Sun Java logo     �W�@��      �ؿ�      �d�      �U�@��     

Sun logo
Sun Java Enterprise System 2005Q4 �ɯū�n 

�� 11 ��
Access Manager

�����y�z�p��N Access Manager �n��q��e�� Java ES �����ɯŨ� Java ES 2005Q4 (�o�檩�� 4)�GSun Java System Access Manager 7 2005Q4�C

�������� Java ES �o�檩�� 4 �䴩�����P�ɯŸ�|�� Access Manager �ɯŰ��D�M�{�Ǫ��@��²���C�����[�\�b Solaris �M Linux �@�~�t�ΤW���ɯŧ@�~�G


Access Manager �ɯ�²��

���`�y�z�U�C�|�v�T Access Manager �ɯŦ� Java ES 2005Q4 (�o�檩�� 4) ���@��h���G

��� Java ES �o�檩�� 4 Access Manager

Java ES �o�檩�� 4 Access Manager �b�X�ӥD�n�譱�o��F�W�j�C�b��ݡA���s�W���F���~�[�c�H�䴩�h�Ө����x�s�w�ΨϥΪ̸�Ʀs��ϡC�]�� Access Manager �o�檩�� 4 ���Ȥ䴩 LDAP �ؿ� (�p Directory Server)�A��䴩��L����x�s��w�M�榡�CAccess Manager �o�檩�� 4 �]�t�s�������M�s���A�ȡA�i�䴩�h�Ө����x�s�w����X�C

�b�e�ݡA�ϥηs�� Access Manager �D���x�Ӱt�m�s�� Access Manager �A�ȩM�����x�s�w�C

�o�Ƿs����Υ\��M�����ϵo�檩�� 4 Access Manager �����@�ӭ��j���s�o�檩���C�����ѦV�U�ۮe�ʡA�o�檩�� 4 �i�H�b�¦��Ҧ��U���A�ӼҦ��䴩�̿�o�檩�� 3 Access Manager �A�Ȫ� Java ES ���� (�p�ݧ�h��T�A�аѾ\�ۮe�ʰ��D)�C

Access Manager �ɯŸ�T��n

�� 11-1 ��ܤ䴩�� Access Manager �� Java ES �o�檩�� 4 ���ɯŸ�|�C�Ӫ�A�Ω� Solaris �M Linux �@�~�t�ΡC

�� 11-1  �� Java ES �o�檩�� 4�GSun Java System Access Manager 7 2005Q4 ���ɯŸ�|

Java ES �o�檩��

Access Manager ����

�@���k

�ݭn���s�t�m

�o�檩�� 3

Sun Java System Access Manager
6.3 2005Q1

�����ɯšG
�ǥѲ����o�檩�� 3 �����A�M����o�檩�� 4 ������w�˩M���s�t�m�Ӱ��C

�t�m���

�A�Ω� Access Manager �D���x�M�{�� UI ���ۭq JSP

�ؿ�Ҧ�

�o�檩�� 2

Sun Java System Identity Server
6.2 2004Q2
�H�� 6.2 SP1

�����ɯšG
�ǥѲ����o�檩�� 2 �����A�M����o�檩�� 4 ������w�˩M���s�t�m�Ӱ��C

�t�m���

�A�Ω� Access Manager �D���x�M�{�� UI ���ۭq JSP

�ؿ�Ҧ�

�o�檩�� 1

Sun ONE Identity Server 6.1

�L�����ɯšG
��i�H�ϥΡuJava Enterprise System 2005Q1 �ɯŻP�E����n�v
(http://docs.sun.com/doc/819-2238) �����{�ǥ�ɯŨ�o�檩�� 3�C

�M��q�o�檩�� 3 �ɯŦܵo�檩�� 4�C

�t�m���

�A�Ω� Access Manager �D���x�M�{�� UI ���ۭq JSP

�ؿ�Ҧ�

Java ES �o�檩�����e���o�檩��

Sun ONE Identity Server 6.0 �� 6.0 SP 1 ��

iPlanet Directory Server Access Management Edition (DSAME) 5.1

�L�����ɯšC

 

Access Manager ���

Access Manager �P��L Java ES ��������A�|�Q�ΦU�ظ�ơA�����S�w�ɯšA�i�ೣ�ݭn�N�o�Ǹ�ƾE���ܤɯŪ������C�U����ܥi��� Access Manager �n��ɯżv�T����������C

�� 11-2  Access Manager ��ƥγ~

�������

��m

�γ~

�t�m���

AccessManagerConfig-base/config/AMConfig.properties

AccessManagerConfig-base/config/serverconfig.xml

�{�һP�ۭq�Ҳժ� JAR �ɮ�
AccessManager-base/lib

�t�m Access Manager �Ψ�P��ݸ�Ʀs��Ϫ���X�C

Web �e���t�m

Web Server�G
server.policy �M server.xml �ɮסA���
WebServer-base/https-hostname/config ��

Application Server (Java ES �o�檩�� 3 �M 4)�G
server.policy �M domain.xml �ɮסA���
AppServer8Config-base/domains/domainName/config

Application Server (Java ES �o�檩�� 2)�G
server.policy �M server.xml �ɮסA���
AppServer7Config-base/domains/domainName/config ��

WebSphere �M WebLogic�G
�N Access Manager �t�m���P�o�� Web �e���t�X�ϥήɡA�N�ק復�̦U�۪������M�t�m�ɮסC

�t�m Access Manager Web �e����ҡC

�ۭq���
(Web �e���ۭq JSP �ɮ�)

