Changing the value of the login URL when load balancers are used?

Howdy,
We are running Sun access manager 7 and web policy agent 2.2 on two Sun One web servers. Both of these servers sit behind a load-balancer, and the load-balancer is terminating SSL. The servers are named server1.domain and server2.domain, and the load-balancer FQDN customers access is vip.domain (the servers and the VIP are both in the same domain). Our configuration is currently not working, and it looks like the AMAgent.properties "com.sun.am.policy.am.login.url" value is to blame. When we set AMAgent.properties to the value of one of the hosts, the login redirect sent to clients contains the FQDN of one of the hosts. When we change the name of AMAgent.properties to the load-balancer VIP, the policy agent is no longer to talk to the access manager. After spending a ton of time reading through the forums and the available documentation, it looks like the property "com.sun.am.policy.am.library.loginURL" would fix our problem. Well, we set this value to the name of the server, but for some reason the policy agent is still trying to contact the load-balancer using the value that is listed in the com.sun.am.policy.am.login.url property (we verified this by setting the debug level to all:256). Given this information, is there a way to configure the policy agent use a URL that contains the name of the host it resides on, and have clients use a login URL that contains the FQDN of the VIP? I have looked everywhere for an answer to this, but cannot seem to locate one.
Thanks for any insight,
- Ryan

1. have you configured an Access Manager site?
2. The root CA cert should be imported in to the keystore in use wherever the agent has been installed.
3. on the AM servers, put in an fqdn map for the loadbalancer...
When installing an agent, have it point to the load balancer FQDN, along with https as a protocol.
Hope some of this helps.

Similar Messages

  • Is it possible to change the default URL when creating new hyperlinks?

    I'm currently working to take a 128 page catalog that was created in InDesign for print and turn it into a interactive PDF to post on our companies website. The catalog contains thousands of part numbers and I'd like to link each one to its corresponding stock status page on our website that gives current availability and pricing for any particular customer.
    So say I'm dealing with part number "XXXX". When I go to add the hyperlink the default web address it spits out is " http://XXXX ". Instead of that, would it be possible to change the default to " http://forums.adobe.com/discussion/XXXX/1 ". Obviously I just used this website as an example, but it would save so much time if I could avoid having to type the exact same URL every time.
    Or maybe is there a quicker way to do this other than what I am currently trying?
    Thanks

    I've found some external software applications that will do it, so that leads me to believe its not possible within ID CC.

  • How do we change the Login userID to login to a file server

    Hi guys,
    i've been trying to find a way to change the login name when i am connected to a file server. see attached screenshoot.
    In this case, i am logged in as "bssuser". do you guys know where i can change the username and password for this?
    Thx

    Thanks, Kmancer, but no option for "iCloud", only Defaults, Recents, or Camera.  I have latest Mac Air and latest OSX 10.8.5 so options may be different.

  • When I try to change the keyword.url settings in about:config to do a "I'm Felling Lucky" Google search, it just resets to chrome://browser-region/locale/region.properties whenever I restart Firefox.

    I just installed Firefox 4 today. When I try to change the keyword.url settings in about:config to do a "I'm Felling Lucky" Google search, it just resets to chrome://browser-region/locale/region.properties whenever I restart Firefox.

    Start Firefox in [[Safe Mode]] to check if one of the add-ons is causing the problem (switch to the DEFAULT theme: Tools > Add-ons > Appearance/Themes).
    * Don't make any changes on the Safe mode start window.
    See:
    * [[Troubleshooting extensions and themes]]
    See also:
    * http://kb.mozillazine.org/Preferences_not_saved

  • Can I change the currency on the secure url when taking payment for a booking?

    Hi,
    I have a website that takes bookings for training courses, the country of the domain is set to UK.
    The events module is inside a webapp. When they view the details layout of the webapp, the booking form is displayed as on the page.
    I now want to introduce training in Ireland so I need to be able to take the payment in Euros for these events. What I wanted to do is create a sub-domain and set it to a different country so the payment would be in euros but the site redirects back to the secure URL when viewing the webapp item as a payment is taken on this page. As you can only have one secure URL this causes a problem..
    Is there a way to change the currency in the secure domain without changing the country in the domain settings? Can this be done using javascript?
    Any help would be appreciated!
    Thanks,
    Dean

    Whow what a shame, I thought this iPad was going to be terrific.  Guess I'll get out my trusty Cannon from now on, lots less hassle.
    Thank you for the reply!

