Sun Java Enterprise System 2003Q4 �w�˫�n |
�� 13 ��
�t�m��@�n�J�����y�z�����w�˵{�ǫ�p��t�m��@�n�J (SSO)�C
�����]�t�H�U�U�`�G
Java Enterprise System �� SSO �����[SSO �\��i�H�� Java Enterprise System �ϥΪ̳z�L�ϥΪ� ID �M�K�X�@���n�J�K�i�s��h�� Sun ONE ���~3�ε{���C
��z�ϥΤ��� Java Enterprise System �A�ȮɡAIdentity Server 6.1 �O�Ω� SSO �������h�D�C�Y�A�ϥΪ̥����n�J Identity Server 6.1�A�~��s���L�w�t�m SSO ����A���C�p�ݦ��� Identity Server 6.1 SSO ����h��T�A�аѾ\�uSun ONE Identity Server 6.1 Customization and API Guide�v(http://docs.sun.com/doc/816-6774-10) �� 4 ���uSingle Sign-on and Sessions�v�C
Java Enterprise System ���� SSO �,��T�ءG
- ���تA�ȡC�b�Ӻ������� Calendar Server�BInstant Messaging�BMessaging Server �M Portal Server�C�z�Ȼݰ��o�Dz��~���t�m�H�ҥ� SSO�C
- ����3�ε{����A���A�ȡC�p�G�z�w�إߦۤv������3�ε{����A���A�ȡA�h�ݭn�U��B�w�˨ðt�m�����N�z�{�� (�p�G�A�Ω�z�����x)�C
- ����3�ε{�� (���ϥ�3�ε{����A��)�C�b�Ӻ������������}�o�� Java 3�ε{���M�D Java 3�ε{���A�z�ݭn����ϥ� Identity Server SDK �H�ҥ� SSO�C
�������I�y�z�p��t�m���� Java Enterprise System �A�ȥH�P SSO �@�P�B�@�C�o�� SSO �]�N�O�������� Identity Server 6.1 SSO�C
�p�ݦ���b�䴩��3�ε{����A���W�����}�o���A�Ȥ���h��T�A�аѾ\�H�U������G
- Sun ONE Identity Server 6.1 Customization and API Guide (http://docs.sun.com/doc/816-6774-10)
- Sun ONE Identity Server Policy Agent 2.1 J2EE Policy Agents Guide (http://docs.sun.com/doc/816-6884-10)
- Sun ONE Identity Server Policy Agent 2.1 Web Policy Agents Guide (http://docs.sun.com/doc/816-6772-10)
�p�ݦ�����}�o�� Java 3�ε{���ΫD Java 3�ε{������h��T�A�аѾ\�H�U������G
- Sun ONE Identity Server 6.1 Customization and API Guide (http://docs.sun.com/doc/816-6774-10)
- Sun ONE Identity Server 6.1 �z���n (http://docs.sun.com/doc/817-4410-10)
�����N�z�{��
Identity Server �䴩��ص����N�z�{���GWeb �N�z�{���M J2EE/Java �N�z�{���CWeb �N�z�{����I��� URL �������A�� J2EE/Java �N�z�{����I��� J2EE ���w���M�����C
�o����������N�z�{�����i�b Identity Server ���~�w�ˡA�åi�q�H�U��m�U��G
http://wwws.sun.com/software/download/inter_ecom.html
�b Calendar Server �M Messaging Server ���ϥ� SSO
�� Calendar Server �M Messaging Server �t�m SSO �ɡA�ЦҶq�H�U���e�G
�t�m Messaging Server �M Calendar Server �H�䴩 SSO�t�m Messaging Server �M Calendar Server �H�ϥ� SSO ����ؤ�k�O�G
