Sun Java �лx     �W�@��      �ؿ�      �d�      �U�@��     

Sun �лx
Sun Java System Communications Express 6 2005Q1 �޲z��n 

�� 3 ��
�t�m�ԲӸ�T

�����y�z Communications Express ���t�m�ԲӸ�T�C


Communications Express �t�m�ɮ�

Communication Express �b�U�C�ɮפ����@�t�m�ѼơG

�Ҧ��t�m�ɮ׳��O ASCII ��r�ɡA�C�@�泣�H�U�C�榡�w�q�@�ӰѼƤΨ����p�ȡG

parameter=value

�t�m Communications Express �ɷ|��l�ưѼơC�w�ˤ���A�z�i�H�ϥΤ�r�s�边�s���ɮסC

    �s��t�m�ɮ�
  1. �n�J���֦��ק��v�����ϥΪ̡C
  2. �ܧ�� .properties �ɮשҦb���ؿ�C
  3. �ϥΤ�r�s�边�s��ѼơC
  4. �Ѽƪ��D�ҥ]�A�J

    • �Ҧ��ѼƤΨ����p�ȥ����H���� (=) �9j�C�����e��i�H���Ů�Ωw����C
    • �Ҧp�G

      uwc-user-attr-sunUCDefaultApplication=calendar

    • ���&�H��ĸ� (!) �}�Y�C
    • �̹w�]�A�Y�ǰt�m�Ѽƨϥ���ĸ������!C�Y�n�ϥγo�ǰѼơA�z����������ĸ��A���ܧ�� (�p�G�ݭn����)�C

  5. ���s�Ұ� Web Server �� App Server�A�Ϸs�t�m�ȥͮġC

�t�m�ѼƸԲӸ�T

�i�H��ӤU�C��椤�����!A�ק��ƾ�B�l��γq�T��t�m�ѼơC

�p�ݧ�h���l��B��ƾ�γq�T��i�t�m�ѼơA�аѾ\�� 3 ���u�t�m�ԲӸ�T�v�C

�b uwcconfig.properties �ɮפ��t�m Messenger Express �Ѽ�

�� 3-1 �l��Ѽ�

�Ѽ�

�w�]��

�y�z

mail.deployed

 

��w�O�_�w���p Messenger Express�C����t�m���F�ɡA�|�]�w���ѼơC

�p�G�w���p Messenger Express�A�ݩʱN�]�w���utrue�v�C

webmail.host

 

��w�w���p Messenger Express ���q���D��W�١C

Messenger Express ���D��W��3�ӻP���p Web Server ����W�٬۹�3�C

webmail.port

 

��w Messenger Express HTTP Server ��ť���s���𸹽X�C

�b uwcauth.properties �ɮפ��t�m Sun Java System LDAP Schema v.1 �� Directory Server ����Ѽ�

��{�� LDAP Server �P�ϥΪ�/�s�� LDAP ���P�ɡA�z�i�s��� 3-2 ���Ҵ��Ϊ��ѼơC

�� 3-2 LDAP �{�ҿz��Ѽ� 

�Ѽ�

�w�]��

�y�z

ldapauth.ldaphost

 

��w LDAP �D��ȡC

�q�`�Aldapauth.ldaphost �ȻP ldapusersession �ȬۦP�C�p�G�ݭn�A�i�H�N��]�w����L�ȡC

ldapauth.ldapport

 

��w LDAP �s���𸹽X�C

ldapauth.dcroot

 

��w�{�Ҿ𪬵��c�� DC �ڡC

ldapauth.domainattr

inetDomainBaseDN,inetDomainStatus,inetDomainSearchFilter, domainUidSeparator,preferredLanguage

��w�n�q��춵���^���ݩʲM��A�H�{�ҨϥΪ̡C

ldapauth.domainfilter

(|(objectclass=inetDomain)(objectclass=inetDomainAlias))

��w�^���춵�خھڪ��z�ᄍ�C

ldapauth.ldapbinddn

 

��w�s���ܻ{�� LDAP ���ϥΪ̤��ϥΪ� DN�C

ldapauth.ldapbindcred

 

