Sun Java logo     �W�@��      �ؿ�      �d�      �U�@��     

Sun logo
Sun Java System Portal Server 6 2004Q2 �޲z���n 

�� 19 ��
�]�w Portal Server �H�ϥΦw���~�� LDAP �ؿ��A��

�b�w�]�w�ˤ��ASun Java™ System Portal Server�BSun Java™ System Identity Server �M Sun Java™ System Directory Server �n�鳣�O�b�ۦP�D��W���C�M�ӡA�ھڳ��p���į�B�w���ʻP��X�ݨD�A�z�i�H�b�W�ߡB�~�����D��W���ؿ��A���A�èϥΦw���M���h (SSL) �b�w���s���W�� Portal Server �s��ؿ�C���F�z�L�w���s�u�s�� Directory Server�ASun Java™ System Application Server �����t�m���H��ñ�p�ؿ��ҮѪ��{�Ҿ�c�C

�]�w Sun Java System Portal Server �H�ϥΥ~�� LDAP �ؿ�A�ݭn���U�C�{�ǡG

�Y�n�t�m Directory Server �H�b SSL �U���

  1. ���� Directory Server (ns-slapd �{��) �P�޲z��A�� (ns-httpd �{��) �O�_�w�ҰʻP���C
  2. �H�W�ŨϥΪ̪�����A�b�׺ݾ��Ұʥؿ��A���D���x�A��k�O��J�G
  3. /var/opt/mps/serverroot/startconsole

  4. �b��ܪ��n�J���A��J admin �@�� Directory Server ���ϥΪ̦W�ٻPpassphrase�C
  5. �b�D���x�������椤�A�i�}�ؿ��b [��A���s��] �U�ݨ� Directory Server ��ҡC
  6. ��� Directory Server ��Ҩë�@�U [�}��]�C
  7. ��� [���] ������ [�޲z�Ү�]�C
  8. �Ĥ@�����o�ӥ�ȮɡA�t�η|�n�D�z��J�K�X�H�إ��ҮѸ�Ʈw�C�O��o�ӱK�X�A�]������|�ݭn�o�ӱK�X�Ұ� Directory Server�C

  9. ��@�U [�ШD]�C
  10. �|�X�{ [�ҮѽШD���F]�C��Ӻ��F����ܨç����o�ǨB�J�H�����ҮѽШD�C�ШD�|�ǰe��u�ҮѺ޲z��A�� (CMS)�v�H��o�\�i�CCMS �|�Ǧ^�u�����ҮѡC�x�s�ҮѽШD�ƥ��A��k�O�N�ШD��ƽƻs���ɮסC

  11. �b�ҮѽШD�ǰe�� CMS ����ACMS �޲z��|�{�i�ШD�ñN�w�{�i���ҮѶǦ^�C
  12. ��o�w���ͪ� DS �ҮѻP CMS �ҮѡC
  13. �]�� CMS �|�� DS �����ҮѡA�ҥH CMS �]�����Q�H��A��k�O�N���Үѧ@���� CA �פJ�C

  14. ��� [�޲z�Ү�]�B[��A���Ү�]�A�M���@�U [�w��]�C
  15. �|�X�{ [�ҮѦw�˽ШD���F]�C

  16. �N�w�\�i���ҮѸ�Ʊq�B�J 8 �ƻs�öK�W�ܤ�r�ϰ�ÿ�u���F��ܪ��B�J�H�w���ҮѡC
  17. ���\�w���ҮѤ���A�Үѷ|�H�Ӷ�������ܩ� [��A���Ү�] ���ҤW�C

  18. �}�� [�޲z�Ү�] ��A��� [CA �Ү�] ���ҡC
  19. �p�G�z�b�B�J 9 ���q����o�ҮѪ� CA �i�H�b CA �ҮѲM�椤���A�z�N���ݭn�b�ӲM�椤�w���ҮѡC

    �p�G�ҮѨå��b�M�椤�A�z�ݭn�z�L�z���{�Ҿ�c��o�� CA �ҮѨå[�H�w�ˡC

    1. ��@�U [�w��]�C
    2. �N CMS �ҮѸ�ƽƻs�öK�W�ܤ�r�ϰ�ÿ�u���F��ܪ��B�J�H�w���ҮѡC
    3. �ҮѦW��3�ӷ|�X�{�b CA �ҮѲM�椤�C

  20. ��@�U [��] �H�� [�޲z�Ү�] ��C
  21. ��� [�t�m] ���ҡC
  22. �b [���] ���Ҥ�����άO�b [�[�K�s����] ��줤��w���Ī��s����s���A�ë�@�U [�x�s]�C
  23. �w�]�s���� 636�C

  24. ��@�U [�[�K] ���ҡA���o�Ӧ�A���֨� [�ҥ� SSL] �èϥΥ[�K�t�C�GRSA �֨���ë�@�U [�x�s]�C
  25. ���s�Ұ� Directory Server �ô��Ѧb�B�J 6 ����J���ҮѸ�Ʈw�K�X�C
  26. �z���ؿ�{�b����ť�� SSL �s���� 636 �s���� (�w�])�C

�Y�n�إ߫H���Ʈw

�إ߫H���Ʈw�ɡA�z�n��w�N�Ω�K�_���ɮת��K�X�C�z�]�ݭn���K�X�Ұʦ�A���A��k�O�ϥΥ[�K���q�T�C

�z�إ߻P�x�s���}�P�p�H�K�_���ҮѸ�Ʈw�٬��K�_���ɮסC�K�_���ɮ׷|�Ω� SSL �[�K�C��ШD�P�w�˦�A���ҮѮɷ|�ϥαK�_���ɮסC�b�w�˫��Үѷ|�x�s�b�ҮѸ�Ʈw���C

�إ��ҮѸ�Ʈw���{�Ƿ|�ھڨϥΪ� Web �e�������өw�C�U�C�O�b Sun Java System Application Server �W�إ��ҮѸ�Ʈw����ܡC�z�]�i�H�b http://docs.sun.com ���uSun Java System Application Server 7 Administration Guide to Security�v��������C

����b Sun Java System Web Server �إ��ҮѸ�Ʈw������A�i�H�b http://docs.sun.com ���uSun Java system Web Server, Enterprise Edition Administration Guide�v���C

����b Sun Java System Application Server �إ��ҮѸ�Ʈw������A�Цb�޲z���������U�C�B�J�G

  1. �нT�w Application Server ��Ҥw�g�ҰʡC
  2. �s�� App Server ��Ҩÿ���A����ҡC
  3. �s��w���ʡC
  4. ��@�U [�޲z��Ʈw]�C
  5. ��@�U [�إ߸�Ʈw] �s���C
  6. �N�|��� [��l�ƫH���Ʈw] ���C

  7. ��J��Ʈw���K�X�C
  8. ���ƱK�X�C
  9. ��@�U [�T�w]�C
  10. �b�����椤�s�� App Server ��һP��A����ҡA�M���@�U [�M���ܧ�]�C
  11. ����í��s�Ұʦ�A���ϤW�z�ܧ�ͮġC

�ϥ� password.conf �ɮ�

�p�G�z�Ʊ� SSL/TLS �ҥΪ� Sun ONE Application Server �b�w�� SSL �t�m�ɯ��۰ʭ��s�ҰʡA�z�i�H�N�H���Ʈw�K�X�x�s�b password.conf �ɮפ��C


�Ƶ�

�T�w�z���t�Τw��o�R�+O�@�A�p���o���ɮשM�K�_��Ʈw�~���|�Q���|�C


���� password.conf �ɮת��i�@�B��T�A�i�H�b�uSun ONE Application Server Administrator s Configuration File Reference�v�����uUsing the password.conf File�v�����C

�@��Ө��A�z����ϥ� /etc/rc.local �� /etc/inittab �ɮױҰʤw�ҥ� Unix SSL ����A���A�]����A���b�Ұʤ��e�ݭn��J�K�X�C��M�p�G�z�N�K�X�O�s�b�@�ӯ¤�r�ɤ��A�N�i�H�۰ʱҰʤw�ҥΪ� SSL ��A���A��M����ij�z�ϥγo�Ӥ�k�C��A���� password.conf �ɮ�3�Ӷ��ݩ�کΦw�˦�A�����ϥΪ̡A�u���Ҧ��H�~�i�H�i��Ū��P�g�J�C�b Unix �W�A�b password.conf �ɮפ��O�d�w�ҥ� SSL ��A�����K�X���ܤj���w�����I�C�i�H�s���ɮת��H�֦��s��w�ҥ� SSL ��A�����K�X�C�b password.conf �ɮפ��O�s�w�ҥ� SSL ��A���K�X���e�A�ЦҼ{�w�����I�C

�w�ˮڻ{�Ҿ�c (CA) �Ү�

�w�ˮ� CA �ҮѪ��{�Ƿ|�ھڨϥΪ� Web �e�������өw�C

�U�C�{�ǻ���p��b Sun Java System Application Server �W�w�ˮ� CA�C�z�]�i�H�b http://docs.sun.com ���uSun Java System Application Server 7 Administration Guide to Security�v�������C