�ϥΫH���O��I SSO ���DzΤ�k�C��M�Ӥ�k�i���ѬY�� Identity Server SSO ����ƪ��\��A����קK�ϥθӤ�k�A�]���Ҧ����Ӷ}�o���w�� Identity Server�C
�H�U�{�Ǵy�z�ϥ� Identity Server 6.1 ����k�C�аѾ\�uSun ONE Messaging Server 6.0 �z���n�v(http://docs.sun.com/doc/817-4711-10) �M�uSun ONE Calendar Server 6.0 �z���n�v(http://docs.sun.com/doc/816-6708-10)�A�H��o����H��� SSO ����T�C
�t�m Messaging Server �H�䴩 SSO
- �ШϥΥH�U configutil ��O�� Messaging Server �]�w�|�� SSO �ѼơC�b�o�|�ӰѼƤ��A�Ȧ� local.webmail.sso.amnamingurl �O�ҥ� Messaging Server �� SSO �ҥ��ݪ��C�Y�n�ҥ� SSO�A�бN�ӰѼƳ]�w�� Identity Server ���R�W�A�ȮɩҦb�� URL�C
�U��Բӻ���o�� SSO �ѼơC
��� 13-1 Messaging Server SSO �Ѽ�
�Ѽ�
����
local.webmail.sso.amnamingurl
��w Identity Server SSO �R�W�A�Ȫ� URL�C
�w�]�� http://IdentityServer:port/amserver/namingservice
�䤤�AIdentityServer �������X�檺 Identity Server �W�١Aport �� Identity Server �s���C
local.webmail.sso.amcookie
Identity Server cookie �W�١C�p�G Identity Server �t�m���ϥΨ�L cookie �W�١A�h�ӦW�ٻݭn�b Messaging Server ���t�m�� local.webmail.sso.amcookiename�A�H�K���~�b��� SSO �ɪ��D�n�M�䤰��C�w�]�Ȭ� iPlanetDirectoryPro�A�p�G Identity Server �㦳�w�]�t�m�A�h�����ܧ�ӹw�]�ȡC
�w�]�GiPlanetDirectoryPro
local.webmail.sso.singlesignoff
�ҥ� (�uyes�v) �ΰ��� (�uno�v) �q Messaging Server �� Identity Server ����@�n�X�C
�p�G�w�ҥΡA�h�n�X Messaging Server ���ϥΪ̤]�|�n�X Identity Server�A�åB�ӨϥΪ̳z�L Identity Server �Ұʪ��Ҧ���L���q�@�~���N�פ�C
�ѩ� Identity Server �O�{�ҹh�D�A�]���q Identity Server �� Messaging Server ����@�n�X�l�ױҥΡC
�w�]�Gyes
service.http.ipsecurity
�]�w�O�_�����n�J IP ��}�����q�@�~�s���v�C�p�G�]�w�� yes�A�h��ϥΪ̵n�J�ɡA��A���|�O��ϥΪ̥Ψӵn�J�� IP ��}�C�M��A��A���Ȥ��\�� IP ��}�ϥΥ��5o���ӨϥΪ̪����q�@�~ cookie�C
�w�]�Gyes
- ���s�Ұ� Messaging Server�C
- �p�G�z�ݭn�t�m�N�z��A���{�ҡA�аѾ\�t�m�N�z��A���{���C
�t�m Calendar Server �H�䴩 SSO
- ��� Calendar Server�A�Цb cal_svr_base/etc/opt/SUNWics5/config/ics.conf �ɮפ��s��H�U�ѼơG
local.calendar.sso.amnamingurl="http://host:port/amserver/namingservice"
local.calendar.sso.amcoookiename="iPlanetDirectoryPro"
local.calendar.sso.logname="am_sso.log"
local.calendar.sso.singlesignoff="yes"
service.http.ipsecurity="no"
render.xslonclient.enable="no"
