Sun Java logo     �W�@��      �ؿ�      �d�      �U�@��     

Sun logo
Sun Java System Portal Server 6 2005Q4 �޲z��n 

�� 18 ��
�޲z Portal Server �t��

��������P���@ Sun Java™ System Portal Server �t�ά���޲z�u�@�C

�����]�t�U�C���`�G


�t�m Secure Sockets Layer (SSL)

�z�i�H�z�L�U�C�覡�A�Q�� Portal Server �ά����t�m Secure Sockets Layer (SSL)�G

�Y�n�ϥ� Portal Server �t�m SSL

�p�G�z��ܦb Portal Server �w�˴v����W��� SSL�A�ШϥΦ��{�ǡC

  1. �b�z�w�� Portal Server �� Web ��A���W�إߥi�a��Ʈw�C
  2. �p�ݫإߥi�H���Ʈw���ԲӸ�T�A�аѾ\�uSun Java System Web Server, Enterprise Edition Administration Guide�v�AURL ���G

    http://docs.sun.com/source/816-5682-10/index.htm

  3. ���z�b�䤤�w�� Portal Server �n�骺 Web ��A���ШD���ҡA�æb Web ��A����ҤW�w�˾��ҡC
  4. �p�ݸԲӸ�T�A�аѾ\�uSun Java System Web Server, Enterprise Edition Administration Guide�v�� 5 ���uRequesting and Installing a VeriSign Certificate�v�ΡuRequesting and Installing Other Server Certificates�v�C

  5. �}�� Portal Server Web ��A����Ҫ��[�K�\��C
  6. �b Web ��A���޲z�D���x���A��� [�ߦn�]�w] ���ҡA��� [�s�W��ť����]�A�M���� [�s�谻ť����]�A�ö}�Ҧw���ʡC

    �p�ݸԲӸ�T�A�аѾ\�uSun Java System Web Server, Enterprise Edition Administration Guide�v�� 5 ���uTurning Security On�v�C

  7. ��@�U Web ��A���޲z�D���x���� [�M��] �P [�M���ܧ�]�C
  8. ���s�Ұ� Web �e���C
  9. �p�ݱҰ� Web �e������ܡA�аѾ\�z�� Web �e�����C

  10. �t�η|���ܱz��J�K�X�H�i�J���Ҹ�Ʈw�C

  11. �Ƶ�      

    �Y�n�קK�C�����s�Ұʫ᳣������J passphrase�A�Ыإߤ@�ӦW�٬� .wtpass ���ɮסA�䤤�]�t�F Web ��A�� passphrase�A�ñN����m�b AccessManager-base/SUNWam/config �ؿ�C�p�G�z���s�Ұʥ]�t�w�� Web ��A�����t�ΡA��O�t�Τ��èS�����ɮסA�h�z�����b�t�ΥD���x�����s��J passphrase�C


  12. ���ұz�{�b�O�_�i�H�ϥ� SSL �n�J�� Portal Server �J�f��G
    • �Y�n�n�J�� Sun Java System Access Manager �޲z�D���x�A����J�G
      https://server:port/amconsole
    • �Y�n�H �ୱ �ϥΪ̪�����n�J�A����J�G
      https://server:port/deploy_uri

      �Ҧp�A
      https://sesta:80/portal/dt

�Y�n�ק�{���� Portal Server �w�˥H�K�ϥ� SSL

�p�G�b Portal Server �w�˴v��t�θ߰ݱz�uDo you want to run SSL on hostname?�v�ɡA�z���^���O n ���ܡA�ШϥΦ��{�ǡC

  1. �H�޲z����n�J Sun Java System Access Manager �޲z�D���x�C
  2. �̹w�]�A�w����m���椤�� [����޲z] �B [�Ҧ��w�إߪ���´] �w��ܩ��s��椤�C

  3. ��ܦ�m���椤�� [�A�Ȱt�m]�C
  4. ��@�U [���x] ���䪺�S�ʽb�Y�C
  5. [���x] �ݩ��H�Y��ܦb��Ƶ��椤�C

