Documentation Issues

• Document the Roles and Filtered Roles Support for LDAPv3 Plug-in (6365196)

• Document Unused Properties in the AMConfig.properties File (6344530)

• Document How to Enable XML Encryption (6275563)

Document the Roles and Filtered Roles Support for LDAPv3 Plug-in (6365196)

After applying the respective patch, you can configure roles and filtered roles for the LDAPv3 plug-in, if the data is stored in Sun Java System Directory Server. In , in for

1. Go to the Access Manager 7.1 Administrator Console.

2. Select LDAPv3 configuration.

3. In the “LDAPv3 Plugin Supported Types and Operations” field, type the following values depending on the roles and filtered roles you plan to use in your LDAPv3 configuration:

   role: read,edit,create,delete
   filteredrole: read,edit,create,delete

Document Unused Properties in the AMConfig.properties File (6344530)

The following properties in the AMConfig.properties file are not used:

com.iplanet.am.directory.host
com.iplanet.am.directory.port

Document How to Enable XML Encryption (6275563)

To enable XML encryption, perform the following steps:

1. (Optional) If you are using a JDK version earlier than JDK version 1.5:,

   1. download the Bouncy Castle JCE provider from the Bouncy Castle site (http://www.bouncycastle.org/).

      For example, for JDK version 1.4, download the bcprov-jdk14-131.jar file.

   2. Copy the file to the jdk_root\jre\lib\ext directory.

2. Download the JCE Unlimited Strength Jurisdiction Policy Files. for your version of the JDK.

   • For Sun Systems, download the files from the Sun site (http://java.sun.com) for your version of the JDK.

   • For IBM WebSphere, go to the corresponding IBM site to download the required files.

3. Copy the downloaded US_export_policy.jar and local_policy.jar files to the jdk_root\jre\lib\security directory.

4. If you are using a JDK version earlier than JDK 1.5, edit the jdk_root\jre\lib\security\java.security file and add Bouncy Castle as one of the providers. For example:

   security.provider.6=org.bouncycastle.jce.provider.BouncyCastleProvider

5. Set the following property in the AMConfig.properties file to true:

   com.sun.identity.jss.donotInstallAtHighestPriority=true

6. Restart the Access Manager web container.

For more information, refer to problem ID 5110285 (XML encryption requires Bouncy Castle JAR file).