test

Sun Java System Portal Server 7.2 Installation and Configuration Guide

Configuring Gateway During Installation

This section contains the following procedures:

Figure 4–1 Portal Server with Gateway

The user accesses Portal Server through the Gateway.

Configuring a Portal Server and a Gateway on a Single Node

This section describes how to configure a Portal Server and a Gateway on a single node in the Configure Now and Configure Later modes. In practice, this configuration is not recommended as a Gateway is designed to work in a DMZ, which mandates that the Portal Server and Gateway are deployed on separate nodes.

Using the Configure Now mode, you can configure a Gateway while installing Portal Server, where the Gateway is configured with other components. You can also configure the Gateway using the Configure Later mode, where you need to manually configure Gateway using the psconfig command after installing Portal Server.

ProcedureTo Configure Portal Server and Gateway on a Single Node using the Configure Now Mode

  1. Ensure that Directory Server and web container are running.

  2. Select the Gateway and the PortalServer options, which are displayed in the Portal Server 7.2 GUI installer when you install Portal Server 7.2.

  3. Enter Directory Server, Access Manager, and web container information in the specific installer screens.

  4. Start the Gateway.

    PortalServer_base/SUNWportal/bin/psadmin switch-sra-status -u admin-user-name -f password-file on

    PortalServer_base/SUNWportal/bin/psadmin provision-sra -u admin-user-name -f password-file --gateway-profile gateway_profile -p portal-id --enable

    PortalServer_base/SUNWportal/bin/psadmin start-sra-instance -u admin-user-name -f password-file -N default -t gateway

ProcedureTo Configure Portal Server and Gateway on a Single Node using the Configure Later Mode

  1. Install Access Manager and Directory Server using the Java ES 5 Update1 installer on top of the Application Server 9.1.

  2. Select the Gateway and PortalServer options, which are displayed in the Portal Server 7.2 GUI installer when you install Portal Server 7.2.

  3. Install the selected components using the Portal Server 7.2 GUI installer in the Configure Later mode.

  4. Ensure that Directory Server, web container instance, and web container Administration Server are running.

  5. Modify the example17.xml file.

    The example17.xml file is located in the PortalServer_base/SUNWportal/samples/psconfig directory.

    You can use this sample to configure all the components in Portal Server such as Search Server, Portal Server, SRA Core, Gateway, Netlet Proxy, Rewriter Proxy on Application Server 9.1.

  6. Configure Portal Server using the psconfig command.

    PortalServer_base/SUNWportal/bin/psconfig --config example17.xml

  7. Start the Gateway.

    PortalServer_base/SUNWportal/bin/psadmin switch-sra-status -u admin-user-name -f password-file on

    PortalServer_base/SUNWportal/bin/psadmin provision-sra -u admin-user-name -f password-file --gateway-profile gateway_profile -p portal-id --enable

    PortalServer_base/SUNWportal/bin/psadmin start-sra-instance -u admin-user-name -f password-file -N default -t gateway

Configuring Portal Server and Gateway on Separate Nodes

This section describes how to configure Portal Server and Gateway on separate nodes in the Configure Now and Configure Later modes.

You can configure Gateway using the Configure Now or Configure Later options, where you need to manually configure Gateway using the psconfig command after installing Portal Server.

Ensure that the following ports are opened whenever you configure a Gateway or perform any Administration Console or command line operations that involve Gateway.

ProcedureTo Configure Portal Server and Gateway on Separate Nodes in the Configure Now Mode

This procedure requires a minimum of two nodes: Node 1 and Node 2.

  1. Install Portal Server 7.2 on Node 1 on top of Application Server 9.1 with Access Manager and Directory Server.

  2. Set SRA status to Enabled on Node 1.

    PortalServer_base/SUNWportal/bin/psadmin switch-sra-status -u admin_user -f password_file on

  3. Invoke Portal Server 7.2 GUI installer on Node 2 and select Gateway to install. This will also install Access Manager SDK.

    Note –

    Use the same password encryption key on both the nodes.

  4. Provision profile on Node 1.

    PortalServer_base/SUNWportal/bin/psadmin provision-sra -u admin_user -f password_file --gateway-profile gateway_profile -p portal-id --enable

  5. Start Gateway on Node 2.

    PortalServer_base/SUNWportal/bin/psadmin start-sra-instance -u admin-user-name -f password-file -N default -t gateway

ProcedureTo Configure Portal Server and Gateway on Separate Nodes in the Configure Later Mode

  1. In the Configure Now mode, install Portal Server 7.2 on Node 1 on top of Application Server 9.1 with Access Manager and Directory Server.

  2. Install Access Manager SDK on Node 2 in the Configure Now mode using the Java ES 5 installer.

    Note –

    Use the same password encryption key on both the nodes.

  3. Install Gateway on Node 2 in the Configure Later mode using the Portal Server 7.2 GUI installer.

  4. Enable Gateway profile on Node 1.

    PortalServer_base/SUNWportal/bin provision-sra -u admin_user -f password_file --gateway-profile gateway_profile -p portal-id --enable

  5. On Node 2, modify the example10.xml file.

    The example10.xml file is located in the PortalServer_base/SUNWportal/samples/psconfig directory.

