Sun logo      �W�@��      �ؿ�      �d�      �U�@��     

Sun Java Enterprise System 2003Q4 �w�˫�n

�� 13 ��
�t�m��@�n�J

�����y�z�����w�˵{�ǫ�p��t�m��@�n�J (SSO)�C

�����]�t�H�U�U�`�G


Java Enterprise System �� SSO �����[

SSO �\��i�H�� Java Enterprise System �ϥΪ̳z�L�ϥΪ� ID �M�K�X�@���n�J�K�i�s��h�� Sun ONE ���󲣫~3�ε{���C

��z�ϥΤ��� Java Enterprise System �A�ȮɡAIdentity Server 6.1 �O�Ω� SSO �������h�D�C�Y�A�ϥΪ̥����n�J Identity Server 6.1�A�~��s���L�w�t�m SSO ����A���C�p�ݦ��� Identity Server 6.1 SSO ����h��T�A�аѾ\�uSun ONE Identity Server 6.1 Customization and API Guide�v(http://docs.sun.com/doc/816-6774-10) �� 4 ���uSingle Sign-on and Sessions�v�C

Java Enterprise System ���� SSO �,��T�ءG

�������I�y�z�p��t�m���� Java Enterprise System �A�ȥH�P SSO �@�P�B�@�C�o�� SSO �]�N�O�������� Identity Server 6.1 SSO�C

�p�ݦ���b�䴩��3�ε{����A���W�����}�o���A�Ȥ���h��T�A�аѾ\�H�U������G

�p�ݦ�����}�o�� Java 3�ε{���ΫD Java 3�ε{������h��T�A�аѾ\�H�U������G

�����N�z�{��

Identity Server �䴩��ص����N�z�{���GWeb �N�z�{���M J2EE/Java �N�z�{���CWeb �N�z�{����I��� URL �������A�� J2EE/Java �N�z�{����I��� J2EE ���w���M�����C

�o����������N�z�{�����i�b Identity Server ���~�w�ˡA�åi�q�H�U��m�U��G

http://wwws.sun.com/software/download/inter_ecom.html

�b Calendar Server �M Messaging Server ���ϥ� SSO

�� Calendar Server �M Messaging Server �t�m SSO �ɡA�ЦҶq�H�U���e�G


�t�m Messaging Server �M Calendar Server �H�䴩 SSO

�t�m Messaging Server �M Calendar Server �H�ϥ� SSO ����ؤ�k�O�G

�ϥΫH���O��I SSO ���DzΤ�k�C��M�Ӥ�k�i���ѬY�� Identity Server SSO ����ƪ��\��A����קK�ϥθӤ�k�A�]���Ҧ����Ӷ}�o���w�� Identity Server�C

�H�U�{�Ǵy�z�ϥ� Identity Server 6.1 ����k�C�аѾ\�uSun ONE Messaging Server 6.0 �޲z���n�v(http://docs.sun.com/doc/817-4711-10) �M�uSun ONE Calendar Server 6.0 �޲z���n�v(http://docs.sun.com/doc/816-6708-10)�A�H��o����H��� SSO ����T�C

    �t�m Messaging Server �H�䴩 SSO
  1. �ШϥΥH�U configutil ��O�� Messaging Server �]�w�|�� SSO �ѼơC�b�o�|�ӰѼƤ��A�Ȧ� local.webmail.sso.amnamingurl �O�ҥ� Messaging Server �� SSO �ҥ��ݪ��C�Y�n�ҥ� SSO�A�бN�ӰѼƳ]�w�� Identity Server ���R�W�A�ȮɩҦb�� URL�C
  2. ./configutil -o local.webmail.sso.amnamingurl -v http://host:port/amserver/namingservice

    ./configutil -o local.webmail.sso.amcookie -v iPlanetDirectoryPro

    ./configutil -o local.webmail.sso.singlesignoff -v 1

    ./configutil -o service.http.ipsecurity -v no

    �U��Բӻ���o�� SSO �ѼơC

    ��� 13-1  Messaging Server SSO �Ѽ� 

    �Ѽ�

    ����

    local.webmail.sso.amnamingurl

    ��w Identity Server SSO �R�W�A�Ȫ� URL�C

    �w�]�� http://IdentityServer:port/amserver/namingservice

    �䤤�AIdentityServer �������X�檺 Identity Server �W�١Aport �� Identity Server �s���𸹡C

    local.webmail.sso.amcookie

    Identity Server cookie �W�١C�p�G Identity Server �t�m���ϥΨ�L cookie �W�١A�h�ӦW�ٻݭn�b Messaging Server ���t�m�� local.webmail.sso.amcookiename�A�H�K���󲣫~�b��� SSO �ɪ��D�n�M�䤰��C�w�]�Ȭ� iPlanetDirectoryPro�A�p�G Identity Server �㦳�w�]�t�m�A�h�����ܧ�ӹw�]�ȡC