��w�s���ܻ{�� LDAP ���ϥΪ̱K�X�C

ldapauth.enablessl

false

��w�n���{�Ҫ��ؿ�O�_�b SSL �Ҧ��U�C

�N�w�]���ܧ󬰡utrue�v�A�H�]�w�w���� LDAP �s�u�C

�� 3-3 LDAP �ϥΪ̸s�հѼ�  

�Ѽ�

�w�]��

�y�z

ldapusersession.ldaphost

 

��w�ϥΪ̸s�� Directory Server ���D��W�١C

ldapusersession.ldapport

 

��w�ϥΪ�/�s�� Directory Server ���s���𸹽X�C

ldapusersession.ldapbinddn

 

��w�s���ܨϥΪ�/�s�� Directory Server ���޲z��ϥΪ� DN�C

ldapusersession.ldapbindcred

 

��w�s���ܨϥΪ̾𪬵��c���޲z��K�X�C

ldapusersession.dcroot

 

��w Sun Java System LDAP Schema v.1 ���Ω�ѪR�ϥΪ̶��ؤ��ϥΪ�/�s�� LDAP ������줸�� (DC) �𪬵��c�C

�b uwcauth.properties �ɮפ��t�m Identity Server �Ѽ�

�� 3-4 Identity Server �Ѽ�  

�Ѽ�

�w�]��

�y�z

uwcauth.identity.enabled

 

��w�O�_�ҥ� Identity Server�C

�p�G Identity Server ���榸�n�J���Ω�{�ҡA���ݩʫK�]�w���utrue�v�C

uwcauth.identity.naming.url

 

��w Identity Server ���R�W URL�C

�Ҧp�Auwcauth.identity.naming.url= protocol://hostname:port Context URI

uwcauth.identity.binddn

 

��w amAdmin �ϥΪ̪������O�W�� (DN)�C

�Ҧp�A

uid=amadmin, ou=People, o=siroe.com

uwcauth.identity.bindcred

 

��w amAdmin �K�X�C


�Ƶ�

�� uwcauth.identity.enabled �ȳ]�w���utrue�v�ɡA�N�j��t�m uwcauth.identity.naming.url�Buwcauth.identity.binddn�Buwcauth.identity.bindcred�C


�b uwcauth.properties �ɮפ��t�m�ϥΪ�/�s�ժ��ϥΪ̬d�߰Ѽ�

�� 3-5 �ϥΪ̬d�߰Ѽ�  

�Ѽ�

�w�]��

�y�z

ldapusersession.defaultugfilter

uid@domain

��w���^��ϥΪ̶��خɭn�ϥΪ��w�]�z��y�k�C

ldapusersession.ldappoolmin

30

��w�n���ϥΪ�/�s�� LDAP �إߪ� LDAP �ϥΪ̳s�u�̤p�ƥءC

ldapusersession.ldappoolmax

100

��w�n���ϥΪ�/�s�� LDAP �إߪ� LDAP �ϥΪ̳s�u�̤j�ƥءC

�ھڱz�����p�ݨD��J�̨έȡC

ldapusersession.lookthru_limit

1000

��w�j�M���j�M�d�߭���C

�b uwcconfig.properties �ɮפ��t�m Calendar Server �Ѽ�


�Ƶ�

�T�w Sun Java™ System Calendar Server ���w�ҥΥN�z�{�ҤΰΦW�s��C

�Y�n�ҥΥN�z�{�ҤΰΦW�s��A�Цb��ƾ�t�m�ɮ� ics.config ���t�m�U�C Calendar Server �ѼơG

  • service.http.allowadminproxy = "yes"
  • service.http.admins = includes-the-value-specified-for- calendar.wcap.adminid-in-uwcconfig.properties.
  • service.admin.calmaster.userid = the-value-specified-for- calendar.wcap.adminid-in-uwcconfig.properties
  • service.admin.calmaster.cred = the-value-specified-for- calendar.wcap.passwd-in-uwcconfig.properties
  • service.wcap.anonymous.allowpubliccalendarwrite = "yes"
  • service.http.allowanonymouslogin = "yes"
  • service.calendarsearch.ldap = "no"

�p�ݱҥΥN�z�{�Ҫ��ԲӸ�T�ΰt�m Calendar Server �Ѽƪ�����A�аѾ\�uSun Java System Calendar Server �޲z��n�v�A��m�b http://docs.sun.com/doc/819-1479