�޲z�D���x�GAccessManager-base/web-src/applications

�{�� UI�GAccessManager-base/web-src/services

�t�m Access Manager �޲z�����C

�ؿ�Ҧ�

�A�Ȱt�m

�ϥΪ̸��

Directory Server

Access Manager �ھ��x�s�b�ؿ�A�Ȱt�m�B�ϥΪ̤ε�����Ƭ��@��ϥΪ̴��ѻ{�ҩM���v�A�ȡC

�ʺA3�ε{�����

�L

Access Manager ���|�ä[�ʦa�x�s3�ε{����� (�p���q�@�~���A)�C

�ۮe�ʰ��D

�o�檩�� 4 Access Manager �s�W����Υ\��]�A�U�C�s�����G

�ǥѱN Access Manager �t�m���b�W�j (�d��) �Ҧ��U���A�Y�i�ҥ� Access Manager ��o�Ƿs�������䴩�C���L�A�d��Ҧ��P�� Java ES �o�檩�� 3 �εo�檩�� 2 Access Manager ���ۮe�C�Ҧp�A�����E���ؿ��Ƥ~�i�䴩�d��Ҧ��ާ@�C�ݭn�W�j�� Access Manager �D���x�~��䴩�W�j�� Access Manager �A�ȡC

���~�A�d��Ҧ����䴩��L Java ES ����A���O Portal Server�BCommunications Express�BMessaging Server ���C

���F�䴩�V�U�ۮe�ʡA�i�H�N�o�檩�� 4 Access Manager �t�m���b�¦��Ҧ��U���C�¦��Ҧ��V�U�ۮe�o�檩�� 3 Access Manager�A�Ȧ��@�Ǥp�����ۮe���B (�аѾ\�uSun Java System Access Manager 7 2005Q4 ��������v(http://docs.sun.com/doc/819-3476))�C

��L Java ES ������ª����� Access Manager �����N�z�{���L�k�b�d��Ҧ��U�P Access Manager ���q�A�䴩���̻ݭn�ϥ��¦��Ҧ��C�o�ؤ��ۮe�ʬO�@�ӭ��n���ɯŦҶq�A�÷N��ۦb�j���� Java ES ���p���A3�N Access Manager �ɯŨ�o�檩�� 4 �¦��Ҧ��C

���L�A�Y�ϱN�o�檩�� 4 Access Manager �t�m���b�¦��Ҧ��U���A���P�o�檩�� 3 Delegated Administrator �����ۮe�C�p�G�N Access Manager �ɯŨ�o�檩�� 4�A�h�����N Delegated Administrator �]�ɯŨ�o�檩�� 4�A�~�ର Messaging Server �M Calendar Server �G�بϥΪ̡C���L�A�ëD�@�w�n�N Messaging Server �M Calendar Server �����]�ɯŨ�o�檩�� 4�C

Access Manager �̩ۨ�

Access Manager ���L Java ES ���󪺬̩ۨʥi��|�v�T�ɯũM���s�t�m Access Manager �n�骺�{�ǡC�Ҧp�AAccess Manager �����Υ\��W���ܧ�i��ݭn Access Manager �̿ध���󪺤ɯŪ����C�ɯŦ������󪺻ݨD��M����骺�ɯŸ�|�C

Access Manager ��U�C Java ES ���󦳬̩ۨʡG


�q Java ES �o�檩�� 3 �ɯ� Access Manager

���`�]�A�N Access Manager �q Java ES 2005Q1 (�o�檩�� 3) �ɯŦ� Java ES 2005Q4 (�o�檩�� 4) �������T�C���`�[�\�H�U�D�D�G

²��

�N Java ES �o�檩�� 3 Access Manager �ɯŦܵo�檩�� 4 �ɡA�ЦҼ{�ɯŵ{�Ǫ��U�C�h���G

����ɯŵo�檩�� 3 Access Manager

���`�y�z�p����q Java ES �o�檩�� 3 �� Java ES �o�檩�� 4 �� Access Manager ����ɯšG

�ɯūe�@�~

�ɯ� Access Manager ���e�A�а��H�U�X�`���y�z���{�ǡC

���ҥثe������T

�z�i�ϥΤU�C��O���� Access Manager ���ثe�����F

�ɯ� Access Manager �̩ۨ�

�@���ij�N�q���t�� (�H�ιB����Ҥ�) ���Ҧ� Java ES ���󳣤ɯŨ� Java ES �o�檩�� 4�C���L�A�ѩ� Access Manager �ä��ݭn�ɯť��Ҩ̿઺ Java ES �o�檩�� 3 ����A�]�����@�~�O��ܩʪ��C

���L�A�p�G��ܤɯũҦ� Access Manager �̩ۨʡA�h3�b�ɯ� Access Manager ���e�A��ӥH�U���ǤɯũҦ��̩ۨʡC�i�H���L�i��w�ɯŹL�����̩ۨʡC

  1. �@�Τ���C  �� 2 ���u�ɯ� Java ES �@�Τ���v�����ѤF�N Java ES �@�Τ���ɯŦܵo�檩�� 4 ����ܡC
  2. Directory Server�C  �� 4 ���uDirectory Server �M Administration Server�v�����ѤF�N Directory Server �ɯŦܵo�檩�� 4 ����ܡC
  3. Web �e���n��C  �� 6 ���uWeb Server�v�M�� 9 ���uApplication Server�v���'O���ѤF�ɯ� Web Server �M Application Server ����ܡC
  4. �p�G���b�ɯ� Access Manager ���e�ɯ� Web �e���n��A�ɯŵ{�� (�ϥ� amconfig �{����) �|�N Access Manager �t�m�í��s���p��{���� Web �e���C

�ƥ� Directory Server ���

Access Manager �ɯŵ{�Ƿ|�ϥέק� Directory Server �Ҧ����{���ɡC�]���A�b�ɯ� Access Manager ���e�A�Х�ϥ� Directory Server Console �Ϋ�O�椽�ε{�� (�p db2bak) �ƥ� Directory Server ��ơC