����b Sun Java System Web Server �w�ˮ� CA ������A�i�H�b http://docs.sun.com �����uSun Java System Web Server, Enterprise Edition Administration Guide�v���C

�����ҮѪ��ӷ��P�z��o�� CA �ҮѪ��ӷ��ۦP�C

�Y�n�q CA �w���ҮѡA�Цb�޲z���������U�C�B�J�G

  1. �b�����椤�s�� App Server ��Ҩÿ���A����ҡC
  2. �s��w���ʡC
  3. ��� [�ҮѺ޲z]�C
  4. ��@�U [�w��] �s���C
  5. �N�|��� [�w�˦�A���Ү�]�C

  6. �� CA ���Үѿ�ܥi�H��{�Ҿ�c (CA)�A�ӱz�|����{�Ҿ�c�@���Τ�ݻ{�Ҫ���H�� CA�C
  7. �бq�U�Ԧ��M�椤���[�K�ҲաC
  8. ��J�K�_���ɮת��K�X�C
  9. �p�G�ҮѬO����A����ҨϥΪ��ߤ@�ҮѡA�бN�Ү����W�٫O�d�ťաA���D�G
    • ���&�A���N�ϥΦh���ҮѡC�p�G�O�o�ر��p�A�п�J�b��A����Ҥ��ߤ@���ҮѦW�١C
    • �ϥΤF�P�������P���[�K�ҲաC�p�G�O�o�ر��p�A�п�J�b��@�[�K�Ҳժ��Ҧ���A����Ҥ��ߤ@���ҮѦW�١C
    • �p�G�w�g��J�W�١A�ӦW�ٱN�|��ܦb [�޲z�Ү�] �M�椤�A�ӥB��y�z�ʡC�Ҧp�AUnited States Postal Service CA �O CA ���W�١F�� VeriSign Class 2 Primary CA �h�P�ɴy�z CA �M�Ү������C


      �Ƶ�

      �p�G�S����J�ҮѦW�١A�h�|�M�ιw�]�ȡC


  10. ��ܤ@�ءG
    • �T���b���ɮפ��C�p�G�O�o�ر��p�A�п�J�w�x�s�q�l�l�󪺧����|�W�١C
    • �T����r (�t���Y)�C�b�o�ر��p�U�A�жK�W�q�l�l���r�C�p�G�z�ƻs�öK�W��r�A�нT�w�w�]�A���Y Begin Certificate �P End Certificate�A�䤤�]�A�}�l�P����s�r���C
  11. ��@�U [�T�w]�C
  12. ��� [�s�W�Ү�] �H�w�˷s���ҮѡC
  13. �b�����椤�s�� App Server ��һP��A����ҡA�M���@�U [�M���ܧ�]�C
  14. ����í��s�Ұʦ�A���ϤW�z�ܧ�ͮġC�Үѷ|�x�s�b��A�����ҮѸ�Ʈw���C�ɮצW�ٱN�|�O cert8.db�C

�ҥ� Identity Server �H�K�Q�� SSL �P Directory Server �q�T

�Y�n�� Directory Server �ҥ� SSL�A�нs�� /etc/opt/SUNWam/config/AMConfig.properties �ɮסC���B�J�P�e���L��A�ӥB Sun Java System Web Server �H�� Sun Java System Application Server ��������榹�B�J�C

�NAMConfig.properties �ɮת��U�C�]�w�q�G

com.iplanet.am.directory.ssl.enabled=false

com.iplanet.am.directory.host=server12.example.com (if it needs to be changed)

com.iplanet.am.directory.port=389

�ܬ�

com.iplanet.am.directory.ssl.enabled=true

com.iplanet.am.directory.host=server1.example.com

com.iplanet.am.directory.port=636 (port on which DS uses encryption)

�b identity-server-install-dir/SUNWam/config/ums/serverconfig.xml �ɮפ��ܧ�s�u�s����P�s�u�����ȡA�N���}�Ҧ��ܧ� SSL�C

�s�� serverconfig.XML �ɮרñN�U�C�U��q�G

  <Server name="Server1" host="gimli.example.com"

port="389"

type="SIMPLE" />

�ܬ��G

to

<Server name="Server1" host="gimli.example.com"

port="636"

type="SSL" />

�b������ serverconfig.xml �ɮשҰ����ܧ󤧫�A�Э��s�Ұ� Web �e���C



�W�@��      �ؿ�      �d�      �U�@��     


Copyright 2004 Sun Microsystems, Inc. ���v�Ҧ��C