxy Authentication

The default portal desktop has mail and calendar channels that connect to services provided by Messaging Server and Calendar Server. Each time a user refreshes the portal desktop, the mail and calendar channels connect to their respective back-end services and retrieve mail and calendar information.

Configuring proxy authentication for these channels enables a fuller display of mail and calendar information in the portal desktop. It also enables users to launch Messenger Express and Calender Express directly from the portal desktop.

To enable proxy authentication you must perform the following configuration:

The proxy user account acts as a trusted agent on behalf of end users. The proxy user accounts in Messaging Server and Calendar Server exist to provide end-user authentication without the need for authentication of end-user passwords.

When you register the proxy user’s name and password with the Portal Server Mail and Calendar channel SSO Adapter templates, end users who access the portal desktop can launch the mail and calendar services from the desktop without logging in again.

Configuring the Portal Calendar Channel for Proxy Authentication

To enable proxy authentication for the sample portal Calendar channel, configure the SSO Adapter Service through the Identity Server console.

    To Configure the Portal Calendar Channel for the SSO Adapter Service
  1. In your web browser, open this URL:

    2. http://allinone.example.com:81/portal/

    The Identity Server login page opens.

  2. In the Identity Server login page, enter the following values:
    • User Name: amadmin
    • Password: password

      • Click Log In. The Identity Server console window opens.

  3. Click the Service Configuration tab.

    4. The Identity Server Services are displayed.

  4. Scroll down in the left pane. Locate the SSO Adapter, and then click the arrow symbol that follows the name SSO Adapter.

    5. The display refreshes. The right pane displays the SSO Adapter Service properties. Your display should resemble Figure 7-1.

    Figure 7-1  SSO Adapter Properties
    Screen capture; In left pane, SSO Adapter is selected. In right pane, under Global heading, in SSO Adapter Templates field, configuration property is selected.

  5. Edit the SUN-ONE-CALENDAR configuration properties. In the Global Properties section, find the SSO Adapter Templates field. Click the line that contains the SUN-ONE-CALENDAR configuration properties. This line is selected in Figure 7-1.

    6. An editable copy of the line is displayed in the editable field below the list of Global Properties. Use this editable field to edit the text:

    Tip

    Use a text editor to make the changes. Go to the editable field below the list of properties and select the entire properties string. Right-click the selected properties string and choose Copy.

    Paste the text into a text editor window and make the changes described in Step 5.

    1. Find merge=host&. Change the value to default=host&.
    2. Find merge=port&. Change the value to default=port&.
    3. Find merge=clientPort&. Change the value to default=clientPort&.
    4. Find enableProxyAuth=false&. Change the value to enableProxyAuth=true&.
    5. Find proxyAdminUid=[PROXY-ADMIN-UID]&. Change the value to proxyAdminUid=calmaster&.
    6. Find proxyAdminPassword=[PROXY-ADMIN_PASSWORD]&. Change the value to proxyAdminPassword=password&.
    7. Find userAttribute=uid. Change the value to userAttribute=uid&.

      8. Add the & at the end.

    8. Add the following name/value pair entries to the end of the properties string:

      9. host=allinone.example.com&
      clientPort=89&
      port=89

      There is no & at the end of the last entry.

      Tip

      After you use a text editor make the changes described in Step 5, select the text in the editor and copy it. Paste the text back into the Identity Server console window’s editable field.

  6. After you edit the text in the editable field, click Add.

    7. A new line is added to the Adapter SSO Templates field. Notice that the original line is not changed or deleted.

  7. Locate the original parameter line and click Remove.

    8. The original line is deleted.

  8. Click Save to apply your changes.

Configuring the Portal Mail Channel for Proxy Authentication

To enable proxy authentication for the sample portal Mail channel, you configure the SSO Adapter Service through the Identity Server console.

    To Configure the Portal Mail Channel for the SSO Adapter Service
  1. Edit the SUN-ONE-MAIL IMAP configuration properties. In the Global Properties section, click the entry that contains the default|imap:///?configName=SUN-ONE-MAIL configuration properties.

    2. An editable copy of the entry is displayed in the editable field below the list of Global Properties. Edit the text in the editable field:

    Tip

    Use a text editor to make the changes. Go to the editable field below the list of properties and select the entire properties string. Right-click the selected properties string and choose Copy.

    Paste the text into a text editor window and make the changes described in Step 1.

