Previous Topic: How to Install and Configure the Agent for Oracle iPlanet on WindowsNext Topic: Install and Configure an Oracle iPlanet Agent on UNIX/Linux


Run the Unattended or Silent Installation and Configuration Programs for Subsequent Agents on Windows

The unattended or silent installation option can help you automate the installation and configuration process. This method saves time if you have a large CA SiteMinder® environment that uses many agents with identical settings.

For example, suppose the Agents in your environment use the same web server version, installation directory, Agent Configuration Object and Policy Servers. Use the installation wizard or console-based installation program for your first installation. Afterwards, you could create your own script to run the installation program with the .properties file the wizard or console-based installation program created.

Follow these steps:

  1. Run the following wizards on your first web server (in the order shown):
    1. The CA SiteMinder® Web Agent Installation wizard.
    2. The CA SiteMinder® Web Agent Configuration wizard.
  2. Locate the following file on your first web server:
    web_agent_home\install_config_info\ca-wa-installer.properties
    

    Note: If the path contains spaces, surround it with quotes.

    web_agent_home

    Indicates the directory where the CA SiteMinder® agent is installed on your web server.

    Default (Windows 32-bit installations only): C:\Program Files\CA\webagent

    Default (Windows 64-bit installations only): C:\Program Files\CA\webagent\win64

    Default (Windows 32-bit applications operating on 64-bit systems [Wow64]): C:\Program Files (x86)\webagent\win32

  3. Perform each of the following steps on the other web servers in your environment:

    Note: To automate this process, create your own customized script to execute these files on your systems. Use any scripting language that you want.

    1. Create a temporary directory on the subsequent web server.
    2. Copy the following files from the first web server (Steps 1 and 2) to the temporary directory on your subsequent web server:
      • The CA SiteMinder® Web Agent Installation executable file.
      • CA SiteMinder® ca-wa-installer properties file.
    3. Open a Command Prompt window with Administrative privileges in the temporary directory.
    4. Run the following command:
      agent_executable -f properties_file -i silent
      

      The CA SiteMinder® agent is installed and configured on the subsequent server silently.

    5. (Optional) Delete the temporary directory from your subsequent web server.
  4. Repeat Step 3 for each additional web server in your CA SiteMinder® environment that uses the configuration that the settings in your ca-wa-installer.properties file specify.
Apply CA SiteMinder® Changes to Oracle iPlanet Configuration Files with Oracle iPlanet Administration Server Console for SunOne 6.1 Servers

The Agent Configuration Wizard modifies the default obj.conf, and mime.types files that the Oracle iPlanet web server uses.

If you are using version 6.1 of a SunOne web server, and you plan to use the Oracle iPlanet Administration console, apply the changes to these files before using the console. If you do not apply the changes using the console first, the changes that are made for your CA SiteMinder® configuration could be corrupted. If you lose your configuration, run the configuration program again.

Note: The agent adds settings to the obj.conf file of the Oracle iPlanet web server when the Agent is configured to support an advanced authentication scheme. CA SiteMinder® does not remove these settings later. Edit the obj.conf file manually to remove any obsolete settings.

Follow these steps:

  1. Log in to the Oracle iPlanet Administration Server console.
  2. From the Servers tab, select the web server with the CA SiteMinder® agent installed and click Manage.
  3. In the right corner of the dialog, click Apply.

    A warning message about loading the modified configuration files appears.

  4. Click Load Configuration Files.
  5. Exit the console.
  6. Restart the web server.
  7. Optimize the Agent for Oracle iPlanet by tuning the shared memory segments.

    The CA SiteMinder® changes are applied.

More Information

Reconfigured Web Agent Won't Operate

Manually Configure Non-Default Server Instances, Virtual Servers, or Reverse Proxies for Oracle iPlanet Web Servers

The CA SiteMinder® Web Agent Configuration wizard only configures the default instance of your Oracle iPlanet web server. To configure a different instance of the Oracle iPlanet web server for CA SiteMinder®, manually edit the obj.conf file that is associated with that server instance. Examples of server instances that need manual configuration include:

Note: SunOne/Sun Java 7.0 web servers do not require these manual configuration steps.

Follow these steps:

  1. Locate the directory of the server instance you want to configure.
  2. Open the obj.conf file with a text editor.
  3. Locate the following line:
    <Object name="default">
    
  4. Insert a new line below the previous one, and then add the following text:
    AuthTrans fn="SiteMinderAgent"
    
  5. Locate the following line:
    AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
    
  6. Insert a new line below the previous one, and then add the following text:
    NameTrans fn="pfx2dir" from="/siteminderagent/pwcgi" dir="web_agent_home/pw" name="cgi"
    NameTrans fn="pfx2dir" from="/siteminderagent/pw" dir="web_agent_home/pw"
    NameTrans fn="pfx2dir" from="/siteminderagent/jpw" dir="web_agent_home/jpw"
    NameTrans fn="pfx2dir" from="/siteminderagent/redirectjsp" dir="web_agent_home/affwebservices/redirectjsp"
    NameTrans fn="pfx2dir" from="/siteminderagent/certoptional" dir="web_agent_home/samples"
    NameTrans fn="pfx2dir" from="/siteminderagent" dir="web_agent_home/samples"
    NameTrans fn="pfx2dir" from="/siteminderagent/pwservlet" dir=web_agent_home/jpw"
    
    web_agent_home

    Indicates the directory where the CA SiteMinder® agent is installed on your web server.

    Default (Windows 32-bit installations only): C:\Program Files\CA\webagent

    Default (Windows 64-bit installations only): C:\Program Files\CA\webagent\win64

    Default (Windows 32-bit applications operating on 64-bit systems [Wow64]): C:\Program Files (x86)\webagent\win32

  7. Locate the following line:
    NameTrans fn="ntrans-j2ee" name="j2ee"
    
  8. Insert a new line below the previous one, and then add the following text:
    PathCheck fn="SmRequireAuth"
    
  9. Remove the following line:
    NameTrans fn="pfx2dir" from="/mc-icons" dir="C:/Program Files/Sun/WebServer7.0/lib/icons" name="es-internal"
    
  10. Locate the following line:
    ObjectType fn="force-type" type="text/plain"
    
  11. Insert a new line below the previous one, and then add the following text:
    Service method="(GET|POST)" fn="SmAdvancedAuth"
    
  12. Save the obj.conf file.

    The Oracle iPlanet web server is manually configured.

(Optional) Improve Server Performance with httpd.conf File Changes

You can improve server performance by modifying the default configuration settings in the httpd.conf file; however, these changes are not required:

Follow these steps:

  1. For Oracle iPlanet web servers, assign a higher priority level to your Apache20WebAgent.dll file than any other auth modules or access modules on your web server.
  2. For low-traffic websites, define the following directives:
  3. For high-traffic websites, define the following directives: