Sun Java System Access Manager Policy Agent 2.2 Guide for Microsoft Internet Information Services 5.0

Chapter 7 Uninstalling Policy Agent 2.2 for Microsoft IIS 5.0

This chapter first presents you with methods for disabling a web agent and then leads you through the uninstallation process. This chapter is organized as follows:

Disabling a Web Agent in Policy Agent 2.2

In certain situations, you might want to disable a web agent temporarily. You can disable this web agent in two ways. The first method applies to all web agents. The second method is more specific to this particular web agent. Furthermore, the second method requires you to remove the mapping. If you choose this method, and you later want to enable the agent, you need to add the mapping again.

To Disable a Web Agent in Policy Agent 2.2

This task requires you to reset the property that controls the not-enforced URI list in the web agent AMAgent.properties configuration file.

com.sun.am.policy.agents.config.notenforced_list

Reset the value of this property to the asterisk, “*,” as follows:
```
com.sun.am.policy.agents.config.notenforced_list = *
```

Restart Microsoft IIS 5.0.

To Disable Agent for Microsoft IIS 5.0

Issue the following command:

PolicyAgent-base\iis\bin\IISadmin.vbs -a REMOVEFILTER -f AccessManagerAgent

where PolicyAgent-base represents the directory in which the web agent was originally installed. The following is an example of how the command would appear with the PolicyAgent-base place holder replaced with the default installation directory:
```
c:\Sun\Access_Manager\Agents\2.2\iis\bin\IISadmin.vbs -a 
REMOVEFILTER -f AccessManagerAgent
```

Agent Uninstallation for Microsoft IIS 5.0

You can uninstall a web agent on a Windows system using the graphical user interface (GUI). First perform the pre-uninstallation steps if they apply.

Pre-uninstallation of Agent for Microsoft IIS 5.0

The tasks presented in this pre-uninstallation section enable you to unconfigure Basic Authentication of Agent for Microsoft IIS 5.0.

Note –

This pre-uninstallation section only applies if the Basic Authentication filter was previously configured, as described starting in Preventing an Additional Authentication Prompt: Preparing to Install Agent for Microsoft IIS 5.0.

The tasks presented in this section are as follows:

The tasks presented in this section describe how to unconfigure previously performed configuration steps, as described in Preventing an Additional Authentication Prompt: Preparing to Install Agent for Microsoft IIS 5.0 and Configuring Agent for Microsoft IIS 5.0 for Basic Authentication.

To Undeploy the Post Authentication Module

This task requires the use of Access Manager Console and the Access Manager AMConfig.properties configuration file

With the Access Control tab selected, click the name of the realm you wish to configure.

Click the Authentication tab.

Click Advanced Properties.

The Advanced Properties button is in the General section.

Scroll down to the Authentication Post Processing Classes field.

In the Authentication Post Processing Classes field, remove the appropriate text depending upon the Access Manager version:

For Access Manager 7.0 series from Patch 5 forward and Access Manager 7.1 series from Patch 1 forward

Remove the following: com.sun.identity.authentication.spi.ReplayPasswd

For Any version of the Access Manager 7.0 series prior to patch 5 and Access Manager 7.1

Remove the following: ReplayPasswd

Scroll up to click Save.

Click Log Out to log out of the Access Manager Console.

Remove the property com.sun.am.replaypasswd.key from the Access Manager AMConfig.properties configuration file as described in the following substeps.
1. Open the AMAgent.properties configuration file.
2. Remove the following property and its corresponding value:
```
com.sun.am.replaypasswd.key
```
3. Save and close the AMAgent.properties configuration file.

Restart Access Manager.

To Disable Basic Authentication in Microsoft IIS 5.0 Server

This task is performed in Microsoft IIS 5.0 server.

Start the Internet Services Manager.

Right click the web site that is protected by the agent.

Select Properties from the drop-down list.

Select Directory Security.

Select Edit in Authentication and access control.

Uncheck the Basic Authentication box.

Check the box “Enable anonymous access.”

Click OK to save the changes.

To Remove Agent Properties Related to Basic Authentication

Open the AMAgent.properties configuration file.

Remove the following properties and their corresponding values:
- com.sun.am.replaypasswd.key
- com.sun.am.policy.agents.config.iis.auth_type
- com.sun.am.policy.agents.config.iis.Use_Basic_Auth

Save and close the AMAgent.properties configuration file.

Restart the Microsoft IIS 5.0 server.

Uninstallation of Agent for Microsoft IIS 5.0

To uninstall a web agent, you must run the uninstallation program.

To Uninstall Agent for Microsoft IIS 5.0

In the Windows Start menu, choose Settings > Control Panel.

In the Control Panel, open Add/Remove Programs.

In the Add/Remove Programs window, choose Sun Java(tm) System Access Manager Policy Agent.

Click Change/Remove.

Click Next on Welcome panel.

Click Uninstall Now.

Click Exit after uninstallation is complete.

Restart the Microsoft IIS 5.0 instance from which you just uninstalled the agent.