Communication Express with AM SDK

Question

I'm installing JES on 3 hosts. One is Directory Server, one has Access Manager and the third one should have Messaging + Communication Express.
On the third host I need to install MS, Web Server, Acess Manager SDK and Administration Server.
I install all of them and use "configure later".
The config of Adm Serv, Web Serv goes quick.
Then AM SDK via silent config.
I receive one error:
chown: jaxrpc-spi.jar: No such file or directoryBut the configuration ends.
Then I config MS and finally CE ( uwc ).
After restarting WebServ with CE/uwc I receive
"Not Found" in place of uwc.
When I do it alltogether on one host it's quick and easy.
What's wrong?
I think a AM SDK configuration is the point.
I'm not sure about few options:
DEPLOY_LEVEL=?
  3 = Install Access Manager SDK only
  4 = Install SDK only and configure the containerDIRECTORY_MODE=?
I've chosen 4.
Anyone?

Answer 1

This just came by my desk. . .
1) First check if the webserver runtime owner is root:other. In other words the runtime owner should
be the same for AM Server, AM SDK and UWC. It is preferred that the runtime owner be root:other
If the runtime owner for the webserver is not root (but webservd) then do the following
a) change the ownership of /opt/SUNWwbsvr/https-host.domain.com directory to root:other (recursively)
b) Edit the /opt/SUNWwbsvr/https-host.domain.com/config/magnus.conf file and change the line containing
"user webservd" to "user root"
c) restart the webserver
2) Checking of AM SDK. Run the following command from the frontend AM SDK location and should see
some output like the following
/opt/SUNWam/bin # ./amadmin -u amadmin -w password -m http://zaptos.red.iplanet.com:80
Get Sessions: Server Name = http://zaptos.red.iplanet.com:80
[Current Session] User Id: amAdmin Time Remain: 120 Max Session Time: 120 Idle Time: 0 Max Idle Time: 30
To invalidate sessions, enter the index numbers
[CR without a number to exit]:
Success 0: Successfully completed
3) If the above didn't work as expected, then follow this step. Create a new state file for AM SDK configuration
#cat amsamplesilent.uwc
DEPLOY_LEVEL=4
SERVER_PROTOCOL=http
SERVER_NAME=AM_SERVER_HOSTNAME #### (AM server hostname)
SERVER_HOST=AM_SERVER_HOSTNAME_FQDN #### (AM server hostname fully qualified domain name)
SERVER_PORT=AM_SERVER_WEB_CONTAINER_PORT
ADMIN_PORT=AM_SERVER_WEB_ADMIN_PORT
DS_HOST=DS_HOSTNAME_FQDN #### (Directory server hostname)
DS_DIRMGRPASSWD=DM_PASSWORD
ROOT_SUFFIX=UG_SUFFIX
ADMINPASSWD=AMADMIN_PASSWORD
AMLDAPUSERPASSWD=AMLDAPUSERPASSWORD
COOKIE_DOMAIN=.iplanet.com
AM_ENC_PWD="myQDWqCBhvI0bfp/BF/1b7+k/BiEpVcY" #### Got this from AMConfig.properties file
NEW_OWNER=root
NEW_GROUP=other
WEB_CONTAINER=WS6
SSL_PASSWORD="sample"
BASEDIR=/opt/SUNWam
CONSOLE_HOST=$SERVER_HOST
CONSOLE_PORT=$SERVER_PORT
CONSOLE_PROTOCOL=$SERVER_PROTOCOL
CONSOLE_REMOTE=true ##### This was false before, I modified this
SERVER_DEPLOY_URI=/amserver
if [ $DEPLOY_LEVEL -eq 2 -o $DEPLOY_LEVEL -eq 12 ]; then
CONSOLE_DEPLOY_URI=$SERVER_DEPLOY_URI
else
CONSOLE_DEPLOY_URI=/amconsole
fi
PASSWORD_DEPLOY_URI=/ampassword
COMMON_DEPLOY_URI=/amcommon
DIRECTORY_MODE=4 #### this was 1 before. I modified this
DS_PORT=389
DS_DIRMGRDN="cn=Directory Manager"
USER_NAMING_ATTR=uid
ORG_NAMING_ATTR=o
ORG_OBJECT_CLASS=sunismanagedorganization
USER_OBJECT_CLASS=inetorgperson
DEFAULT_ORGANIZATION=
JAVA_HOME=/usr/jdk/entsys-j2se
AM_REALM=disabled
PLATFORM_LOCALE=en_US
XML_ENCODING=ISO-8859-1
NEW_INSTANCE=false
############### Required for Web Server ###############################
WS61_INSTANCE=https-COMMS_EX_HOSTNAME_FQDN #### I modified this to reflect frontend hostname
WS61_HOME=/opt/SUNWwbsvr
WS61_PROTOCOL=$SERVER_PROTOCOL
WS61_HOST=$SERVER_HOST
WS61_PORT=$SERVER_PORT
WS61_ADMINPORT=$ADMIN_PORT
WS61_ADMIN="admin"
WS61_IS_SECURE=false
DIRECTORY_MODE=4
DS_PORT=389
DS_DIRMGRDN="cn=Directory Manager"
USER_NAMING_ATTR=uid
ORG_NAMING_ATTR=o
ORG_OBJECT_CLASS=sunismanagedorganization
USER_OBJECT_CLASS=inetorgperson
DEFAULT_ORGANIZATION=
JAVA_HOME=/usr/jdk/entsys-j2se
AM_REALM=disabled
4) Take a backup of /etc/opt/sun/identity/AMConfig.properties. Check the content of the following lines in that file
com.iplanet.am.directory.host=AM_SERVER_HOSTNAME_FQDN
com.iplanet.am.server.host=AM_SERVER_HOSTNAME_FQDN
com.iplanet.am.console.host=AM_SERVER_HOSTNAME_FQDN
com.iplanet.am.profile.host=AM_SERVER_HOSTNAME_FQDN
com.iplanet.am.naming.url=http://AM_SERVER_HOSTNAME_FQDN:WEBCONTAINER_PORT/amserver/namingservice
com.iplanet.am.notification.url=http://COMMS_EX_HOSTNAME_FQDN:WEBCONTAINER_PORT/notificationservice
5) Make sure the default domain contains the CORE and LDAP services
(can be found using the amconsole, check in the services tab)
6) Make sure the uwcauth.properties reads the complete dn for the variable uwcauth.identity.binddn as shown below
!Bind DN of AdmAdmin
uwcauth.identity.binddn=uid=amadmin,ou=people,o=usergroup