Can policy agent protect multiple instances of app server

I created multiple instances of Sun ONE App server 7.0, and one web-app in each instance. But When I am installing Policy Agent 1.1 for the second instance of App server, it told me that I HAVE had it installed.
How can I protect multiple instances of App server?

I see another thread on this subject. Thanks.

Similar Messages

Installing policy agent 2.1.1 for app server 7

Hi,
I've been trying to install the policy agent on app server7. I read that the policy agent had to be installed on a different instance of the app server than the one where the portal is running (portal runs on instance server1). How can you make sure of that?
I'd like to use the agent to only control the access to a webapp that is deployed on server1 instance. I don't want it to interfere with the portal but at the moment it does.
Now I can't use the webapp (access forbidden) and the portal ("Authentication Service is not initialized").
all the components of JES but the gateway are installed on a single machine called crpbioweb.crp-sante.healthnet.lu
here is the statefile of the installation
[STATE_BEGIN Sun ONE Identity Server Policy Agent a15672cb9a086c93b865dd58c4e72641d908cc91]
OS_NAME = SunOS
PACKAGE_ZIP_FILE = am_as70_agent.zip
PACKAGE_ID = SUNWamas
PACKAGE_VERSION = 2.1
COMPONENT_NAME = Sun ONE Identity Server Policy Agent for Sun ONE Application Server 7.0
AGENT_TYPE = as70
defaultInstallDirectory = /opt
currentInstallDirectory = /opt/agent
SERVER_HOST = crpbioweb.crp-sante.healthnet.lu
SERVER_PORT = 58080
SERVER_PROTO = http
SERVER_DEPLOY_URI = /amserver
CONSOLE_HOST = crpbioweb.crp-sante.healthnet.lu
CONSOLE_PORT = 58080
CONSOLE_PROTO = http
CONSOLE_DEPLOY_URI = /amconsole
ENCADMINPASSWD = password
LDAPUSERPASSWD = amldapuser
DIRECTORY_HOST = crpbioweb.crp-sante.healthnet.lu
DIRECTORY_PORT = 389
DIRECTORY_SSL_ENABLED = false
ROOT_SUFFIX = dc=crp-sante,dc=healthnet,dc=lu
ORG_BASE = dc=crp-sante,dc=healthnet,dc=lu
CONFIG_LOAD_INTEREVAL = 10
ENABLE_NEL_CACHE = false
NEL_CACHE_SIZE = 1000
NEL_CACHE_TIME = 60
PREF_PROTOCOL = http
PREF_PORT = 80
PRIMARY_CTX_PATH = /mailtracker
AGENT_HOST = crpbioweb.crp-sante.healthnet.lu
FILTER_MODE = ALL
ACCESS_DENIED_URI =
LOGIN_ATTEMPT_LIMIT = 5
JAVA_HOME = /usr/jdk/entsys-j2se
JSSE_INSTALLED = true
JCE_INSTALLED = true
AS70_BIN_DIR = /opt/SUNWappserver7/bin
AS70_ADMIN_USER = admin
AS70_ADMIN_PASSWD = password
AS70_ADMIN_PORT = 4848
AS70_INSTANCE_CONFIG_DIR = /var/opt/SUNWappserver7/domains/domain1/server1/config
[STATE_DONE Sun ONE Identity Server Policy Agent a15672cb9a086c93b865dd58c4e72641d908cc91]
There are 2 things I'd like to know:
How can I make sure the agent is installed on server2 instance and not on server1?
How do you choose to install the agent on server2?
If I correctly installed the agent on server2, then why does it block the webapp and the portal on server1?

Before installing the agent I already manually created a second instance of the app server on port 81. the problem is that I don't know how to install the agent on server2 instance. the only parameter that has something to do with port or instance is the "PREF_PORT". but according to the doc http://docs.sun.com/source/816-6884-10/chapter2.html#wp20595
it says that the Preferred protocol listening port is the preferred port number on which the application server provides its services.
I'm not quite sure what this means. Do I have to enter the port of the instance where I want to install the agent or the port I want to protect with the agent?
Another way to check if I installed it at the right place would be to check in the app server admin console. the installation created a new item in App server instance > server 1 > security > Realms. Do you know if this is the correct place to appear? or should it be in server2?
thanks

"Unable to load IAmWebPolicy" with Policy Agent 2.2 on Sun App Server 8.2

I'm trying to install the Policy Agent for App Server 9.0/9.1 to App Server 8.2 (which claims to be supported). Identity Manager is the target resource. I get this when I try accessing the /idm root context:
Exception caught in AmWebPolicyManager initializer: Unable to load IAmWebPolicy: com.sun.identity.agents.policy.AmWebPolicy
at com.sun.identity.agents.policy.AmWebPolicyManager.<clinit>(AmWebPolicyManager.java:135)
Thanks,
Steve Maring

You were absolutely correct
I've resolved this issue - the problem was caused by two things:
1. There is a new version of a library called libxml2.so that I had to get from Sun (they provided version 2.6.7)
2. My web server with the agent on it is on a seperate box from the identity server. These two servers were out of sync in terms of their system time (ie, the solaris box with the agent / web server was about 8 minutes ahead of the solaris box with the identity server)
Once both of these things were fixed (the time issue most importantly), the web server would not hang anymore.