    �w�]�GiPlanetDirectoryPro

    local.webmail.sso.singlesignoff

    �ҥ� (�uyes�v) �ΰ��� (�uno�v) �q Messaging Server �� Identity Server ����@�n�X�C

    �p�G�w�ҥΡA�h�n�X Messaging Server ���ϥΪ̤]�|�n�X Identity Server�A�åB�ӨϥΪ̳z�L Identity Server �Ұʪ��Ҧ���L���q�@�~���N�פ�C

    �ѩ� Identity Server �O�{�ҹh�D�A�]���q Identity Server �� Messaging Server ����@�n�X�l�ױҥΡC

    �w�]�Gyes

    service.http.ipsecurity

    �]�w�O�_�����n�J IP ��}�����q�@�~�s���v�C�p�G�]�w�� yes�A�h��ϥΪ̵n�J�ɡA��A���|�O��ϥΪ̥Ψӵn�J�� IP ��}�C�M��A��A���Ȥ��\�� IP ��}�ϥΥ��5o���ӨϥΪ̪����q�@�~ cookie�C

    �w�]�Gyes

  3. ���s�Ұ� Messaging Server�C
  4. �p�G�z�ݭn�t�m�N�z��A���{�ҡA�аѾ\�t�m�N�z��A���{���C
    �t�m Calendar Server �H�䴩 SSO
  1. ��� Calendar Server�A�Цb cal_svr_base/etc/opt/SUNWics5/config/ics.conf �ɮפ��s��H�U�ѼơG
  2. local.calendar.sso.amnamingurl="http://host:port/amserver/namingservice"

    local.calendar.sso.amcoookiename="iPlanetDirectoryPro"

    local.calendar.sso.logname="am_sso.log"

    local.calendar.sso.singlesignoff="yes"

    service.http.ipsecurity="no"

    render.xslonclient.enable="no"

    �U��Բӻ���o�� Calendar Server SSO �ѼơC

    ��� 13-2  Calendar Server SSO �Ѽ� 

    �Ѽ�

    ����

    local.calendar.sso.amnamingurl

    ��w Identity Server SSO �R�W�A�Ȫ� URL�C

    �w�]�� http://IdentityServer:port/amserver/namingservice

    �䤤�AIdentityServer �������X�檺 Identity Server �W�١Aport �� Identity Server �s���𸹡C

    local.calendar.sso.amcoookiename

    Identity Server cookie �W�١C�p�G Identity Server �t�m���ϥΨ�L cookie �W�١A�h�ӦW�ٻݭn�b Calendar Server ���t�m�� local.calendar.sso.amcookiename�A�H�K���󲣫~�b��� SSO �ɪ��D�n�M�䤰��C�w�]�Ȭ� iPlanetDirectoryPro�A�p�G Identity Server �㦳�w�]�t�m�A�h�����ܧ�ӹw�]�ȡC

    �w�]�GiPlanetDirectoryPro

    local.calendar.sso.singlesignoff

    �ҥ� (�uyes�v) �ΰ��� (�uno�v) �q Calendar Server �� Identity Server ����@�n�X�C

    �p�G�w�ҥΡA�h�n�X Calendar Server ���ϥΪ̤]�|�n�X Identity Server�A�åB�ӨϥΪ̳z�L Identity Server �Ұʪ��Ҧ���L���q�@�~���N�פ�C

    �ѩ� Identity Server �O�{�ҹh�D�A�]���q Identity Server �� Calendar Server ����@�n�X�l�ױҥΡC

    �w�]�Gyes

    service.http.ipsecurity

    �]�w�O�_�����n�J IP ��}�����q�@�~�s���v�C�p�G�]�w�� yes�A�h��ϥΪ̵n�J�ɡA��A���|�O��ϥΪ̥Ψӵn�J�� IP ��}�C�M��A��A���Ȥ��\�� IP ��}�ϥΥ��5o���ӨϥΪ̪����q�@�~ cookie�C

