Connecting Access Manager to the SSL-enabled Directory Server

Once the Directory Server has been configured for SSL mode, you need to securely connect Access Manager to the Directory Server backend.

To Connect Access Manager to Directory Server

1. In the Access Manager Console, go to the LDAP Authentication service in the Service Configuration module.

   1. Change the Directory Server port to the SSL port.

   2. Select the Enable SSL Access to LDAP Server attribute.

2. Go to the Membership Authentication service in the Service Configuration module.

   1. Change the Directory Server port to the SSL port.

   2. Select the Enable SSL Access to LDAP Server attribute.

3. Go to the Policy Configuration service located in Service Configuration.

   1. Change the Directory Server port to the SSL port.

   2. Select the Enable LDAP SSL attribute.

4. Open the serverconfig.xml in a text editor. The file is in the following location:

   /etc/opt/SUNWam/config

   1. In the <Server> element, change the following values:

      port - enter the port number of the secure port to which Access Manager listens (636 is the default).

      type- change SIMPLE to SSL.

   2. Save and close serverconfig.xml.

5. Open the AMConfig.properties file from the following default location:

   /etc/opt/SUNWam/config.

   Change the following properties:

   1. com.iplanet.am.directory.port = 636 (if using the default)

   2. ssl.enabed = true

   3. Save AMConfig.properties.

6. Restart the server