Chapter 3 Installing the OpenSSO Enterprise 8.0 Update 1 Admin Tools

The Sun OpenSSO Enterprise 8.0 Update 1 ZIP file (opensso_enterprise_80U1.zip) includes the admin tools, scripts, libraries, and other supporting files in the ssoAdminTools.zip file, including:

• ssoadm

• amverifyarchive

• ampassword

• amtune tuning scripts

The OpenSSO Enterprise 8.0 ssoadm utility is not compatible with OpenSSO Enterprise 8.0 Update 1 ssopatch utility. Therefore, after you deploy OpenSSO Enterprise 8.0 Update 1, also re-install the Update 1 tools and scripts in the ssoAdminTools.zip file.

• ssoAdminTools.zip Files

• Using ssoadm With OpenSSO Enterprise Configured as a Site

ssoAdminTools.zip Files

The ssoAdminTools.zip file is in the following directory:

zip-root/deploy_uri/tools where zip-root is where you unzipped the opensso_enterprise_80U1.zip file and deploy_uri is the deployment URI.

For example: /opt/opensso/tools

The following table describes the files after you unzip ssoAdminTools.zip.

To Install the OpenSSO Enterprise Tools and Scripts

1. Make sure the the OpenSSO Enterprise 8.0 Update 1 web container is running.

2. Make sure that your JAVA_HOME environment variable points to JDK 1.5 or later.

3. Create a new directory to unzip the ssoAdminTools.zip file. For example: tools-zip-root.

4. Unzip the ssoAdminTools.zip file in the new directory.

5. In the directory where you unzipped the ssoAdminTools.zip file, run the setup script on Solaris and Linux systems or the setup.bat script on Windows.

   For example, on Solaris and Linux systems: # ./setup

6. When you are prompted, enter the path to the OpenSSO Enterprise configuration, log, and debug directories. For example: /opensso

Next Steps

You can now run the OpenSSO Enterprise CLI tools and utilities from the following directory:

tools-zip-root/deploy_uri/bin

where:

• tools-zip-root is the directory where you unzipped the ssoAdminTools.zip file.

• deploy_uri is the name of the OpenSSO Enterprise deploy URI. For example: opensso

  For example: /opt/ssotools/opensso/bin

Related Information

• CLI utilities: Sun OpenSSO Enterprise 8.0 Administration Reference

• Tuning scripts: Sun OpenSSO Enterprise 8.0 Performance Tuning Guide

Using ssoadm With OpenSSO Enterprise Configured as a Site

In a typical large deployment, OpenSSO Enterprise server instances are configured behind one or load balancers. The HTTP(s) traffic is usually one directional. That is, the traffic goes from one of the load balancers to the servers, but requests from servers are unable to reach the load balancers.

If the above scenario applies to your deployment and you need to use the ssoadm utility (Solaris and Linux systems) or ssoadm.bat utility (Windows), perform the following procedure.

To Use ssoadm With OpenSSO Enterprise Configured as a Site

1. After you install the tools, edit the ssoadm or ssoadm.bat utility by adding the following property to the java command:

   -D"com.iplanet.am.naming.map.site.to.server=
   http://lb.example.com:8080/opensso=http://sso1.example.com:8080/opensso"

   where lb is the load balancer, and sso1 is the OpenSSO Enterprise server where ssoadm or ssoadm.bat is installed.

2. Save the ssoadm or ssoadm.bat utility.

   The utility can now send naming requests to the OpenSSO Enterprise server instance.