Sun OpenSSO Enterprise Policy Agent 3.0 Guide for Apache HTTP Server 2.2.x

Installing the Apache HTTP Server 2.2.x Agent

Gathering Information to Install the Apache HTTP Server 2.2.x Agent

The following table describes the information you will need to provide when you run the agentadmin program to install Apache HTTP Server 2.2.x agent. For some agentadmin prompts, you can accept the default value displayed by the program, if you prefer.

Table 2 Information Required to Install the Apache HTTP Server 2.2.x Agent


Prompt Request	Description
Apache Server Config Directory Path	Path to the configuration directory used by the Apache HTTP Server instance. For example: `/opt/apache-2.2.11/conf`
OpenSSO server URL	URL for Oracle OpenSSO server. For example: `http://openssohost.example.com:8080/opensso`
Agent URL	URL for the Apache HTTP Server 2.2.x agent. For example: `http://agenthost.example.com:8090`
Agent Profile Name	Name of the agent profile. For example: `Apache22Agent` For information, see Creating an Agent Profile.
Agent Profile Password File	Path to the agent profile password file. For example: `/tmp/apache22agentpw` For information, see Creating a Password File.
Option for the installer to create the agent profile The `agentadmin` program displays the following prompt if the agent profile previously specified for the Agent Profile Name prompt does not already exist in Oracle OpenSSO: `Enter true if the Agent Profile is being created into OpenSSO server by the installer. Enter false if it will be not be created by installer.`	To have the installation program create the agent profile, enter `true`. The program then prompts you for: Agent administrator who can create, update, or delete the agent profile. For example: `agentadmin` Important: To use this option, the agent administrator must already exist in Oracle OpenSSO server and must have agent administrative privileges. If you prefer, you can specify `amadmin` as this user. For information see, Creating an Agent Administrator (Optional). Path to the agent administrator password file. For example: `/tmp/agentadminpw` For information, see Creating a Password File.

Installing the Apache HTTP Server 2.2.x Agent Using the `agentadmin` Program

To Install the Apache HTTP Server 2.2.x Agent Using the `agentadmin` Program

Login into the server where you want to install the agent.

Important: To install the agent, you must have write permission to the files and directories for the Apache HTTP Server instance.

Stop the Apache HTTP Server instance.

Change to the PolicyAgent-base/bin directory. For example:

# cd /opt/web_agents/apache22_agent/bin

Start the agent installation. For example:

# ./agentadmin --custom-install

On Windows systems, run the agentadmin.bat program.

Enter information as requested by the agentadmin program, or accept the default values displayed by the program.

After you have made your choices, the agentadmin program displays a summary of your responses. For example:

-----------------------------------------------
SUMMARY OF YOUR RESPONSES
-----------------------------------------------
Apache Server Config Directory : /opt/apache-2.2.11/conf
OpenSSO server URL : http://opensshost.example.com:8080/opensso
Agent URL : http://agenthost.example.com:8090
Agent Profile name : Apache22Agent
Agent Profile Password file name : /tmp/apache22agentpw
Verify your settings above and decide from the choices below.
1. Continue with Installation
2. Back to the last interaction
3. Start Over
4. Exit
Please make your selection [1]: 1

Verify your choices and either continue with the installation (selection 1, the default) , or make any necessary changes.

If you continue, the program installs the agent and displays a summary of the installation. For example:

SUMMARY OF AGENT INSTALLATION
-----------------------------
Agent instance name: Agent_001
Agent Bootstrap file location:
/opt/web_agents/apache22_agent/Agent_001/config/OpenSSOAgentBootstrap.properties
Agent Configuration Tag file location
/opt/web_agents/apache22_agent/Agent_001/config/OpenSSOAgentConfiguration.propertie
s
Agent Audit directory location:
/opt/web_agents/apache22_agent/Agent_001/logs/audit
Agent Debug directory location:
/opt/web_agents/apache22_agent/Agent_001/logs/debug
Install log file location:
/opt/web_agents/apache22_agent/installer-logs/audit/install.log

After the installation finishes successfully, if you wish, check the installation log file in the /installer-logs/audit directory

Restart the Apache HTTP Server instance for the agent.

Agent Installation Program Functions

The agent installation program performs these functions:

Creates the OpenSSOAgentBootstrap.properties and OpenSSOAgentConfiguration.properties configuration files from the respective template files.
Creates the file dsame.conf file from the template file.
Modifies the httpd.conf file to include the path for the dsame.conf file.
Creates the agent instance directory as PolicyAgent-base/Agent_nnn, where nnn identifies the agent instance as Agent_001, Agent_002, and so on for each additional agent instance.

For example: /opt/web_agents/apache22_agent/Agent_001

Each agent instance directory contains the following subdirectories:
- /config contains the configuration files for the agent instance, including OpenSSOAgentBootstrap.properties and OpenSSOAgentConfiguration.properties.
- /logs contains the following subdirectories
  - /audit contains local audit trail for the agent instance.
  - /debug contains the debug files for the agent instance when the agent runs in debug mode.

Considering Specific Deployment Scenarios for the Apache HTTP Server 2.2.x Agent

Installing the Apache HTTP Server 2.2.x Agent on Multiple Apache HTTP Server Instances

After you install the Apache HTTP Server 2.2.x agent on a specific Apache HTTP Server instance, you can install the agent on another Apache HTTP Server instance by executing the agentadmin program again for that instance.

Installing Apache HTTP Server 2.2.x Agent on the Oracle OpenSSO Host Server

Oracle OpenSSO is not supported on the Apache HTTP Server 2.2.x web container. Therefore, installing the Apache HTTP Server 2.2.x agent and Oracle OpenSSO on the same server instance is not supported.