To Add Sample Implementation to the Policy Framework (Sun Java System Access Manager 7 2005Q4 Developer's Guide)

Sun Java System Access Manager 7 2005Q4 Developer's Guide

To Add Sample Implementation to the Policy Framework

Use db2ldif to back up iPlanetAMPolicy and iPlanetAMPolicyConfig services.

 
cd DirectoryServer-base/slapd-hostname
      db2ldif -n userRoot
          -s "ou=iPlanetAMPolicyService,ou=services,root_suffix"
      db2ldif -n userRoot
          -s "ou=iPlanetAMPolicyConfigService,ou=services,root_suffix

"

Set the environment variable LD_LIBRARY_PATH.

On Solaris, add /usr/lib/mps/secv1 to LD_LIBRARY_PATH.

On Linux, add /opt/sun/private/lib to LD_LIBRARY_PATH.

Run the following commands:

cd AccessManager-base/samples/policy
      AccessManager-base/bin/amadmin
          --runasdn "uid=amAdmin,ou=People,default_org,
root_suffix
          --password password 
          --schema amPolicy_mod.xml
      AccessManager-base/bin/amadmin
          --runasdn "uid=amAdmin,ou=People,default_org,
root_suffix
          --password password 
          --data amPolicyConfig_mod.xml

Change the properties files of the iPlanetAMPolicy and iPlanetAMPolicyConfig services.

cd AccessManager-base/locale
      mv amPolicy.properties amPolicy.properties.bak
      mv amPolicy_en.properties amPolicy_en.properties.bak
      mv amPolicyConfig.properties amPolicyConfig.properties.bak
      mv amPolicyConfig_en.properties amPolicyConfig_en.properties.bak
      cp AccessManager-base/samples/policy/amPolicy.properties .
      cp AccessManager-base/samples/policy/amPolicy_en.properties .
      cp AccessManager-base/samples/policy/amPolicyConfig.properties .
      cp AccessManager-base/samples/policy/amPolicyConfig_en.properties .

Deploy the sample plug-ins.

Copy SampleSubject.class , SampleCondition.class and SampleReferral.class from the /sample directory to AccessManager-base/lib .

Restart the Access Manager server.

The sample subject, condition and referral implementations are now available for policy definitions through the administration console or amadmin tool.