Installing Access Manager

Hi All,
I have a question regarding the Access Manager installation.
Is it possbile to install Access Manager to a Directory Server which has Access Manager related data already in it or does Access Manager require a fresh Directory Server with no data in it.
Is the step, Is Directory Server provisioned with user data [No] > , is used to say whether the Directory Server already has data in it.
I know that we need to use the same Encryption Key while instaling the Access Manager to the Directory Server which has data in it. But does this work.
Thanks & Regards.

The question in the installer is worded very poorly.
When installing your first AM server, you will answer 'No'. On the subsequent AM Server installs you will answer 'yes'. And you are correct, you need to use the same Encryption Key.

Similar Messages

What kind of permissions are needed in LDAP to install Access Manager?

Hi people,
I'm trying to install Access Manager in three different machines, and i'll try to configure them in a failover schema, but I'm not the owner of the LDAP where the Access Manager DIT is going to live, my question is what kind of permissions do I need to install it, rigth now I've tried to install it three times and I can't get a succesfull install process, this is a resume of the common errors that I've got in the Java_Enterprise_System_Config_Log.xxxx
adding new entry ou=portalmmm_1.0_n21i,ou=internalData,ou=1.0,ou=SunAMClientData,ou=ClientData,o=bbva
sleep 3
ERROR : Configuring/Loading of the default DIT in the Directory Server failed
CLASSPATH is --- /opt/SUNWam/locale:/etc/opt/SUNWam/config:/opt/SUNWam/lib:/opt/SUNWam/lib/am_services.jar:/opt/SUNWam/lib/ldapjdk.jar:/usr/share/lib/mps/secv1/jss4.jar:/opt/SUNWam/lib/am_sdk.jar
Loading service schema XML files ...
Info 109: Calling SCHEMA MANAGER
Info 110: XML file to import:/etc/opt/SUNWam/config/ums/ums.xml
Info 103: Loading Service Schema XML /etc/opt/SUNWam/config/ums/ums.xml
Loading Service Schema XML /etc/opt/SUNWam/config/ums/ums.xml
Error occured while loading: /etc/opt/SUNWam/config/ums/ums.xml
Error Log:
ldap_modify: Insufficient access
ldap_modify: additional info: Insufficient 'write' privilege to the 'nsslapd-pluginEnabled' attribute of entry 'cn=referential integrity postoperation,cn=plugins,cn=config'.
ldap_modify: Insufficient access
ldap_modify: additional info: Insufficient 'write' privilege to the 'nsslapd-pluginarg10' attribute of entry 'cn=referential integrity postoperation,cn=plugins,cn=config'.
ldap_add: Already exists
ldap_add: Insufficient access
ldap_add: Insufficient access
ldap_add: Insufficient access
ldap_add: Insufficient access
ldap_add: Insufficient access
ldap_add: Already exists
ldap_add: Already exists
ldap_add: Already exists
ldap_add: Already exists
ldap_add: Already exists
ldap_modify: Insufficient access
ldap_modify: additional info: Insufficient 'write' privilege to the 'nsslapd-sizelimit' attribute of entry 'cn=config'.
ldap_modify: Insufficient access
ldap_modify: additional info: Insufficient 'write' privilege to the 'nsslapd-timelimit' attribute of entry 'cn=config'.
ldap_modify: Insufficient access
ldap_modify: additional info: Insufficient 'write' privilege to the 'nsslapd-lookthroughlimit' attribute of entry 'cn=config,cn=ldbm database,cn=plugins,cn=config'.
ldap_add: Already exists
ldap_add: Insufficient access
ldap_add: additional info: Insufficient 'add' privilege to add the entry 'ou=DSAME Users,o=isp'.
ldap_modify: Type or value exists
ldap_modify: Insufficient access
ldap_modify: additional info: Insufficient 'write' privilege to the 'objectClass' attribute of entry 'o=isp'.
ldap_modify: Insufficient access
ldap_modify: additional info: Insufficient 'write' privilege to the 'objectClass' attribute of entry 'o=isp'.
ldap_modify: Insufficient access
ldap_modify: additional info: Insufficient 'write' privilege to the 'objectClass' attribute of entry 'o=isp'.
ldap_add: No such object
ldap_add: matched: o=isp
ldap_add: No such object
ldap_add: matched: o=isp
/opt/SUNWam/bin/amadmin: -Dcom.sun.identity.sm.enableDataStoreNotification=true: not found
Error 29: ServiceManager Exception
Error 10: Cannot process requests:
sms-UNKNOWN_EXCEPTION_OCCURRED
Identity Server Configuration Failed ...
Configuration failed for : ISConfigurator
*** End configuring ISConfigurator***Please suggest...
Thanks in advance
Lalo

