Deployment Example 2: Federation Using SAML v2

13.4 Installing Application Server 4 and J2EE Policy Agent 4

You must have the Sun Java System Application Server installer and the Sun J2EE Policy Agent installer mounted on Protected Resource 1. See Chapter 2, Before You Beginat the beginning of this manual.

ProcedureTo Install Application Server 4 on Protected Resource 4

  1. As a root user, log into the Application Server 4 host.

  2. Start the Java Enterprise System installer with the -nodisplay option.


    # cd /mnt/Solaris_sparc 
    # ./installer -nodisplay
    
  3. When prompted, provide the following information:


    Welcome to the Sun Java(TM) Enterprise System; 
    serious software made  simple... 
    <Press ENTER to Continue>

    Press Enter. 


    <Press ENTER to display the Software 
    License Agreement>

    Press Enter. 


    Have you read, and do you accept, all of 
    the termsof the preceding Software 
    License Agreement [No] 

    Enter y.


    Please enter a comma separated list of 
    languages you would like supported with 
    this installation [8]

    Enter 8 for “English only.” 


    Do you want to install the full set of Sun Java (TM) 
    Enterprise System Products and Services? [Yes]

    Enter No.


    Enter a comma separated list of 
    products to install,or press R to 
    refresh the list  []

    Enter 14 to install Sun Java (TM) Application Server Enterprise Edition 8.1 2005Q4.


    Component Selection — Selected Product 

    Sun Java (TM) Application Server 
    Enterprise Edition 8.1 2005Q4.

    Enter a comma separated list of 
    productsto install,or press R to 
    refresh the list  []

    Enter 1,3,5,6 to install Domain Administration Server, Command Line Administration Tool, PointBase Database, and the Sample Applications.


    Press "Enter" to Continue or Enter a 
    comma separated list of products to deselect... [1] 

    Press Enter. 

    Enter 1 to upgrade these shared components 
    and 2 to cancel  [1]

    You are prompted to upgrade shared components only if the installer detects that an upgrade is required. 

    Enter 1 to upgrade shared components.


    Enter the name of the target 
    installation directory for each product: 
    Web Server [/opt/SUNWappserver] : 

    Accept the default value. 


    Data and Server Configuration [/var/opt/SUNWappserver]

    Accept the default value. 


    System ready for installation 
    Enter 1 to continue [1]  

    Enter 1.


    1. Configure Now - Selectively override defaults or 
    express through  
    2. Configure Later - Manually configure following installation 
     Select Type of Configuration [1]  

    Enter 1.


    Common Server Settings  
    Enter Host Name [ProtectedResource-4]

    Accept the default value. 


    Enter DNS Domain Name [siroe.com]

    Accept the default value. 


    Enter IP Address [192.18.72.152]

    Accept the default value. 


    Enter Server admin User ID [admin]   

    Accept the default value. 


    Enter Admin User's Password 
    (Password cannot be less than 8 characters) 
    [] 

    For this example, enter 11111111.


    Confirm Admin User's Password []

    Enter the same password to confirm it. 


    Enter System User [root]

    Accept the default value. 


    Enter System Group [root]

    Accept the default value. 


    Admin User Name: [admin]

    Accept the default value. 


    Password (min. 8 characters) []

    For this example, enter 11111111.


    Re-enter Password []

    For this example, enter 11111111.


    Admin Port [4849]

    Accept the default value. 


    JMX Port [8686]

    Accept the default value. 


    HTTP Port [8080]

    Accept the default value. 


    HTTPS Port [8181]

    Accept the default value. 


    Master Password (min. 8 characters) [ ]

    For this example, enter 11111111.


    Re-enter Master Password (min. 8 characters) [ ]

    For this example, enter 11111111.


    Ready to Install
    1. Install 2. Start Over 3. Exit Installation
    What would you like to do [1] 

    When ready to install, enter 1.

  4. After you have exited the installer, start Application Server 4:


    # cd /opt/SUNWappserver/appserver/bin
    # ./asadmin start-domain --user admin --password 11111111
    Starting Domain domain1, please wait.
    Log redirected to /var/opt/SUNWappserver/domains/domain1/logs/server.log.
    
    Domain domain1 started.
  5. To verify that the Application Server 4 is successfully installed, go to the Application Server URL:


    http://ProtectedResource-4:8080/index.html

    The default Application Server page is displayed and contains the following message: “Your server is up and running!”

ProcedureTo Run the J2EE Policy Agent Installer on Application Server 4

Before You Begin

You must obtain and unpack the J2EE Policy Agent software from the following Sun Microsystems web page: http://www.sun.com/download/products.xml?id=43543381

  1. In the directory where you downloaded the J2EE Policy Agent TAR file, unpack the J2EE Policy Agent bits using the GNU untar utility. Example:


    # cd /export
    # gunzip SJS_Appserver_81_agent_2.2.tar.zip
    # gtar -xvf /usr/sfw/bin/SJS_Appserver_81_agent_2.2.tar

    Note –

    For .tar.gz archives, do not use a program other than GNU_tar to untar the contents of the J2EE agent deliverables. Using a different program, such as another tar program, can result in some files not being extracted properly. To learn more about the GNU_tar program, visit the following web site: http://www.gnu.org/software/tar/tar.html


  2. Start the J2EE Policy Agent installer.

    # cd /export/j2ee_agents/am_as81_agent/bin
    # ./agentadmin --install
  3. When prompted, provide the following information:


    Enter the Application Server Config 
    Directory Path [/var/opt/SUNWappserver/
    domains/domain1/config]

    Accept the default value. 


    Enter the Application Server Instance name: [server]

    Accept the default value. 


    Access Manager Services Host: 

    Enter LoadBalancer-9.siroe.com.


    Access Manager Services port: [80]

    Enter 3443.


    Access Manager Services Protocol: [http]

    Enter https.


    Access Manager Services Deployment URI: [/amserver]

    Enter /federation.


    Enter the Agent Host name:

    ProtectedResource-4.siroe.com


    Is the Domain administration server 
    host remote? [false]

    Accept the default value. 


    Enter the port number for 
    Application Server instance [80]:

    Enter 8080.


    Enter the Preferred Protocol for 
    Application instance [http]:

    Accept the default value. 


    Enter the Deployment URI for 
    the Agent Application [/agentapp]

    Accept the default value. 


    Enter the Encryption Key 
    [d1ui072LoDGSD5ZEz0Z4e3bvaJN2f3wz]:

    Accept the default value. 


    Enter the Agent Profile name:

    Enter asagent.


    Enter the path to the password file:

    Enter /export/agent_profile_password.


    Is the agent being installed on the 
    DAS host for a remote instant [false]

    Accept the default value. 


    Are the Agent and Access Manager installed on 
    the same instance of Application Server? [false]:

    Accept the default value. 


    Verify your settings and decide from 
    the choices below:
    1. Continue with Installation
    2. Back to the last interaction
    3. Start Over
    4. Exit
    Please make your selection [1]:

    Accept the default value. 

  4. After the installer has finished installing the agent, verify that installation was successful. You can check for installation errors in the following log file:


    /export/j2ee_agents/am_as81_agent/logs/audit/install.log