Sun Java System Portal Server 6 2005Q1 �z��n |
�� 18 ��
�z Portal Server �t�������|����P���@ Sun Java System Portal Server �t�ά���U�غz��ȡC
�����]�t�U�C���`�G
�t�m Secure Sockets Layer (SSL)�z�i�H�z�L�U�C�覡�A�Q�� Portal Server �ά����t�m Secure Sockets Layer (SSL)�G
- Sun Java System Directory Server �� �z�i�H�� Sun Java System Directory Server �t�m SSL�A�æb Sun Java System Access Manager �M Portal Server �����ϥΦw���s�u�C�аѾ\�U�C URL �B�uSun Java System Access Manager Installation and Configuration Guide�v���� 6 ���uBasic Configurations�v�A�H��o�b�ؿ��A���W�ҥ� SSL ����T�G
�Y�n�ϥ� Portal Server �t�m SSL
�p�G�z��ܦb Portal Server �w�˴v����W��� SSL�A�ШϥΦ��{�ǡC
- �b�z�w�� Portal Server �� Web ��A���W�إߥi�a��Ʈw�C
�p�ݧ�h��T�A�аѾ\���U�C URL ���uSun Java System Web Server 6 2004Q2, Enterprise Edition Administration Guide�v���� 5 �� "Creating a Trust Database"�G
http://docs.sun.com/source/816-5682-10/index.htm
- ���z�b�䤤�w�� Portal Server �n�骺 Web ��A���ШD���ҡA�æb Web ��A����ҤW�w�˾��ҡC
�p�ݧ�h��T�A�аѾ\�uSun Java System Web Server 6 2004Q2, Enterprise Edition Administration Guide�v���� 5 ���uRequesting and Installing a VeriSign Certificate�v�ΡuRequesting and Installing Other Server Certificates�v�C
- �}�� Portal Server Web ��A����Ҫ��[�K�\��C
�b Web ��A���z�D���x���A��� [�ߦn�]�w] ���ҡA��� [�s�W��ť����]�A�M���� [�s�谻ť����]�A�ö}�Ҧw���ʡC
�p�ݧ�h��T�A�аѾ\�uSun Java System Web Server 6 2004Q2, Enterprise Edition Administration Guide�v���� 5 �� "Turning Security On"�G
- ��@�U Web ��A���z�D���x���� [�M��] �P [�M���ܧ�]�C
- ���s�Ұ� Web �e���C
�p�ݱҰ� Web �e������ܡA�аѾ\�z�� Web �e�����C
- �t�η|���ܱz��J�K�X�H�i�J���Ҹ�Ʈw�C
- ���ұz�{�b�O�_�i�H�ϥ� SSL �n�J�� Portal Server �J�f��G
�Y�n�ק�{���� Portal Server �w�˥H�K�ϥ� SSL
�p�G�b Portal Server �w�˴v��t�θ߰ݱz "Do you want to run SSL on hostname?" �ɡA�z���^���O n ���ܡA�ШϥΦ��{�ǡC�p�ݧ�h��T�A�аѾ\�uSun Java System Portal Server 6 2004Q2 Installation Guide�v�C
- �H�z����n�J Sun Java System Access Manager �z�D���x�C
�̹w�]�A�w����m���椤�� [�ѧO�z] �B [�Ҧ��w�إߪ���c] �w��ܩ��s��椤�C
- ��ܦ�m���椤�� [�A�Ȱt�m]�C
- ��@�U [���x] ���䪺�S�ʽb�Y�C
[���x] �ݩ��H�Y��ܦb��Ƶ��椤�C
- �b��A���M�椤�A�N http �ܧ� https�C
- ��@�U [�x�s] �H�x�s�z���ܧ�C
- �b Web ��A���W�w�˾��ҡC
�p�ݸԲӸ�T�A�аѾ\�Y�n�ϥ� Portal Server �t�m SSL �����B�J 1 ���B�J 4�C
- �N server.xml �P magnus.conf �ɮױq /AccessManager-base/SUNWam/servers/https-hostname-domain/conf_bk �ؿ�ƻs�� /AccessManager-base/SUNWam/servers/https-hostname-domain/config �ؿ�C
- �p�G�z�����Ҥ��å��w�ˮ� CA�A�Цb /AccessManager-base/SUNWam/lib/AMConfig.properties �ɮפ��[�J�U�C�o��C
com.sun.am.jssproxy.trustAllServerCerts=true
�o�ӿﶵ�|�i�� JSS �H����ҡC