Multiple instances of app server

Is it possible to run multiple instances of OracleAS 10g (listening on different ports) on a single Windows 2003 server? What issues would need to be addressed?
Thanks.

I see another thread on this subject. Thanks.

Multiple instances of APPS for the same database?

Since upgrading to 11.5.10, we are not able to have multiple instances of APPS open for the same database. Prior to the upgrade we could which allowed a person to have 2 sessions open with different responsibilities, thus not having to switch each time.
Is there a profile setting/patch etc which will allow this again?
thanks

In my case I think the company's main requirement was to have two separate environments (PROD and TEST) open at the same time which I think is fine.
From memory (don't quote me on this) I don't think the old Personal Home Page is supported from 11.5.10.2 or something.
I think another option was rather than have multiple sessions, add the two functions you are trying to access to the same menu/responsibility then you can open both at the same time.
I just use favourites with one forms function from each responsibility and hardly click on or attempt to navigate the responsibility function list ... this mimics the old functionality.
Also created a few "Copy Favourites" concurrent programs to copy favourites from one user to another or to all users of a responsibility.
Re the old vs new feel - I know the feeling ;-) Ages ago I logged an SR to see if the dynamic tree portlet you get when you integrate with Portal could be used within core Apps, but wasn't possible per standard. Also thought of throwing together a greasemonkey script to achieve the same, but haven't gotten round to that ;-) and it wouldn't work with IE ... maybe one of the OAF gurus might read this and have a crack at it ?!
Gareth

Hi I am searching for a app which i can use to protect games or other apps from my childs. not to protect all only a few

hi im searchingg for an app which i can use to protect games or other apps from my childs. not to protect all only a few

Sorry, but you will not find any such app. The iOS itself is set up such that 3rd parth apps can have almost no interaction with any other app (exceptions being the ability of some to read data from some of the OS included feautures, like Maps reading location information from iOS location services). So there is no way to design an app that would interfere with or restrict how another app works - the iOS simply precludes that.

Policy Agent 2.2 for Apache HTTP Server

hi,
I'm trying to configure Policy Agent 2.2 for apache http server.
The agent seems to be installed properly, in fact when I access the protected resource, I get the Access Manager login page.
Then I log into access manager, but I'm redirected to an error page.
Looking in log files I can see:
agent's "amAgent" log file:
Debug 10763:f8fe0 AuthService: HTTP Status = 200 (OK)
Debug 10763:f8fe0 AuthService: Http::Response::readAndParse(): No content length in response.
Debug 10763:f8fe0 ServiceEngine: Service::do_agent_auth_login(): Setting password callback.
Debug 10763:f8fe0 ServiceEngine: Service::do_agent_auth_login(): Setting name callback to 'apache2Agent'.
Debug 10763:f8fe0 AuthService: BaseService::sendRequest Cookie and Headers =Host: crmzone.company.icteam.it
               Cookie: JSESSIONID=193E5E1590C924A42B95A00A51DC0479;amlbcookie=01
Debug 10763:f8fe0 AuthService: BaseService::sendRequest Content-Length =Content-Length: 620
Debug 10763:f8fe0 AuthService: BaseService::sendRequest Header Suffix =Accept: text/xml
               Content-Type: text/xml; charset=UTF-8
Debug 10763:f8fe0 AuthService: HTTP Status = 200 (OK)
Debug 10763:f8fe0 AuthService: Http::Response::readAndParse(): No content length in response.
Error 10763:f8fe0 AuthService: AuthService::processLoginStatus() Exception message=[Application user ID is not valid.] errorCode='107' templateName=login_failed_template.jsp.
Error 10763:f8fe0 PolicyEngine: am_policy_evaluate: InternalException in AuthService::processLoginStatus() with error message:Exception message=[Application user ID is not valid.] errorCode='107' templateName=login_failed_template.jsp and code:3
Warning 10763:f8fe0 PolicyAgent: am_web_is_access_allowed()(http://10.0.0.31:80/SugarOS-Full-4.5.0f, GET) denying access: status = Access Manager authentication service failure
Debug 10763:f8fe0 PolicyAgent: am_web_is_access_allowed(): Successfully logged to remote server for GET action by user unknown user to resource http://10.0.0.31:80/SugarOS-Full-4.5.0f.
Info 10763:f8fe0 PolicyAgent: am_web_is_access_allowed()(http://10.0.0.31:80/SugarOS-Full-4.5.0f, GET) returning status: Access Manager authentication service failure.
Info 10763:f8fe0 PolicyAgent: process_request(): Access check for URL http://10.0.0.31/SugarOS-Full-4.5.0f returned Access Manager authentication service failure.
Debug 10763:f8fe0 PolicyAgent: process_request(): returning web result AM_WEB_RESULT_ERROR, data []
Debug 10763:f8fe0 PolicyAgent: am_web_process_request(): Rendering web result AM_WEB_RESULT_ERROR
Debug 10763:f8fe0 PolicyAgent: am_web_process_request(): render result function returned AM_SUCCESS.
Access Manager's "amAuthentication.error" log file:
"Login Failed|module_instance|Application" Application AUTHENTICATION-268 dc=opensso,dc=java,dc=net "Not Available" INFO apache2Agent 10.0.0.31 "cn=dsameuser,ou=DSAME Users,dc=opensso,dc=java,dc=net" CRMzone
I tried to change the name of the agent either in its AMAgent.properties or in Access Manager "Agents" configuration page.
I also used "crypt_util" to generate a new passoword, but nothing seems to happen.
Where should I look to get more info about this problem? Specific log file?
Is it due to wrong name/id/password of the agent? I really checked them many times...
Thanks
Fabio