�p�����ƥ� Directory Server ����h��T�A�аѾ\�uSun Java System Directory Server �޲z��n�v(http://docs.sun.com/doc/819-2014)�C

�ƥ� Access Manager �o�檩�� 3 �t�m��T

�]�����s�t�m�o�檩�� 4 Access Manager �n��ݭn���s�t�m�o�檩�� 3 �����A�ҥH�N�t�m�ɮ׳ƥ��w����m�ܭ��n�C3�ӳƥ�U�C�ɮסG

�ƥ� Web �e���ۭq�ɮ�

�p�G���� Access Manager �ҰѷӪ���� Web �e���ۭq�ɮסA�h3�ӳƥ�̡C�o�Ǧۭq���i��]�A�H�U���e�G

�ƥ�o�檩�� 3 Access Manager ���O��M�����ɮ�

���F�*R�t�Ϊ��A��T�A�ƥ�O��M�����ɮץH�K�򥢬O�@�ئn�����k�C�o���ɮצ��U�C��m�G

��o���n���t�m��T�M�K�X

�Y�n�ɯ� Access Manager�A�������ѯS�w���t�m��T�A�]�A�G

�ɯŵo�檩�� 3 Access Manager

�N Access Manager �n��ɯŨ� Java ES �o�檩�� 4 �]�A���s�t�m Access Manager �M�E�� Access Manager ��ƪ��{�ǡC

�ɯźK�n

�ɯ� Access Manager ���{�ǥ]�A�U�C�B�J�G

  1. �w�� Java ES �o�檩�� 4 ������ Access Manager�C �ϥ� Java ES �o�檩�� 4 �w�˵{���÷f�t [�H��t�m] �ﶵ�C
  2. ��s�ؿ�c�M�Ҧ��C �ϥ� amupgrade �{���ɡC

�U�C�{�Ǥ���o�ǨB�J�v�@�i�满��C

�ɯŵ{��
  1. ���� Java ES �o�檩�� 3 ������ Access Manager�C
    1. �H�W�ŨϥΪ̨���n�J��U�޵o�檩�� 3 Access Manager ���q���A�Φ����W�ŨϥΪ̡C
    2. su -

    3. �N�ؿ��ܧ� Java ES �o�檩�� 4 �o�檫���� platform/Product/identity_svr/Tools �ؿ�C
    4. ��o�U�C�z�L ampre70upgrade �{���ɽШD���Ѽƪ��ȡG
    5. �� 11-4  Access Manager �t�m�ѼơGampre70upgrade

      �Ѽ�

      ��

      Directory Server �D��

      �]�w�����X�檺�W�١Ghostname.domian

      Directory Server �s����

      ��w�D SSL �s����1
      �w�]�ȡG389

      ���h�޲z�� DN

      �w�]�ȡGuid=amadmin,ou=People,dc=iplanet,dc=com

      ���h�޲z��K�X

       

      1�p�G��w Directory Server SSL �s���� (�p�w�] SSL �� 636)�A�ɯūe�{�DZN�L�k���Q�����C

    6. �T�w Directory Server ���b���A�p�G�����A�бҰʥ��C
    7. ��� ampre70upgrade �{���ɡC
    8. ./ampre70upgrade

      �ӵ{���ɷ|�ƥ� Access Manager �t�m�ɮסA�ò����o�檩�� 3 �򥻮M�˳n�� (�����̷��B�J f ��ʲ������g�ƮM�˳n��)�C

    9. ��ʲ����z�q���W�����g�� Access Manager �M�˳n��C
    10. ampre70upgrade �{���ɤ��|�������g�� Access Manager �M�˳n��C������ʱN�䲾���A�~���楿�T�����g�ƤɯšC

      • �b Solaris ���x�W�ϥ� pkgrm �����GSUNWamlLocale�BSUNWLocaleammmap
      • �b Linux �W�ϥ� rpm -e �����Gsun-identity-sdk-Locale
  2. �w�� Java ES �o�檩�� 4 ������ Access Manager�C
    1. �b�U�޵o�檩�� 3 Access Manager ���q���W��� Java ES �w�˵{���C
    2. �q���O��� Access Manager�C
    3. �p�G�ù�W�X�{�u�Ĭ�v�T���A�h��ܦw�˵{���o�{�F��e������ Access Manager �t�m��T�A�o�O�N�Ƥ������p�C�b����B�J���N��歫�s�t�m�C�i�H�����o�ӡu�Ĭ�v�T�����~��C

    4. ��w�w�˵o�檩�� 3 �����Ӧw�˥ؿ�C
    5. ��� [�H��t�m] �ﶵ�C
    6. �w�˧����ɰh�X Java ES �w�˵{���C

    7. �Ƶ�

      �p�G�ϥ� Java ES Installer ��O�椶���Ӧw�� Access Manager�A���]�|�۰ʦw�� Directory Server �n��C�p�G�ϥλ��� Directory Server�A�h�i�ϥ� Java Enterprise System �w�˫�n (�A�Ω� UNIX) �����{�ǨӸѰ��w�˥��� Directory Server �n��C


  3. �ɯŦ�ʦs��n��C
  4. �ݭn�ǥѬ��o�檩�� 3 �����w�˭׸ɵ{���Ӥɯ� Access Manager ��ʦs��n��C�U����ܤF�һݪ��׸ɵ{���G

    �� 11-5  �ɯ� Access Manager Mobile Access �n��һݪ��׸ɵ{��1 

    ����

    Solaris �׸ɵ{�� ID

    Linux �׸ɵ{�� ID

    Mobile Access �n��

    119530-01 (SPARC)

