Sun OpenSSO Enterprise 8.0 C API Reference for Application and Web Policy Agent Developers

Authentication Properties

With the newly developed policy agents 3.0, AMAgent.properties has been replaced with OpenSSOAgentBootstrap.properties and OpenSSOAgentConfiguration.properties. Properties in OpenSSOAgentBootstrap.properties are mandatory for any C API to work. Properties in OpenSSOAgentConfiguration.properties will only be used if the repository type of the agent user is local. If the repository type is centralized, any required properties not in OpenSSOAgentBootstrap.properties will be retrieved from the OpenSSO Enterprise server.


Note –

See Centralized Agent Configuration in Sun OpenSSO Enterprise 8.0 Technical Overview for more information.


The following table lists the mandatory properties in OpenSSOAgentBootstrap.properties.

Table 2–1 Policy Agent 3.0 Properties Needed by the Authentication API for C

Property 

Definition 

com.sun.identity.agents.config.naming.url

URL of the OpenSSO Enterprise Naming Service in the format: 

http://server.domain:port/URI/namingservice

com.sun.identity.agents.config.local.logfile

The logging directory in the format: 

path-to-directory/logs/auth-log

com.sun.identity.agents.config.debug.level

The level at which logs are written in the format: 

all:#

where # is the level 5 being the highest, 3 medium and 1 the lowest.

com.sun.identity.agents.config.sslcert.dir

Path to the directory containing the certificate and key databases for Secure Sockets Layer (SSL). 

com.sun.identity.agents.config.certdb.prefix

Set this property if the certificate databases in the directory specified by com.sun.identity.agents.config.sslcert.dir has a prefix.

com.sun.identity.agents.config.certdb.password

The password to the key3.db file.


Note –

This property may be added to OpenSSOAgentBootstrap.properties.


com.sun.identity.agents.config.trust.server.certs

Defines whether or not to trust SSL certificates not defined in the certificate database. Takes a value of true or false where true enables trust.

com.sun.identity.agents.config.certificate.alias

The nickname of the client certificate in the cert7.db.


Note –

This property may be added to OpenSSOAgentBootstrap.properties.