- �b /AccessManager-base/SUNWam/lib/AMConfig.properties �ɮפ��A�N�U�C URL ���� http �ܧ� https�G
com.sun.am.server.protocol
com.sun.am.naming.url
com.sun.am.notification.url
com.sun.am.session.server.protocol
com.sun.services.cdsso.CDCURL
com.sun.services.cdc.authLoginUrl
- ���s�Ұ� Web �e���C
- �t�η|���ܱz��J�K�X�H�i�J���Ҹ�Ʈw�C
�p�ݧ�h��T�A�аѾ\�uSun Java System Directory Server �z��n�v���� 11 ���u�z SSL�v�C
�Y�n�t�m Portal Server ��ҥH�K�ϥ� SSL
- �H�z����n�J Sun Java System Access Manager �z�D���x�C
�̹w�]�A�w����m���椤�� [�ѧO�z] �B [�Ҧ��w�إߪ���c] �w��ܩ��s��椤�C
- ��ܦ�m���椤�� [�A�Ȱt�m]�C
- ��@�U [���x] ���䪺�S�ʽb�Y�C
[���x] �ݩ��H�Y��ܦb��Ƶ��椤�C
- �b��A���M�椤�A�N http �ܧ� https�C
- ��@�U [�x�s] �H�x�s�z���ܧ�C
- �b Web ��A���W�w�˾��ҡC
�p�ݸԲӸ�T�A�аѾ\�Y�n�ϥ� Portal Server �t�m SSL�����B�J 1 ���B�J 4�C
- �p�G����A���O�h����Ҧw�˪��@����A�бN server.xml �P magnus.conf �ɮױq /AccessManager-base/SUNWam/servers/https-instance_nickname/conf_bk �ؿ�ƻs�� /AccessManager-base/SUNWam/servers/https-instance_nickname/config �ؿ�C
- �p�G�z�����Ҥ��å��w�ˮ� CA�A�Цb /AccessManager-base/SUNWam/lib/AMConfig-instance_nickname.properties �ɮפ��[�J�U�C�o��C
com.sun.am.jssproxy.trustAllServerCerts=true
�o�ӿﶵ�|�i�� JSS �H����ҡC
- �b /AccessManager-base/SUNWam/lib/AMConfig-instance_nickname.properties �ɮפ��A�N�U�C URL ���� http �ܧ� https�G
com.sun.am.server.protocol
com.sun.am.naming.url
com.sun.am.notification.url
com.sun.am.session.server.protocol
com.sun.services.cdsso.CDCURL
com.sun.services.cdc.authLoginUrl
- ���s�Ұ� Web �e���C
- �t�η|���ܱz��J�K�X�H�i�J���Ҹ�Ʈw�C
�p�ݧ�h��T�A�аѾ\�uSun Java System Directory Server �z��n�v���� 11 ���u�z SSL�v�C
�ƥ�P�_�� Portal Server �t�mPortal Server �ϥΪ̻P�A�Ȱt�m�|�x�s�b�ؿ��A���W�� LDAP �ؿ��T�� (DIT) ���C�p���N�i��z�z�L���q�ťؿ�洫�榡 (Lightweight Directory Interchange Format, LDIF) �ɮ׳ƥ�P�_��t�m��T�C
�Y�n�ƥ� Portal Server �t�m
�Y�n�ƥ� Portal Server �t�m��T�A�Шϥ� db2ldif ��O�C�o�ӫ�O�i�Ω�ؿ��A�����ؿ� slapd- �D��W���ؿ�C�Ҧp�A�p�G�ؿ��A���w�w�˦ܦ�A�� sesta �W���w�]�w�˥ؿ� (/usr/ldap)�A�h�ؿ�N�|�O /usr/ldap/slapd-sesta�C
- �N�ؿ��ܧ]�t db2ldif ��O���ؿ��A���ؿ�C
cd DirectoryServer-base/slapd-HOSTNAME
- �ϥ� db2ldif ��O (�a�� -s �ﶵ)�A�N�t�m�x�s�� LDIF �ɮפ��A�H��w Portal Server �� DIT ���h�C�Ҧp�A�Y�n�x�s�� DIT ���h�� isp �t�m�A����J�U�C��r�G
./db2ldif -s "o=isp"
��Ʒ|�x�s�� LDIF �ɮפ��C��O�|�N�ɮ��x�s�ܥثe���ؿ�C�|�ϥΤU�C�榡�өR�W�ɮסG
YYYY_MM_DD_HHMMSS.ldif
�b�x�s�ɮפ���A�|��ܤU�C���d�ҿ�X�G
[16/May/2002:14:11:25 -0700] - Backend Instance:userRoot
ldiffile:/usr/ldap/slapd-sesta/ldif/2002_05_16_141122.ldif
[16/May/2002:14:11:28 -0700] - export userRoot:Processed 178 entries (100%).
