Sun Java System Access Manager Policy Agent 2.2 Guide for IBM Lotus Domino 7.0

Updating the Web Agent Profile Name and Password

If you change the agent profile name and/or password in the Access Manager Console, you must assign the new value(s) to the corresponding properties in the web agent's AMAgent.properties configuration file.

Important. The values for the agent profile name and password must be the same for Access Manager server and in the web agent's AMAgent.properties configuration file

This task involves these basic steps:

  1. If you changed the agent profile name in the Console, add the new name to the com.sun.am.policy.am.username property in the web agent's AMAgent.properties configuration file.

  2. If you changed the agent profile password in the Console, encrypt the agent profile password using the encryption utility.

  3. Add the new encrypted agent profile password from the previous step to the com.sun.am.policy.am.password property in the web agent's AMAgent.properties configuration file.

Follow these steps, depending on your platform:

ProcedureTo Update the Agent Profile Name and Agent Profile Password on UNIX and Linux Systems

This task applies to Solaris, Linux, and AIX systems.

  1. If you changed the agent profile name in the Console, update the following property in the web agent's AMAgent.properties configuration file:

    com.sun.am.policy.am.username=profile-name
    

    Replace the value of this property with the agent profile name you just updated in the Access Manager Console.

  2. If you changed the agent profile password in the Console, follow these steps:

    1. Change to the PolicyAgent-base/bin directory.

    2. Encrypt the agent profile password. For example:

      # ./crypt_util agent-profile-password

      where agent-profile-password represents the agent profile password you just updated in the Access Manager Console.

    3. Copy the output from the crypt_util command and use it as the value for the following property in the web agent's AMAgent.properties configuration file:

      com.sun.am.policy.am.password=encrypted-password
      
  3. Restart the IBM Lotus Domino 7.0 container.

Next Steps

To test the new password, try accessing a resource protected by the agent. If the agent is redirected to Access Manager, the password was changed properly.

ProcedureTo Update the Agent Profile Name and Agent Profile Password on Windows Systems

  1. If you changed the agent profile name in the Console, update the following property in the web agent's AMAgent.properties configuration file:

    com.sun.am.policy.am.username=profile-name
    

    Replace the value of this property with the agent profile name you just updated in the Access Manager Console.

  2. If you changed the agent profile password in the Console, follow these steps:

    1. Change to the PolicyAgent-base/bin directory.

    2. Encrypt the agent profile password. For example:

      cryptit agent-profile-password

      where agent-profile-password represents the agent profile password you just updated in the Access Manager Console.

    3. Copy the output from the cryptit command and use it as the value for the following property in the web agent's AMAgent.properties configuration file:

      com.sun.am.policy.am.password=encrypted-password
      
  3. Restart the IBM Lotus Domino 7.0 container.

Next Steps

To test the new password, try accessing a resource protected by the agent. If the agent is redirected to Access Manager, the password was changed properly.