You can't install Access Manager without full control on the base organization.
You need the Directory Manager user (maybe with a temporary password) or a user with full permissions on the Access Manager root DN.
Hope It Helps
Saludos!!

Error when installing access manager

Hi im following this install steps:
http://wikis.sun.com/display/CommSuite/Sun+Java+Communications+Suite+6+on+a+Single+Host+(Linux)
i cannot install access manage from JES in my RH4
during installation i see the error in the instal log:
Java not found at ${JAVA_HOME}/bin/java|#]
[#|2008-09-09T18:56:26-05:00|SEVERE|JavaES|JavaESConfig|_versionID=1.0;_threadID=11;_SourceJavaFile=IdentityServLinuxConfigurator;_SourceMethodName=execConfigScipt();_JavaESMessageID=JavaES_ConfigIS24;_JavaESResourceBundle=EntSysLoggingResources;_JavaESArg1=2|Access Manager Configuration Failed ...2|#]
[#|2008-09-09T18:56:26-05:00|FINE|JavaES|JavaESConfig|_versionID=1.0;_threadID=11;_SourceJavaFile=IdentityServLinuxConfigurator;_SourceMethodName=execConfigScipt();_JavaESMessageID=JavaES_ConfigIS10;_JavaESResourceBundle=EntSysLoggingResources|Exiting Method|#]look at my java_home:
[root@xxx Linux_x86]# ${JAVA_HOME}/bin/java -version
java version "1.5.0_16"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_16-b02)
Java HotSpot(TM) Server VM (build 1.5.0_16-b02, mixed mode)
cd ${JAVA_HOME}/bin/
[root@xxx bin]# ls -la java
-rwxr-xr-x 1 root root 64280 May 28 04:48 javathanks for the help.

JavierGalindo wrote:
[root@xxx Linux_x86]# ${JAVA_HOME}/bin/java -version
java version "1.5.0_16"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_16-b02)
Java HotSpot(TM) Server VM (build 1.5.0_16-b02, mixed mode)
Your problem may indeed be due to JAVA_HOME pointing to a JRE install vs. the full JDK install which is provided by the JES installer. My own test installation which I based in the installation guide on doesn't have JAVA_HOME set e.g.
[root@server bin]# env | grep JAVA_HOME
[root@melkor bin]#Try un-setting the JAVA_HOME environment setting (e.g. unset JAVA_HOME) and reattempt the install.
Regards,
Shane.

Not able to install Access Manager 7.1 in Legacy Mode with amsamplesilent

HI All,
I am building test setup on Solaris Zones.Recently it was patched to following level *5.10 Generic_138888-03*
I am trying to install Access Manager in Legacy mode with amsamplesilent file.
SERVER_NAME=sesamesso1
SERVER_HOST=$SERVER_NAME.example.com
SERVER_PORT=80
ADMIN_PORT=8989
DS_HOST=ssoldap1.example.com
DS_DIRMGRPASSWD=l0cuz123
ROOT_SUFFIX="dc=example,dc=com"
SM_CONFIG_BASEDN=$ROOT_SUFFIX
ADMINPASSWD=l0cuz123
AMLDAPUSERPASSWD=l0cuz123am
DEBUG_LEVEL=error
DEBUG_DIR=/logs/sso/debug
COOKIE_DOMAIN=.example.com
AM_ENC_PWD=""
NEW_OWNER=wbsrv
NEW_GROUP=javaes
PAM_SERVICE_NAME=other
WEB_CONTAINER=WS
AM_REALM=disabledBut AM is getting installed in Realm Mode. I need to install portal server with this Access Manager.
please confirm,I am doing any mistake in my installation and please let me know whether portal server supports access manager realm mode or not.
Thanks in Advance
Madhu