I think the error message "Application user ID is not valid" is pretty self evident.
Log into the amconsole and go to the root realm/organization. Make sure the Agent profile exists and reset the password again to know value. If you created the agent profile in a sub realm/organization, you will need to make sure the subrealm/organization is set in the AMAgent.properties since the default value is / for the root realm/organization. Update the AMAgent.properties file will the Agent ID and the password generated by the crypt_it tool (com.sun.am.policy.am.username, com.sun.am.policy.am.password)
If that doesn't work, check the amApplication debug log and then look at the ldap server access logs to see why the auth bind failed.

Running Multiple Instance of indesign server using com calls

Hello All,
I am new to this community , can anyone help me in understanding how can i run multiple instance of indesign server using com calls.. i am using jacob library in java for com calls ..
Thanks

Hi Soni,
Web colsole --> your domain --> your server --> configuration -->
general --> Listen Port / Listen Address
Regards,
Slava Imeshev
"Soni " <[email protected]> wrote in message
news:3dcfbbcb$[email protected]..
>
Hi:
Is it possible to run two seperate instances of WebLogic server 6.1 onsame the
server both listening on port 80?
Details about the instances:
Instance 1
Domain names : fasnets
Server name: envext
Listen Address : 155.x.x.1
Listen Port : 80 :
External DNS : www.acme.com
Instance 2
Domain names : fasnets1
Server name: envext1
Listen Address : 155.x.x.2
Listen Port : 80 :
External DNS : www.acme1.com
Thanks,
Soni

Configuring multiple instances of weblogic server 7.0 on single machine

Hi,
I am trying to configure multiple instances of weblogic server 7.0 on single machine
( sun Solaris 7). I tried to create everytime new domain. Can anybody help me.
Thanks in advance.
Ravi

You can have several servers under one domain. No need to create a new
domain for each server. Just configure a server and make sure they are
listening on different ports. you are all set.
Kumar
ravikiran wrote:
Hi,
I am trying to configure multiple instances of weblogic server 7.0 on single machine
( sun Solaris 7). I tried to create everytime new domain. Can anybody help me.
Thanks in advance.
Ravi

Install Multiple Instance of sql server

Hi guys,
I have one question. How can i install multiple instance in sql server ( I am using 180 days VHD to access sql server r2 standard edition). I am accessing sql server through Hyper-V Manager. Can anyone guide me please.
Regards,
Jagan

Hello Jagan,
For each instance you have to run the SQL Server installer and assign a unique instance Name during Installation; for each instance the Installation procedure is the same.
Olaf Helper
[ Blog] [ Xing] [ MVP]

Can I run Servlets in the Sun App Server?