�� 3-6 Calendar Server �Ѽ�

�Ѽ�

�w�]��

�y�z

calendar.deployed

true

��w�O�_���p��ƾ�ҲաC����t�m���F�ɡA�|�]�w���ѼơC

�p�G�w���p��ƾ�A�ݩʷ|�]�w���utrue�v�C

calendar.wcap.host

 

��w WCAP ��A�����D��W�١C

calendar.wcap.port

 

��w WCAP ��ť���s���𸹽X�C

calendar.wcap.adminid

 

��w�� WCAP ��A�����޲z�� ID�C

calendar.wcap.passwd

 

��w�� WCAP ��A�����޲z��K�X�C


�Ƶ�

  • �T�w�z��w�� calendar.wcap.adminid ����ƾ�޲z��ϥΪ� ID �ȡA�P Calendar Server �� ics.conf �ɮפ����Ϊ� service.admin.calmaster.userid �ȬۦP�C
  • �T�w LDAP ��A���W�A����ƾ�޲z��ϥΪ� ID ��3���ϥΪ̶��ءC

�b db_config.properties �ɮפ��t�m�q�T��ӤH�x�s�Ѽ�

�� 3-7 �C�X db_config.properties �ɮפ����w�]�q�T��ӤH�x�s�t�m�ѼơC

�i�q�H�U��m�s���ɮסG

uwc-deployed-path/WEB-INF/config/ldappstore/

�� 3-7 �ӤH�q�T��ӤH�x�s�Ѽ� 

�Ѽ�

�w�]��

�y�z

defaultserver.ldaphost

 

��w�ӤH�q�T�� (PAB) �x�s�ϥΪ� LDAP �D��C

defaultserver.ldapport

 

��w�x�s�ҥΪ��s����C

defaultserver.ldapbinddn

 

��w�Ω�s���ܡu�ӤH�q�T���x�s�v�� DN�C

�p�G�n�J�����O�urestricted�v�Ρuproxy�v�A�h������J�ӭȡC

�p�G�n�J�����O�uanonymous�v�A�h���ݭn��J���Ѽƪ��ȡC

defaultserver.ldapbindcred

 

��w�Ω�s���ܡu�ӤH�q�T���x�s�v�� DN ���K�X�C

login_type

restricted

��w�ΨӺ��@ LDAP �x�s�s�u����k�C

�z�i�H�N�U�C�T�ӭȫ�w�����ѼơG

anon - �H�ΦW�ϥΪ̨���s�u�� LDAP

restricted - �H���v�b�q�T���x�s�W���@�~���ϥΪ̨���i��s�u�C

proxy - ���˦��i�H�b�q�T���x�s�W���@�~���ϥΪ̡C��w�ӭȥi�W�j�į�A�]���b���C���@�~�ɳ��i���L LDAP �s���C

�Ƶ�G��ij�b�����˪��ϥΪ�3�֦��޲z�h���� ACL�C

defaultserver.ldappoolmin

4

��w�O�d���u�ӤH�q�T���x�s�v�� LDAP �Τ�ݳs�u�̤p�ƥءC

defaultserver.ldappoolmax

12

��w�O�d���u�ӤH�q�T���x�s�v�� LDAP �Τ�ݳs�u�̤j�ƥءC

defaultserver.ldappooltimeout

10

��w LDAP �s�u�O�ɤ��e����ơC�Y�n�t�X�ܤj���j�M���G�A�мW�[���ȡC

lookthru_limit

1000

 

��w�j�M���j�M�d�߭���C

 

delete_perm

true

���p���H/�s�ն��ؼаO���R���Υä[�R���C

�N�ѼƳ]�w�� false�A�i�N�p���H/�s�ռаO���R���C

�N�ѼƳ]�w�� true�A�i�ä[�R���p���H�M�s�աC

�t�m���q�ؿ�Ѽ� db_config.properties �ɮ�

�� 3-8 �C�X db_config.properties �ɮפ����w�]���q�ؿ�ѼơC�̹w�]�A�Ҧ��� LDAP �����T�A���O�ھڨϥΪ�/�s�եؿ�Ҵ��Ϊ��Ȩӳ]�w�C

�i�q�H�U��m�s�� db_config.properties �ɮסG

WEB-INF/config/corp-dir/

�� 3-8 ���q�ؿ�Ѽ� 

�Ѽ�

�w�]��

�y�z

defaultserver.ldaphost

 

��w���q�ؿ� LDAP �D��C

defaultserver.ldapport

 

��w���q�ؿ�s����C

defaultserver.ldapbinddn

 

��w�Ω�s���ܤ��q�ؿ� DN�C

�p�G�n�J�����O�urestricted�v�Ρuproxy�v�A�h������ defaultserver.ldapbinddn ��w�ȡC

�p�G�n�J�����O�uanonymous�v�A�h���ݭn�����Ѽƿ�J�ȡC

defaultserver.ldapbindcred

 

��w�s���K�X�C

entry_id

uid

 

��w���q�ؿ�Ω��ѧO�p���H/�s�ն��ت��K�_�C

�z�i�H�N entry_id �]�w�� UID �ΥΩ��o�p���H/�s�ո�T���K�_�A�Ҧp empid �ΥD�n ID�C

�b xlate-inetorgperson.xml �ɮפ��A�N <entry entryID= "db:uid"> �����uuid�v�%N�����B��w�� entry_id �ȡC

login_type

restricted

��w�ΨӺ��@ LDAP �x�s�s�u����k�C

�z�i�H�N�U�C�T�ӭȫ�w�����ѼơG

anon - �H�ΦW�ϥΪ̨���s�u�� LDAP�C

restricted - �H���v�b�q�T���x�s�W���@�~���ϥΪ̨���i��s�u�C

proxy - ���˦��i�H�b�q�T���x�s�W���@�~���ϥΪ̡C��w�ӭȥi�W�j�į�A�]���b���C���@�~�ɳ��i���L LDAP �s���C

�Ƶ�G���˪��ϥΪ̨�o��Ū�v���C

defaultserver.ldappoolmin

1

��w�O�d�����q�ؿ� LDAP �Τ�ݳs�u�̤p�ƥءC

defaultserver.ldappoolmax

4

��w�O�d�����q�ؿ� LDAP �Τ�ݳs�u�̤j�ƥءC

defaultserver.ldappooltimeout

10

��w LDAP �s�u�O�ɤ��e����ơC�Y�n�t�X�ܤj���j�M���G�A�мW�[���ȡC

lookthru_limit

1000

 

��w�j�M���j�M�d�߭���C

 

���q�ؿ���@��� xlate �ɮסA��榡�� xlate-objectclass-name.xml�C

�b xlate-objectclass-name.xml ���Aobjectclass-name �N���ѧO�S�w LDAP �����������������O�C�Ҧp�Axlate-inetorgperson.xml �O�Ω��ѧO�p���H���������O�Agroupofuniquemembers �O�Ω��ѧO Sun Java System Directory Server ���s�ժ��������O�C

xlate �ɮץ]�t�p���H�θs�ժ� LDAP Schema �P�q�T�� XML Schema ����������M�C��M�H XML �`�I�өw�q�C�Ҧp�A

ab-xml-schema-keydb:LDAPField/ab-xml-schema-key

�䤤�A

ab-xml-schema-field �K�O�q�T��b�{���X���ҥΪ��ȡC

LDAPField �O LDAP ������3���W�١C

�z�ݭn�� LDAPField ���ѾA�?���W�١C��w�� LDAPField ����3�ӻP���q�ؿ� LDAP Schema ���{���� LDAPField �Ȭ۹�3�C

