Deployment Example 2: Federation Using SAML v2

ProcedureTo Create a New User Data Instance in Directory Server 3SP

Create a new data instance for storing both Federation Manager configuration and user data. This ensures that if you ever have to uninstall or restore Federation Manager configuration, the Directory Server configuration remains untouched and will not have to be restored.

  1. As a root user, log in to Directory Server 3SP.

    Set the X window display variable, and start the Directory Server console.

    # cd /var/opt/mps/serverroot/ 
    # export DISPLAY=DirectoryServer-3SP.siroe.com:1 
    # ./startconsole &
  2. Log in to the Directory Server 3SP console.

    Username

    cn=Directory Manager

    Password

    11111111

    Administration URL

    http://DirectoryServer-3SP.siroe.com:1391

  3. In the Directory Server console, under the Servers and Applications tab, expand the Server Administration domain list until you see the Server Group item.

  4. Right-click on Server Group, and choose “Create an instance of Sun Directory Server.”

  5. In the Create New Instance dialog box, provide the following information:

    Server identifier:

    Enter fm-users.

    Network port:

    Enter 1489.

    Base suffix:

    Enter o=siroeusers.com.

    Directory Manager DN:

    Enter cn=Directory Manager

    Password:

    For this example, enter 11111111.

    Confirm Password:

    Enter the same password to confirm it.

    Server Runtime (UNIX) user ID:

    Enter root.

  6. Click OK, and then close the status window.

  7. Verify that the new Directory Server instance named fm-users successfully starts up .

    1. As a root user, log in to Directory Server 3SP.

    2. Start the new data Directory Server instance.


      # cd /var/opt/mps/serverroot/slapd-fm-users 
      # ./stop-slapd; ./start-slapd
    3. Use the tail command to monitor the Directory Server error log and see that the server starts up successfully.


      # tail —f logs/errors