I am trying to run a servlet. I am not sure if I can run the same using the Sun app server. any help to clarify the following queries would be appreciated.
1. Should I have to specify a path in the environmental variables?
2. Is there a web site that tells me the same with respect to running the servlet on a Sun app server.
Thanks in advance.
--Srikanta

I'm not sure what you want in regards to question, but I can assure you that you can run servlets in S1AS7. My recommendation is to just package your servlet into a web archive (war) and deploy it. You can deploy it via the commandline (asadmin) or the web based administrative client (likely http://localhost:4848). For more information on this I suggest reading:
http://docs.sun.com/source/816-7150-10/index.html
You must likely want to read the section on assembling and deploying web applications.
Matt Bauer

Policy Agent 2.1 causing Sun Web Server Crash?

Running Sun web server 6.0 SP7 on Solaris. Policy Agent 2.1 installed on web server. Identity Server on different Solaris box. Seeing the following error in log file for Web Server:
[10/Mar/2004:11:21:25] catastrophe (14462): Server crash detected (signal SIGSEGV)
[10/Mar/2004:11:21:25] info (14462): Crash occurred in NSAPI SAF validate_session_policy
[10/Mar/2004:11:21:25] info (14462): Crash occurred in function xmlFreeProp from module /opt/SUNWam/lib/libxml2.so.2
[10/Mar/2004:11:21:25] failure (14461): Child process admin thread is shutting down
[10/Mar/2004:11:21:26] info (15195): Installing a new configuration
This happens sporadically. I've patched the web server to SP7 and made sure it's using a newer version of the JDK (1.4.2_03) - any ideas of what might be causing this? It's not always the same part of the code (ie, not the same function) where it blows up. Sometimes there is no error at all - it just takes the web server process to 50% CPU utilization until we kill it.
Any thought would be most appreciated. I'm also posting this in the web server forum (posted here since it seems to be related to the policy agent)
Thanks,
Pat

You were absolutely correct
I've resolved this issue - the problem was caused by two things:
1. There is a new version of a library called libxml2.so that I had to get from Sun (they provided version 2.6.7)
2. My web server with the agent on it is on a seperate box from the identity server. These two servers were out of sync in terms of their system time (ie, the solaris box with the agent / web server was about 8 minutes ahead of the solaris box with the identity server)
Once both of these things were fixed (the time issue most importantly), the web server would not hang anymore.

Policy agent protected URL auth problem

Hi all,
Anyone knows why the policy agent failed to identify a user with valid cert and ldap pwd and thus allow the user to goto the protected URL resources? (IIS with policy agent 2.0 for W2K)
The IDS server instance was created with security on and "Client Auth" also on. All the accesses worked OK while the "client auth" in not ON. In fact, the user could goto the user profile page with the cert or the LDAP pwd, OAC were all set to enable cert and LDAP=SUCIFICENT even with "client auth" is on, just could not get to the URL it protected. (IDS is running on a Soalris box, V6.0 mtr from the download center)
The policy agent logs shown that the IDS authentication service failure with code 3.
Any hints on that?

When a user clicks the logout button in your Portal application that link needs to send the user to the /amserver/UI/Logout page to terminate the session. You can specify the goto parameter in the link so the user does not see the logout page. You can also specify a particular logout URL pattern in the AMAgent.properties file that when the agent sees a request for that URL it will terminate the session on the AM server and clear out it's cache.

"Open With" drop-down menu has multiple instances of apps

When I right-click on a file and select "Open With", the resulting drop-down menu contains many, many multiple instances of the same app - five Firefox's, five Quicktime Player's, at least three instances of every relevant app. Why is that happening, and how can I clean that menu up?

I happen to have the same problem. However I cannot find the two files in step two:
2.
Trash the following two files in the Macintosh HD > Library > Caches folder:
* com.apple.LaunchServices-0140.csstore
* com.apple.LaunchServices-014nnn.csstore
I did input my UID number as you are told to do so in the instructions. The only I can find is the one in step six a:
6.
Verify that the problem is solved. If not:
1. Trash the com.apple.LaunchServices.plist file in the Home > Library > Preferences folder of the affected account. See Note [3].
Is there a reason as to why I cannot find those files? Oh and I did delete it; all it did was reset the file associations.
Thank you for taking the time to read this post. May your loins be blessed with fertility.
PowerBook6,8 Mac OS X (10.4.8)

Can I set up multiple instances on iPlanet on one server, one to handle clear-text traffic, and one to handle SSL traffic?

Long story, but the iPlanet version is 4.1 SP9. We will be filtering users coming in remotely (via internet VPN or dialup) to the SSL implementation, the internal intranet users to the clear-text implementation... thanks!

Hi,
you can run more then one instance in iWS.
like one for http://www.test.com:80(for TEXT) and other for https://www.test.com:6000
(Note: you couldn't not able to use same port for different instance). I hope this may answer your question.
Thanks,
Daks.

Can policy agent protect multiple instances of app server

Similar Messages

Maybe you are looking for