Sun Java System Access Manager 7.1 Deployment Planning Guide

Base Installation Directory

The default base installation directory depends on the platform where you are installing Access Manager:

In the Access Manager documentation, the AccessManager-base variable represents the base installation directory for Solaris, Linux, and HP-UX systems. For Windows systems, the javaes-install-dir variable represents the Java ES 5 installation directory.

Within the base installation directory, Access Manager packages, shared binary files, command-line tools, and other files are installed in the /SUNWam directory on Solaris systems, the /identity directory on Linux and HP-UX systems and \identity directory on Windows systems. Therefore, the default base and product directory also depend on the platform:


Note –

During installation, you can specify a different base installation directory if you wish. However, do not change the /SUNWam, /identity, or \identity product directory name.


On Windows systems, the \setup directory contains the following files that you can use to configure Access Manager:

The /SUNWam, /identity, or \identity directory contains the following files and directories:

After installing Access Manager, check the package installation accuracy by using the pkgchk (1M) utility. For example:

pkgchk -l -p /opt/SUNWam

/bin Directory

The following table describes the command-line tools and utilities in the /bin directory. For information about running these tools and utilities, see the Sun Java System Access Manager 7.1 Administration Reference.

Table A–2 Access Manager Command-Line Tools and Utilities

Utility  

Description 

am2bak

am2bak.bat (Windows)

Backs up the Access Manager components. 

amadmin

amadmin.bat (Windows)

Load XML service files into Directory Server and performs batch administrative tasks on the DIT. 

amsfo, amsfoconfig, amsfopassword

amsfo.pl, amsfoconfig.bat, amsfopassword.bat (Windows)

Access Manager session failover scripts. 

ampassword

ampassword.bat (Windows)

Changes passwords for Access Manager administrator or users. 

amsamplesilent

Sample silent install file for use with the installation and configuration scripts. 

amconfig, amutils, amdsconfig, amsdkconfig, amsvcconfig, amas70config, amwas51config, amwl81config, amws61config

Installation and configuration scripts for installing, configuring, and uninstalling Access Manager instances. For information about these scripts, see Chapter 2, Running the Access Manager amconfig Script, in Sun Java System Access Manager 7.1 Postinstallation Guide.

amserver

Start and stops the amunixd and amsecuridd daemons.

amtune directory

Contains the Access Manager tuning scripts, which allow you to set operating system, Access Manager, web container, and Directory Server parameters to improve performance. 

amverifyarchive

amverifyarchive.bat (Windows)

Verifies the log archives to detect possible tampering and/or deletion of any files in the archive. 

bak2am

bak2am.bat (Windows)

Restores Access Manager components backed up by the am2back or am2back.bat utility.

ldapmodify

Edits the contents of an LDAP directory, either by adding new entries or by modifying existing ones. 

ldapsearch

Issues search requests to an LDAP directory and displays the result as LDIF text. 

amGenerateLDIF.pl and amGenerateNI.pl

Access Manager bulk federation scripts. 

am2bak.template, amserver.template, amadmin.template, amverifyarchive.template, ampassword.template, and bak2am.template

Access Manager template files. 

/docs Directory

The /docs directory contains the HTML, JAR, CSS, and related files used for the Java API reference (Javadocs).

/dtd Directory

The /dtd directory contains the Document Type Definition (DTD) files used by Access Manager. A DTD defines the structure for XML files accessed by Access Manager. For more information, see the Sun Java System Access Manager 7.1 Developer’s Guide.

The following table describes the Access Manager DTD files in the /dtd directory.

Table A–3 Access Manager DTD Files

File 

Description 

Auth_Module_Properties.dtd

Defines the structure for XML files used by the authentication modules to specify their properties. 

amAdmin.dtd

Defines the structure for XML files used to perform batch LDAP operations on the directory tree using the amAdmin command-line tool.

amWebAgent.dtd

Defines the structure for XML files used to handle requests from, and send responses to, web agents. This file is deprecated and remains for purposes of backward compatibility. 

policy.dtd

Defines the structure for XML files used to store policies in Directory Server. 

remote-auth.dtd

Defines the structure for XML files used by the Authentication Service’s remote Authentication API. 

server-config.dtd

Defines the structure for serverconfig.xml which details ID, host and port information for all server and user types.

sms.dtd

Defines the structure for XML service files. 

web-app_2_2.dtd

Defines the structure for XML files used by the Access Manager deployment container to deploy J2EE applications. 

/include Directory

The /include directory contains header (.h) files.

/ldaplib Directory

The /ldaplib/ldapsdk subdirectory contains the shared object (.so) files needed to run the LDAP utilities included with Access Manager.

/lib Directory

The /lib directory contains JAR files and additional shared object (.so) files. It also contains a link to the AMConfig.properties file.

/locale Directory

The /locale directory contains the localization properties files. Each properties file includes a corresponding English localization file. For example, amAdminCLI_en.properties is the corresponding file for amAdminCLI.properties.

/migration Directory

The /migration directory contains the scripts and supporting files used to migrate data from earlier versions of Access Manager.

For more information about migration, the Sun Java Enterprise System 5 Upgrade Guide in the following documentation collection: http://docs.sun.com/coll/1286.2.

/public_html Directory

The /public_html directory and subdirectories contain the HTML and related files used for the Access manager Console online help.

/samples Directory

The /samples directory contains the following subdirectories: /admin, /appserver, /authentication, /console, /csdk, /liberty, /logging, /phase2, /policy, /saml, /sso, and /um.

Each subdirectory contains samples for the respective functionality, which is indicated by the subdirectory name. For more specific information about these samples, see the Readme.html file.

/share Directory

The /share/bin subdirectory contains the following additional utilities used internally by Access Manager, including amsecuridd, amunixd, amwar, checkport, and wsutils.ksh.

/upgrade Directory

The /upgrade directory contains the following directories:

/web-src Directory

The /web-src directory contains the subdirectories in which Access Manager J2EE web applications are deployed on a web container. It contains the following subdirectories: