Sun Java logo     �W�@��      �ؿ�      �d�      �U�@��     

Sun logo
Sun Java System Portal Server 6 2004Q2 �޲z���n 

�� 15 ��
�޲z Sun Java System Portal Server �t��

�����|����P���@ Sun Java™ System Portal Server �t�ά���U�غ޲z��ȡC

�����]�t�U�C���`�G


�t�m Secure Sockets Layer (SSL)

�z�i�H�z�L�U�C�覡�A�Q�� Sun Java System Portal Server �ά����t�m Secure Sockets Layer (SSL)�G

�Y�n�ϥ� Sun Java System Portal Server �t�m SSL

�p�G�z��ܦb Sun Java System Portal Server �w�˴v����W��� SSL�A�ШϥΦ��{�ǡC

  1. �b�z�w�� Sun Java System Portal Server �� web ��A���W�إߥi�a��Ʈw�C
  2. �p�ݧ�h��T�A�аѾ\���U�C URL ���uSun Java System Web Server 6 2004Q2, Enterprise Edition Administration Guide�v���� 5 ���uCreating a Trust Database�v�G

    http://docs.sun.com/source/816-5682-10/index.htm

  3. ���z�b�䤤�w�� Sun Java System Portal Server �n�骺 web ��A���ШD�ҮѡA�æb web ��A����ҤW�w���ҮѡC
  4. �p�ݧ�h��T�A�аѾ\�uSun Java System Web Server 6 2004Q2, Enterprise Edition Administration Guide�v���� 5 ���uRequesting and Installing a VeriSign Certificate�v�Ρuequesting and Installing Other Server Certificates�v�C

  5. �}�� Sun Java System Portal Server web ��A����Ҫ��[�K�\��C
  6. �b web ��A���޲z�D���x���A��� [�ߦn�]�w] ���ҡA��� [�s�W��ť����]�A�M���� [�s�谻ť����]�A�ö}�Ҧw���ʡC

    �p�ݧ�h��T�A�аѾ\�uSun Java System Web Server 6 2004Q2, Enterprise Edition Administration Guide�v������ 5 ���uTurning Security On�v�G

  7. ��@�U web ��A���޲z�D���x���� [�M��] �P [�M���ܧ�]�C
  8. ���s�Ұ� Sun Java System Portal Server�C
  9. /etc/init.d/amserver start

  10. �t�η|���ܱz��J�K�X�H�i�J�ҮѸ�Ʈw�C
  11. �o�ӨB�J�|�o�ͩ�C���z���s�Ұ� web ��A�� (��� /etc/init.d/amserver start) �ɡC


    �Ƶ�      

    �Y�n�קK�C�����s�Ұʫ᳣������J passphrase�A�Ыإߤ@�ӦW�٬� .wtpass�A�B�]�t�F web ��A�� passphrase ���ɮסA�ñN����m�b DSAME-BASEDIR/SUNWam/config �ؿ�C�p�G�z���s�Ұʥ]�t�w�� web ��A�����t�ΡA��O�t�Τ��èS�����ɮסA�h�z�����b�t�ΥD���x�����s��J passphrase�C


  12. ���ұz�{�b�O�_�i�H�ϥ� SSL �n�J�� Sun Java System Portal Server �J�f��G
    • �Y�n�n�J�� Sun Java System Identity Server �޲z�D���x�A����J�G
      https://server:port/amconsole
    • �Y�n�H �ୱ �ϥΪ̪�����n�J�A����J�G
      https://server:port/deploy_uri

      �Ҧp�A
      https://sesta:80/portal/dt

�Y�n�ק�{���� Sun Java System Portal Server �w�˥H�K�ϥ� SSL

�p�G�b Sun Java System Portal Server �w�˴v��t�θ߰ݱz�uDo you want to run SSL on hostname?�v�ɡA�z���^���O n ���ܡA�ШϥΦ��{�ǡC�p�ݧ�h��T�A�аѾ\�uSun Java System Portal Server 6 2004Q2 Installation Guide�v�C

  1. �H�޲z����n�J Sun Java System Identity Server �޲z�D���x�C
  2. �̹w�]�A�w����m���椤�� [�ѧO�޲z] �B [�Ҧ��w�إߪ���´] �w��ܩ����椤�C

  3. ��ܦ�m���椤���u�A�Ȱt�m�v�C
  4. ��@�U [���x] ���䪺�S�ʽb�Y�C
  5. [���x] �ݩ��H�Y��ܦb��Ƶ��椤�C

