The following steps described in this section might be required, depending on your site's specific deployment:
If the agent is installed and configured to operate in the URL_POLICY or ALL mode, the appropriate URL policies must be created. For example, WebSphere Application Server with Administration Console is listening on ports 10001 (http) and 10003 (https), respectively, and WebSphere Portal Server is listening on port 10038 (http), create the following polices for the WebSphere Administrative user IDs (wasadmin and wpsadmin) to allow them to access the WebSphere Administration Console and Portal Server URLs:
http://myhost.mydomain.com:10001/* https://myhost.mydomain.com:10003/* http://myhost.mydomain.com:10038/*
Note: This example assumes that http://myhost.mydomain.com:10001/ibm/console is the Administration console URL and http://myhost.mydomain.com:10038/wps/myportal is the Portal Server URL.
If the policies are not defined and the agent is configured to operate in the URL_POLICY or ALL mode, then no user is allowed access to the IBM WebSphere Application Server and Portal Server 6.0 resources.
For information about creating these policies using the Access Manager Console or command-line utilities, see the Sun Java System Access Manager 7.1 Administration Guide.
To use this agent with Access Manager 6.3, perform these steps after the agent installation.
Change to the PolicyAgent-base/lib directory.
Download the amclientsdk63.jar and fmclientsdk.jar files to the PolicyAgent-base/lib directory from the OpenSSO project site:
Change to the WAS-base/AppServer/lib/ext directory.
where WAS-base represents the directory where IBM WebSphere Application Server 6.0 was installed.
Copy the downloaded amclientsdk63.jar and fmclientsdk.jar files into the WAS-base/AppServer/lib/ext directory and remove the famclientsdk.jar file.
Restart all WebSphere server instances to make these changes take effect.