Sun OpenSSO Enterprise 8.0 Installation and Configuration Guide

Apache Tomcat 5.5.27 and 6.0.x

OpenSSO Enterprise supports Tomcat 5.5.27 or 6.0.x.

For the platforms that are supported for this web container, see Platforms Supported For OpenSSO Enterprise 8.0 in Sun OpenSSO Enterprise 8.0 Release Notes.

Add the security permissions to the catalina.policy file, as described in Adding Security Permissions For a Web Container. After you edit the file, restart the web container.

For general information about Apache Tomcat, see http://tomcat.apache.org/.

OpenSSO Enterprise Pre-Deployment Tasks

  1. Set the -Xmx JVM option to -Xmx1024m.

  2. Add the -Dcom.iplanet.am.cookie.c66Encode=true JVM option to the JAVA_OPTS variable in the Tomcat catalina.sh or catalina.bat script. For example, for catalina.sh:

    if [ -r "$CATALINA_HOME"/bin/tomcat-juli.jar ]; then
    JAVA_OPTS="$JAVA_OPTS
    -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
    -Dcom.iplanet.am.cookie.c66Encode=true"

OpenSSO Enterprise Post-Deployment Tasks

After you deploy OpenSSO Enterprise on Tomcat, use the ssoadm utility to set the cookie encoding property to true. For example:

# ./ssoadm update-server-cfg \
-s http://openssohost.example.com:8080/opensso -u amadmin -f pwfile \
-a com.iplanet.am.cookie.encode=true

In this example, pwfile contains the password for amadmin.