  • Podcast is having issues since I changed the feed url

    Ever since I changed the feed url for my podcast in itunes I have problems with the feed not working properly.
    http://phobos.apple.com/WebObjects/MZStore.woa/wa/viewPodcast?id=157571623
    When I try to download random files or episodes in this podcast it wont download in itunes. I get an error code (-50) saying it could be a network problem. But if I go to the direct feed url which is this in safari browser. I can click on the mp3 link and it plays just fine. Then after doing that I can go back into itunes and click "get" on the exact same file that wasnt downloading earlier and now it downloads. Very odd. Once that is done all files in itunes download without any problems. I thought it was just something wrong with my itunes. But it only happens for my feed when I subscribe to it. I tried it on my windows system in itunes and having the exact same problem. I called a couple people up and its happeing with them in itunes also. When one of us accesses the feed by way other than itunes it will then work for awhile then go back to not working again. It started happening when I changed the url in itunes to have it point to the feedburner url. Im having the issue right now as a matter of fact. I cant even listen to the preview of each episode. Maybe someone can try the itunes feed and check it out for me. Any ideas?
    Its frustrating. Im wondering if I need to just submit a new podcast to itunes.
    PS: I posted this in itunes for windows, Im using both mac and windows. Its not specific to either OS.

    Im pretty sure the problem has been resolve. We own both the .org and the .com extensions of our website. The primary being the .org and a redirect if a user goes to the .com address. I use feeder to create the podcast feeds and it has an autofill feature in it. Somewhere along the line on the enclosures I inputed the .com address instead of .org. Why the redirect works just fine in most feed readers. Apparently itunes doesnt support it. One of the users in the feedburner forum picked up on this. I corrected all the enclosure urls to .org as they should be and everything so far works fine.

  • Error: You cannot login because an error occurred while retrieving the login URL. (WW

    Situation is this.. was using 8.1.6 EE and Oracle Portal.. was able to get the Oracle Portal page up and after a while the application died.. this happened numerous times. Found in one of these forums that a bug existed (UTL_HTTP) and recommended going to 8.1.7 EE because of a patch. I migrated my 8.1.6 EE to 8.1.7 EE(made sure procedures & packages were valid). I'm able to bring up the Oracle Portal page but when I go to login I get this:
    Error: You cannot login because an error occurred while retrieving the login URL. (WWC-41441)
    Thoughts?

    Hi,
    I ran ssodatan again and got the following error:
    ERROR: Setting Login Server Partner App
    ORA-06508: PL/SQL: could not find program unit being called
    I then found out that the wwsec_sso_enabler_private in the SSO
    schema is invalid and this was causing the above error. I tried
    recompiling the package but got the following error:
    Errors for PACKAGE BODY WWSEC_SSO_ENABLER_PRIVATE:
    LINE/COL ERROR
    151/6 PL/SQL: SQL Statement ignored
    151/13 PLS-00320: the declaration of the type of this
    expression is incomplete or malformed
    151/20 PLS-00336: non-object-table "SECI" illegal in this
    context
    160/4 PL/SQL: SQL Statement ignored
    643/6 PL/SQL: SQL Statement ignored
    643/13 PLS-00320: the declaration of the type of this
    expression is incomplete or malformed
    643/20 PLS-00336: non-object-table "SECI" illegal in this
    context
    LINE/COL ERROR
    651/4 PL/SQL: SQL Statement ignored
    713/4 PL/SQL: SQL Statement ignored
    713/50 PLS-00382: expression is of wrong type
    745/3 PL/SQL: SQL Statement ignored
    746/10 PLS-00389: table, view or alias name "ENBCONFIG" not
    allowed in this context
    The same package in the Portal schema is valid. Will an
    export of this package from a working instance and an import into
    the above instance solve this problem?
    Thanks and Regards,
    Rupesh