  6. �b��A���M�椤�A�N http �ܧ� https�C
  7. ��@�U [�x�s] �H�x�s�z���ܧ�C
  8. �b Web ��A���W�w�˾��ҡC
  9. �p�ݸԲӸ�T�A�аѾ\�Y�n�ϥ� Portal Server �t�m SSL �����B�J 1 ���B�J 4�C

  10. �N server.xml �P magnus.conf �ɮױq /AccessManager-base/SUNWam/servers/https-hostname-domain/conf_bk �ؿ�ƻs�� /AccessManager-base/SUNWam/servers/https-hostname-domain/config �ؿ�C
  11. �p�G�z�����Ҥ��å��w�ˮ� CA�A�Цb /AccessManager-base/SUNWam/lib/AMConfig.properties �ɮפ��[�J�U�C�o��C
  12. com.sun.am.jssproxy.trustAllServerCerts=true

    �ӿﶵ�|�i�� Java Security Server (JSS) �H����ҡC

  13. �b /AccessManager-base/SUNWam/lib/AMConfig.properties �ɮפ��A�N�U�C URL ���� http �ܧ� https�G
  14. com.sun.am.server.protocol

    com.sun.am.naming.url

    com.sun.am.notification.url

    com.sun.am.session.server.protocol

    com.sun.services.cdsso.CDCURL

    com.sun.services.cdc.authLoginUrl

  15. ���s�Ұ� Web �e���C
  16. �t�η|���ܱz��J�K�X�H�i�J���Ҹ�Ʈw�C

�p�ݸԲӸ�T�A�аѾ\�uSun Java System Directory Server �޲z��n�v�� 11 ���u�޲z SSL�v�C

�Y�n�t�m Portal Server ��ҥH�K�ϥ� SSL

  1. �H�޲z����n�J Sun Java System Access Manager �޲z�D���x�C
  2. �̹w�]�A�w����m���椤�� [����޲z] �B [�Ҧ��w�إߪ���´] �w��ܩ��s��椤�C

  3. ��ܦ�m���椤�� [�A�Ȱt�m]�C
  4. ��@�U [���x] ���䪺�S�ʽb�Y�C
  5. [���x] �ݩ��H�Y��ܦb��Ƶ��椤�C

  6. �b��A���M�椤�A�N http �ܧ� https�C
  7. ��@�U [�x�s] �H�x�s�z���ܧ�C
  8. �b Web ��A���W�w�˾��ҡC
  9. �p�ݸԲӸ�T�A�аѾ\�Y�n�ϥ� Portal Server �t�m SSL �����B�J 1 ���B�J 4�C

  10. �p�G����A���O�h����Ҧw�˪��@����A�бN server.xml �P magnus.conf �ɮױq /AccessManager-base/SUNWam/servers/https-instance_nickname/conf_bk �ؿ�ƻs��/AccessManager-base/SUNWam/servers/https-instance_nickname/config �ؿ�C
  11. �p�G�z�����Ҥ��å��w�ˮ� CA�A�Цb /AccessManager-base/SUNWam/lib/AMConfig-instance_nickname.properties �ɮפ��[�J�U�C�o��C
  12. com.sun.am.jssproxy.trustAllServerCerts=true

    �o�ӿﶵ�|�i�� JSS �H����ҡC

  13. �b /AccessManager-base/SUNWam/lib/AMConfig-instance_nickname.properties �ɮפ��A�N�U�C URL ���� http �ܧ� https�G
  14. com.sun.am.server.protocol

    com.sun.am.naming.url

    com.sun.am.notification.url

    com.sun.am.session.server.protocol

    com.sun.services.cdsso.CDCURL

    com.sun.services.cdc.authLoginUrl

  15. ���s�Ұ� Web �e���C
  16. �t�η|���ܱz��J�K�X�H�i�J���Ҹ�Ʈw�C

�p�ݸԲӸ�T�A�аѾ\�uSun Java System Directory Server �޲z��n�v���� 11 ���u�޲z SSL�v�C


�ƥ�P�_�� Portal Server �t�m

Portal Server �ϥΪ̻P�A�Ȱt�m�|�x�s�b�ؿ��A���W�� LDAP �ؿ��T�� (DIT) ���C�p���N�i��z�z�L���q�ťؿ�洫�榡 (Lightweight Directory Interchange Format, LDIF) �ɮ׳ƥ�P�_��t�m��T�C

�Y�n�ƥ� Portal Server �t�m

�Y�n�ƥ� Portal Server �t�m��T�A�Шϥ� db2ldif ��O�C�o�ӫ�O�i�Ω�ؿ��A�����򩳥ؿ� slapd-�D��W���ؿ�C�Ҧp�A�p�G�ؿ��A���w�w�˦ܦ�A�� sesta �W���w�]�w�˥ؿ� (/usr/ldap)�A�h�򩳥ؿ�N�|�O /usr/ldap/slapd-sesta.

