Sun Java System Access Manager 7.1 Postinstallation Guide

ProcedureTo Configure Access Manager as a Site in Realm Mode

The following procedure refers to the Access Manager 7.1 Console in Realm Mode.

  1. Log in to the Access Manager Console as amAdmin.

  2. Add the load balancer URL to the Site Name:

    1. In the Access Manager Console, click Configuration, System Properties, and then Platform.

    2. Under Site Name, click New and enter the following values for the load balancer:

      • Server: Load balancer protocol, host name, and port. For example: http://lb.example.com:80

      • Site Name: Unique two-digit site identifier (site ID). For example: 10

        When you are finished, click OK.

    3. After adding the load balancer to the Site Name, click Save. The entry for the load balancer now includes the site ID. For example: http://lb.example.com:80|10

      The site ID must be unique with respect to server IDs and other site IDs. For example, you cannot use 01 for both a site ID and a server ID.

  3. On the same Console panel, map the load balancer to each Access Manager instance:

    1. In the Server list under Instance Name, click each instance name to display the Edit Server Instance panel for the instance.

    2. Map the Site Name (site ID) for the load balancer to the Access Manager instance. For example, using a load balancer with a Site Name of 10, for the first server, the Instance Name would 01|10.

    3. Click OK and repeat the steps for the other Access Manager instances.

      When you are finished, all Access Manager instances should be mapped to the load balancer. For example:

      http://amserver1.example.com:8080|01|10
      http://amserver2.example.com:8080|02|10
      http://amserver3.example.com:8080|03|10
    4. Click Save to save the configuration.

  4. Add the Realm/DNS alias for the load balancer:

    1. In the Access Manager Console, click Access Control and then the root or top-level realm under Realm Name.

    2. Under Realm Attributes, add the load balancer to Realm/DNS Aliases and then click Add. For example: lb.example.com.

    3. Click Save to save your changes.

  5. For clients such as a policy agent, the load balancer (as opposed to the individual Access Manager instances) should be the sole entry point. For example, if you are using a policy agent, modify the appropriate entries in the AMAgent.properties file to point to the load balancer.