8.1.6 Configuring the J2EE Policy Agents to Access the Distributed Authentication User Interface

Configure the J2EE policy agent to point to the secure port of the Distributed Authentication User Interface Load Balancer 3. Use the following list as a checklist to complete this task.

1. To Configure the J2EE Policy Agent 1 to Access the Distributed Authentication User Interface

2. To Configure the J2EE Policy Agent 2 to Access the Distributed Authentication User Interface

To Configure the J2EE Policy Agent 1 to Access the Distributed Authentication User Interface

1. Access https://osso-1.example.com:1081/opensso/console from a web browser.

2. Log in to the OpenSSO Enterprise console as the administrator.

   Username

   amadmin

   Password

   ossoadmin

3. Under the Access Control tab, click / (Top Level Realm).

4. Click the Agents tab.

5. Click the J2EE tab.

   j2eeagent-1 is displayed under the Agent table.

6. Click j2eeagent-1.

   The j2eeagent-1 properties page is displayed.

7. Click the OpenSSO Services tab.

   The Services properties page is displayed.

8. Make the following changes to the OpenSSO Login URL property value and click Save.

   • Select https://lb-2.example.com:1081/opensso/UI/Login and click Remove.

   • Enter https://lb-3.example.com:1443/distAuth/UI/Login and click Add.

9. Log out of the OpenSSO Enterprise console.

10. Verify that the agent is configured properly using the following sub procedure.

    1. Access http://pr-1.example.com:1081/agentsample/index.html, the sample application URL, from a web browser.

       The Sample Application Welcome page is displayed.

    2. Click the J2EE Declarative Security link.

    3. On the resulting page, click Invoke the Protected Servlet.

       You are redirected to the Distributed Authentication User Interface at https://lb-3.example.com:1443/distAuth/UI/Login.

    4. (Optional) Double-click the gold lock in the lower left corner of the browser.

       In the Properties page, you see the certificate for lb-3.example.com.

    5. Log in to OpenSSO Enterprise as testuser1.

       Username

       testuser1

       Password

       password

       If you can successfully log in as testuser1 and the J2EE Policy Agent Sample Application page is displayed, user authentication worked through the Distributed Authentication User Interface and the agent is configured properly.

    6. Close the browser.

To Configure the J2EE Policy Agent 2 to Access the Distributed Authentication User Interface

1. Access https://osso-1.example.com:1081/opensso/console from a web browser.

2. Log in to the OpenSSO Enterprise console as the administrator.

   Username

   amadmin

   Password

   ossoadmin

3. Under the Access Control tab, click / (Top Level Realm).

4. Click the Agents tab.

5. Click the J2EE tab.

   j2eeagent-2 is displayed under the Agent table.

6. Click j2eeagent-2.

   The j2eeagent-2 properties page is displayed.

7. Click the OpenSSO Services tab.

   The Services properties page is displayed.

8. Make the following changes to the OpenSSO Login URL value and click Save.

   • Select https://lb-2.example.com:1081/opensso/UI/Login and click Remove.

   • Enter https://lb-3.example.com:1443/distAuth/UI/Login and click Add.

9. Log out of the OpenSSO Enterprise console.

10. Verify that the agent is configured properly using the following sub procedure.

    1. Access http://pr-2.example.com:1081/agentsample/index.html, the sample application URL, from a web browser.

       The Sample Application Welcome page is displayed.

    2. Click the J2EE Declarative Security link.

    3. On the resulting page, click Invoke the Protected Servlet.

       You are redirected to the Distributed Authentication User Interface at https://lb-3.example.com:1443/distAuth/UI/Login.

    4. (Optional) Double-click the gold lock in the lower left corner of the browser.

       In the Properties page, you see the certificate for lb-3.example.com.

    5. Log in to OpenSSO Enterprise as testuser1.

       Username

       testuser1

       Password

       password

       If you can successfully log in as testuser1 and the J2EE Policy Agent Sample Application page is displayed, user authentication worked through the Distributed Authentication User Interface and the agent is configured properly.

    6. Close the browser.