Deployment Example 2: Federation Using SAML v2

ProcedureTo Migrate Federation Manager 1 Services Schema into the Directory Servers

The Federation Manager LDIF files are located in the following directory:

/opt/SUNWam/fm/ldif

The file fm_sm_sds_schema.ldif is for use with Sun Directory Server. The file fm_sm_ad_schema.ldif is for use with Microsoft Active Directory.

  1. As a root user, log in to the Federation Manager 1 host.

  2. Load the Federation Manager schema into the Directory Server configuration instance.


    # cd /opt/SUNWam/fm/ldif
    # ldapmodify -D "cn=Directory Manager" -w 11111111 -h LoadBalancer-7.siroe.com 
    -p 389 -f ./fm_sm_sds_schema.ldif

    The ldapmodify utility loads the object classes and service attributes required for Federation Manager services into the Directory Server schema.

  3. On each of the Directory Server hosts, you can watch the error logs for LDIF errors.


    # cd /var/opt/mps/serverroot/slapd-fm-config/logs
    # tail -f errors
  4. Migrate the Federation Manager services schema from flat files to the Directory Server.


    # cd /opt/SUNWam/fm/bin
    # ./fmff2ds -h LoadBalancer-7.siroe.com -p 389 -r "o=siroe.com" 
    -f /var/opt/SUNWam/fm/federation 
    -u "cn=Directory Manager" -w 11111111 
    -j /usr/jdk/instances/jdk.5.0
  5. Verify that Federation Manager schema was successfully moved to the Directory Server.

    1. Start the Directory Server 3SP console.


      # cd /var/opt/mps/serverroot/
      # ./startconsole &
    2. Log in to the Directory Server console.

      User ID:

      cn=Directory Manager

      Password

      11111111

      Administration URL:

      http://DirectoryServer-3SP.siroe.com:1391

    3. In the navigation pane, expand the DirectoryServer-3SP.siroe.com suffix, and expand the Server Group.

    4. Double-click the Directory Server (fm-config) instance, and open its console.

    5. Click the Directory tab.

    6. Under the o=siroe.com suffix, expand the Services object.

      All of the Federation Manager services are displayed.