Thanks for the reply.
I will give a try to install sun portal server 7.2 with accessmanager 7.1 in realm mode.Before patch updation my solaris sparc OS level was *5.10 Generic_118833-36* and I was able to install access manager 7.1 in legacy mode
Is there any thing to be done for new patch level(*5.10 Generic_138888-03*) to install access manager 7.1 in legacy mode.
Please let me know
Thanks
Madhu

Question on installing Access Manager 2005Q4

Hello everyone,
I have a question on installing access manager. It looks like access manager has to be installed into a web server running as root. The install program even warns you and gives you the option to fix it. After install does access manager still have to run as root, or can the web servers owner and group be changed back to webserved:webserved.
It would be nice not to have to run the web server as root just to have access manager working.
Also if it is possible to change the owner, could somebody point me to some directions to make sure I do it correctly.
Thanks for your help,
Gary

Is it possible to have the ldap servers running on port 389 and the web server running on port 80.One way you can do this (if you are on Solaris 10) is to use RBAC with a user in the net_privaddr role. See http://www.sun.com/bigadmin/features/articles/least_privilege.html for more information.
If a person already has an installed version as root, can it be changed to a non root user, or would it be just to much of a nightmare to do.That's what the doc describes how to do. Should not be a big problem but you might have to make a few adjustments depending on how far you've already gone with the install and config.
Does the ldap server and web server having to be running as the same user?No, you can use separate users.
HTH,
David

Installing Access Manager under App Server platform

We have done an install of Access Manager 2005Q1 under App Server platform edition 2005Q1 (v8.1) on Linux Redhat Enterprise edition (v3).
When starting up Access Manager, we get a NoClassDefFound exception. Some postings mention some issues with the SUN mobile access, and suggest uninstalling / reinstalling, but these seem to apply to Solaris only. We have had no luck with this suggestion with Linux.
Does anyone have any other suggestions?
Thanx,
GB
[#|2005-09-14T10:50:34.118-0700|SEVERE|sun-appserver-pe8.1_01|javax.enterpri
se.system.container.web|_ThreadID=10;|WebModule[/a
mserver]Exception starting filter amlcontroller
java.lang.NoClassDefFoundError
at com.iplanet.services.ldap.LDAPUser.getPasswd(LDAPUser.java:117)
at
com.iplanet.services.ldap.ServerInstance.getPasswd(ServerInstance.java:128)
at
com.sun.identity.security.ServerInstanceAction.run(ServerInstanceAction.java
:92)
at java.security.AccessController.doPrivileged(Native Method)
at com.iplanet.ums.DataLayer.getInstance(DataLayer.java:210)
at
com.sun.identity.sm.ldap.SMSLdapObject.initialize(SMSLdapObject.java:143)
at
com.sun.identity.sm.ldap.SMSLdapObject.<init>(SMSLdapObject.java:118)
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native
Method)
at
sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAcces
sorImpl.java:39)
at
sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstruc
torAccessorImpl.java:27)
at java.lang.reflect.Constructor.newInstance(Constructor.java:274)
at java.lang.Class.newInstance0(Class.java:308)
at java.lang.Class.newInstance(Class.java:261)
at com.sun.identity.sm.SMSEntry.<clinit>(SMSEntry.java:116)
at
com.sun.identity.sm.ServiceSchemaManager.<clinit>(ServiceSchemaManager.java:
67)
at
com.iplanet.am.util.AMClientDetector.getServiceSchemaManager(AMClientDetecto
r.java:219)
at
com.iplanet.am.util.AMClientDetector.<clinit>(AMClientDetector.java:94)
at com.sun.mobile.filter.AMLController.init(AMLController.java:85)
at
org.apache.catalina.core.ApplicationFilterConfig.getFilter(ApplicationFilter
Config.java:229)
at
org.apache.catalina.core.ApplicationFilterConfig.setFilterDef(ApplicationFil
terConfig.java:312)
at
org.apache.catalina.core.ApplicationFilterConfig.<init>(ApplicationFilterCon
fig.java:83)
at
org.apache.catalina.core.StandardContext.filterStart(StandardContext.java:38
81)
at
org.apache.catalina.core.StandardContext.start(StandardContext.java:4528)
at com.sun.enterprise.web.WebModule.start(WebModule.java:241)
at
org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1086)
at
org.apache.catalina.core.StandardHost.start(StandardHost.java:833)
at
org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1086)
at
org.apache.catalina.core.StandardEngine.start(StandardEngine.java:483)
at org.apache.catalina.startup.Embedded.start(Embedded.java:894)
at com.sun.enterprise.web.WebContainer.start(WebContainer.java:707)
at
com.sun.enterprise.web.PEWebContainer.startInstance(PEWebContainer.java:507)
at
com.sun.enterprise.web.PEWebContainerLifecycle.onStartup(PEWebContainerLifec
ycle.java:54)
at
com.sun.enterprise.server.ApplicationServer.onStartup(ApplicationServer.java
:300)
at com.sun.enterprise.server.PEMain.run(PEMain.java:294)
at com.sun.enterprise.server.PEMain.main(PEMain.java:220)
|#]