�Y�n�_�� Portal Server �t�m
�z�i�H�ϥ� ldif2db ��O�A�N�z�L db2ldif ��O�ҳƥ� Portal Server �t�m��T�[�H�_��C�o�ӫ�O�i�Ω�ؿ��A�����ؿ� slapd- �D��W���ؿ�C�Ҧp�A�p�G�ؿ��A���w�w�˦ܦ�A�� sesta �W���w�]�w�˥ؿ� (/usr/ldap)�A�h�ؿ�N�|�O /usr/ldap/slapd-sesta�C
- �N�ؿ��ܧ]�t ldif2db ��O���ؿ��A���ؿ�A��k����J�G
cd DirectoryServer-base/slapd-HOSTNAME
- ����ؿ��A���A��k����J�G
./stop-slapd
- �ϥ� ldif2db ��O�N�t�m�q LDIF �ɮ״_�쬰�ؿ��A���C��O�᭱�p�G�[�W -s �ѼơA�h�O��w Portal Server ���� DIT ���h�F�ӫ᭱�[�W -i �Ѽƫh�O��w�ɮצW�١C�Ҧp�A�p�G�n�N��e�B�J���x�s�� LDIF �ɮ״_�쬰 isp �� DIT ���h�A����J�U�C��r�G
./ldif2db -s "o=isp" -i /usr/ldap/slapd-sesta/ldif/2002_05_16_141122.ldif
�b�_��t�m����A�|��ܤU�C���d�ҿ�X�G
importing data ...
[16/May/2002:16:37:02 -0700] - Backend Instance:userRoot
[16/May/2002:16:37:03 -0700] - import userRoot:Index buffering enabled with bucket size 13
[16/May/2002:16:37:03 -0700] - import userRoot:Beginning import job...
[16/May/2002:16:37:03 -0700] - import userRoot:Processing file "/usr/ldap/slapd-sesta/ldif/2002_05_16_141122.ldif"
[16/May/2002:16:37:04 -0700] - import userRoot:Finished scanning file "/usr/ldap/slapd-sesta/ldif/2002_05_16_141122.ldif" (178 entries)
[16/May/2002:16:37:05 -0700] - import userRoot:Workers finished; cleaning up...
[16/May/2002:16:37:08 -0700] - import userRoot:Workers cleaned up.
[16/May/2002:16:37:08 -0700] - import userRoot:Cleaning up producer thread...
[16/May/2002:16:37:08 -0700] - import userRoot:Indexing complete.Post-processing...
[16/May/2002:16:37:08 -0700] - import userRoot:Flushing caches...
[16/May/2002:16:37:08 -0700] - import userRoot:Closing files...
[16/May/2002:16:37:09 -0700] - import userRoot:Import complete.Processed 178 entries in 6 seconds.(29.67 entries/sec)
- ���s�Ұʥؿ��A���A��k����J�G
./start-slapd
�ܧ� Portal Server ���]�w�Y�n��ڱN��� Portal Server �n�骺��A���q���ܨ�L�a��A�z�u�ݭn�b /etc/hosts �ɤ��ܧ��3 IP ��}�������X����W�٧Y�i�C�õL��L�ݭn��諸�g����}�C
�z�h�� UI �`�I�w����z�b�h�� UI �`�I�W�w�� Portal Server �n��ɡA�z�ݭn�b Sun Java System Access Manager �z�D���x����u���x�v�ݩʶi��t�m�ܧ�C�z�s��u��A���M��v�ݩʥH�]�A�C�� UI �`�I�� URL�C
Sun Java System Access Manager �R�W�A�ȷ|�b��l�ƶ��qŪ��u��A���M��v�ݩʡC���M��]�t�F��@ Sun Java System Access Manager �t�m���� Sun Java System Access Manager �u�@�ɬq��A���C�Ҧp�A�p�G�w�ˤF��x Sun Java System Access Manager ��A���A�ӥB�����@���@�x�ӨϥΡA�h�����N�o��x��A�����]�A�b�M�椤�C�p�G�b�ШD�A�� URL ���ҫ�w���D��å��b���M�椤�A�h�R�W�A�ȱN�|�ڵ��ШD�C�M�椤���Ĥ@�ӭȫ�w�F�b�w�˴v��ҫ�w����A���D��W�٩M�s����C�i�H�ϥή榡 protocol://server:port �s�W��L����A���C