�U��Բӻ���o�� Calendar Server SSO �ѼơC
��� 13-2 Calendar Server SSO �Ѽ�
�Ѽ�
����
local.calendar.sso.amnamingurl
��w Identity Server SSO �R�W�A�Ȫ� URL�C
�w�]�� http://IdentityServer:port/amserver/namingservice
�䤤�AIdentityServer �������X�檺 Identity Server �W�١Aport �� Identity Server �s���C
local.calendar.sso.amcoookiename
Identity Server cookie �W�١C�p�G Identity Server �t�m���ϥΨ�L cookie �W�١A�h�ӦW�ٻݭn�b Calendar Server ���t�m�� local.calendar.sso.amcookiename�A�H�K���~�b��� SSO �ɪ��D�n�M�䤰��C�w�]�Ȭ� iPlanetDirectoryPro�A�p�G Identity Server �㦳�w�]�t�m�A�h�����ܧ�ӹw�]�ȡC
�w�]�GiPlanetDirectoryPro
local.calendar.sso.singlesignoff
�ҥ� (�uyes�v) �ΰ��� (�uno�v) �q Calendar Server �� Identity Server ����@�n�X�C
�p�G�w�ҥΡA�h�n�X Calendar Server ���ϥΪ̤]�|�n�X Identity Server�A�åB�ӨϥΪ̳z�L Identity Server �Ұʪ��Ҧ���L���q�@�~���N�פ�C
�ѩ� Identity Server �O�{�ҹh�D�A�]���q Identity Server �� Calendar Server ����@�n�X�l�ױҥΡC
�w�]�Gyes
service.http.ipsecurity
�]�w�O�_�����n�J IP ��}�����q�@�~�s���v�C�p�G�]�w�� yes�A�h��ϥΪ̵n�J�ɡA��A���|�O��ϥΪ̥Ψӵn�J�� IP ��}�C�M��A��A���Ȥ��\�� IP ��}�ϥΥ��5o���ӨϥΪ̪����q�@�~ cookie�C
�w�]�Gyes
render.xslonclient.enable
����Τ�ݦ��� (�ثe�ȥΩ� Internet Explorer 6.0 �Χ���)�C�̹w�]�A�ӰѼƳ]�w���uyes�v�C�Y�n��Τ�ݦ����A�бN�ӰѼƳ]�w���uno�v�A�M�᭫�s�Ұ� Calender Server�C
�Ƶ�G�бN�ӰѼƳ]�w���uno�v�H���� Internet Explorer ���˦���A�_�h Calendar Server �N�L�k�z�L Identity Server �B�@�C
- ���s�Ұ� Calendar Server�C
- �p�G�z�ݭn�t�m�N�z��A���{�ҡA�аѾ\�t�m�N�z��A���{���C
�t�m Instant Messaging �H�䴩 SSO
Instant Messaging �H���s�覡�䴩 Identity Server SSO�C�b Instant Messaging �w�˪��t�m���!A�t�m�{���|�߰ݳ��p�O�_�Q�� SSO�C������D�O�t�m�{���O�_�b�t�ΤW���F Identity Server SDK�C
�U����� ims_svr_base/SUNWiim/iim.conf �ɮפ��� Instant Messaging SSO �ѼơC
��� 13-3 Instant Messaging SSO �Ѽ�
�Ѽ�
����
��
iim_server.usesso
�ӰѼƷ|�i����A���b�{�Ҵv��O�_�̿� SSO ��3�{���CSSO ��3�{���O���A���Ω����Ҩ㦳 SSO �A�Ȫ����q�@�~ ID ���ҲաC
�b�J�f����p���APortal Server Session API �|�� Instant Messaging �������ҥѥΤ�ݶǰe�����q�@�~ ID ���\��C
iim_server.usesso �ѼƻP iim_server.ssoprovider �ѼƤ@�P�ϥΡC
�ӰѼƪ��ȥi�H�� 0�B1 �� -1�C
0 - �ФŨϥ� SSO ��3�{�� (�w�])�C
1 - ��ϥ� SSO ��3�{���A�� SSO ���ҥ��ѮɡA�N�ӰѼƹw�]�� LDAP�C