  6. �b��A���M�椤�A�N http �ܧ� https�C
  7. ��@�U [�x�s] �H�x�s�z���ܧ�C
  8. �b web ��A���W�w���ҮѡC
  9. �p�ݸԲӸ�T�A�аѾ\�Y�n�ϥ� Sun Java System Portal Server �t�m SSL �����B�J 1 ���B�J 4�C

  10. �N server.xml �M magnus.conf �ɮױq /BaseDir/SUNWam/servers/https-hostname-domain/conf_bk �ؿ�ƻs�� /BaseDir/SUNWam/servers/https-hostname-domain/config �ؿ�CBaseDir �� Sun Java System Identity Server �򩳥ؿ�C
  11. �p�G�z���ҮѤ��å��w�ˮ� CA�A�Цb /BaseDir/SUNWam/lib/AMConfig.properties �ɮפ��[�J�U�C�o��C
  12. com.sun.am.jssproxy.trustAllServerCerts=true

    �o�ӿﶵ�|�i�� JSS �H���ҮѡC

  13. �b /BaseDir/SUNWam/lib/AMConfig.properties�ɮפ��A�N�U�C URL���� http �ܧ� https�G
  14. com.sun.am.server.protocol

    com.sun.am.naming.url

    com.sun.am.notification.url

    com.sun.am.session.server.protocol

    com.sun.services.cdsso.CDCURL

    com.sun.services.cdc.authLoginUrl

  15. ���s�Ұ� Sun Java System Portal Server�C
    1. �Y�n���s�Ұʳ�@�� Sun Java System Portal Server ��ҡA����J�G
    2. /etc/init.d/amserver start

    3. �Y�n���s�Ұʦh�� Sun Java System Portal Server ��ҡA����J�G
    4. /etc/init.d/amserver startall

  16. �t�η|���ܱz��J�K�X�H�i�J�ҮѸ�Ʈw�C

�p�ݧ�h��T�A�аѾ\�uSun Java System Directory Server �޲z��n�v������ 11 ���u�޲z SSL�v�C

�Y�n�t�m Sun Java System Portal Server ��ҥH�K�ϥ� SSL

  1. �H�޲z����n�J Sun Java System Identity Server �޲z�D���x�C
  2. �̹w�]�A�w����m���椤�� [�ѧO�޲z] �B [�Ҧ��w�إߪ���´] �w��ܩ����椤�C

  3. ��ܦ�m���椤�� [�A�Ȱt�m]�C
  4. ��@�U [���x] ���䪺�S�ʽb�Y�C
  5. [���x] �ݩ��H�Y��ܦb��Ƶ��椤�C

  6. �b��A���M�椤�A�N http �ܧ� https�C
  7. ��@�U [�x�s] �H�x�s�z���ܧ�C
  8. �b web ��A���W�w���ҮѡC
  9. �p�ݸԲӸ�T�A�аѾ\�Y�n�ϥ� Sun Java System Portal Server �t�m SSL �����B�J 1 ���B�J 4�C

  10. �p�G����A���O�h����Ҧw�˪��@����A�бN server.xml �M magnus.conf �ɮױq /BaseDir/SUNWam/servers/https-instance_nickname/conf_bk �ؿ�ƻs�� /BaseDir/SUNWam/servers/https-instance_nickname/config �ؿ�C
  11. �p�G�z���ҮѤ��å��w�ˮ� CA�A�Цb /BaseDir/SUNWam/lib/AMConfig-instance_nickname.properties �ɮפ��[�J�U�C�o��C
  12. com.sun.am.jssproxy.trustAllServerCerts=true

    �o�ӿﶵ�|�i�� JSS �H���ҮѡC

  13. �b /BaseDir/SUNWam/lib/AMConfig-instance_nickname.properties �ɮפ��A�N�U�C URL���� http �ܧ� https�G
  14. com.sun.am.server.protocol

    com.sun.am.naming.url

    com.sun.am.notification.url

    com.sun.am.session.server.protocol

    com.sun.services.cdsso.CDCURL

    com.sun.services.cdc.authLoginUrl

  15. ���s�Ұ� Sun Java System Portal Server�C
    1. �Y�n���s�Ұʳ�@�� Sun Java System Portal Server ��ҡA����J�G
    2. /etc/init.d/amserver start

    3. �Y�n���s�Ұʦh�� Sun Java System Portal Server ��ҡA����J�G
    4. /etc/init.d/amserver startall

