To Configure Each Access Manager Instance in Realm Mode

Before You Begin

Start the Directory Server instance (ds1.example.com) on the first machine only. Add the Access Manager indexes to the first Directory Server instance, as described in Indexing Access Manager Attributes in Directory Server.

1. Log in as or become superuser (root) on the server where Access Manager is installed.

2. Backup the serverconfig.xml file.

   The serverconfig.xml file is in the following directory, depending on your platform:

   • Solaris systems: /etc/opt/SUNWam/config

   • Linux and HP-UX systems: /etc/opt/sun/identity/config

   • Windows systems: C:\Program Files\Sun\JavaES5\identity\config

3. In the serverconfig.xml file, add the secondary Directory Server instance. For example:

   ...
   <iPlanetDataAccessLayer>
       <ServerGroup name="default" minConnPool="1" maxConnPool="10">
               <Server name="Server1" host=" ds1.example.com" port="389" type="SIMPLE" />
               <Server name="Server2" host=" ds2.example.com" port="389" type="SIMPLE" />
   ...

4. Login to the Access Manager Realm Mode Console as amadmin.

5. Click Access Control > Realm Name realm-name General .

   1. Add both Access Manager instances to the Realm/DNS Aliases list. For example:

      amserver1.example.com amserver2.example.com

   2. Save the changes.

6. Click Access Control > Realm Name realm-name > Authentication Module Instances – LDAP .

   1. Add the secondary Directory Server instance to Secondary LDAP Server. For example: ds2.example.com:389

   2. Save the change.

7. After you have performed the changes on both Access Manager instances, restart the Access Manager web container on both host servers.

8. On the secondary Directory Server instance, add the Access Manager indexes as follows:

   1. Start the secondary Directory Server instance.

   2. Add the Access Manager indexes using either the Directory Server 6.0 Directory Service Control Center (DSCC) or the ldapmodify utility.

      For information about adding indexes, see Indexing Access Manager Attributes in Directory Server.

   3. Restart the secondary Directory Server instance.