-1 - �ȷ� SSO ���ҥ��Ѯɨϥ� SSO ��3�{���A���x� LDAP �{�ҡC
iim_server.sso.update
�w�q�O�_�ҥζ��q�@�~�פ�M�L�aC
�i�H�� true �� false�C
iim_server.ssoprovider
�ӰѼƫ�w��I SSO ��3�{�������O�C�p�G iim_server.usesso ������ 0�A�åB���]�w�ӿﶵ�A�h��A���|�ϥιw�]����� Portal Server �� SSO ��3�{���C(�аѾ\ Instant Messaging API ������A�H��o��h��T�C)
SSOProvider ��I�����O�W�١C
�аѾ\�uSun ONE Instant Messaging 6.1 Administrator's Guide�v(http://docs.sun.com/doc/817-4113-10) ������ A�uInstant Messaging Configuration Parameters�v�A�H��o��h��T�C
���ҥΩ� Messaging Server�BCalendar Server �H�� Instant Messaging �� SSO
����Ƹ� SSO
- �p�G�J�즳�� SSO �����D�A�Х�d�\ Web �l���x�� (msg_svr_base/log/http)�A�H�A�ѿ�~�C
- �W�[�O��ŧO�G
configutil -o logfile.http.loglevel -v debug
- �b msg_svr_base/log/http_sso �ɮפ��ˬd amsdk �T���A�M��W�[ amsdk �O��ŧO�G
configutil -o local.webmail.sso.amloglevel -v 5
�ȷ��A�����s�Ұʫ�A�s���O��ŧO�~�|�ͮġC
- �нT�O�n�J�v��z�ϥΪ��O Identity Server �M Messaging Server �������X�檺�D��W�١C�ѩ� cookie �Ȧb�P�@��쪺��A�������@�ΡA�åB�s����D�Ω��A���W�٪����A�]���z�����b�s��ϥΧ����X�檺�D��W�١A�H�� SSO �i�H�u�@�C
���J�f��l��M��ƾ�q�D�t�m SSOPortal Server ���ѱM�� Messaging Server �M Calendar Server �]�p���l��q�D�M��ƾ�q�D�C���b�P�@�J�f��ୱ�W�P�ɦ����l��M��ƾ䤺�e�A�o�dzq�D�|�s�u�ܦU�۪���ݪA�Ȩóz�L���s��J�C�Ӯୱ�^������T�C
��سq�D���ĥιw��s�b�� Portal Server�BMessaging Server �M Calendar Server SSO �\��A�o�ǥ\��٬� SSO �t���d�A�� �M�N�z��A���{���CSSO �t���d�A�ȷ��� Identity Server �M Portal Server�CMessaging Server �M Calendar Server ���㦳�N�z��A���{�ҥ\��C
SSO �t���d�A��
�b�ª� Portal Server ���A�J�f��q�D�i�z�L���̦ۤv������{ SSO�C�Ӱ�I�H Identity Server SSO �t���d�A�Ȭ���¦�A�z�����z�L Identity Server �D���x���C�ӳq�D�t�m�ӪA�ȡC�ȷ�ϥ� Portal Server �q�D�ɤ~�ݭn�o�@�DzΤJ�f��q�D SSO ���C
�Ƶ�
SSO �t���d�A�ȹ�I�ثe�Ȥ䴩 Portal Server�C�ФŲV�c SSO �t���d�A�ȻP Identity Server 6.1 SSO�C
SSO �t���d�A�ȥi��@��ϥΪ̦b�@���n�J��ϥ�3�ε{�� (�p Portal Server ��3�{���Υ���L Web 3�ε{��) ��o��U�ظ귽��A�����g�{�Ҫ��s���v�C�i�s��귽��A���̿��t�Τ��i�Ϊ� SSO �t���d��������I�C
Portal Server �ثe�i���H�U�귽��A������ SSO �t���d�G�q�T��B��ƾ�M�l��C
�N�z��A���{�Ҫ����[
�N�z��A���{�һݭn�N�z��A���ϥΪ̱b��A�ӱb��@���H��N�z�{���N��ϥΪ̡CMessaging Server �M Calendar Server �����N�z��A���ϥΪ̥i���Ѥ@��ϥΪ̻{�ҡA�ӵL�ݤ@��ϥΪ̱K�X�C