  16. �t�η|���ܱz��J�K�X�H�i�J�ҮѸ�Ʈw�C

�p�ݧ�h��T�A�аѾ\�uSun Java System Directory Server �޲z��n�v������ 11 ���u�޲z SSL�v�C


�ƥ�P�_�� Sun Java System Portal Server �t�m

Sun Java System Portal Server �ϥΪ̻P�A�Ȱt�m�|�x�s�b�ؿ��A���W�� LDAP �ؿ��T�� (DIT) ���C�p���N�i��z�z�L���q�ťؿ�洫�榡 (Lightweight Directory Interchange Format, LDIF) �ɮ׳ƥ�P�_��t�m��T�C

�Y�n�ƥ� Sun Java System Portal Server �t�m

�Y�n�ƥ� Sun Java System Portal Server �t�m��T�A�Шϥ� db2ldif ��O�C�o�ӫ�O�i�Ω�ؿ��A�����򩳥ؿ� slapd-�D��W���ؿ�C�Ҧp�A�p�G�ؿ��A���w�w�˦ܦ�A�� sesta �W���w�]�w�˥ؿ� (/usr/ldap)�A�h�򩳥ؿ�N�|�O /usr/ldap/slapd-sesta�C

  1. �N�ؿ��ܧ󬰥]�t db2ldif ��O���ؿ��A���򩳥ؿ�C
  2. cd DS_BASEDIR/slapd-HOSTNAME

  3. �ϥ� db2ldif ��O (�a�� -s �ﶵ)�A�N�t�m�x�s�� LDIF �ɮפ��A�H��w Sun Java System Portal Server �� DIT ���h�C�Ҧp�A�Y�n�x�s�� DIT ���h�� isp �t�m�A����J�U�C��r�G
  4. ./db2ldif -s "o=isp"

    ��Ʒ|�x�s�� LDIF �ɮפ��C��O�|�N�ɮ��x�s�ܥثe���ؿ�C�|�ϥΤU�C�榡�өR�W�ɮסG

    YYYY_MM_DD_HHMMSS.ldif

    �b�x�s�ɮפ���A�|��ܤU�C���d�ҿ�X�G

    [16/May/2002:14:11:25 -0700] - Backend Instance:userRoot

    ldiffile:/usr/ldap/slapd-sesta/ldif/2002_05_16_141122.ldif

    [16/May/2002:14:11:28 -0700] - export userRoot:Processed 178 entries (100%).

�Y�n�_�� Sun Java System Portal Server �t�m

�z�i�H�ϥ� ldif2db ��O�A�N�z�L db2ldif ��O�ҳƥ� Sun Java System Portal Server �t�m��T�[�H�_��C�o�ӫ�O�i�Ω�ؿ��A�����򩳥ؿ� slapd-�D��W���ؿ�C�Ҧp�A�p�G�ؿ��A���w�w�˦ܦ�A�� sesta �W���w�]�w�˥ؿ� (/usr/ldap)�A�h�򩳥ؿ�N�|�O /usr/ldap/slapd-sesta�C

  1. �N�ؿ��ܧ󬰥]�t ldif2db ��O���ؿ��A���򩳥ؿ�A��k����J�G
  2. cd DS_BASEDIR/slapd-HOSTNAME

  3. ����ؿ��A���A��k����J�G
  4. ./stop-slapd

  5. �ϥ� ldif2db ��O�N�t�m�q LDIF �ɮ״_�쬰�ؿ��A���C��O�᭱�p�G�[�W -s �ѼơA�h�O��w Sun Java System Portal Server ���� DIT ���h�F�ӫ᭱�[�W -i �Ѽƫh�O��w�ɮצW�١C�Ҧp�A�p�G�n�N��e�B�J���x�s�� LDIF �ɮ״_�쬰 isp �� DIT ���h�A����J�U�C��r�G
  6. ./ldif2db -s "o=isp" -i /usr/ldap/slapd-sesta/ldif/2002_05_16_141122.ldif

    �b�_��t�m����A�|��ܤU�C���d�ҿ�X�G

    importing data ...

    [16/May/2002:16:37:02 -0700] - Backend Instance:userRoot

    [16/May/2002:16:37:03 -0700] - import userRoot:Index buffering enabled with bucket size 13

    [16/May/2002:16:37:03 -0700] - import userRoot:Beginning import job...

