Deployment Example: SAML v2 Using Sun OpenSSO Enterprise 8.0

ProcedureTo Generate an OpenSSO Enterprise WAR on the OpenSSO Enterprise 1 Host Machine

  1. As a root user, log in to the osso1.sp-example.com host machine.

  2. Create a directory into which the OpenSSO Enterprise ZIP file can be downloaded and change into it.


    # mkdir /export/OSSO_BITS
    # cd /export/OSSO_BITS
    
  3. Download the OpenSSO Enterprise ZIP file from http://www.sun.com/download/.

  4. Unzip the downloaded file.


    # unzip opensso_enterprise_80.zip
    # cd /export/OSSO_BITS/opensso
    # ls -al
    
    total 68
    drwxr-xr-x  14 root     root     512 Sep 8 11:13 ./
    drwxrwxr-x   3 root     root     512 Sep 15 13:06 ../
    -rw-r--r--   1 root     root    1349 Sep 8 10:58 README
    drwxr-xr-x   6 root     root     512 Sep 8 11:15 deployable-war/
    drwxr-xr-x   2 root     root     512 Sep 8 11:13 docs/
    drwxr-xr-x   2 root     root     512 Sep 8 11:13 fedlet/
    drwxr-xr-x   5 root     root     512 Sep 8 11:11 integrations/
    drwxr-xr-x   2 root     root     512 Sep 8 11:13 ldif/
    drwxr-xr-x   4 root     root     512 Sep 8 11:13 libraries/
    -rw-r--r--   1 root     root   17003 Sep 8 10:58 license.txt
    drwxr-xr-x   2 root     root     512 Sep 8 11:13 migration/
    drwxr-xr-x   2 root     root     512 Sep 8 11:13 patches/
    drwxr-xr-x   2 root     root     512 Sep 8 11:13 samples/
    drwxr-xr-x   2 root     root     512 Sep 8 11:14 tools/
    drwxr-xr-x   8 root     root     512 Sep 8 11:13 upgrade/
    drwxr-xr-x   2 root     root    2048 Sep 8 11:11 xml/

    
    
  5. Switch to the non-root user.


    # su osso80adm
    
  6. Create a staging area in the non-root user directory into which the WAR will be exploded.


    # cd /export/osso80adm
    # mkdir osso-staging
    

    Tip –

    In the staging area, after exploding the WAR, you can modify the WAR contents to suit your needs, generate a new WAR, and deploy it on any number of remote host computers. Whenever you need to make changes to the WAR, you maintain the changes in this one staging area, and redeploy the modified WAR as many times as you want, on as many host machines as you need.


  7. Explode the WAR file.


    # cd osso-staging
    # jar xvf /export/OSSO_BITS/opensso/deployable-war/opensso.war
    
  8. Make the following modifications to the bootstrap.properties file.

    By default, during the WAR deployment, OpenSSO Enterprise creates a bootstrap file in the user's home directory. The bootstrap.properties file points to the directory where all the OpenSSO Enterprise configurations will be created. With these modifications, OpenSSO Enterprise will create the bootstrap file in the directory you specify; in this case, /export/osso80adm/config. bootstrap.properties is located in /export/osso80adm/osso-staging/WEB-INF/classes.

    • Uncomment the line that reads #configuration.dir=.

    • Add the following value to the configuration.dir= property so it reads as follows.


      configuration.dir=/export/osso80adm/config
  9. Regenerate the WAR.


    # cd /export/osso80adm/osso-staging
    # jar cvf ../opensso.war *
    

    A new WAR file is created, including the modified bootstrap.properties.

  10. Verify that the new WAR was created in the proper location and with the appropriate permissions.


    # cd /export/osso80adm/osso-staging
    # /bin/rm -rf *
    # jar xvf ../opensso.war
    # ls -al
    
    total 498
    drwxr-xr-x 7 osso80adm staff 512 Aug 5 13:44 .
    drwxr-xr-x 12 root sys 512 Aug 5 11:11 ..
    -rw------- 1 osso80adm staff 779 Aug 5 14:56 .asadmintruststore
    drwx------ 2 osso80adm staff 512 Aug 5 14:44 .gconf
    drwx------ 2 osso80adm staff 512 Aug 5 14:44 .gconfd
    -rw-r--r-- 1 osso80adm staff 144 Aug 5 17:02 .profile
    drwx------ 3 osso80adm staff 512 Aug 5 11:20 .sunw
    drwxr-xr-x 3 osso80adm staff 512 Aug 5 14:55 domains
    drwxr-xr-x 21 osso80adm staff 1024 Aug 5 13:43 osso-staging
    -rw-r--r-- 1 osso80adm staff 68884903 Aug 5 13:45 opensso.war
    -rw-r--r-- 1 osso80adm staff 136 Aug 5 17:02 local.cshrc
    -rw-r--r-- 1 osso80adm staff 157 Aug 5 17:02 local.login
    -rw-r--r-- 1 osso80adm staff 174 Aug 5 17:02 local.profile

    Note –

    The opensso.war file is owned by osso80adm.