    �w�]�Gyes

    render.xslonclient.enable

    ����Τ�ݦ��� (�ثe�ȥΩ� Internet Explorer 6.0 �Χ󰪪���)�C�̹w�]�A�ӰѼƳ]�w���uyes�v�C�Y�n��Τ�ݦ����A�бN�ӰѼƳ]�w���uno�v�A�M�᭫�s�Ұ� Calender Server�C

    �Ƶ�G�бN�ӰѼƳ]�w���uno�v�H���� Internet Explorer ���˦���A�_�h Calendar Server �N�L�k�z�L Identity Server �B�@�C

  3. ���s�Ұ� Calendar Server�C
  4. �p�G�z�ݭn�t�m�N�z��A���{�ҡA�аѾ\�t�m�N�z��A���{���C
    �t�m Instant Messaging �H�䴩 SSO

Instant Messaging �H���s�覡�䴩 Identity Server SSO�C�b Instant Messaging �w�˪��t�m���!A�t�m�{���|�߰ݳ��p�O�_�Q�� SSO�C������D�O�t�m�{���O�_�b�t�ΤW���F Identity Server SDK�C

�U����� ims_svr_base/SUNWiim/iim.conf �ɮפ��� Instant Messaging SSO �ѼơC

��� 13-3  Instant Messaging SSO �Ѽ�  

�Ѽ�

����

��

iim_server.usesso

�ӰѼƷ|�i����A���b�{�Ҵv��O�_�̿� SSO ��3�{���CSSO ��3�{���O���A���Ω����Ҩ㦳 SSO �A�Ȫ����q�@�~ ID ���ҲաC

�b�J�f����p���APortal Server Session API �|�� Instant Messaging �������ҥѥΤ�ݶǰe�����q�@�~ ID ���\��C

iim_server.usesso �ѼƻP iim_server.ssoprovider �ѼƤ@�P�ϥΡC

�ӰѼƪ��ȥi�H�� 0�B1 �� -1�C

0 - �ФŨϥ� SSO ��3�{�� (�w�])�C

1 - ��ϥ� SSO ��3�{���A�� SSO ���ҥ��ѮɡA�N�ӰѼƹw�]�� LDAP�C

-1 - �ȷ� SSO ���ҥ��Ѯɨϥ� SSO ��3�{���A���x� LDAP �{�ҡC

iim_server.sso.update

�w�q�O�_�ҥζ��q�@�~�פ�M�L�aC

�i�H�� true �� false�C

iim_server.ssoprovider

�ӰѼƫ�w��I SSO ��3�{�������O�C�p�G iim_server.usesso ������ 0�A�åB���]�w�ӿﶵ�A�h��A���|�ϥιw�]����� Portal Server �� SSO ��3�{���C(�аѾ\ Instant Messaging API ������A�H��o��h��T�C)

SSOProvider ��I�����O�W�١C

�аѾ\�uSun ONE Instant Messaging 6.1 Administrator's Guide�v(http://docs.sun.com/doc/817-4113-10) ������ A�uInstant Messaging Configuration Parameters�v�A�H��o��h��T�C

    ���ҥΩ� Messaging Server�BCalendar Server �H�� Instant Messaging �� SSO
  1. �H���ĨϥΪ̪�����n�J�J�f��ୱ�C
  2. �b�s��A��J Messaging Server �� URL�C
  3. �t�Τ�3���ܱz�n�J Messaging Server�C

  4. �b�s��A��J Calendar Server �� URL�C
  5. �t�Τ�3���ܱz�n�J Calendar Server�C

  6. �I�s Instant Messenger �Τ�ݡA��k���z�L�J�f��ୱ�Φb�s����J Instant Messaging ��A���� URL�C
  7. �t�Τ�3���ܱz�n�J Instant Messaging�C

    ����Ƹ� SSO
  1. �p�G�J�즳�� SSO �����D�A�Х�d�\ Web �l���x�� (msg_svr_base/log/http)�A�H�A�ѿ�~�C
  2. �W�[�O��ŧO�G
  3. configutil -o logfile.http.loglevel -v debug

  4. �b msg_svr_base/log/http_sso �ɮפ��ˬd amsdk �T���A�M��W�[ amsdk �O��ŧO�G
  5. configutil -o local.webmail.sso.amloglevel -v 5