    [16/May/2002:16:37:03 -0700] - import userRoot:Processing file "/usr/ldap/slapd-sesta/ldif/2002_05_16_141122.ldif"

    [16/May/2002:16:37:04 -0700] - import userRoot:Finished scanning file "/usr/ldap/slapd-sesta/ldif/2002_05_16_141122.ldif" (178 entries)

    [16/May/2002:16:37:05 -0700] - import userRoot:Workers finished; cleaning up...

    [16/May/2002:16:37:08 -0700] - import userRoot:Workers cleaned up.

    [16/May/2002:16:37:08 -0700] - import userRoot:Cleaning up producer thread...

    [16/May/2002:16:37:08 -0700] - import userRoot:Indexing complete.Post-processing...

    [16/May/2002:16:37:08 -0700] - import userRoot:Flushing caches...

    [16/May/2002:16:37:08 -0700] - import userRoot:Closing files...

    [16/May/2002:16:37:09 -0700] - import userRoot:Import complete.Processed 178 entries in 6 seconds.(29.67 entries/sec)

  7. ���s�Ұʥؿ��A���A��k����J�G
  8. ./start-slapd


�ܧ� Sun Java System Portal Server ���]�w

�Y�n��ڱN��� Sun Java System Portal Server �n�骺��A���q���ܨ�L�a��A�z�u�ݭn�b /etc/hosts �ɤ��ܧ��3 IP ��}�������X����W�٧Y�i�C�õL��L�ݭn��諸�g����}�C


�޲z�h�� UI �`�I�w��

��z�b�h�� UI �`�I�W�w�� Sun Java System Portal Server �n��ɡA�z�ݭn�b Sun Java System Identity Server �޲z�D���x����u���x�v�ݩʶi��t�m�ܧ�C�z�s��u��A���M��v�ݩʥH�]�A�C�� UI �`�I�� URL�C

Sun Java System Identity Server �R�W�A�ȷ|�b��l�ƶ��qŪ��u��A���M��v�ݩʡC���M��]�t�F��@ Sun Java System Identity Server �t�m���� Sun Java System Identity Server �u�@�ɬq��A���C�Ҧp�A�p�G�w�ˤF��x Sun Java System Identity Server ��A���A�ӥB�����@���@�x�ӨϥΡA�h�����N�o��x��A�����]�A�b�M�椤�C�p�G�b�ШD�A�� URL ���ҫ�w���D��å��b���M�椤�A�h�R�W�A�ȱN�|�ڵ��ШD�C�M�椤���Ĥ@�ӭȫ�w�F�b�w�˴v��ҫ�w����A���D��W�٩M�s����C�i�H�ϥή榡 protocol://server:port �s�W��L����A���C

�Y�n�b��A���M�椤�s�W��L�� Portal Server

  1. �H�޲z����n�J Sun Java System Identity Server �޲z�D���x�C
  2. �̹w�]�A�w����m���椤���u�ѧO�޲z�v�B�u�Ҧ��w�إߪ���´�v�w��ܩ����椤�C

  3. ��ܦ�m���椤���u�A�Ȱt�m�v�C
  4. ����A���H�Y�|�X�{�b����椤�C

  5. ��@�U [���x] ���䪺�S�ʽb�Y�C
  6. [���x] �ݩ��H�Y��ܦb��Ƶ��椤�C

  7. �s�� [��A���M��] �ݩʡC
  8. �b�C�ӥ\�ର UI �`�I����A�����A��J��A�� URL�A�Ҧp http://host1.sesta.com:80�A�M���@�U [�s�W] ��s�CURL �H�Y�|�X�{�b [��A���M��] ���C

  9. ��@�U [�x�s]�C


�t�m Sun Java System Portal Server ��ҥH�K�ϥ� HTTP �N�z��A��

�p�G Sun Java System Portal Server �n��Ҧw�˪��D��L�k�����s���ں��αz�������Y�dz���A�z�N�ݭn�t�m��ҥH�K�ϥ� HTTP �N�z��A���C

�b��� Portal Server Web 3�ε{���� Web �e�����A�]�w http.proxyHost �M http.proxyPort Java Virtual Machine (JVM) �t���ݩʤ���A�i�H�N Portal Server �t�m���ϥ� HTTP �N�z��A���C�]�w JVM �t���ݩʪ���k�|�]���P Web �e���Ӳ��C���`�Ҵy�z���{�ǯS�O�A�Ω�t�m Sun Java System Web Server ��ҥH�K�ϥ� HTTP �N�z��A���C

  1. �N�ؿ��ܧ󬰥]�t��Ұt�m���ؿ��A���򩳥ؿ�A��k����J�G
  2. cd /BaseDir/SUNWam/servers/https-hostname-domain/config