�{���X�d�� 3-1 �O xlate-inetorgperson.xml �ɮת��d�ҡG

�{���X�d�� 3-1 xlate-introgperson ���w�]���e

<abperson uid="db:uid">

<entry entryID="db:uid">

<displayname>db:cn</displayname>

<description>db:multilineDescription</description>

<creationdate>db:createtimestamp</creationdate>

<lastmodifieddate>db:modifytimestamp</lastmodifieddate>

</entry>

<person>

<givenname>db:givenname</givenname>

<surname>db:sn</surname>

</person>

<organization>

<company>db:company</company>

<organizationalunit>db:ou</organizationalunit>

<location>

<building>db:buildingnum</building>

<floor>db:iplanetbuildinglev</floor>

<office>db:roomNumber</office>

</location>

<title>db:title</title>

<manager>db:manager</manager>

<secretary>db:secretary</secretary>

</organization>

<phone priority="1" type="work">db:telephoneNumber</phone>

<phone priority="2" type="fax">db:facsimileTelephoneNumber</phone>

<phone priority="3" type="mobile">db:mobile</phone>

<phone priority="4" type="home">db:homePhone</phone>

<phone priority="5" type="pager">db:pager</phone>

<email priority="1" type="work">db:mail</email>

<im priority="1" service="SunONE">db:uid</im>

<im priority="2" service="AIM">db:aimscreenname</im>

<im priority="3" service="ICQ">db:icqnumber</im>

<postaladdress type="home">

<street>db:homePostalAddress</street>

</postaladdress>

<postaladdress type="work">

<street>db:postaladdress</street>

</postaladdress>

<weburl priority="1">

<urladdr>db:labeleduri</urladdr>

<description>URL</description>

</weburl>

<weburl priority="2">

<urladdr>db:homepage</urladdr>

<description>Home URL</description>

</weburl>

<calendar type="calendar">

<urladdr>db:caluri</urladdr>

</calendar>

</abperson>

�t�m�w���M���h (SSL)

�z�i�H�t�m�H SSL �Ҧ����p�F Communications Express �� Web Server�C�p�ݦ���p��t�m�H SSL �Ҧ����p�F Communications Express �� Web Server ���ԲӸ�T�A�аѾ\�uSun ONE Web Server Administrator's Configuration File Reference�v�A��m�b http://docs.sun.com/db/coll/S1_websvr61_en�C

    �H SSL �Ҧ��ϥ� Communications Express
  1. �s�� uwc-deployed-path/WEB-INF/config/uwcauth.properties �����U�C�t�m�ѼơG
    • uwcauth.ssl.enabled=true
    • uwcauth.https.port=SSL-port-number-of -the webserver-in which-uwc-is-deployed
    • �]�i�H�w�� SSL �t�m Communications Express�A�ȥΩ�{�ҡC�o��ܥi�H�ǥ� SSL ���{�ҡA���H��ݭn�z�L�D SSL �Ҧ��Ӧs��3�ε{���C

  2. �z�ݭn�N local.webmail.sso.uwcport Messenger Express �Ѽƭȳ]�w���w���p Communications Express �� Web Server �� SSL �s���𸹽X�C
  3. �Ҧp�A

    �w�� SSL �t�m Communications Express (�ȥΩ�{��)
  1. �b uwcauth.properties �ɮפ��A�N uwcauth.ssl.enabled �]�w���ufalse�v�C
  2. �N uwcauth.https.port �]�w���w���p Communications Express �� Web Server �� SSL �s���𸹽X�C
  3. �N uwcauth.ssl.authonly �]�w���utrue�v�C

  4. �Ƶ�

    ��ӰѼơAuwcauth.ssl.authonly �� uwcauth.ssl.enabled �O�������Ѽ��C

    �b SSL �����䴩 Messaging SSO�C


�䴩 Addressbook Server ������i��

�b Sun Java System Communications Express ���e�@�������A�S�w��쪺�u�ӤH�q�T��v���ءA�x�s�b�H defaultserver ��� (�w�q�b db_config.properties �ɮפ�) ��ܪ���@ LDAP ��m�Cdb_config.properties �ɮצ���쪺 personalstore.properties �ҫ�ؿ�C�Ҧp�Auwc-install/WEB-INF/config/ldappstore�C

�����p�L�k���i���b�C�ӡu�ӤH�q�T��v���䴩�j�q�ϥΪ̻P�p���H�C�Y�n�J�A������ASun Java System Communications Express 6.2 ���� psRoot �ݩʡA�ݭn�ҥκ޲z��G�بϥΪ̡A�H�K���P�ϥΪ̪� PAB ��ƥi�H�󤣦P LDAP ��m�i�洲�G�C

