The installer provides three installation types. These types only differ in the number of configuration settings that can be defined during the installation process.
Express: The express type is recommended for most users. The installer only exposes the indispensable settings that are needed for a working installation of the Configuration Agent. All remaining settings are set to reasonable defaults.
Custom: All available settings for the Configuration Agent are exposed, which allows you to fine-tune the agent's behavior. This type is only recommended for advanced users.
Minimal: The Configuration Agent is installed, but you are not prompted to provide any configuration at all. You must configure the Configuration Agent after the installation has been completed by starting the configuration wizard.
After selecting the desired installation type, click Next. Depending on the selected installation type, several configuration settings pages are displayed. The following section provides a description for these settings.
If you have selected the Express or Minimal options, then not all of the following configuration settings pages are applicable.
To start the Configuration Agent, some bootstrap information is required, such as the host name and port of the LDAP server. In addition, you can also define several advanced settings, such as the logging level or data directory. All these settings can be specified during the installation process. This information is maintained in a set of properties files, such as policymgr.properties, apocd.properties, os.properties. These files are stored locally in the Program Files\Sun\Apoc\lib directory. You can manually edit these properties files, or you can use the configuration wizard for the Configuration Agent.
This section provides an exact description of all of the configuration settings available for the Configuration Agent.
The configuration wizard offers a graphical user interface that guides you through the necessary settings of the Configuration Agent. For each page of the wizard, a corresponding help screen is available.
Associated property file keys are indicated in parentheses, where appropriate.
Server Identifier (Server): host name of the LDAP server.
Server Port (Port): port number of the LDAP server.
Suffix (BaseDn): base DN of the LDAP repository.
State: The status of the Configuration Agent. The check box can be used to either activate or deactivate the Configuration Agent. To make use of the configuration repository, the Configuration Agent must be active. The activation automatically includes the necessary registration with the Service Control Manager.
To manually enable or disable the Configuration Agent, log in as Administrator and type the command Program Files\Sun\Apoc\bin\apocd enable or Program Files\Sun\Apoc\bin\apocd disable, respectively.
Host Identifier (HostIdentifier): can be "HostName" or "IPAddress". The identifier must be set to match the contents of the LDAP attribute that is used to identify hosts. This attribute is defined in the mapping files as Host/UniqueIdAttribute.
Authentication Type for the Configuration Agent: can be "Anonymous" or "Simple". If "Anonymous" is selected, the Qualified User Name and Password fields are automatically disabled.
Qualified User Name (AuthDn): full DN of a user with read and search access rights on the repository.
If anonymous access is enabled in the directory, this setting can be left blank.
Password (Password): password of a registered LDAP user
If anonymous access is enabled in the directory, this setting can be left blank.
Authentication Type for applications (AuthType): can be “Anonymous” or “GSSAPI”, depending on how the LDAP server authenticates users.
The Configuration Agent uses two ports:
Agent Port (DaemonPort): used by the agent to communicate with client applications (default is 38900).
Administration Port (DaemonAdminPort): used by the agent controller program, apocd.exe, when communicating with the agent (default is 38901).
The Configuration Agent periodically checks for any changes in the configuration data using the following two intervals:
General Detection Interval (ChangeDetectionInterval): interval in minutes between the change detection cycles for the desktop application's (client's) configuration data.
Specifying -1 turns off change detection.
Interval for Agent Settings (DaemonChangeDetectionInterval): interval in minutes between the change detection cycles for the agent-specific configuration settings.
Specifying -1 turns off change detection.
You can use the general detection interval to tune the propagation of remote configuration data changes to client side applications. The value provided for this setting is the maximum length of time in minutes that elapses before remotely made changes are reflected in the client applications.
Smaller values result in increased Configuration Agent and LDAP server activity. As a result, use caution when you adjust the value of the settings. For example, in an initial deployment phase, you can set the value to one minute so that you can easily test the impact of remote configuration on client applications. After you complete the testing, return this setting to the initial value.
The following settings can be configured:
Data Directory (DataDir): the directory used to store runtime data.
Cached Data Storage Life (TimeToLive): interval in minutes that non-offline configuration data remains in the local database.
Garbage Collection Cycle (GarbageCollectionInterval): interval in minutes between the garbage collection cycles in the local configuration database.
Maximum Client Threads (MaxClientThreads): maximum number of client requests that can be processed simultaneously.
Maximum Client Connections (MaxClientConnections): maximum number of client connections.
Maximum Request Size (MaxRequestSize): maximum size of client requests.
Connection Timeout (ConnectTimeout): denotes the allowed interval of the LDAP server to answer a connection request. The default is one second.
Log Level (LogLevel): level of detail in the agent log files. The logging level is consistent with the Java Logger levels. In order of decreasing severity, these levels are:
OFF
SEVERE
WARNING
INFO
CONFIG
FINE
FINER
FINEST
ALL
Most of the operational settings, with the exception of the Data Directory and Connection Timeout settings, can also be maintained centrally through corresponding policies stored in the LDAP server. If you want to use this feature, do not adapt the corresponding settings by means of the wizard. Instead, use the Configuration Agent policies within the Configuration Manager to centrally specify operational settings.
With the exception of "Data Directory" and "Connection Timeout", operational settings that have been stored on the LDAP server by means of the Configuration Manager take effect automatically at the next change detection cycle for the agent configuration (see DaemonChangeDetectionInterval).
All other settings changed locally require a reload or restart of the Configuration Agent. The reload or restart is performed automatically if you use the configuration wizard.
To manually restart the Configuration Agent, ensure that no related client applications are running, log in as Administrator, and type the command Program Files\Sun\Apoc\bin\apocd restart. Alternatively, you can start the “Service Controller”, available in the Control Panel under Administrative Tools. Select Configuration Agent from the list of available services and click Restart.