Rewriter Proxy Configuration (Sun Java Enterprise System 2005Q4 Installation Reference)

Sun Java Enterprise System 2005Q4 Installation Reference

Rewriter Proxy Configuration

This section lists the information you must provide when you install the Rewriter Proxy subcomponent. In this scenario, you must provide the following types of information:

Web Container Deployment information
Rewriter Proxy information
Proxy information
Certificate information

The following sections provide details on the information you must provide.

Web Container Deployment Information

The following table lists the information that you specify about the web container.

Table 1–53 Web Container Deployment Information for Portal Server Secure Remote Access Rewriter Proxy


Label and State File Parameter	Description
Deployment URI `SRA_DEPLOY_URI`	Uniform Resource Identifier (URI) that you use to deploy Portal Server. The value for the deployment URI must have a leading slash and must contain only one slash. The default value is `/portal`.

Rewriter Proxy Information

This section describes the Rewriter Proxy information that the installer needs when you are installing Rewriter Proxy.

Table 1–54 Rewriter Proxy Information for Portal Server Secure Remote Access Rewriter Proxy


Label and State File Parameter	Description
Host Name `SRA_RWP_HOSTNAME`	Host name of the host on which you are installing the Rewriter Proxy. The default value is the host name of the local host.
Subdomain `SRA_RWP_SUBDOMAIN`	Subdomain name of the host on which the Rewriter Proxy is being installed. There is no default value.
Domain `SRA_RWP_DOMAIN`	Domain name of the host on which the Rewriter Proxy is being installed. The default value is the domain name of the local host.
Host IP Address `SRA_RWP_IPADDRESS`	IP address of the host on which you are installing Rewriter Proxy. The default value is the IP address of the local host.
Access Port `SRA_RWP_PORT`	Port on which the Rewriter proxy listens. The default value is `10443`.
Gateway Profile Name `SRA_RWP_GATEWAY_PROFILE`	Profile that contains gateway configuration information, such as listener port, SSL options, and proxy options. The default value is `default`.
Log User Password `SRA_LOG_USER_PASSWORD`	Password that allows administrators with non-root access to access log files.
Start Rewriter Proxy after installation `SRA_RWP_START`	Directs the installer to automatically start Rewriter Proxy after installation. In a state file, the value can be `y` or `n`. The default value is `y`.

Proxy Information

The following table describes information that you must enter if you are installing the proxy subcomponents on a host on which there is an existing installation of Portal Server Secure Remote Access.

Table 1–55 Proxy Information for Portal Server Secure Remote Access Rewriter Proxy


Label and State File Parameter	Description
Work with Portal Server on another host? `SRA_IS_CREATE_INSTANCE`	Select this option (or answer `y` in CLI mode) only if you are installing the Netlet and Rewriter proxies on this host and these proxies are interacting with a remote instance of Portal Server SRA. Deselect this option (or answer n in CLI mode) if the Netlet and Rewriter proxies are interacting with a local instance of Portal Server SRA. In a state file, the permitted values are `y` or `n`. The meanings of these values in a state file is as follows: `y` specifies that the proxies work with a local instance of Portal Server SRA `n` specifies that the proxies work with a remote instance of Portal Server SRA The remaining fields in this table apply only if you select this option to indicate that these proxies will work with a remote instance of Portal Server SRA.
Protocol `SRA_SERVER_PROTOCOL`	Protocol (HTTP or HTTPS) that the gateway will use to communicate with Portal Server. In a state file, specify `https` or `http`. The default value is `https`.
Portal Host Name `SRA_SERVER_HOST`	Fully qualified domain name of the host on which you are installing Portal Server.
Portal Server Port `SRA_SERVER_PORT`	Port used to access Portal Server. The default value is `80`.
Portal Server Deployment URI `SRA_DEPLOY_URI`	Uniform Resource Identifier (URI) that you use to deploy Portal Server. The value for the deployment URI must have a leading slash and must contain only one slash. The default value is `/portal`.
Organization DN `SRA_IS_ORG_DN`	The distinguished name (DN) of the root suffix for the domain in which Portal Server is being installed. The default value is `.com`. You must edit this default value.
Service URI `SRA_IS_SERVICE_URI`	Uniform Resource Identifier used to invoke Access Manager services. The default value is `/amserver`.
Access Manager Password Encryption Key `SRA_IS_PASSWORD_KEY`	A string that Access Manager uses to encrypt user passwords. Portal Server SRA must use the encryption key that Access Manager used at installation, so the installer automatically sets the default value to that key. In the interactive installer, do not edit the displayed default value. You can find the Access Manager encryption key in the Access Manager properties file, `AMConfig.properties`. Location is: Solaris OS: `/etc/opt/SUNWam/config` Linux: `/etc/opt/sun/identity/config` The property that contains this value is `am.encryption.pwd`.

Certificate Information

When you are installing Gateway, Netlet Proxy, or Rewriter Proxy, you can provide information to create a self-signed certificate for use with Portal Server, Secure Remote Access. The installer needs the following information to configure a certificate.

Note –

Do not use multibyte characters when providing certificate information.

Table 1–56 Certificate Information for Portal Server Secure Remote Access Rewriter Proxy


Label and State File Parameter	Description
Organization `SRA_CERT_ORGANIZATION`	Name of your organization or company.
Division `SRA_CERT_DIVISION`	Name of your division.
City/Locality `SRA_CERT_CITY`	Name of your city or locality.
State/Province `SRA_CERT_STATE`	Name of your state or province.
Country Code `SRA_CERT_COUNTRY`	Two-letter country code.
Certificate Database Password `SRA_CERT_PASSWORD`	Password (and confirmation) that applies only to self-signed certificates.