Gateway Best Practices

• To start or stop Watchdog, you could use the psadmin sra-watchdog command.

• To change the password of amService-srapGateway agent, log into AMConsole and select Agents > SRA Log User Password, and change the password. Gateway verifies the credentials of an user using the amService-srapGateway agent.

• To view the logs of the Gateway, use the psconsole. From the PSCconsole, select the Secure Remote Access tab and click Logging. Select Gateway, Netletproxy, or Rewriterproxy to view the logs.

• When configuring Gateway on a separate node, ensure that the local Directory Server is running and the security directory is copied from the Portal Server node.

• The certificate database for Gateway is located at /etc/opt/SUNWportal/cert.

• When Gateway is configured to access multiple Access Managers and Portal Servers, the respective entries of each Access Manager and Portal Server instance must be appended to the non-authenticated URLs list.

• You can use one of these methods to change the Gateway configuration:

  • Change the parameters in the platform.conf.<instance> file.

  • Using the psconsole, change the Gateway profile.

• The chroot command is deprecated and is not supported in Portal Server 7.

• The Access Manager encryption key password must match the Access Manager SDK install on the Gateway node, with Access Manager installed on the remote node.

• When Portal Server and Gateway are installed on different domains, the domain entries should be present under the Cookie Domain List in the AMConsole under Service Configuration.

• On the Portal Server node, you can view both the AMConfig-default.properties and AMConfig.properties files at /etc/opt/SUNWPortal/. This file is specific to Netletproxy and Rewriterproxy.

• To create the Gateway profile:

  1. Create a new Gateway profile using the psconsole. Ensure the https and http port numbers you use is not currently used by another application.

  2. Run the psadmin command to create an instance by modifying an appropriate template.

• Ensure that the SRA Core is installed during the Portal Server installation, else Gateway does not get installed.

• SRA Core cannot be installed in a separate session from an open Portal Server.

• Proxylet does not work when Portal Server is installed in the SSL mode.