    119531-01 (x86)

    119532-01

    • sun-identity-mobileaccess-6.2-25.i386.rpm
    • sun-identity-mobileaccess-config-
      6.2-25.i386.rpm

    1�׸ɵ{�����׭q�����X�O�ɯŨ� Java ES �o�檩�� 4 ���̧C�ݨD�C�p�G����s���׭q���i�ΡA�ШϥΧ�s���׭q���A�Ӥ��n�ϥΪ?���׭q���C

    1. �ϥ��� 11-5 �����׸ɵ{�����X��o�һݪ��׸ɵ{���C
    2. �i�q�U�C��m�N�׸ɵ{���U��� /tmp�Ghttp://sunsolve.sun.com/pub-cgi/show.pl?target=patches/patch-access

    3. �ХH�W�ŨϥΪ̨���n�J�Φ����W�ŨϥΪ̡C
    4. su -

    5. �M���� 11-5 �����׸ɵ{���C
    6. �b Solaris �W�G

      patchadd patch_ID

      �b Linux �W�G

      rpm -Fvh sun-identity-mobileaccess-6.2-25.i386.rpm
      rpm -Fvh sun-identity-mobileaccess-config-6.2-25.i386.rpm

  5. ���s�ۭq�Ω� Access Manager �� JSP�C
  6. ���s�M�Φb�ƥ� Web �e���ۭq�ɮ����x�s���B�Ω� Access Manager �D���x�M�{�ҨϥΪ̤��� (UI) ���o�檩�� 3 �ۭq JSP �]�w�C

    �M��N�ۭq JSP �ɮ׽ƻs�쥿�T���ؿ�C�Ҧp�b Solaris �t�ΤW�G

    • �D���x�GAccessManager-base/web-src/applications/console
    • �{�� UI�GAccessManager-base/web-src/services/config/auth/default �� AccessManager-base/web-src/services/config/auth/default_Locale (�䤤 Locale ��ܻy����ҡA�p ja)
    • �p�ݧ�h��T�A�аѾ\�uSun Java System Access Manager Developer's Guide�v(http://docs.sun.com/doc/819-2139)�C

  7. ���p Access Manager�A���s�t�m�A�A���s���p�� Web �e�����C
  8. �ǥѰ�� amconfig �{���ɰt�m Access Manager�A�H�P�S�w Web �e���t�X�ϥΡCamconfig �{���� (�M���� amsamplesilent �d����J�ɮ�) ���H�U�ؿ�G

    AccessManager-base/bin

    �p����� amconfig �{���ɩM amsamplesilent �d���ɮת���T�A�аѾ\�uSun Java System Access Manager �޲z��n�v(http://docs.sun.com/doc/819-3483)�C

    ���U�C�B�J�A���s�t�m Access Manager �ñN�䭫�s���p�� Web �e���G

    1. �p�G��ܤɯ� Web �e���n�� (�p�ɯ� Access Manager �̩ۨ����ҭz)�A�нT�w�w�����ɯšC
    2. �ˬd Directory Server �ά�3�� Web �e���O�_���b���C
    3. �إߤ@�Ӱ�� amsamplesilent �d����J�ɮת� amconfig ��J�ɮסG
    4. cp amsamplesilent config-file

    5. �b config-file ���]�w�t�m�ѼơC
    6. �ݭn���T�]�w�Ҧ��ѼơC�@�ǭȥi�H�� AMConfig.properties �ɮ׾E���A�۸�U�A��L�ȫh�O�ɯŵ{�Ǫ��M�έȡA�p�U��ҥܡC

      �� 11-6  Access Manager �t�m�Ѽ� 

      �Ѽ�

      ��

      �ɯŰѼ�

      DEPLOY_LEVEL

      26 (��ܨ��p) �� 1 (��ܭ��s�t�m�M���p)

      DIRECTORY_MODE

      5 (�{���ɯ�)

      AM_REALM

      �]�w�� disabled (�d��Ҧ������ΡA�]���¦��Ҧ����ҥ�)
      (�w�]�� = enabled)

      JAVA_HOME

      �]�w�� JDK �o�檩�� 4 �ؿ�G/usr/java/jdk1.5.0_04/

      WEB_CONTAINER

      �]�w���A�Ω󥿦b�ϥΤ� Web �e���������ȡA�B�u��g��3�� config-file ���!C

      WS61_INSTANCE
      (�Y�ϥ� Web Server �@�� Web �e��)

      =https-<hostname>.<domain>
      �䤤�A�H�W�ȲŦX /WebServer-base/SUNWsbsvr/ ������ҦW�١C
      �o�ǭȰϤ$j�p�g�C

      �E���� AMConfig.properties

      SERVER_PROTOCOL

      com.iplanet.am.server.protocol

      SERVER_PORT

      com.iplanet.am.server.port

      SERVER_HOST

      com.iplanet.am.server.host

      DS_HOST

      com.iplanet.am.directory.host

      DS_PORT

      com.iplanet.am.directory.port

      ROOT_SUFFIX

      com.iplanet.am.defaultOrg

      CONSOLE_DEPLOY_URI

      com.iplanet.am.console.deploymentDescriptor

      SERVER_DEPLOY_URI

      com.iplanet.am.services.deploymentDescriptor

      PASSWORD_DEPLOY_URI

      com.sun.identity.password.deploymentDescriptor

      AM_ENC_PWD

      am.encryption.pwd

      �Y����L�ѼơA���D�n�ܧ� Web �e���αK�X�A�_�h�д��ѭn�ɯŪ��o�檩�� 3 �t�m���ϥΪ����ǭȡC

    7. ��� amconfig �H���p Access Manager
    8. �N config-file ���� DEPLOY_LEVEL �ȳ]�w�� 26�C

      cd /AccessManager-base/bin
      ./amconfig -s
      AccessManager-base/bin/config-file

