Sun Java System Access Manager Policy Agent 2.2 Guide for Microsoft Internet Information Services 5.0

Pre-uninstallation of Agent for Microsoft IIS 5.0

The tasks presented in this pre-uninstallation section enable you to unconfigure Basic Authentication of Agent for Microsoft IIS 5.0.


Note –

This pre-uninstallation section only applies if the Basic Authentication filter was previously configured, as described starting in Preventing an Additional Authentication Prompt: Preparing to Install Agent for Microsoft IIS 5.0.


The tasks presented in this section are as follows:

The tasks presented in this section describe how to unconfigure previously performed configuration steps, as described in Preventing an Additional Authentication Prompt: Preparing to Install Agent for Microsoft IIS 5.0 and Configuring Agent for Microsoft IIS 5.0 for Basic Authentication.

ProcedureTo Undeploy the Post Authentication Module

This task requires the use of Access Manager Console and the Access Manager AMConfig.properties configuration file

  1. Log in to Access Manager as amadmin.

  2. With the Access Control tab selected, click the name of the realm you wish to configure.

  3. Click the Authentication tab.

  4. Click Advanced Properties.

    The Advanced Properties button is in the General section.

  5. Scroll down to the Authentication Post Processing Classes field.

  6. In the Authentication Post Processing Classes field, remove the appropriate text depending upon the Access Manager version:

    For Access Manager 7.0 series from Patch 5 forward and Access Manager 7.1 series from Patch 1 forward

    Remove the following: com.sun.identity.authentication.spi.ReplayPasswd

    For Any version of the Access Manager 7.0 series prior to patch 5 and Access Manager 7.1

    Remove the following: ReplayPasswd

  7. Scroll up to click Save.

  8. Click Log Out to log out of the Access Manager Console.

  9. Remove the property com.sun.am.replaypasswd.key from the Access Manager AMConfig.properties configuration file as described in the following substeps.

    1. Open the AMAgent.properties configuration file.

    2. Remove the following property and its corresponding value:

      com.sun.am.replaypasswd.key
    3. Save and close the AMAgent.properties configuration file.

  10. Restart Access Manager.

ProcedureTo Disable Basic Authentication in Microsoft IIS 5.0 Server

This task is performed in Microsoft IIS 5.0 server.

  1. Start the Internet Services Manager.

  2. Right click the web site that is protected by the agent.

  3. Select Properties from the drop-down list.

  4. Select Directory Security.

  5. Select Edit in Authentication and access control.

  6. Uncheck the Basic Authentication box.

  7. Check the box “Enable anonymous access.”

  8. Click OK to save the changes.

ProcedureTo Remove Agent Properties Related to Basic Authentication

  1. Open the AMAgent.properties configuration file.

  2. Remove the following properties and their corresponding values:

    • com.sun.am.replaypasswd.key

    • com.sun.am.policy.agents.config.iis.auth_type

    • com.sun.am.policy.agents.config.iis.Use_Basic_Auth

  3. Save and close the AMAgent.properties configuration file.

  4. Restart the Microsoft IIS 5.0 server.