  1. �N�ؿ��ܧ󬰥]�t db2ldif ��O���ؿ��A���򩳥ؿ�C
  2. cd DirectoryServer-base/slapd-HOSTNAME

  3. �ϥ� db2ldif ��O (�a�� -s �ﶵ)�A�N�t�m�x�s�� LDIF �ɮפ��A�H��w Portal Server �� DIT ���h�C�Ҧp�A�Y�n�x�s�� DIT ���h�� isp �t�m�A����J�U�C��r�G
  4. ./db2ldif -s "o=isp"

    ��Ʒ|�x�s�� LDIF �ɮפ��C��O�|�N�ɮ��x�s�ܥثe���ؿ�C�|�ϥΤU�C�榡�өR�W�ɮסG

    YYYY_MM_DD_HHMMSS.ldif

    �b�x�s�ɮפ���A�|��ܤU�C���d�ҿ�X�G

    [16/May/2002:14:11:25 -0700] - Backend Instance:userRoot

    ldiffile:/usr/ldap/slapd-sesta/ldif/2002_05_16_141122.ldif

    [16/May/2002:14:11:28 -0700] - export userRoot:Processed 178 entries (100%)

�Y�n�_�� Portal Server �t�m

�z�i�H�ϥ� ldif2db ��O�A�N�z�L db2ldif ��O�ҳƥ� Portal Server �t�m��T�[�H�_��C�o�ӫ�O�i�Ω�ؿ��A�����򩳥ؿ� slapd-�D��W���ؿ�C�Ҧp�A�p�G�ؿ��A���w�w�˦ܦ�A�� sesta �W���w�]�w�˥ؿ� (/usr/ldap)�A�h�򩳥ؿ�N�|�O /usr/ldap/slapd-sesta.

  1. �N�ؿ��ܧ󬰥]�t ldif2db ��O���ؿ��A���򩳥ؿ�A��k����J�G
  2. cd DirectoryServer-base/slapd-HOSTNAME

  3. ����ؿ��A���A��k����J�G
  4. ./stop-slapd

  5. �ϥ� ldif2db ��O�N�t�m�q LDIF �ɮ״_�쬰�ؿ��A���C��O�᭱�p�G�[�W -s �ѼơA�h�O��w Portal Server ���� DIT ���h�F�ӫ᭱�[�W -i �Ѽƫh�O��w�ɮצW�١C�Ҧp�A�p�G�n�N��e�B�J���x�s�� LDIF �ɮ״_�쬰 isp �� DIT ���h�A����J�U�C��r�G
  6. ./ldif2db -s "o=isp" -i /usr/ldap/slapd-sesta/ldif/2002_05_16_141122.ldif

    �b�_��t�m����A�|��ܤU�C���d�ҿ�X�G

    importing data ...

    [16/May/2002:16:37:02 -0700] - Backend Instance: userRoot

    [16/May/2002:16:37:03 -0700] - import userRoot: Index buffering enabled with bucket size 13

    [16/May/2002:16:37:03 -0700] - import userRoot: Beginning import job...

    [16/May/2002:16:37:03 -0700] - import userRoot: Processing file "/usr/ldap/slapd-sesta/ldif/2002_05_16_141122.ldif"

    [16/May/2002:16:37:04 -0700] - import userRoot: Finished scanning file "/usr/ldap/slapd-sesta/ldif/2002_05_16_141122.ldif" (178 entries)

    [16/May/2002:16:37:05 -0700] - import userRoot: Workers finished; cleaning up...

    [16/May/2002:16:37:08 -0700] - import userRoot: Workers cleaned up.