�Y�n�b��A���M�椤�s�W��L�� Portal Server
- �H�z����n�J Sun Java System Access Manager �z�D���x�C
�̹w�]�A�w����m���椤�� [�ѧO�z] �B [�Ҧ��w�إߪ���c] �w��ܩ��s��椤�C
- ��ܦ�m���椤�� [�A�Ȱt�m]�C
����A���H�Y�|�X�{�b�s��椤�C
- ��@�U [���x] ���䪺�S�ʽb�Y�C
[���x] �ݩ��H�Y��ܦb��Ƶ��椤�C
- �s�� [��A���M��] �ݩʡC
�b�C�ӥ\�ର UI �`�I����A�����A��J��A�� URL�A�Ҧp http://host1.sesta.com:80�A�M���@�U [�s�W] ��s�CURL �H�Y�|�X�{�b [��A���M��] ���C
- ��@�U [�x�s]�C
- ���s�Ұ� Web �e���C
�t�m Portal Server ��ҥH�K�ϥ� HTTP �N�z��A���p�G Portal Server �n��Ҧw�˪��D��L�k�����s���ں��αz�������Y�dz���A�z�N�ݭn�t�m��ҥH�K�ϥ� HTTP �N�z��A���C
�b��� Portal Server Web 3�ε{���� Web �e�����A�]�w http.proxyHost �M http.proxyPort Java Virtual Machine (JVM) �t���ݩʤ���A�i�H�N Portal Server �t�m���ϥ� HTTP �N�z��A���C�]�w JVM �t���ݩʪ���k�|�]���P Web �e���Ӳ��C���`�Ҵy�z���{�ǯS�O�A�Ω�t�m Sun Java System Web Server ��ҥH�K�ϥ� HTTP �N�z��A���C
- �N�ؿ��ܧ]�t��Ұt�m�� Web ��A���ؿ�A��k����J�G
cd /WebServer-base/SUNWam/servers/https-hostname-domain/config
- �s�覹�ؿ� server.xml �ɮסA�M��s�W�U�C�X��G
<JVMOPTIONS>-Dhttp.proxyHost=proxy_host</JVMOPTIONS>
<JVMOPTIONS>-Dhttp.proxyPort=proxy_port</JVMOPTIONS>
�䤤 proxy_host �O�N�z��A���D������X����W�١A�� proxy_port �h�O���N�z��A���b��W��檺�s����C
�z Portal Server �O���z�i�H�t�m Portal Server �O��H�K�N��T�O��ܤ@���ɮשΰO��ܸ�Ʈw�C�b�O��ܸ�Ʈw�ɡA�|�ϥ� JDBC ��w�C
�Y�n�t�m�O����ɮ�
- �H�z����n�J Sun Java System Access Manager �z�D���x�C
�̹w�]�A�w����m���椤�� [�ѧO�z] �B [�Ҧ��w�إߪ���c] �w��ܩ��s��椤�C
- ��ܦ�m���椤�� [�A�Ȱt�m]�C
����A���H�Y�|�X�{�b�s��椤�C
- ��@�U [�O��] ���䪺�S�ʽb�Y�C
[�O��] �ݩ��H�Y��ܦb��Ƶ��椤�C
- ���@�� [�O������] �ݩʪ� [�ɮ�]�C
- �b [�O���m] �ݩʤ���w�O���ɮת��ؿ��|�C
- �b [�̤j�O��j�p] �ݩʤ���w�O���ɪ��̤j�ɮפj�p (�H�줸�����)�C
- �b [��v�ɮƥ�] �ݩʤ���w�ƥ�O��ƥءC
- ��@�U [�x�s]�C
�Y�n�t�m�O��ܸ�Ʈw
- �H�z����n�J Sun Java System Access Manager �z�D���x�C
�̹w�]�A�w����m���椤�� [�ѧO�z] �B [�Ҧ��w�إߪ���c] �w��ܩ��s��椤�C
- ��ܦ�m���椤�� [�A�Ȱt�m]�C
����A���H�Y�|�X�{�b�s��椤�C
- ��@�U�s��椤 [�O��] �A�Ȯ��䪺�S�ʽb�Y�C
[�O��] �ݩ��H�Y��ܦb��Ƶ��椤�C
- ��� DB �@�� [�O������] �ݩʡC
- �b [��Ʈw�ϥΪ̦W��] �M [��Ʈw�ϥΪ̱K�X] �ݩʤ��A��w�ΥH�s����Ʈw���ϥΪ̦W�٩M�K�X�C
- ��w�Ω�b [��Ʈw�X�ʵ{���W��] �ݩʤ��O���X�ʵ{���C
- ��@�U [�x�s]�C
���� Portal Server���`����p��]�w����h�ťH��U�z�w��U�� Portal Server ����i�����ƸѡC
�Y�n�]�w Sun Java System Access Manager ������h��
����h���i���\�z�w�q�ǰe�ܰ���O��T�������C�U�C���䴩���h���G
�̹w�]�A����T���|�ǰe�� /var/opt/SUNWam/debug �ؿ�O���ɮסC
�Y�n�]�w����h�šG