    9. ��� amconfig �H���s�t�m Access Manager �ñN�����p�� Web �e�����C
    10. �N config-file ���� DEPLOY_LEVEL �ȳ]�w�� 1�C

      cd /AccessManager-base/bin
      ./amconfig -s
      AccessManager-base/bin/config-file

  9. ��s�ؿ�c�M�Ҧ��C
  10. �o�檩�� 4 Access Manager �P�o�檩�� 3 ���ؿ�c�æs�A��ק�䵲�c�~��䴩�o�檩�� 4 ���\��C�ǥѰ�� amupgrade �{���ɡA�N Access Manager �ؿ�c�M�Ҧ��ɯŨ�o�檩�� 4�A�ӵ{���ɦw�˦b�U�C�ؿ�G

    • Solaris�G
      AccessManager-base/upgrade/scripts
    • Linux�G
      AccessManager_base/identity/upgrade/scripts
    • ��o�U�C�z�L amupgrade �{���ɽШD���Ѽƪ��ȡG
    • �� 11-7  Access Manager �t�m�ѼơGamupgrade 

      �Ѽ�

      ��

      Directory Server �D��

      �]�w�����X�檺�W�١Ghostname.domian

      Directory Server �s����

      ��w�D SSL �s����1
      �w�]�ȡG389

      �ؿ�޲z�� DN

      �w�]�ȡGcn=Directory Manager

      �ؿ�޲z�̱K�X

       

      ���h�޲z�� DN

      �w�]�ȡGuid=amadmin,ou=People,dc=iplanet,dc=com

      ���h�޲z��K�X

       

      �ҥνd��Ҧ�

      Y/N�G�O��ܱҥνd��Ҧ��A�ñN�A�ȸ�ƾE���ܷs���d��𪬵��c�C�_ (�w�]��) ��ܪA�ȸ�ƫO�d�b�¦��Ҧ����C

      1�p�G��w Directory Server SSL �s���� (�p�w�] SSL �� 636)�A�ɯŵ{�DZN�L�k���Q�����C

    • ��� amupgrade �{���ɡC
    • cd AccessManager-base/upgrade/scripts
      ./amupgrade

      �p�G�ɯŦ��\�A�{���ɷ|��� [�ɯŤw����]�C

    • �ˬd�U�C�ɯŰO���ɮסA�H�A�����ؿ�Ҧ������T�G
    • Solaris�G
      /var/sadm/install/logs/
             Sun_Java_System_Access_Manager_upgrade_dit_log.mmddhhmm

      Linux�G
      /var/log/Sun_Java_System_Access_Manager_upgrade_dit_log.mmddhhmm

  11. �Ұ� Access Manager�C
  12. ���s�Ұʳ��p�F Access Manager �� Web �e���C

���� Access Manager �ɯ�

�����ɯŵ{�Ǥ���A�Ы�p�U�覡���ҤɯŬO�_���\�G

  1. �ϥΤU�C URL �H amadmin ����n�J Access Manager �D���x�G
  2. http://hostname.domain:port/amconsole

    �䤤 hostname.domain:port �O�U�� Access Manager �� Web �e���������X��D��W�٩M�s���𸹽X�C

    ���� [�A�Ȱt�m] ���ҤU���ѤF��� Java ES �o�檩�� 4 Access Manager �����쪺�s�o�檩�� 4 �A�ȡC

  3. �ǥ��ˬd /var/sadm/install/logs �ؿ�U�C�ɯŰO���ɮר��˵�ɯŪ����A�G
  4. Sun Java Enterprise System �w�˵{���G

    • Java_Shared_Component_Install.timestamp
    • Java_Enterprise_System_install.Atimestamp
    • Java_Enterprise_System_install.Btimestamp
    • Java_Enterprise_System_Summary_Report_install.timestamp
    • amupgrade �{���ɡG

    • Sun_Java_System_Identity_Server_upgrade_dit_log.timestamp
  5. �˵� Access Manager ����Ƹ��ɮפ��O�_����~�C
  6. �o���ɮצ�� /var/opt/SUNWam/debug

�ɯū�@�~

�p�G���b�ϥΦw���n��аO�y�� (SAML) �A�ȡA�h�����ϥ� Access Manager �D���x�ӼW�[�M�ҥ� SAML �{�ҼҲաC�p�ݦ���إ� SAML �{�ҼҲչ�Ҫ���T�A�аѾ\�uSun Java System Access Manager �޲z��n�v(http://docs.sun.com/doc/819-3483)�C

�^�_�ɯ�

�����ѥΩ�N Access Manager �^�_���ɯūe���A���{���ɡC�ӵ{�ǥ����ϥΧ@���ɯūe�@�~���@�ӳƥ� Access Manager ��Ƥ�ʰ�� (�аѾ\�ƥ�o�檩�� 3 Access Manager ���O��M�����ɮ�)�C�^�_�ӹL�x��A�]���ä��i��C

�h����ҤɯšG�o�檩�� 3 �M�o�檩�� 4 �æs

�b�Y�dz��p�[�c���A�|�N Access Manager ���p�b�h�ӹq���t�ΤW�A�H���Ѱ��i�ΩʩM���i�ʡCAccess Manager ��Ҧs��ۦP�� Directory Server�C���`�Ǥɯ� Access Manager ��ҦӤ����_�A�ȩ����O�H�̩ҧƱ檺�C���`�Q�װ�榹�����p���ɯŪ��{�ǡC