Everytime I click the Access Manager in the JES 2005Q4installer the directory server would click itself. Unchecking this prompted me for a remote repository which worked.
I wasn't able to get the install to complete with the state file, it stopped before configuring access manager.

Installing Access Manager and Directory Server

Can I install the Access Manager 2005Q4 without installing the directory server?
The products selected for installation have dependency requirements or installation options as indicated below.
Sun Java(TM) System Directory Server 5 2005Q4
------------------------------------------------------------------------

Everytime I click the Access Manager in the JES 2005Q4installer the directory server would click itself. Unchecking this prompted me for a remote repository which worked.
I wasn't able to get the install to complete with the state file, it stopped before configuring access manager.

How to Install Access Manager on Linux

Has anyone installed Oracle Access Manager on Linux.
When I unziped file I did not get "Setup" instead got a file
Oracle_Access_Manager10_1_4_0_1_linux_Identity_Server
when I ran $./Oracle_Access_Manager10_1_4_0_1_linux_Identity_Server
I am not getting GUI installer
Thanks

try running the installer with -gui key

Installing Access Manager 7.1 in JBoss

Hello
From the Access Manager Release Notes: Web Containers supporting:
Sun Java System Web Server
Sun Java System Application Server
BEA WebLogic
IBM WebSphere Application Server
But, �Do anyone know if it's possible to install in Jboss or Apache Tomcat?
�have anyone do it?
Thank you

Hello
From the Access Manager Release Notes: Web Containers supporting:
Sun Java System Web Server
Sun Java System Application Server
BEA WebLogic
IBM WebSphere Application Server
But, �Do anyone know if it's possible to install in Jboss or Apache Tomcat?
�have anyone do it?
Thank you

Access Manager Basic install (Weblogic Suite)

Greetings.
We want to install Access Manager but our customer has Oracle WebLogic Suite license, I understand that there is a restriction in that license and only Access Manager Basic is supported.
I don't know how to install Oracle Access Manager 11g only, because oracle oam 11g is bundled with Oracle Identity and Access Manager 11g. I don't want to install Oracle Identity Manager because there isn't included in the WebLogic Suite license.
Could anybody tell me how to install OAM 11g to comply with the OAM basic restrictions included in Oracle Weblogic suite.
Thanks
Ramiro Ortíz.

While installing Oracle fusion middleware suite, you'll get list of product to be installed, you can select only 'Oracle Access Manager' there to install only OAM.
regards,
GP