  6. On Node 2, Configure Gateway and Common Agent Container using the psconfig command.

    PortalServer_base/SUNWportal/bin/psconfig --config example10.xml

  7. Start the Gateway.

    PortalServer_base/SUNWportal/bin/psadmin switch-sra-status -u admin-user-name -f password-file on

    PortalServer_base/SUNWportal/bin/psadmin provision-sra -u admin-user-name -f password-file --gateway-profile gateway_profile -p portal-id --enable

    PortalServer_base/SUNWportal/bin/psadmin start-sra-instance -u admin-user-name -f password-file -N default -t gateway

Installing the Gateway with Portal Server in the SSL Mode

Installing the Gateway with Portal Server in SSL mode allows the user, in the same Intranet where Portal Server is installed, to access Portals through a secure protocol.

Figure 4–2 Portal Server in the SSL mode

The user accesses Portal Server through the Gateway.

ProcedureTo Install Gateway with Portal Server in SSL

  1. Install Portal Server 7.2 in SSL mode.

  2. Import the root Certificate Authority (CA) to the certificate database of the Gateway.


    cd /usr/jdk/entsys-j2se/jre/lib/security
/usr/jdk/entsys-j2se/jre/bin/keytool -keystore
cacerts -keyalg RSA -import -trustcacerts -alias
alias-name -storepass store-password -file
file-name-path

  3. Invoke Portal Server 7.2 installer and install the Gateway. This will also install Access Manager SDK.

  4. Create a certificate signing request.

    1. Run the following command:

      PortalServer_base/SUNWportal/bin/certadmin -n default

    2. Select Option 2 in the command-line interface.

    3. Type the details and save the certificate request in a file.

  5. Get this certificate signed by the Certificate Authority.

    The Certificate Authority will be the Portal Server Administrator.

  6. Create a file on the Gateway node, and paste the certificate response.

  7. Add the signed certificate to the certificate database of Gateway.

    1. Run the following command:

      PortalServer_base/SUNWportal/bin/certadmin -n default

    2. Select Option 4 in the command-line interface.

  8. Add the Root Certificate Authority to the certificate database.

    1. Run the following command:

      PortalServer_base/SUNWportal/bin/certadmin -n default

    2. Select Option 3 in the command-line interface.

    3. Provide the path for the Root Certificate Authority.

      The following message is displayed, “Successfully added.”

  9. Restart the Gateway.

    PortalServer_base/SUNWportal/bin/psadmin switch-sra-status -u admin-user-name -f password-file on

    PortalServer_base/SUNWportal/bin/psadmin provision-sra -u admin-user-name -f password-file --gateway-profile gateway_profile -p portal-id --enable

    PortalServer_base/SUNWportal/bin/psadmin start-sra-instance -u admin-user-name -f password-file -N default -t gateway

Installing Gateway in DMZ

Installing Gateway in DMZ is similar to configuring Gateway on a remote node. However, all ports need not be opened while you install Gateway in DMZ. You can install using only the Access Manager Server port and the Portal Server port. You can install Gateway in DMZ, using both psconfig and psadmin. You cannot configure Gateway in DMZ using Portal Server console.

Follow these steps to install Gateway using psconfig and psadmin.

ProcedureTo Install Gateway in DMZ Using psconfig

Before You Begin

Before you install Gateway in DMZ, configure Access Manager SDK. To do this:

  1. Install Gateway in Configure Later mode.

  2. Modify the attributes in example10.xml appropriately. Ensure that the RestrictiveMode attribute is set to true.

  3. Run the ./psconfig --config example10.xml command to configure Gateway.

  4. Run the ./psadmin start-sra-instance --user username --passwordfile passwordfile -N gatewayprofile -t gateway --restrictive to start the Gateway instance.

  5. If you need to stop the Gateway instance, run the ./psadmin stop-sra-instance --user username --passwordfile passwordfile -N gatewayprofile -t gateway command.

    Note –

    The --restrictive option in the above commands is necessary to start the Gateway.

ProcedureTo Install Gateway in DMZ Using psadmin

  1. Install Gateway in Configure Later mode.

  2. Modify the attributes in example2.xml file appropriately and run the ./psconfig --config example2.xml command.

  3. Copy the /opt/SUNWportal/template/sra/GWConfig.properties.template and modify the attributes appropriately.

  4. Run the ./psadmin create-sra-instance --adminuser amadmin --passwordfile passwordfile -S GWConfig.properties -t gateway --restrictive command.

  5. Run the ./psadmin start-sra-instance --user username --passwordfile passwordfile -N gatewayprofile -t gateway --restrictive command to start the Gateway instance created.

Creating a Gateway Instance

You can also create an instance of Gateway using the Portal Server console, as long as the Gateway instances are not to be deployed in a DMZ. This allows the user to contact any one of the Gateway instances and access Portals.

ProcedureTo Create a Gateway Instance

  1. Login to Portal Server Administration Console.

  2. Click the Secure Remote Access tab.

  3. Click New Profile.

  4. Type the new profile name and select the Copy Profile Data From option. Click OK.

    The following message is displayed: “New profile is successfully created. Please change the relevant ports in the new profile so that they do not clash with those in the existing profiles.”

  5. Click OK.

    The Profile screen is displayed.

  6. Click the new profile created and change the port of the instance so that it does not clash with any ports that are in use.

    You need to change both the http and https port numbers.

  7. Click OK.

  8. Modify the GWConfig-default.properties.template file available in the /etc/opt/SUNWportal/ location.

  9. Run the PortalServer_base/psadmin create-sra-instance -u amadmin -f passwordfile --sraconfig templatefilelocation -t gateway command.