�Ƶ�

�ثe�o�檩�����䴩�ɯŦb�ۦP�D��t�ΤW�w�˪� Access Manager ���h����ҡC�p�G�z�b�ۦP�D��W�㦳�h����ҡA�b�z�ɯťD�n��ҫ�A�z�������s�إߨ�L����ҡC


�ɯ� Access Manager �o�檩�� 3 ���{�ǥ]�t�E���ؿ�Ҧ��H�䴩�o�檩�� 4 ���B�J�C�o�檩�� 3 Access Manager ���䴩�o�檩�� 4 �ؿ�Ҧ��A��o�檩�� 4 Access Manager �T��䴩�o�檩�� 3 �ؿ�Ҧ��C

Java ES �o�檩�� 4 Access Manager �M�o�檩�� 3 Access Manager ��ҥi�H�æs�A�åi�w��P�@ Directory Server �P�ɰ��A��e���O�ؿ�Ҧ��|���E���ܵo�檩�� 4�C�]���A�b���p���ɯŤ��A���D�w��N�Ҧ� Access Manager ��ҤɯŨ�o�檩�� 4�A�_�h��3�N�ؿ�Ҧ��E����o�檩�� 4�C

�b�����p���ɯŹL�{���A�Ы��ɯŵo�檩�� 3 Access Manager �ҭz�ɯ� Access Manager ���C�ӹ�ҡA��n������B�W���u��s�ؿ�c�M�Ҧ��v�B�J�C�ɯũҦ���Ҥ���~�i�H���ӨB�J�C

�Ȥɯŵo�檩�� 3 Access Manager SDK

�b�Y�dz��p�[�c���A�|�N Access Manager SDK ����w�˦b�@�өΧ�h�ӹq���t�ΤW�A�Ӥ��b�o�ǹq���W�w�˨�L Access Manager ����CAccess Manager SDK �R�� Access Manager �����ݤ����A�]�������w�� Access Manager ���@�~�Ҧ� (�¦��νd��)�N�䭫�s�t�m�C�@�� Access Manager �����ݤ����A���ݭn�t�m SDK �N��s�� Directory Server�C

�p�G���b�ϥ� Access Manager SDK �Ӥ䴩 Web ���� (�p Portal Server �� Communications Express�A���̨̿� Web �e���A��)�A�h�����w���3�� Web �e���Ӱt�m Access Manager SDK�C���L�AAccess Manager SDK �]�i�H�䴩�D Web ����A�B���ݭn Web �e���C

���W�z�S�ʡA�ɯ� Access Manager SDK ���{�ǬO Access Manager ����ɯŵ{�Ǫ��l���C

���`�y�z�p����q Java ES �o�檩�� 3 �� Java ES �o�檩�� 4 ���� Access Manager SDK �ɯšG

�ɯūe�@�~

���F�P Directory Server �M�޲z�u��ۭq����@�~�~�AAccess Manager SDK ���ɯūe�@�~�P Access Manager ����ɯŪ��ɯūe�@�~�ۦP�CAccess Manager SDK �һݪ��ɯūe�@�~�p�U�G

�ɯŵo�檩�� 3 Access Manager SDK

���F�P�޲z�u��ۭq�M�E���ؿ�Ҧ�����{�ǥ~�AAccess Manager SDK ���ɯŵ{�ǻP Access Manager ����ɯŪ��ɯŵ{�ǬۦP�C

  1. ���� Java ES �o�檩�� 3 ������ Access Manager SDK�C
  2. ���F�u���� Access Manager SDK ���~�A��L�ʧ@�п�`���� Java ES �o�檩�� 3 ������ Access Manager ������ܡC

  3. �w�� Java ES �o�檩�� 4 ������ Access Manager SDK�C
  4. ���F�u�w�� Access Manager SDK ���~�A��L�ʧ@�п�`�w�� Java ES �o�檩�� 4 ������ Access Manager ������ܡC

  5. ���s�t�m Access Manager SDK�C
  6. ���F��H�U�ҭz�]�w DIRECTORY_MODE=5 �M DEPLOY_LEVEL �ѼƥH�~�A��L�ʧ@�п�`���p Access Manager�A���s�t�m�A�A���s���p�� Web �e����������ܡG

    • �p�G�w�� Web �e���t�m�F Access Manager SDK�G
      DEPLOY_LEVEL=4 (�ɯ� SDK �ðt�m Web �e��)
    • �p�G���w�� Web �e���t�m Access Manager SDK�G
      DEPLOY_LEVEL=3 (�Ȥɯ� SDK)

���� Access Manager SDK �ɯ�

���T�ؤ�k�i�H���� Access Manager SDK �ɯŬO�_���\�G

�ɯŦ^�_

�����ѥΩ�N Access Manager �^�_���ɯūe���A���{���ɡC�ӵ{�ǥ����ϥΧ@���ɯūe�@�~���@�ӳƥ� Access Manager ��Ƥ�ʰ�� (�аѾ\�ƥ�o�檩�� 3 Access Manager ���O��M�����ɮ�)�C�^�_�ӹL�x��A�]���ä��i��C


�q Java ES �o�檩�� 2 �ɯ� Access Manager

���F�U����X���X�Ӥ��P���B�~�A�N Java ES 2004Q2 (�o�檩�� 2) Access Manager �ɯŨ�o�檩�� 4 ���{�ǻP�N�o�檩�� 3 Access Manager �ɯŨ�o�檩�� 4 ���{�ǧ��ۦP�C

�ɯūe�@�~

�b�ɯ� Access Manager ���e�A�а���ɯūe�@�~�ҭz���{�ǡA��ݭn�N�ɯ� Access Manager �̩ۨ��%N���U���@�`�A�üW�[�U�����ɯťؿ�Ҧ��@�`�C