    �ȷ��A�����s�Ұʫ�A�s���O��ŧO�~�|�ͮġC

  6. �нT�O�n�J�v��z�ϥΪ��O Identity Server �M Messaging Server �������X�檺�D��W�١C�ѩ� cookie �Ȧb�P�@��쪺��A�������@�ΡA�åB�s����D�Ω󥻾��A���W�٪����A�]���z�����b�s��ϥΧ����X�檺�D��W�١A�H�� SSO �i�H�u�@�C


���J�f��l��M��ƾ�q�D�t�m SSO

Portal Server ���ѱM�� Messaging Server �M Calendar Server �]�p���l��q�D�M��ƾ�q�D�C���b�P�@�J�f��ୱ�W�P�ɦ����l��M��ƾ䤺�e�A�o�dzq�D�|�s�u�ܦU�۪���ݪA�Ȩóz�L���s��J�C�Ӯୱ�^������T�C

��سq�D���ĥιw��s�b�� Portal Server�BMessaging Server �M Calendar Server SSO �\��A�o�ǥ\��٬� SSO �t���d�A�� �M�N�z��A���{���CSSO �t���d�A�ȷ��� Identity Server �M Portal Server�CMessaging Server �M Calendar Server ���㦳�N�z��A���{�ҥ\��C

SSO �t���d�A��

�b�ª� Portal Server ���A�J�f��q�D�i�z�L���̦ۤv������{ SSO�C�Ӱ򥻹�I�H Identity Server SSO �t���d�A�Ȭ���¦�A�z�����z�L Identity Server �D���x���C�ӳq�D�t�m�ӪA�ȡC�ȷ�ϥ� Portal Server �q�D�ɤ~�ݭn�o�@�DzΤJ�f��q�D SSO ���C


�Ƶ�

SSO �t���d�A�ȹ�I�ثe�Ȥ䴩 Portal Server�C�ФŲV�c SSO �t���d�A�ȻP Identity Server 6.1 SSO�C

SSO �t���d�A�ȥi��@��ϥΪ̦b�@���n�J��ϥ�3�ε{�� (�p Portal Server ��3�{���Υ���L Web 3�ε{��) ��o��U�ظ귽��A�����g�{�Ҫ��s���v�C�i�s��귽��A���̿��t�Τ��i�Ϊ� SSO �t���d��������I�C

Portal Server �ثe�i���H�U�귽��A������ SSO �t���d�G�q�T��B��ƾ�M�l��C


�N�z��A���{�Ҫ����[

�N�z��A���{�һݭn�N�z��A���ϥΪ̱b��A�ӱb��@���H��N�z�{���N��ϥΪ̡CMessaging Server �M Calendar Server �����N�z��A���ϥΪ̥i���Ѥ@��ϥΪ̻{�ҡA�ӵL�ݤ@��ϥΪ̱K�X�C

�ثe�� Messaging Server �q�D�M Calendar Server �q�D�ϥ� Portal Server �� SSO �t���d�A�ȡA�H�ھڥ��̦U�۪���ݦ�A���i��{�ҡC�z�L�V Portal Server �l��M��ƾ�q�D SSO �t���d�d����U�N�z��A���ϥΪ̪��W�٩M�K�X�A�ϥΪ̵L�ݴ��ѨϥΪ̦W�٩M�K�X�C

�z������ Messaging Server �M Calendar Server �w�q�N�z��A���ϥΪ̡A�Ϩ�o���@�ΡC

�U����� SSO �t���d�A�Ȧp��N�N�z��A���{�һP Calendar Server �t�X�ϥΡC

�� 13-1  �ϥΥN�z��A���{�Ҫ� SSO �t���d�A��

������� SSO �t���d�A�Ȧp��N�N�z��A���{�һP Calendar Server �t�X�ϥΡC

�b�W�Ϥ��G

  1. �ϥΪ̵n�J Portal Server �ୱ�C
  2. �ୱ��ƾ�q�D�ھ� Calendar Server �i��{�ҡC�N�z��A���ϥΪ̥N��ϥΪ̶i��{�ҡC
  3. �N�z��A���ϥΪ̥N��ϥΪ��^��ӨϥΪ̪���ƾ��T�C
  4. ��ƾ�q�D�H HTML �榡������T�A�ñN��Ǧ^�ୱ�C

�z�Ȼݭn�Ω�l��M��ƾ�J�f��q�D���N�z��A���{�ҩM SSO �t���d�A�Ȱt�m�C�N�z��A���{�ҩM SSO �t���d�A�ȧ��L�k��N�s�� Identity Server 6.1 SSO ���C�z�����P�ɱҥ� Messaging Server �M Calendar Server ���� Identity Server 6.1 SSO�A�ϥ��t�� SSO ���`�B�@�C

�U����� Identity Server 6.1 SSO �M Portal Server �q�D SSO ������������Y�C

�� 13-2  Identity Server SSO �M Portal Server �q�D SSO ���

������� Identity Server SSO �M Portal Server �q�D SSO ���C

�b�W�Ϥ��G

�U����ܨϥΦ�ƾ�q�D���d�ҡC

�� 13-3  Identity Server SSO �M��ƾ�q�D�q�T

������� Identity Server SSO �M��ƾ�q�D�q�T�C

�b�W�Ϥ��G

  1. �ϥΪ̦V Identity Server �����{�ҡC
  2. �ϥΪ̳z�L Identity Server cookie �s��J�f��ୱ�C
    1. Portal Server �z�L Identity Server ���Ҹ� cookie�C
  3. ��ƾ�q�D�ШD��ƾ䤺�e�C
    • �q SSO �t���d�t�m�d����Ū��N�z��A�����ҡC
    • �N�z��A���ϥΪ̥N��ϥΪ̰��{�ҡC
  4. �ୱ���e�Q�Ǧ^�A�]�A�w��������ƾ�q�D�C
  5. �ϥΪ̦s�� Calendar Server�CCalendar Server �ھ� Identity Server ���� Identity ���q�@�~ cookie�CIdentity Server ���Ҷ��q�@�~ cookie �ô��ѾA�?�ϥΪ̸�T�A�H�Ұʦ�ƾ䶥�q�@�~�C

�t�m�N�z��A���{��

�Y�n����ƾ�q�D�M�l��q�D�t�m�N�z��A���{�ҡA�z�ݭn�z�L Identity Server �D���x�s�� SSO �t���d�d���A�ûݭn�s�� Sun ONE �q�T��A���C�t�m�N�z��A���{�ҥ]�A�G

    �s�� SSO �t���d�d��

�p�ݰ�榹�{�Ǫ��S�w����A�аѾ\�uSun ONE Portal Server 6.2 Administrator's Guide�v(http://docs.sun.com/doc/816-6748-10) �� 13 ���uConfiguring the Communication Channels�v�C

    �� Portal Server ���� Messaging Server �M Calendar Server �t�m�N�z��A���{��
  1. ��� Messaging Server�A���� ms_svr_base/sbin �ؿ�C�Ҧp�G
  2. cd /opt/SUNWmsgsr/sbin

  3. ���� store.admin �ɮ׬O�_�]�t admin�G
  4. ./configutil -o store.admins

  5. ��J�H�U���e�G
  6. ./configutil -o service.http.allowadminproxy -v yes

  7. ���s�Ұ� Messaging Server�C
  8. ��� Calendar Server�A�s�� cal_svr_base/etc/opt/SUNWics5/config/ics.conf �ɮסG
  9. <�����(íק�H�U�ѼơG>

    service.http.allowadminproxy=”yes”

     

    <���ҳo�ǰѼƬO�_�]�w���T�G>

    service.admin.calmaster.userid="calmaster"

    service.admin.calmaster.cred="password"

  10. ���s�Ұ� Calendar Server�C
    ���ҥN�z��A���{��

�ШϥΥH�U�{�dzz�L Portal Server �ୱ���Ҧ�ƾ�q�D�M�T���ǰe�q�D�O�_�B�@���`�G

  1. �H���ĨϥΪ̪�����n�J�J�f��ୱ�C
  2. �ˬd��ƾ�q�D�M�T���ǰe�q�D�C
  3. ����3��ܬ�3����T�C

  4. �ۭq��ƾ�q�D�H����ܮĪG��n�C
  5. ��� [�s��q�D��ܿﶵ]�A�ñN [��ƾ��˵�] �q [�C��] �ܧ� [�C�g]�C



�W�@��      �ؿ�      �d�      �U�@��     


Copyright 2003 Sun Microsystems, Inc.�C���v�Ҧ��C