    [16/May/2002:16:37:08 -0700] - import userRoot: Cleaning up producer thread...

    [16/May/2002:16:37:08 -0700] - import userRoot: Indexing complete.Post-processing...

    [16/May/2002:16:37:08 -0700] - import userRoot: Flushing caches...

    [16/May/2002:16:37:08 -0700] - import userRoot: Closing files...

    [16/May/2002:16:37:09 -0700] - import userRoot: Import complete.Processed 178 entries in 6 seconds.(29.67 entries/sec)

  7. ���s�Ұʥؿ��A���A��k����J�G
  8. ./start-slapd


�ܧ� Portal Server ���]�w

�Y�n��ڱN��� Portal Server �n�骺��A���q�Y�Ӻ��ܥt�@�Ӻ��A�z�ݭn�b /etc/hosts �ɮפ��ܧ��M IP ��}��������W�١C�L���ܧ��L�{�Ǥ��w��}�C


�޲z�h�� UI �`�I�w��

��z�b�h�� UI �`�I�W�w�� Portal Server �n��ɡA�z�ݭn�b Sun Java System Access Manager �޲z�D���x���� [���x] �ݩʶi��t�m�ܧ�C�z�s�� [��A���M��] �ݩʥH�]�A�C�� UI �`�I�� URL�C

Sun Java System Access Manager �R�W�A�ȷ|�b��l�ƶ��qŪ�� [��A���M��] �ݩʡC���M��]�t�F��@ Sun Java System Access Manager �t�m���� Sun Java System Access Manager �u�@�ɬq��A���C�Ҧp�A�p�G�w�ˤF��x Sun Java System Access Manager ��A���A�ӥB�����@���@�x�ӨϥΡA�h�����N�o��x��A�����]�A�b�M�椤�C�p�G�A�� URL ���ШD���ҫ�w���D��å��b���M�椤�A�h�R�W�A�ȷ|�ڵ����ШD�C�M�椤���Ĥ@�ӭȫ�w�F�b�w�˴v��ҫ�w����A���D��W�٩M�s����C�i�H�ϥή榡 protocol://server:port �s�W��L����A���C

�Y�n�b��A���M�椤�s�W��L�� Portal Server

  1. �H�޲z����n�J Sun Java System Access Manager �޲z�D���x�C
  2. �̹w�]�A�w����m���椤�� [����޲z] �B [�Ҧ��w�إߪ���´] �w��ܩ��s��椤�C

  3. ��ܦ�m���椤�� [�A�Ȱt�m]�C
  4. ����A���H�Y�|�X�{�b�s��椤�C

  5. ��@�U [���x] ���䪺�S�ʽb�Y�C
  6. [���x] �ݩ��H�Y��ܦb��Ƶ��椤�C

  7. �s�� [��A���M��] �ݩʡC
  8. �b�C�ӥ\�ର UI �`�I����A�����A��J��A�� URL�A�Ҧp http://host1.sesta.com:80�A�M���@�U [�s�W] ��s�CURL �H�Y�|�X�{�b [��A���M��] ���C

  9. ��@�U [�x�s]�C
  10. ���s�Ұ� Web �e���C


�t�m Portal Server ��ҥH�K�ϥ� HTTP �N�z��A��

�p�G�w�� Portal Server �n�骺�D��L�k�����s���ں��Υ�~�������Y�dz���A�z�i�H�t�m��ҥH�ϥ� HTTP �N�z��A���C

�b��� Portal Server Web 3�ε{���� Web �e�����]�w http.proxyHost �M http.proxyPort Java Virtual Machine (JVM) �t�ίS�ʡA�i�H�N Portal Server �t�m���ϥ� HTTP �N�z��A���C�]�w JVM �t�ίS�ʪ���k�|�]���P Web �e���Ӳ��C���`�Ҵy�z���{�ǥi�Ω�N Sun Java System Web Server ��Ұt�m���ϥ� HTTP �N�z��A���C

  1. �N�ؿ��ܧ󬰥]�t��Ұt�m�� Web ��A���򩳥ؿ�A��k����J�G
  2. cd /WebServer-base/SUNWam/servers/https-hostname-domain/config

  3. �s�覹�ؿ� server.xml �ɮסA�M��s�W�U�C�X��G
  4. <JVMOPTIONS>-Dhttp.proxyHost=proxy_host</JVMOPTIONS>

    <JVMOPTIONS>-Dhttp.proxyPort=proxy_port</JVMOPTIONS>

    �䤤 proxy_host �O�N�z��A���D������X����W�١A�� proxy_port �h�O���N�z��A���b��W��檺�s����C


    �Ƶ�         

    �p�G server.xml �ɮפw�g�]�w�N�z��A�� (�ϥ� http.proxyHost= �M http.proxyPort= �ﶵ)�A�z�i�H�s�W http.nonProxyHosts=proxy_host �ﶵ�CPortal Server �i��L�k�z�L�N�z��A���s��A���D�N�� Portal Server �[�J��N�z��A���s��M�椤�C



�޲z Portal Server �O��

�z�i�H�t�m Portal Server �O��H�K�N��T�O��ܤ@���ɮשΰO��ܸ�Ʈw�C�b�O��ܸ�Ʈw�ɡA�|�ϥ� JDBC ��w�C

�Y�n�t�m�O����ɮ�

  1. �H�޲z����n�J Sun Java System Access Manager �޲z�D���x�C
  2. �̹w�]�A�w����m���椤�� [����޲z] �B [�Ҧ��w�إߪ���´] �w��ܩ��s��椤�C

  3. ��ܦ�m���椤�� [�A�Ȱt�m]�C
  4. ����A���H�Y�|�X�{�b�s��椤�C

  5. ��@�U [�O��] ���䪺�S�ʽb�Y�C
  6. [�O��] �ݩ��H�Y��ܦb��Ƶ��椤�C

  7. ���@�� [�O������] �ݩʪ� [�ɮ�]�C
  8. �b [�O���m] �ݩʤ���w�O���ɮת��ؿ��|�C
  9. �b [�̤j�O��j�p] �ݩʤ���w�O���ɪ��̤j�ɮפj�p (�H�줸�����)�C
  10. �b [��v�ɮ׼ƥ�] �ݩʤ���w�ƥ�O��ƥءC
  11. ��@�U [�x�s]�C

�Y�n�t�m�O��ܸ�Ʈw

  1. �H�޲z����n�J Sun Java System Access Manager �޲z�D���x�C
  2. �̹w�]�A�w����m���椤�� [����޲z] �B [�Ҧ��w�إߪ���´] �w��ܩ��s��椤�C

  3. ��ܦ�m���椤�� [�A�Ȱt�m]�C
  4. ����A���H�Y�|�X�{�b�s��椤�C

  5. ��@�U�s��椤 [�O��] �A�Ȯ��䪺�S�ʽb�Y�C
  6. [�O��] �ݩ��H�Y��ܦb��Ƶ��椤�C

  7. ��� DB �@�� [�O������] �ݩʡC
  8. �b [��Ʈw�ϥΪ̦W��] �M [��Ʈw�ϥΪ̱K�X] �ݩʤ��A��w�ΥH�s����Ʈw���ϥΪ̦W�٩M�K�X�C
  9. ��w�Ω�b [��Ʈw�X�ʵ{���W��] �ݩʤ��O���X�ʵ{���C
  10. ��@�U [�x�s]�C


���� Portal Server

���`����p��]�w����h�ťH��U�z�w��U�� Portal Server ����i�����ƸѡC

�Y�n�]�w Sun Java System Access Manager ������h��

����h���i���\�z�w�q�ǰe�ܰ���O��T�������C�U�C���䴩���h���G

�̹w�]�A����T���|�ǰe�� /var/opt/SUNWam/debug �ؿ�O���ɮסC

�Y�n�]�w����h�šG

  1. �b /etc/opt/SUNWps/desktopconfig.properties �ɮת��H�U�椤�w�q����h���G
  2. debugLevel=value

  3. ���s�Ұ� Web �e���C
  4. �b /var/opt/SUNWam/debug �H�� Sun Java System Web Server �O���ɤ��˵�P���O���ɡC


�W�@��      �ؿ�      �d�      �U�@��     


Copyright 2005 Sun Microsystems, Inc. ���v�Ҧ��C