�ɯ� Access Manager �̩ۨ�

�۸��q�o�檩�� 3 �ɯšA�N�o�檩�� 2 �ɯŨ�o�檩�� 4 ���ɯūe�@�~3�]�A�ɯŨ�o�檩�� 4 ���Ҧ��@�Τ��� (�аѾ\�� 1-6) �M Access Manager �̿�B��󥻾�W���Ҧ����~����C

�ɯ� Access Manager �̤ۨ���ɡA3�ӫ�ӤU�C���Ǥɯť��̡A�B�����b�ɯ� Access Manager ���e�i��C�i�H���L�i��w�ɯŹL�����̩ۨʡC

  1. �@�Τ���C  �� 2 ���u�ɯ� Java ES �@�Τ���v�����ѤF�N Java ES �@�Τ���ɯŦܵo�檩�� 4 ����ܡC
  2. Directory Server�C  Directory Server �ܤֻP Access Manager ���P�@�q���W�A���q Java ES �o�檩�� 2 �ɯ� Directory Server �M Administration Server �����ѤF�N Directory Server �ɯŨ�o�檩�� 4 ����ܡC
  3. Web �e���n��C  �q Java ES �o�檩�� 2 �ɯ� Web Server �M�q Java ES �o�檩�� 2 �ɯ� Application Server ���'O���ѤF�ɯ� Web Server �M Application Server ����ܡC

�ɯťؿ�Ҧ�

�p�G�ϥ� Directory Preparation Tool (comm_dssetup.pl) �t�m�F Directory Server �H�䴩 Messaging Server�BCalendar Server �Ψ�L�q�T����A�h�b�ɯ� Access Manager ���e�A������ϥεo�檩�� 4 ������ Directory Preparation Tool �Ӥɯťؿ�Ҧ��C�Цb�ɯ� Access Manager �̩ۨʤ����榹�ɯūe�@�~�C�q Java ES �o�檩�� 2 �ɯ� Directory Preparation Tool ���y�z�F�ɯ� Directory Preparation Tool ���{�ǡC

�o�檩�� 2 Access Manager �ɯ�

�N Access Manager �q�o�檩�� 2 �ɯŨ�o�檩�� 4 ���{�Ǩ�M�󳡸p Access Manager �n�骺 Web �e���C

�ɯŵo�檩�� 2 Access Manager�GWeb Server Web �e��

�Y�n�N�o�檩�� 2 Access Manager �ɯŨ�o�檩�� 4�A�b���p�� Web Server Web �e�����ɡA���F�N�ѷӪ��Ҧ��o�檩�� 3 ��N���o�檩�� 2 �H�~�A��L�ʧ@�п�`�ɯŵo�檩�� 3 Access Manager ������ܡC

�ɯŵo�檩�� 2 Access Manager�GApplication Server Web �e��

�Y�n�N�o�檩�� 2 Access Manager �ɯŨ�o�檩�� 4�A���p�� Application Server Web �e�����ɷ|����ر��p�G

�Y�n�ɯų��p�b�w�ɯŤ� Application Server Web �e������ Access Manager�A���F�N�ѷӪ��Ҧ��o�檩�� 3 ��N���o�檩�� 2 �H�~�A��L�п�`�B�J 1 ���B�J 4�C

�H�U�O�B�J 1 ���B�J 4 ���K�n�G

  1. �����o�檩�� 2 ������ Access Manager�C
  2. �ϥ� ampre70upgrade �{���ɡC�п�`���� Java ES �o�檩�� 3 ������ Access Manager ������ܡC

  3. �w�� Java ES �o�檩�� 4 ������ Access Manager�C �ϥ� Java ES �o�檩�� 4 �w�˵{���÷f�t [�H��t�m] �ﶵ�C

�ɯŨ�o�檩�� 4 �ɡA��l���p Access Manager ���o�檩�� 2 Application Server ��� (instanceName) �N�E����Ѥɯŵ{�ǫإߪ��`�I�N�z�{���U�C�b�o�Ӥw�ɯŪ� Application Server ��Ҥ��ɯ� Access Manager �ݭn�U�C�B�~�B�J�G

  1. �T�w�U�C�䴩 Access Manager �����󥿦b���C
    1. �ˬd Directory Server �O�_���b���C
    2. �Ұ� Domain Administration Server (DAS) (�p�G���|���Ұ�)�C
    3. AppServer8-base/bin/asadmin start-domain --user admin_ID
           --password password domainName

    4. �Y���p�F Access Manager ���w�ɯ� Application Server ��� (instanceName) �|�����A�бҰʥ��C
    5. ���覡�O�ҰʾE�����w�ɯ� Application Server ��ҩ��ݪ��`�I�N�z�{���G

      AppServer8-base/bin/asadmin start-node-agent --user admin_ID
           --password password nodeagentName

      �H�W��O�Ϋ���B�J���ϥΤF�U�C�D�ҡG

    6. nodeAgentName ������ hostName_domainName�C
    7. �w�] domainName �O domain1
    8. �w�] instanceName �O server1
  2. ���p Access Manager�A���s�t�m�A�M�᭫�s���p�� Application Server ��Ҥ��C�ϥ� amconfig �{���ɡC
    1. �إߤ@�Ӱ�� amsamplesilent �d����J�ɮת� amconfig ��J�ɮסG
    2. cp amsamplesilent config-file

    3. �b config-file ���]�w�t�m�ѼơC
    4. �ݭn���T�]�w�Ҧ��ѼơC�@�ǭȥi�H�� AMConfig.properties �ɮ׾E���A�۸�U�A��L�ȫh�O�ɯŵ{�Ǫ��M�έȡA�p�U��ҥܡC

      �� 11-8  Access Manager �t�m�Ѽ� 

      �Ѽ�

      ��

      �ɯŰѼ�

       

      DEPLOY_LEVEL

      26 (��ܨ��p) �� 1 (��ܭ��s�t�m�M���p)

      DIRECTORY_MODE

      5 (�{���ɯ�)

      AM_REALM

      �]�w�� disabled (�d��Ҧ������ΡA�]���¦��Ҧ����ҥ�)�F�w�]�� = enabled

      JAVA_HOME

      �]�w�� JDK �o�檩�� 4 �ؿ�G/usr/java/jdk1.5.0_04/

      WEB_CONTAINER

      �]�w�� Application Server Web �e�����ȡA�B�u��g��3�� config-file ���!C

      AS81_INSTANCE

      =instanceName

      AS81_ADMIN_IS_SECURE

      =false

      �E���� AMConfig.properties

      SERVER_PROTOCOL

      com.iplanet.am.server.protocol

      SERVER_PORT

      com.iplanet.am.server.port

      SERVER_HOST

      com.iplanet.am.server.host

      DS_HOST

      com.iplanet.am.directory.host

      DS_PORT

      com.iplanet.am.directory.port

      ROOT_SUFFIX

      com.iplanet.am.defaultOrg

      CONSOLE_DEPLOY_URI

      com.iplanet.am.console.deploymentDescriptor

      SERVER_DEPLOY_URI

      com.iplanet.am.services.deploymentDescriptor

      PASSWORD_DEPLOY_URI

      com.sun.identity.password.deploymentDescriptor

      AM_ENC_PWD

      am.encryption.pwd

      �Y����L�ѼơA���D�n�ܧ� Web �e���αK�X�A�_�h�д��ѭn�ɯŪ��o�檩�� 2 �t�m���ϥΪ����ǭȡC

    5. ��� amconfig �H���p Access Manager�C
    6. �N config-file ���� DEPLOY_LEVEL �ȳ]�w�� 26�C

      cd /AccessManager-base/bin
      ./amconfig -s
      AccessManager-base/bin/config-file

    7. ��� amconfig �H���s�t�m Access Manager �ñN�����p�� Web �e�����C
    8. �N config-file ���� DEPLOY_LEVEL �ȳ]�w�� 1�C

      cd /AccessManager-base/bin
      ./amconfig -s
      AccessManager-base/bin/config-file

  3. �q�U�C�ؿ�ƻs server.policy �ɮסG
  4. AppServer8Config-base/domains/domainName/config

    ��H�U�ؼХؿ�G

    AppServer8Config-base/nodeagents/nodeagentName/
    instanceName/config

  5. �ק�o�檩�� 4 Application Server �� domain.xml �ɮסC
    1. �ƻs Access Manager classpath-suffix �M server-classpath ��T�A���̦���l���p Access Manager ���o�檩�� 2 Application Server ��Ҫ� server.xml �ɮפ��G
    2. AppServer7Config-base/domains/domainName/instanceName/config/server.xml

    3. �N�ƻs�����O��|��T�'O���[�� classpath-suffix �M server-classpath ���ءA�����ݩ󳡸p�F Access Manager ���w�ɯ� Application Server ��Ҫ� domain.xml �ɮסG
    4. AppServer8Config-base/nodeagents/nodeagentName/instanceName/
      config/domain.xml

      3�N�����O��|��T�W�[��o�檩�� 4 Application Server domain.xml �ɮת� instanceName-config �Ϭq���C���Ϭq�H�U���o��}�l�G

      <config dynamic-reconfiguration-enabled="true" name="instanceName-config">

      �b���O��|���ؤ��W�[���e�ɡA�ȥ��n�b�¸�T�P�s��T�����[�J�_�� (�u:�v) �Υ�����O��|���ؤ����b�ϥΪ���|�9j�šC�]�i�H�R���]�t AppServer7-base ��|���Ҧ����� (��Фp�ߤ��n�޵o��~)�C

  6. ���s�Ұ� DAS�C
  7. AppServer8-base/bin/asadmin stop-domain --user admin_ID
         --password password domainName

    AppServer8-base/bin/asadmin start-domain --user admin_ID
         --password password domainName

  8. ���s�Ұʳ��p Access Manager ����A����ҡC
  9. AppServer8-base/bin/asadmin stop-node-agent --user admin_ID
         --password password nodeagentName

    AppServer8-base/bin/asadmin start-node-agent --user admin_ID
         --password password nodeagentName

  10. �p�B�J 6 �ҭz��s�ؿ�c�M�Ҧ��C

���� Access Manager �ɯ�

�����ɯŵ{�Ǥ���A�Ы����� Access Manager �ɯ��ҭz���ҤɯŬO�_���\�C

�ɯū�@�~

�p�G���b�ϥΦw���n��аO�y�� (SAML) �A�ȡA�h�����ϥ� Access Manager �D���x�ӼW�[�M�ҥ� SAML �{�ҼҲաC�p�ݦ���إ� SAML �{�ҼҲչ�Ҫ���T�A�аѾ\�uSun Java System Access Manager �޲z��n�v(http://docs.sun.com/doc/819-3483)�C

�^�_�ɯ�

�����ѥΩ�N Access Manager �^�_���ɯūe���A���{���ɡC�ӵ{�ǥ����ϥΧ@���ɯūe�@�~���@�ӳƥ� Access Manager ��Ƥ�ʰ�� (�аѾ\�ƥ�o�檩�� 3 Access Manager ���O��M�����ɮ�)�C�^�_�ӹL�x��A�]���ä��i��C



�W�@��      �ؿ�      �d�      �U�@��     


��󸹽X�G819-3458�C  Copyright 2005 Sun Microsystems, Inc. ���v�Ҧ��C