�Ҧp�Aldap://mydir.com:389/piPStoreOwner=jsmith,o=siroe.com,o=PiServerDb

�� 3-1 ���ѤF�ΨӤ���i Addressbook Server ���[�c�����h��²���C

�u�q�T�����i�ʡv�[�c�����n���󦳡G

�u�ӤH�x�s�v���@�ϥΪ̪��q�T���T�C���]�t�ϥΪ̥H�q�T��Ҧ����ثإߪ��Ҧ��q�T��w�q�C�u�ӤH�x�s�v�|�H URL ��ܡA�y�z���̩Ҧb���ؿ��ҡA�H�ίS��ؿ��Ҥ��� DN�C

DB �]�t�u�ӤH�x�s�v�����X�A�åB�p�� 3-1 �ҥܡADB ���Ҧ����X���i�H�� Address Book Server �s��C�C�� DB �O�ѩw�q�� DB �s�u�Ѽƪ� DB-ID �w�q�CDB �i�H�����P�������A�åB�i�H��V���P�� DB ��m�C

DBMap �O�ۦP���� DB �����X�C�C�� DBMap ���@�� ID�A���|��ި�� DBMap ���t�m��T�C

�� 3-1 �q�T�����i��

���ѥΨӤ���i Addressbook Server ���[�c�����h�����[�C

psRoot �O�u�ϥΪ� LDAP�v�����ݩʡA����w�D��B�ؿ��Ҫ��s����A�H���x�s�ϥΪ̳q�T��ت� DN�CpsRoot ���榡���Gldap://ldap_host:ldap_port/DN�C

psRoot �ݩʪ��ȨM�w DB �������M��m�C

�b psRoot �d�Ҥ��Aldap://mydir.com:389/piPStoreOwner=jsmith,o=siroe.com,o=PiServerDb

ldap:// ��ܨϥ� LDAP DB �~���{���s��ϥΪ̪��q�T��ӤH�x�s�C

mydir.com:389 ��w LDAP ���D��M�s����C

piPStoreOwner=jsmith,o=siroe.com,o=PiServerDb ��w�ӤH�x�s�� DN�C


�Ƶ�

Addressbook Server �����ѥ�󤽥ε{���A�H�ھڥ�󩵮i�ʵ������ϥΪ̤0t psRoot �ȡC�޲z��ݭn�]�w�̲ŦX�9β�´���S�w�����A�èϥΦۭq���{���ɬ��ӵ����]�w psRoot �ȡC


�i�H�ϥκ��S�w personalstore.properties �ɮפ����Ѫ� db.UserPsRoot �ѼơA�}�ҩ��� psRoot �ݩʡC�N���ѼƳ]�w���ufalse�v�A�i�ϥ� db_config.properties �ɮפ��� defaultserver �ѼơC�N���ѼƳ]�w���utrue�v�A�i�ϥΨϥΪ̪� psRoot �ȡC������ psRoot ���ϥΪ��C�Ӱߤ@�ؿ��A����ҡA������ 3-7 ���C�X���u�ӤH�x�s�v�ѼơC�b��涥�q�A�|�ϥ� db-key.ldaphost �� db-key.ldapport �N psRoot �ݩʪ��ȸѪR���ؿ��ҡA�䤤 db-key �O�Ψӿ�O���P��Ҫ���N�r��C�p�G�䤣��P db-key.ldaphost �� db-key.ldapport �ŦX�����ءA�h�ϥ� defaultserver ��ҡC

�۰ʳ]�w psRoot ��

��s���ϥΪ̵n�J�ɡA�|�b�ϥΪ̪����ؤ��N psRoot �ݩʳ]�w���w�]�ȡC

�w��s���ϥΪ̡A�|�ϥ� personalstore.properties �ɮפ��w�q�� psRoot �Ҧ��A�H�� db_config.properties �ɮפ��� defaultserverhost �M defaultserverPort �ȡA�ӫغc psRoot �ȡC�Ҧp�A�ϥιw�]�� psRoot �Ҧ��A�h�w�] psRoot �Ȫ��榡�N���G

ldap://defaultserver_host:defaultserver_port/piPStoreOwner=%U,o=%D,o=PiServerDb

�䤤�A

%U = �ϥΪ̪��n�J ID�A�Ҧp jsmith�C

%D = �ϥΪ̪����A�Ҧp siroe.com�C



�W�@��      �ؿ�      �d�      �U�@��     


��󸹽X�G819-1104�C  Copyright 2005 Sun Microsystems, Inc. ���v�Ҧ��C