Sun Java System Access Manager Policy Agent 2.2 Guide for IBM Lotus Domino 6.5.4

Solaris Systems: Setting File Ownership and Permissions on Agent for IBM Lotus Domino 6.5.4

On Solaris systems, the IBM Lotus Domino 6.5.4 server must run as a non-root user. The default user created for this purpose during installation of the IBM Lotus Domino 6.5.4 server is notes. However, the actual user name will be different if this default was not accepted. For example purposes in this section, the default IBM Lotus Domino 6.5.4 user name of notes is used.

To enable Agent for IBM Lotus Domino 6.5.4 to work properly, ensure that the notes user has read permissions to the following files:

PolicyAgent-base

represents the directory you choose in which to install the web agent

_PathInstanceName

represents a directory that is created and named during agent installation. This name is derived from the path to the Lotus Domino Data directory where slashes are converted to underscores. For this example, the path to the Lotus Domino Data directory is as follows:

/local/notesdata

Based on the preceding path, during installation, the following _PathInstanceName directory would be created:

_local_notesdata

You can set the required permissions to the files by issuing the following commands:

chown notes:notes /etc/opt/SUNWam/agents/domino/config/_PathInstanceName
chown notes:notes /var/opt/SUNWam/agents/debug/_PathInstanceName/
chown notes:notes PolicyAgent-base/SUNWam/agents/domino/lib/libamdomino6.so

Additionally, if Access Manager is running in SSL mode, the files cert7.db and key3.db must also allow read access to the notes user. These files are available in the directory specified by the property com.sun.am.sslcert.dir in the web agent AMAgent.properties configuration file.

For example, if the property is set as com.sun.am.sslcert.dir = /opt/cert-dir, ensure that /optcert-dir/{cert7.db,key3.db} has the necessary permissions by using the following command:


chown notes:notes /opt/cert-dir/cert7.db /opt/cert-dir/key3.db

Where cert-dir represents the directory in which certificates and key stores related to SSL are located.