    1. Find merge=host&. Change the value to default=host&.
    2. Find merge=clientPort&. Change the value to default=clientPort&.
    3. Find enableProxyAuth=false&. Change the value to enableProxyAuth=true&.
    4. Find proxyAdminUid=[PROXY-ADMIN-UID]&. Change the value to proxyAdminUid=admin&.
    5. Find proxyAdminPassword=[PROXY-ADMIN_PASSWORD]&. Change the value to proxyAdminPassword=password&.
    6. Find default=domain. Change the value to default=domain&.

      7. Add the & at the end.

    7. Add the following name/value pair entries to the end of the properties string:

      8. host=allinone.example.com&
      clientPort=88

      There is no & at the end of the last entry.

      Tip

      After you use a text editor make the changes described in Step 1, select the text in the editor and copy it. Paste the text back into the Identity Server console window’s editable field.

  2. After you edit the text in the editable field, click Add.

    3. A new line is added to the Adapter SSO Templates field. Notice that the original line is not changed or deleted.

  3. Locate the original parameter line and click Remove.

    4. The original line is deleted.

  4. Click Save to apply your changes.
  5. Navigate to the Sun ONE Application Server directory:

    6. cd /var/opt/SUNWappserver7/domains/domain1/server1/bin

  6. Stop and restart Application Server:

    7. ./stopserv

    ./startserv

    Restarting Application Server also restarts Portal Server.

Configuring Messaging Server for Proxy Authentication

    To Configure Messaging Server for Proxy Authentication
  1. Navigate to the Sun ONE Messaging Server directory:

    2. cd /opt/SUNWmsgsr/sbin

  2. Run the following configutil commands for the mail configuration.

    3. ./configutil -o store.admins admin

    su mailsrv

    ./configutil -o service.http.allowadminproxy -v yes

    The first configutil command permits the admin user ID to be able to manage the Messaging Server message store. The message store contains the user mailboxes for a particular Messaging Server instance. The second configutil command enables admin proxy authentication.

  3. Stop Sun ONE Messaging Server.

    4. ./stop-msg

  4. Restart Sun ONE Messaging Server.

    5. ./start-msg

Configuring Calendar Server for Proxy Authentication

    To Configure Calendar Server for Proxy Authentication
  1. Cd to the Calendar Server directory:

    2. cd /etc/opt/SUNWics5/config

  2. Edit the /ics.conf file as follows:
    1. Find the service.http.allowadminproxy parameter. Make sure it is uncommented. Make sure its value is set to yes:

      2. service.http.allowadminproxy=”yes”

    2. Find the service.admin.calmaster.userid parameter. Make sure it is uncommented. Make sure its value is set to calmaster:

      3. service.admin.calmaster.userid=”calmaster”

    3. Find the service.admin.calmaster.cred parameter. Make sure it is uncommented. Make sure its value is set to password. If you are using a different password, remember to substitute your password value.

      4. service.admin.calmaster.cred=”password”

  3. Cd to the Sun ONE Calendar Server directory.

    4. cd /opt/SUNWics5/cal/sbin

  4. Stop Sun ONE Calendar Server.

    5. ./stop-cal

  5. Restart Sun ONE Calendar Server.

    6. ./start-cal

Verifying Proxy Authentication

In this section, you log in to the portal desktop and verify that you can access Messenger Express and Calendar Express.

    To Verify Proxy Authentication
  1. In your web browser, open this URL:

    2. http://allinone.example.com:81/portal

    This opens the sample portal desktop.

    Tip

    Remember to substitute the host and domain that you are using.

  2. In the sample portal desktop, use the Member Login fields to log in. Type the following values:
    • User Name: scott
    • Password: password
  3. The sample desktop refreshes. The Calendar and Mail channels display the appropriate information for your Java Enterprise System user. Your display should resemble Figure 7-2.

    4. Figure 7-2  Sample Portal Desktop
    Screen capture; User Information channel displays user name Scott McDuke. Calendar channel displays test event.

  4. Click Launch Calendar.

    5. The Calender Express main window opens. This verifies that proxy authentication is configured correctly for Sun ONE Calendar Server.

  5. Click Launch Mail.

    6. The Messenger Express main window opens. This verifies that proxy authentication is configured correctly for Sun ONE Messaging Server.

  6. Click Log out.

You have completed the evaluation deployment example.



Previous      Contents      Index      Next     

Copyright 2004 Sun Microsystems, Inc. All rights reserved.