Problem with second instance of access manager

Well, after sorting out things with the first install of access manager, I went on to install a second instance on a different host (it's required for delegated admin..)
Here are the options I used on install:
Access Manager: Administration (1 of 6)
Administrator User ID: amAdmin
Administrator Password [] {"<" goes back, "!" exits}:
Retype Password [] {"<" goes back, "!" exits}:
LDAP User ID: amldapuser
LDAP Password [] {"<" goes back, "!" exits}:
Retype Password [] {"<" goes back, "!" exits}:
Password Encryption Key [gFoe4t8UlUW3wEApngAY3S8bCQFVMlGk] {"<" goes back,
"!" exits}: weW5jtopMLQsODiBZDp+hlEp1/CtbiXX
Install type (Realm/Legacy) Mode [Legacy] {"<" goes back, "!" exits}:
Access Manager: Web Container (2 of 6)
1. Sun Java System Application Server
2. Sun Java System Web Server
Select the container to deploy the component and hit enter key [2] {"<" goes
back, "!" exits}
Access Manager: Sun Java System Web Server (3 of 6)
Host Name [zone2.corenode.com] {"<" goes back, "!" exits}:
Web Server Instance Directory [opt/SUNWwbsvr/https-zone2.corenode.com] {"<"
goes back, "!" exits}:
Web Server Port [80] {"<" goes back, "!" exits}:
Document Root Directory [opt/SUNWwbsvr/docs] {"<" goes back, "!" exits}:
Secure Server Instance Port [No] {"<" goes back, "!" exits}:
Access Manager: Web Container for running Access Manager Services(4 of 6)
Host Name [zone2.corenode.com] {"<" goes back, "!" exits}:
Services Deployment URI [amserver] {"<" goes back, "!" exits}:
Common Domain Deployment URI [amcommon] {"<" goes back, "!" exits}:
Cookie Domain(Assure it is not a top level domain) [.corenode.com] {"<" goes
back, "!" exits}:
Administration Console [Yes] {"<" goes back, "!" exits}:
Console Deployment URI [amconsole] {"<" goes back, "!" exits}:
Password Deployment URI [ampassword] {"<" goes back, "!" exits}:
Access Manager: Directory Server Information (5 of 6)
Directory Server Host [] {"<" goes back, "!" exits}: zone1.corenode.com
Directory Server Port [] {"<" goes back, "!" exits}: 389
Directory Root Suffix [dc=corenode,dc=com] {"<" goes back, "!" exits}:
Directory Manager DN [cn=Directory Manager] {"<" goes back, "!" exits}:
Directory Manager Password [] {"<" goes back, "!" exits}:
Access Manager: Directory Server Information (6 of 6)
Is Directory Server provisioned with user data [No] {"<" goes back, "!"
exits}? Yes
Organization Marker Object Class [sunISManagedOrganization] {"<" goes back,
"!" exits}:
Organization Naming Attribute [o] {"<" goes back, "!" exits}:
User Marker Object Class [inetorgperson] {"<" goes back, "!" exits}:
User Naming Attribute [uid] {"<" goes back, "!" exits}:
Yes, I am using the same key as was used on host1 for access manager. Yes, access manager on host 1 is quite functional right now. Yes, that directory server works. Now I'm really stumped on what to do! Everything in JES seems to work great except access manager, the exceptions it throws really don't help any at all in troubleshooting.
Any ideas?

