Sun GlassFish Web Space Server 10.0 Secure Web Access Add-On Guide

Installing the Secure Web Access Add-On

After using the Update Tool to get the SWA Add-On, the swa-administration, swa-datastore, and swa-gateway components are placed in the webspace-dir/webspace directory.

SWA uses JCR to store the Rewriter rule sets and other configuration data. The Gateway only reads from the data store, whereas the admin module both reads from and writes to the data store. Therefore, SWA has three components in terms of deployment. The Gateway is deployed in the DMZ (demilitarized zone), and the admin module and the data store are usually deployed in the intranet. A DMZ is a small protected network between the public Internet and a private intranet, usually demarcated with a firewall on both ends.

In a simple deployment scenario, the three SWA components; swa-datastore, swa-administration, and swa-gateway are installed in the webspace-dir/webspace directory. Each component should be installed in its own subdirectory. Install the components in this order: swa-datastore, swa-administration, and swa-gateway.

ProcedureTo Install the swa-datastore Component

  1. In a command shell of your operating system, change to the webspace-dir/webspace/swa-datastore directory.

  2. Run ant -f install-glassfish.xmlinstallation script..


    ant -f install-glassfish.xml
    Buildfile: install-glassfish.xml
    
    check-ant:
    
    check-last-install:
    
    set-last-install:
    
    show-user-warning:
        [input] JAVA_HOME must be set to JDK 1.5 or greater and java must be available in the execution path. GlassFish must be running. [RETURN to continue or CONTROL-C to stop]
    
    
    set-glassfish-properties:
        [input] Enter GlassFish Directory  [/opt/glassfish]
    glassfish-root/glassfish
        [input] Enter GlassFish Domain (include full path to domain)  [glassfish-root/glassfish/domains/domain1]
    
        [input] Enter GlassFish Target  [server]
    
        [input] Enter GlassFish Administrator [admin]
    
        [input] Enter GlassFish Administrator Password File (include full path to file)  [/root/asadmin-password]
    
        [input] Enter GlassFish Administration Port  [4848]
    
        [input] Can installer deploy wars?  [true]
    
    
    set-datastore-properties:
        [input] Enter Fully Qualified Datastore Host  [localhost]
    ***fully qualified name of the datastore deployment machine; can be the same machine***
        [input] Enter Datastore Port  [1099]
    
        [input] Use builtin Derby or a mySQL database  [Derby]
    mysql
    
    set-derby-properties:
    
    set-mysql-properties:
        [input] Enter Database User Name  [root]
    lportal
        [input] Enter Database User Password File (include full path to file)  [/root/database-user-password]
    
        [input] Enter Database Host  [localhost]
    
        [input] Enter Database Port  [3306]
    
        [input] Enter Database Name  [lportal]

    Note –

    You need to provide the GlassFish root directory, path for the GlassFish administration password file and other details while installing the swa-datastore component of SWA.

    You need to provide a FQDN. Apart from that, you need to specify the database, user name for the database, path for the database password file, and other attributes.


  3. Restart the GlassFish server.

ProcedureTo Install the swa-administration Component

  1. In a command shell of your operating system, change to the webspacedir/webspace/swa-administration directory.

  2. Run ant -f install-glassfish.xml.


    ant -f install-glassfish.xml
    Buildfile: install-glassfish.xml
    
    check-ant:
    
    check-last-install:
    
    set-last-install:
    
    show-user-warning:
        [input] JAVA_HOME must be set to JDK 1.5 or greater and java must be available in the execution path. GlassFish must be running. [RETURN to continue or CONTROL-C to stop]
    
    
    set-glassfish-properties:
        [input] Enter GlassFish Directory  [/opt/glassfish]
    glassfish-root/glassfish
        [input] Enter GlassFish Domain (include full path to domain)  [glassfish-root/glassfish/domains/domain1]
    
        [input] Enter GlassFish Target  [server]
    
        [input] Enter GlassFish Administrator [admin]
    
        [input] Enter GlassFish Administrator Password File (include full path to file)  [/root/asadmin-password]
    
        [input] Enter GlassFish Administration Port  [4848]
    
        [input] Can installer deploy wars?  [true]
    
    
    set-datastore-properties:
        [input] Enter Fully Qualified Datastore Host  [localhost]
    ***fully qualified name of the datastore deployment machine; can be the same machine***
        [input] Enter Datastore Port  [1099]

    Note –

    You need to provide the GlassFish root directory, path for the GlassFish administration password file and other details while installing the swa-administration component of SWA.

    For the successful configuration of SWA, you need to provide the Fully Qualified Domain Name (FQDN). In a simple deployment scenario, where you are installing all the components on a single machine, FQDN can be your machine host name. You should not select the default localhost.


  3. Restart the GlassFish server.

ProcedureTo Install the swa-gateway Component

  1. In a command shell of your operating system, change to the webspace-dir/webspace/swa-gateway directory.

  2. Run ant -f install-glassfish.xml.


    ant -f install-glassfish.xml
    Buildfile: install-glassfish.xml
    
    check-ant:
    
    check-last-install:
    
    set-last-install:
    
    show-user-warning:
        [input] JAVA_HOME must be set to JDK 1.5 or greater and java must be available in the execution path. GlassFish must be running. [RETURN to continue or CONTROL-C to stop]
    
    
    set-glassfish-properties:
        [input] Enter GlassFish Directory  [/opt/glassfish]
    glassfish-root/glassfish
        [input] Enter GlassFish Domain (include full path to domain)  [glassfish-root/glassfish/domains/domain1]
    
        [input] Enter GlassFish Target  [server]
    
        [input] Enter GlassFish Administrator [admin]
    
        [input] Enter GlassFish Administrator Password File (include full path to file)  [/root/asadmin-password]
    
        [input] Enter GlassFish Administration Port  [4848]
    
        [input] Can installer deploy wars?  [true]
    
    
    set-datastore-properties:
        [input] Enter Fully Qualified Datastore Host  [localhost]
    ***fully qualified name of the datastore deployment machine; can be the same machine***
        [input] Enter Datastore Port  [1099]

    Note –

    You need to provide the GlassFish root directory, path for the GlassFish administration password file and other details while installing the swa-gateway component of SWA.

    Also, you need to provide the FQDN name.