  • How to change the login process

    Hi SDN,
    I've set up an Ecommerce 7.0 application with a B2B config. All is running an ok.
    I want to change the login process. We have userid's like 000005999999. In the LoginAction, i want to add this zeros before the id automatically so that the user can login with 5999999.
    My problem is that i don't find the Action which is performed after login.
    The form in the login.jsp looks like this:
    (Sorry i couln't post that code normally because SAP means thats cross site scripting. Remove spaces, then i looks normally)
    for /user/login there should be a forward at config.xml...but it isn't. No entry at config.xml and no entry at config_user.xml.
    Which Action is performed if i press the login button on login.jsp? Can someone help me please?
    Where can i change this Action to a Z_Action ?
    I think its the LoginAction.java... but where is it called? Where can i change the call to the Z_ class?
    For b2c it will be easy to find the LoginAction...there its defined in the config.xml... but at b2b... i really do not understand how that is working. Please help me with that problem.
    Thanks and best regards,
    Toni
    Edited by: Toni Flückiger on Apr 20, 2011 3:45 PM
    Edited by: Toni Flückiger on Apr 20, 2011 3:46 PM

    In web.xml  there is an init-param definition that maps as this:
    <init-param>
      <param-name>config/user</param-name>
      <param-value>/WEB-INF/config_user.xml</param-value>
    </init-param>
    So, all the forward name s with /user prefix  will be checked in the config_user.xml
    If you are trying to define a ZAction and would like to add /user prefix to the forward name, then you have to place it in the config_user.xml.
    Easwar Ram
    http://www.parxlns.com

  • Change the redirect URL sent to reverse proxy

    Hi all,
    My system is composed of a reverse proxy(Apache 2.046) and a backend webserver (Oracle HTTP Server).
    To connect to a web application on the back end web server, the Internet user connect to reverse proxy via HTTPS and the reverse proxy forward the request to backend webserver via HTTP.
    Example :
    Internet user type :
    https://myreverseproxy/myWebApp
    The reverse proxy translate this to :
    http://mybackendserver/myWebApp
    The problem is myWebApp do a redirect like this:
    http://myreverseproxy/myWebApp/login.jsp
    How can I config the reverse proxy to change the redirect URL to :
    https://myreverseproxy/myWebApp/login.jsp
    Thank you in advance

    Hi Ove
        That is working fine.. Only thing i did is mapping node to /author . But is it possible to hit the author instance only wen i type http://localhost:4502/author . Ie: if I type http://localhost:4502 it should not resolve to my login page
    Thanks
    veena

  • Hi, I need someone to help me change the login screen. The computer I have is a macbook, its second hand and probably around 3-4 years old. The previous owner had the login screen has a lego or something. Could someone please help me change this??

    Hi, I need someone to help me change the login screen. The computer I have is a macbook, its second hand and probably around 3-4 years old. The previous owner had the login screen has a lego or something. Could someone please help me change this??

    computerilliterate52 wrote:
    hi all, i hope someone is very computer litterate about java that is i have a dell 2400 pc windows xp 2, well since msn isnt downloading anymore java updates we all have to download a compatible one to our computer i use explorer and i can play www.iwin.com online games, yet when i go on to the msn browswer it wont load the games all i see is it just trying to load and load nothing said and nothing done. what could be wrong it works on ie and not msn browser? i have zone alarm, i have avg spyware tester and spyblaster, but i thought it may of kept me from downloading all this yet it worked on IE please help and i dont have flash player either it wont seem to work any and i mean any help is welcome.i tried to change the browser settings and did all that stuff i am on broadband DSL and they dont seem to know they say that isnt there job its msn's so i asked them and they said no it is quest broadband since i am with them i just get the run around i have IE 6.0 ihave java plug in 1.4.2. o3 yet it says not verified, i have java 1.6.o o1 i have java plugin 1.6.0 01 i have that twice ? dont know why. and java envirinmemet i have the right stuff cuz like i said it plays or works on explorer not msn browserer bar. i see no picture's in center of the page as it tries to load it is a blank page any help thank you i have been trying going on 3 weeks now thanksI agree with the other posters; try Firefox. It sounds like a bit of a mess and what you may need is an onsite PC tech to do some maintenance on your PC.
    Also, learning to properly use punctuation (particularly periods) might not be a bad idea. As it is, your post was very hard to read.
    Good luck!