More info from error logs:
# pwd
/var/opt/SUNWam/debug
# tail -200 amAuth
04/12/2006 09:56:47:127 AM HST: Thread[main,5,main]
ERROR: AuthD failed to get auth session
04/12/2006 09:56:47:165 AM HST: Thread[main,5,main]
ERROR: AuthD init()
com.iplanet.dpro.session.SessionException: AuthD failed to get auth session
at com.sun.identity.authentication.service.AuthD.initAuthSessions(AuthD.java:709)
at com.sun.identity.authentication.service.AuthD.<init>(AuthD.java:229)
at com.sun.identity.authentication.service.AuthD.getAuth(AuthD.java:494)
at com.sun.identity.authentication.UI.LoginLogoutMapping.init(LoginLogoutMapping.java:71)
at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:921)
at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:813)
at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:3478)
at org.apache.catalina.core.StandardContext.start(StandardContext.java:3760)
at com.iplanet.ias.web.WebModule.start(WebModule.java:251)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1133)
at org.apache.catalina.core.StandardHost.start(StandardHost.java:652)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1133)
at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:355)
at org.apache.catalina.startup.Embedded.start(Embedded.java:995)
at com.iplanet.ias.web.WebContainer.start(WebContainer.java:431)
at com.iplanet.ias.web.WebContainer.startInstance(WebContainer.java:500)
at com.iplanet.ias.server.J2EERunner.confPostInit(J2EERunner.java:161)
# tail -200 amSession
04/12/2006 09:56:47:098 AM HST: Thread[main,5,main]
ERROR: SessionService.SessionService(): Initialization Failed
com.iplanet.services.naming.ServerEntryNotFoundException: Cannot find server ID.
at com.iplanet.services.naming.WebtopNaming.getServerID(WebtopNaming.java:350)
at com.iplanet.dpro.session.service.SessionService.<init>(SessionService.java:1540)
at com.iplanet.dpro.session.service.SessionService.getSessionService(SessionService.java:382)
at com.sun.identity.authentication.service.AuthD.getSS(AuthD.java:685)
at com.sun.identity.authentication.service.AuthD.initAuthSessions(AuthD.java:706)
at com.sun.identity.authentication.service.AuthD.<init>(AuthD.java:229)
at com.sun.identity.authentication.service.AuthD.getAuth(AuthD.java:494)
at com.sun.identity.authentication.UI.LoginLogoutMapping.init(LoginLogoutMapping.java:71)
at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:921)
at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:813)
at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:3478)
at org.apache.catalina.core.StandardContext.start(StandardContext.java:3760)
at com.iplanet.ias.web.WebModule.start(WebModule.java:251)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1133)
at org.apache.catalina.core.StandardHost.start(StandardHost.java:652)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1133)
at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:355)
at org.apache.catalina.startup.Embedded.start(Embedded.java:995)
at com.iplanet.ias.web.WebContainer.start(WebContainer.java:431)
at com.iplanet.ias.web.WebContainer.startInstance(WebContainer.java:500)
at com.iplanet.ias.server.J2EERunner.confPostInit(J2EERunner.java:161)
04/12/2006 09:56:47:126 AM HST: Thread[main,5,main]
ERROR: Error creating service session
java.lang.NullPointerException
at com.iplanet.dpro.session.service.SessionService.generateEncryptedID(SessionService.java:588)
at com.iplanet.dpro.session.service.SessionService.generateSessionId(SessionService.java:612)
at com.iplanet.dpro.session.service.SessionService.newInternalSession(SessionService.java:557)
at com.iplanet.dpro.session.service.SessionService.getServiceSession(SessionService.java:501)
at com.iplanet.dpro.session.service.SessionService.getAuthenticationSession(SessionService.java:408)
at com.sun.identity.authentication.service.AuthD.initAuthSessions(AuthD.java:706)
at com.sun.identity.authentication.service.AuthD.<init>(AuthD.java:229)
at com.sun.identity.authentication.service.AuthD.getAuth(AuthD.java:494)
at com.sun.identity.authentication.UI.LoginLogoutMapping.init(LoginLogoutMapping.java:71)
at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:921)
at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:813)
at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:3478)
at org.apache.catalina.core.StandardContext.start(StandardContext.java:3760)
at com.iplanet.ias.web.WebModule.start(WebModule.java:251)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1133)
at org.apache.catalina.core.StandardHost.start(StandardHost.java:652)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1133)
at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:355)
at org.apache.catalina.startup.Embedded.start(Embedded.java:995)
at com.iplanet.ias.web.WebContainer.start(WebContainer.java:431)
at com.iplanet.ias.web.WebContainer.startInstance(WebContainer.java:500)
at com.iplanet.ias.server.J2EERunner.confPostInit(J2EERunner.java:161)
#

Am not able to get the Access manager 7- login page

I have installed Access Manager and configured it was worked. but i did the Policy agent cofiguration for Access Manager after that i couldn't login to Access manager ie /amserver while on trying http://localhost:8080/amserver/UI/Login
am getting the following error
exception
javax.servlet.ServletException
     org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:300)
     org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:165)
     java.security.AccessController.doPrivileged(Native Method)
     com.sun.mobile.filter.AMLController.doFilter(AMLController.java:163)
root cause
java.lang.NoClassDefFoundError
     com.sun.identity.authentication.server.AuthContextLocal.(AuthContextLocal.java:140)
     com.sun.identity.authentication.service.LoginState.createAuthContext(LoginState.java:1121)
     com.sun.identity.authentication.service.AuthUtils.getAuthContext(AuthUtils.java:310)
     com.sun.identity.authentication.service.AuthUtils.getAuthContext(AuthUtils.java:250)
     com.sun.identity.authentication.UI.LoginViewBean.forwardTo(LoginViewBean.java:325)
     com.iplanet.jato.ApplicationServletBase.dispatchRequest(ApplicationServletBase.java:981)
     com.iplanet.jato.ApplicationServletBase.processRequest(ApplicationServletBase.java:615)
     com.iplanet.jato.ApplicationServletBase.doGet(ApplicationServletBase.java:459)
     javax.servlet.http.HttpServlet.service(HttpServlet.java:747)
     javax.servlet.http.HttpServlet.service(HttpServlet.java:860)
     sun.reflect.GeneratedMethodAccessor115.invoke(Unknown Source)
     sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     java.lang.reflect.Method.invoke(Method.java:585)
     org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:249)
     java.security.AccessController.doPrivileged(Native Method)
     javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
     org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:282)
     org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:165)
     java.security.AccessController.doPrivileged(Native Method)
     com.sun.mobile.filter.AMLController.doFilter(AMLController.java:163)
please any do some need full to solve this problem
regards
vimalraj.s