�ثe�� Messaging Server �q�D�M Calendar Server �q�D�ϥ� Portal Server �� SSO �t���d�A�ȡA�H�ھڥ��̦U�۪���ݦ�A���i��{�ҡC�z�L�V Portal Server �l��M��ƾ�q�D SSO �t���d�d����U�N�z��A���ϥΪ̪��W�٩M�K�X�A�ϥΪ̵L�ݴ��ѨϥΪ̦W�٩M�K�X�C
�z������ Messaging Server �M Calendar Server �w�q�N�z��A���ϥΪ̡A�Ϩ�o���@�ΡC
�U����� SSO �t���d�A�Ȧp��N�N�z��A���{�һP Calendar Server �t�X�ϥΡC
�� 13-1 �ϥΥN�z��A���{�Ҫ� SSO �t���d�A��
�b�W�Ϥ��G
�z�Ȼݭn�Ω�l��M��ƾ�J�f��q�D���N�z��A���{�ҩM SSO �t���d�A�Ȱt�m�C�N�z��A���{�ҩM SSO �t���d�A�ȧ��L�k��N�s�� Identity Server 6.1 SSO ���C�z�����P�ɱҥ� Messaging Server �M Calendar Server ���� Identity Server 6.1 SSO�A�ϥ��t�� SSO ���`�B�@�C
�U����� Identity Server 6.1 SSO �M Portal Server �q�D SSO ������������Y�C
�� 13-2 Identity Server SSO �M Portal Server �q�D SSO ���
�b�W�Ϥ��G
- ��u��ܤ@��ϥΪ̻P Identity Server�BPortal Server�BCalendar Server �M Messaging Server �����p��i�� Identity SSO �q�T�CIdentity SSO �q�T�]�b Identity Server�BCalendar Server �M Messaging Server �����i��C
- ��u��ܦb�l��q�D�M��ƾ�q�D�����p��z�L���̦U�۪���� Messaging Server �A�ȩM Calendar Server �A�ȶi�� SSO �t���d�P�N�z��A���{�ҳq�T�C
�U����ܨϥΦ�ƾ�q�D���d�ҡC
�� 13-3 Identity Server SSO �M��ƾ�q�D�q�T
�b�W�Ϥ��G
�t�m�N�z��A���{��
�Y�n����ƾ�q�D�M�l��q�D�t�m�N�z��A���{�ҡA�z�ݭn�z�L Identity Server �D���x�s�� SSO �t���d�d���A�ûݭn�s�� Sun ONE �q�T��A���C�t�m�N�z��A���{�ҥ]�A�G
�s�� SSO �t���d�d��
�p�ݰ�榹�{�Ǫ��S�w����A�аѾ\�uSun ONE Portal Server 6.2 Administrator's Guide�v(http://docs.sun.com/doc/816-6748-10) �� 13 ���uConfiguring the Communication Channels�v�C
�� Portal Server ���� Messaging Server �M Calendar Server �t�m�N�z��A���{��
- ��� Messaging Server�A���� ms_svr_base/sbin �ؿ�C�Ҧp�G
cd /opt/SUNWmsgsr/sbin
- ���� store.admin �ɮO�_�]�t admin�G
./configutil -o store.admins
- ��J�H�U���e�G
./configutil -o service.http.allowadminproxy -v yes
- ���s�Ұ� Messaging Server�C
- ��� Calendar Server�A�s�� cal_svr_base/etc/opt/SUNWics5/config/ics.conf �ɮסG
<�����(íק�H�U�ѼơG>
service.http.allowadminproxy=”yes”
<���ҳo�ǰѼƬO�_�]�w���T�G>
service.admin.calmaster.userid="calmaster"
service.admin.calmaster.cred="password"
- ���s�Ұ� Calendar Server�C
���ҥN�z��A���{��
�ШϥΥH�U�{�dzz�L Portal Server �ୱ���Ҧ�ƾ�q�D�M�T���ǰe�q�D�O�_�B�@���`�G