Contents


About This Guide

What You Are Expected to Know
Sun ONE Identity Server Documentation Set
What's in This Guide
Documentation Conventions Used in This Manual

Typographic Conventions
Terminology

Related Information

Chapter 1 Read This First

How Policy Agents Work

Uses for Policy Agents
How an Agent Interacts with Identity Server

Supported Servers
Before You Begin Installation

Java Runtime Environment (JRE) 1.3.1_04 Requirement
The Web Server that Runs Identity Server Services vs. Remote Web Servers
Installing Multiple Web Server Agents on the Same Computer System
Providing Failover Protection for Identity Server Agents
Updating the Agent Cache
Global Not-Enforced List
The AMAgent.properties File
Verifying a Successful Installation

Chapter 2 Policy Agent Pack 1.1 on Solaris 8

Before You Begin

Supported Solaris Web Servers

Using the Graphical User Interface (GUI) Version of the Installation Program

Installing a Web Server Policy Agent
Installing a Proxy Server Policy Agent
Uninstalling a Policy Agent

Using the Command-Line Version of the Installation Program

To Install an Agent Using the Command Line
To Uninstall an Agent Using the Command Line

Installing Multiple Web Server Agents on the Same Solaris Computer System

To Install Multiple Web Server Agents on the Same Computer System
Using the config Script for Silent Installations
Removing an Agent Using the unconfig Script

Using Secure Sockets Layer (SSL) with an Agent

The Agent's Default Trust Behavior
Disabling the Agent's Default Trust Behavior
Installing the CA Certificate

Setting the REMOTE_USER Server Variable
Forwarding LDAP User Attributes via HTTP Headers
Validating Client IP Addresses

Chapter 3 Policy Agent Pack 1.1 on Windows 2000

Before You Begin

Supported Windows Web Servers

Using the Graphical User Interface (GUI) Version of the Installation Program

Installing the Policy Agent for Microsoft IIS
Installing the Policy Agent for iPlanet Web Server
Uninstalling and Disabling Policy Agents

Using the Command-Line Version of the Installation Program

To Install an Agent Using the Command Line
To Uninstall an Agent Using the Command Line

Using Secure Sockets Layer (SSL) with an Agent

The Agent's Default Trust Behavior
Disabling the Agent's Default Trust Behavior
Installing the CA Certificate

Setting the REMOTE_USER Server Variable
Forwarding LDAP User Attributes via HTTP Headers
Validating Client IP Addresses
Troubleshooting the IIS Policy Agent

Chapter 4 Policy Agent Pack 1.1 on Windows NT

Before You Begin

Supported Windows Web Server

Using the Graphical User Interface (GUI) Version of the Installation Program

Installing the Policy Agent for Microsoft IIS 4.0
Uninstalling and Disabling Policy Agents

Using the Command-Line Version of the Installation Program

To Install an Agent Using the Command Line
To Uninstall an Agent Using the Command Line

Installing Multiple Policy Agents on the Same Windows Computer System
Using Secure Sockets Layer (SSL) With an Agent

The Agent's Default Trust Behavior
Disabling the Agent's Default Trust Behavior
Installing the CA Certificate

Setting the REMOTE_USER Server Variable
Forwarding LDAP User Attributes via HTTP Headers
Validating Client IP Addresses
Troubleshooting the IIS 4.0 Policy Agent
Known Issues

Chapter 5 Policy Agent for Apache 1.3.22 From Red Hat

Before You Begin
Using the Graphical User Interface (GUI) Version of the Installation Program

Installing the Policy Agent
Uninstalling and Disabling Policy Agent

Using the Command-Line Version of the Installation Program

Installing the Policy Agent
Uninstalling the Policy Agent

Using Secure Sockets Layer (SSL) with an Agent

The Agent's Default Trust Behavior
Disabling the Agent's Default Trust Behavior
Installing the CA Certificate

Setting the REMOTE_USER Server Variable
Forwarding LDAP User Attributes via HTTP Headers
Validating Client IP Addresses
Troubleshooting Information

Chapter 6 Policy Agent for Apache 1.3.26

Before You Begin

Patch Clusters for Solaris

Using the Graphical User Interface (GUI) Version of the Installation Program

Uninstalling and Disabling the Policy Agent

Using the Command-Line Version of the Installation Program

Installing an Agent Using the Command Line
Uninstalling an Agent Using the Command Line

Using Secure Sockets Layer (SSL) with an Agent

The Agent's Default Trust Behavior
Disabling the Agent's Default Trust Behavior
Installing the CA Certificate

Setting the REMOTE_USER Server Variable
Forwarding LDAP User Attributes via HTTP Headers
Validating Client IP Addresses

Chapter 7 Policy Agent for Lotus Domino 5.0.10

Before You Begin
Using the Graphical User Interface (GUI) Version of the Installation Program

Installing the Policy Agent Using GUI
Uninstalling the Policy Agent

Using the Command-Line Version of the Installation Program

Installing the Policy Agent Using the Command Line
Uninstalling the Policy Agent

Configuring the Domino DSAPI Filter
Using Secure Sockets Layer (SSL) With an Agent

The Agent's Default Trust Behavior
Disabling the Agent's Default Trust Behavior
Installing the CA Certificate

Troubleshooting Information

Chapter 8 Policy Agent for Sun ONE Web Server 6.0

Before You Begin
Using the Graphical User Interface (GUI) Version of the Installation Program

Installing a Web Server Policy Agent
Uninstalling a Web Server Policy Agent

Using the Command-Line Version of the Installation Program

To Install an Agent Using the Command Line
To Uninstall an Agent Using the Command Line

Installing Multiple Web Server Agents on the Same Solaris Computer System

To Install Multiple Web Server Agents on the Same Computer System
Using the config Script for Silent Installations
Removing an Agent Using the unconfig Script

Using Secure Sockets Layer (SSL) with an Agent

The Agent's Default Trust Behavior
Disabling the Agent's Default Trust Behavior
Installing the CA Certificate

Setting the REMOTE_USER Server Variable
Forwarding LDAP User Attributes via HTTP Headers
Validating Client IP Addresses

Chapter 9 URL Policy Agent for IBM HTTP Server 1.3.19

Before You Begin
Using the Graphical User Interface (GUI) Version of the Installation Program

Uninstalling and Disabling the Policy Agent

Using the Command-Line Version of the Installation Program

Installing an Agent Using the Command Line
Uninstalling an Agent Using the Command Line

Using Secure Sockets Layer (SSL) with an Agent

Configuring the IBM HTTP Server
The Agent's Default Trust Behavior
Disabling the Agent's Default Trust Behavior
Installing the CA Certificate

Setting the REMOTE_USER Server Variable
Forwarding LDAP User Attributes via HTTP Headers
Validating Client IP Addresses
Cookie Reset Feature
Known Issues