  3. �s�覹�ؿ� server.xml �ɮסA�M��s�W�U�C�X��G
  4. JVMOPTIONS-Dhttp.proxyHost=proxy_host/JVMOPTIONS

    JVMOPTIONS-Dhttp.proxyPort=proxy_port/JVMOPTIONS

    �䤤 proxy_host �O�N�z��A���D������X����W�١A�� proxy_port �h�O���N�z��A���b��W��檺�s����C


    �Ƶ�      

    �p�G server.xml �ɮפw�g�]�w�N�z��A�� (�ϥ� http.proxyHost= �M http.proxyPort= �ﶵ)�A�z�i�H�s�W http.nonProxyHosts=proxy_host �ﶵ�C���D�J�f���A���w�s�W�ܥN�z��A���s��M�椤�A�_�h���i��L�k�z�L�N�z��A���s��J�f���A���C



�޲z Sun Java System Portal Server �O��

�z�i�H�t�m Sun Java System Portal Server �O��H�K�N��T�O��ܤ@���ɮשΰO��ܸ�Ʈw�C�b�O��ܸ�Ʈw�ɡA�|�ϥ� JDBC ��w�C

�Y�n�t�m�O����ɮ�

  1. �H�޲z����n�J Sun Java System Identity Server �޲z�D���x�C
  2. �̹w�]�A�w����m���椤���u�ѧO�޲z�v�B�u�Ҧ��w�إߪ���´�v�w��ܩ����椤�C

  3. ��ܦ�m���椤���u�A�Ȱt�m�v�C
  4. ����A���H�Y�|�X�{�b����椤�C

  5. ��@�U [�O��] ���䪺�S�ʽb�Y�C
  6. [�O��] �ݩ��H�Y��ܦb��Ƶ��椤�C

  7. ���@�� [�O������] �ݩʪ� [�ɮ�]�C
  8. �b [�O���m] �ݩʤ���w��x�ɮת��ؿ��|�C
  9. �b [�̤j�O��j�p] �ݩʤ���w��x�ɪ��̤j�ɮפj�p (�H�줸�����)�C
  10. �b [��v�ɮ׼ƥ�] �ݩʤ���w�ƥ�O��ƥءC
  11. ��@�U [�x�s]�C

�Y�n�t�m�O��ܸ�Ʈw

  1. �H�޲z����n�J Sun Java System Identity Server �޲z�D���x�C
  2. �̹w�]�A�w����m���椤���u�ѧO�޲z�v�B�u�Ҧ��w�إߪ���´�v�w��ܩ����椤�C

  3. ��ܦ�m���椤���u�A�Ȱt�m�v�C
  4. ����A���H�Y�|�X�{�b����椤�C

  5. ��@�U����椤�u�O��v�A�Ȯ��䪺�S�ʽb�Y�C
  6. �u�O��v�ݩ��H�Y��ܦb��Ƶ��椤�C

  7. ��� JDBC �@���u�O�������v�ݩʡC
  8. �b�u��Ʈw�ϥΪ̦W�١v�M�u��Ʈw�ϥΪ̱K�X�v�ݩʤ��A��w�ΥH�s����Ʈw���ϥΪ̦W�٩M�K�X�C
  9. ��w�Ω�b�u��Ʈw�X�ʵ{���W�١v�ݩʤ��O���X�ʵ{���C
  10. ��@�U [�x�s]�C


���� Sun Java System Portal Server

���`�|���Цp��]�w����h���H��U�z�w�藍�P�� Sun Java System Portal Server ����i�����ƸѡC

�Y�n�]�w Sun Java System Identity Server ������h��

����h���i���\�z�w�q�ǰe�ܰ����x���T�������C�U�C���䴩���h���G

�̹w�]�A����T���|�ǰe�� /var/opt/SUNWam/debug �ؿ��x�ɮסC

�Y�n�]�w����h���G

  1. �b /etc/opt/SUNWps/desktopconfig.properties �ɮת��H�U�椤�w�q����h���G
  2. debugLevel=value

  3. ���s�Ұ� Sun Java System Portal Server�G
  4. /etc/init.d/amserver start

  5. �b /var/opt/SUNWam/debug �H�� Sun Java System Web Server ��x�ɤ��˵�P����x�ɡC


�W�@��      �ؿ�      �d�      �U�@��     


Copyright 2004 Sun Microsystems, Inc. ���v�Ҧ��C