  • How can I change the default URL in hyperlink inspector

    How can I change the default URL for link to external page in the Hyperlink Inspector?

    You can't change the default url in the inspector.. but an easier way to do it rather than editing the box everytime you need to build a link is to copy the url you want to link to and then highlight the text or image that users will click on and then click enable hyperlink.. when you do that whatever the last url you copied using "command" "C" will automatically be entered into that box and replace "livepage.apple.com"
    It saves alot of time if you are doing alot of links.
    Hope This Helps!

  • How to change the default JRE when there are several version of JRE in Sys

    How to change the default JRE when there are several version of JRE in System?
    i have installed j2sdk1.5.0 then installed j2ee1.4,then installed Weblogic6.1 which use jdk1.3
    Now the JRE is jdk1.3\bin
    When run class that was compiled with jdk1.5,throw:
    java.lang.UnsupportedClassVersionError
    How can i change the jre to 1.5?

    There is a workaround to move from 1.5 version to the older 1.4 version. But this could be specific to the browser setting the JRE version.
    Excerpts from sun docs:
    However, a user can still run older versions. To do so, launch the Java Plug-in Control Panel for the older version, then (re)select the browser in the Browser tab.
    Example:
    Assume you are running on Microsoft Windows with Microsoft Internet Explorer, have first installed version 1.4.2, then version 5.0, and you want to run 1.4.2.
    Go to the j2re1.4.2\bin directory where JRE 1.4.2 was installed. On a Windows default installation, this would be here: C:\Program Files\Java\j2re1.4.2\bin
    Double-click the jpicpl32.exe file located there. It will launch the control panel for 1.4.2.
    Select the Browser tab. Microsoft Internet Explorer might still appear to be set (checked). However, when 5.0 was installed, the registration of the 1.4.2 JRE with Internet Explorer was overwritten by the 5.0 JRE.
    If Microsoft Internet Explorer is shown as checked, uncheck it and click Apply. You will see a confirmation dialog stating that browser settings have changed.
    Check Microsoft Internet Explorer and click Apply. You should see a confirmation dialog.
    Restart the browser. It should now use the 1.4.2 JRE for conventional APPLET tags.
    Details are here
    http://java.sun.com/j2se/1.5.0/docs/guide/deployment/deployment-guide/jcp.html
    My system (Windows XP) has the version 1.5_09 set as the default. However i just installed JRE 1.5_06 and would like to revert back to _06 as the default JRE..
    Will update if i find more information

  • Is there a way to Change the Writing Speed When Burning CD-R's?

    Is there a way to change the writing speed when burning CD-R's?
    I don't see any options in Disk Utility.
    Rob
    P.S. Since I am burning coasters lately with the Pioneer DVR-111D, I though that I might solve the problem by using a lower write speed.

    I dn't believe so with Disk Utility although you can with Roxio Toast Titanium. I would try another media brand, like Verbatim, as a first step and see if the coaster problem goes away.

  • Since updating my iPhone 3GS on my friends laptop, it keeps asking for her iTunes Id not mine. When I log onto a computer it comes up with my Id but from my phone it's my friends. I don't have an option to change the user Id when it pops up either.

    Since updating my iPhone 3GS on my friends laptop, it keeps asking for her iTunes Id not mine. When I log onto a computer it comes up with my Id but from my phone it's my friends. I don't have an option to change the user Id when it pops up either. So I can't update my apps, download songs or games now as it will charge my friend

    Hello, 34sandy. 
    Thank you for the question.  This behavior is normal if updated on another Apple ID account holders computer.  To change the Apple ID on your device, follow the steps in the article below. 
    iOS: Changing the signed-in iTunes Store Apple ID account
    http://support.apple.com/kb/ht1311
    Cheers,
    Jason H. 

  • Can I change the background color when I'm in a brochure layout?

    can I change the background color when I'm in a brochure layout? I've tried making a box in desired color but cannot push it to the back(not an option, it's greyed out)

    Then you are in a Layout template and the shape is already the back most object.
    Peter

Maybe you are looking for