Previous Topic: Unattended Federation Manager Configuration

Next Topic: Run the Unattended Configuration


Set Up the Configuration Properties File

Unattended configuration uses the ca-federation-config.properties file to propagate the Federation Manager configuration to another system in your network.

With this properties file, you do the following:

The ca-federation-config.properties file is installed in the following location:

Windows: federation_mgr_home\install-config-info

UNIX: federation_mgr_home/install-config-info

The default parameters and paths in the file reflect the information you entered during the initial configuration.

Important! The configuration properties file is case-sensitive.

To modify the configuration properties file

  1. Open the ca-federation-config.properties file and modify the parameters in the file.
  2. Save the file.

The parameters are as follows:

Parameter

Description

Database Information

PARAM_DBTYPE

Indicates the type of database—SQL or Oracle.

PARAM_UID

Displays the database administrator user name.

#PARAM_PWD

Identifies the Federation Manager administrator password used to log in to the UI in clear text. Uncomment this line before entering a value.

For added security, use the ENCRYPTED_PARAM_PWD setting.

ENCRYPTED_PARAM_PWD

Specifies the encrypted Federation Manager administrator password. We recommend using this encrypted password for added security.

PARAM_DB_SERVER

Identifies the IP address of the database server.

PARAM_DB_PORT

Displays the port the database is listening on.

Defaults:

  • SQL: 1433
  • Oracle: 1521

MSSQL Specific

 

PARAM_DB

MS-SQL specific parameter. Names the SQL database.

Oracle Specific

 

ORACLE_SID

Oracle-specific parameter. Specifies the service name (NOT the SID) of the Oracle database.

RECONFIGURE

Indicates whether or not Federation Manager uses an existing database schema or creates a new schema.

Limits: true (use an existing schema), false (create a new schema)

Federation Manager Server Port

PARAM_PORT

Defines the port that Federation Manager is listening on.

Default: 44442

Important! Do not assign a value of 44445 for this port.

Deployment Mode

DEPLOYMENT_MODE

Specifies the Federation Manager deployment mode.

Limits:

  • Proxy (uppercase P)
  • Standalone (uppercase S)

PROXY_HOST_NAME

(Proxy mode only) Identifies the fully qualified domain name of the backend server where Federation Manager forwards the requests for federated resources. Define this setting using the syntax server_name.domain:port.

Example: myserver.mycompany.ca.com:5555

If you use this properties file on more than one Federation Manager system and these systems use the same proxy, set this host name to the same value for each system. Federation Manager and the proxy host must be in the same domain.

Apache Server Information

APACHE_SERVER_NAME

Specifies the name of the Apache web server.

If you plan to use the properties file on more than one system in a network, set this value to a unique name for each system where you run an unattended configuration. The same server name for more than one system may cause conflicts.

APACHE_ADMIN_EMAIL

Indicates the email address of the Federation Manager administrator. This setting is required by the Apache server installed as part of Federation Manager. Apache uses the administrator’s e-mail address in its default error messages when problems are encountered. The e-mail address is set with the ServerAdmin directive and can be any valid e-mail address. The events forwarded to this address are server-specific errors and warnings for the Apache server. The messages are not related to federation.

Default: admin@mycompany.com

APACHE_HTTP_PORT

Specifies the default port the Apache web server is listening on.

Default: 80

APACHE_SSL_PORT

Specifies the default SSL port the Apache web server is listening on.

Default: 443

UI_HTTP_PORT

Specifies the default HTTP port the Federation Manager UI is listening on.

Default: 8888

UI_SSL_PORT

Specifies the default SSL port the Federation Manager UI is listening on.

Default: 8889

Important! The port numbers must be unique for the following settings: