To Deploy an Instance of Federation Manager in Application Server

1. Type the following command replacing the variables with information regarding your deployment and hit Enter.

   # ApplicationServer-base/bin/asadmin deploy --user AS-administrator --passwordfile filename --port port-number --contextroot deployment-URI --name deployment-URI --target instance-name war-file-location

   For example:

   # /opt/SUNWappserver/appserver/bin/asadmin deploy --user admin --passwordfile /tmp/pwdfile --port 4849 --contextroot fm --name fm --target server1 /var/opt/SUNWam/fm/war_staging/fm.war

2. Following the deployment, modify the Application Server server.policy file.

   By default, server.policy is located in the /var/opt/SUNWappserver/domains/domain-name/ directory. In the server.policy sample below, all of the capitalized contents (except WEB-INF) must be replaced with information applicable to your deployment.

   // Federation Manager RELATED ADDITIONS
      grant {
        permission java.util.PropertyPermission "user.language", "write";
      };
      grant codeBase "file:${BASEDIR}/${PROD_DIR}/fm/web-src/WEB-INF/lib/am_sdk.jar" {
        permission java.net.SocketPermission "*", "connect,accept,resolve";
      };
      grant codeBase "file:${BASEDIR}/${PROD_DIR}/fm/web-src/WEB-INF/lib/am_services.jar" {
           permission java.net.SocketPermission "*", "connect,accept,resolve";
      };
      grant codeBase "file:$AS81_VARDIR/domains/$AS81_DOMAIN/applications/
      j2ee-modules/${DEPLOY_WARPREFIX}/-" {
           permission java.net.SocketPermission "*", "connect,accept,resolve";
      };
      grant {
       permission java.lang.RuntimePermission "modifyThreadGroup";
       permission java.lang.RuntimePermission "setFactory";
       permission java.lang.RuntimePermission "accessClassInPackage.*";
       permission java.util.logging.LoggingPermission "control";
       permission java.lang.RuntimePermission "shutdownHooks";
       permission javax.security.auth.AuthPermission "insertProvider.Mozilla-JSS";
       permission java.security.SecurityPermission "putProviderProperty.Mozilla-JSS";
       permission javax.security.auth.AuthPermission "getLoginConfiguration";
       permission javax.security.auth.AuthPermission "setLoginConfiguration";
       permission javax.security.auth.AuthPermission "modifyPrincipals";
       permission javax.security.auth.AuthPermission "createLoginContext.*";
       permission java.security.SecurityPermission "insertProvider.Mozilla-JSS";
       permission javax.security.auth.AuthPermission "putProviderProperty.Mozilla-JSS";
       permission java.io.FilePermission "ALL FILES", "execute,delete";
       permission java.io.FilePermission "$VAR_SUBDIR/logs/*", "delete,write";
       permission java.util.PropertyPermission "java.util.logging.config.class", "write";
       permission java.security.SecurityPermission "removeProvider.SUN";
       permission java.security.SecurityPermission "insertProvider.SUN";
       permission java.security.SecurityPermission "removeProvider.Mozilla-JSS";
       permission javax.security.auth.AuthPermission "doAs";
       permission java.util.PropertyPermission "java.security.krb5.realm", "write";
       permission java.util.PropertyPermission "java.security.krb5.kdc", "write";
       permission java.util.PropertyPermission "java.security.auth.login.config", "write";
       permission javax.security.auth.kerberos.ServicePermission "*", "accept";
       permission javax.net.ssl.SSLPermission "setHostnameVerifier";
      };

   Post installation modifications to server.policy are made as follows:

   Replaceable Content	Default Value
   $BASEDIR	/opt
   $PROD_DIR	SUNWam
   $AS81_VARDIR	/var/opt/SUNWappserver
   $AS81_DOMAIN	domain1
   $VAR_SUBDIR	/var/opt/SUNWam
   $DEPLOY_WARPREFIX	federation

3. Restart the Application Server.