Guys,
This is a common problem that I have noticed when policy agent is installed on the same DAS (Domain Admin Server of Sun java Application Server) instance where access manager is installed.
Best solution is to deploy your application on a different DAS and configure / install policy agent for the new DAS.
If web server is used for Access Manager, Deploy your application on a different instance.
Alternatively, follow these instructions.
Assume that you have policy agent binary installed on /opt/SUNWam/policyagent/ j2ee_agents/am_as81_agent.
When policy agent is configured, it creates a new configuration folder named agent_001.
1.     Login to DAS and remove the class path changes done by the policy agent installer.
These are the class path to remove:
/opt/SUNWam/ policyagent /j2ee_agents/am_as81_agent/lib/agent.jar
/opt/SUNWam/ policyagent /j2ee_agents/am_as81_agent/lib/amclientsdk.jar
/opt/SUNWam/ policyagent /j2ee_agents/am_as81_agent/locale
/opt/SUNWam/ policyagent /j2ee_agents/am_as81_agent/agent_001/config
2.     Add these to the class path to the end of the class path suffix. NOT AT THE START
/opt/SUNWam/ policyagent /j2ee_agents/am_as81_agent/lib/agent.jar
/opt/SUNWam/ policyagent /j2ee_agents/am_as81_agent/lib/locale
3.     Insert amclientsdk.jar to the classpath. Insert this before agent.jar but after am_*.jar files (am_sdk.jar,am_services.jar,am_sso_provider.jar,am_logging.jar )
4.     open amConfig.properties . Add this line to the bottom of the file.
com.sun.identity.agents.config.location=/opt/SUNWam/ policyagent /j2ee_agents/am_as81_agent/agent_001/config/AMAgent.properties
Above line points to the policy agent configuration file.
5.     last but not the least:
a.     Make sure that an agent is created in Access manager with the same name and password as the one that you gave when installing policy agent.
b.     Set property com.sun.identity.agents.config.filter.mode = SSO_ONLY in AMAgent.properties. This will help initial testing of the configuration.
c.     Above configuration is for Unix. But shouldwork for other OS as well.
Best of Luck
KK

Access Manager + Portal Server + Zones + Subnets

Hi
Appreciate your help.
I'm installing Access Manager and Portal Server, this is the environment:
- 3 machines - Solaris 10, 2 local zones per machine
ie
root@global1 # zoneadm list -cv
ID NAME STATUS PATH
0 global running /
1 accesclbp1 running /zone-access
2 portalclbp1 running /zone-portal
Every local zone assigned to Portal Server and the global zone lives on the same VLAN, and every local zone assigned to AM lives on a different VLAN.
The failover of AM is been working rigth now, but I have a problem trying to install the Portal Server's, when I try to connect to AM through the VIP I'm loosing the connections to AM, sometimes I can connect and sometimes is not possible.
Somebody has an environment like this? PS + AM + zones + subnets???

We have this configuration as well.
A few things we have experienced during installation:
1. If Access Manager is https the Portal install fails even the cert is included in the installer JVM.
2. Zones: We use DNS and in nsswitch.conf - hosts and ipnodes were both set to files dns. Once I changed ipnodes to files only problem disappeared.
3. Check that Password Encryption Key is the same across the AMSDKs and the Access Manager servers.

How do I configure Access Manager?

I don't have idea how to configure Access Manager, I installed ans configure Directory and Web Server and working well, but I need to configure access Manager, there is a script called " amsamplesilent " it has some variables that i dont understand very well, how do I do to configure?
Plz help me.

So you used "configure later" option while installing Access Manager - correct?
amsamplesilent is not a script - it's an input file for the command "amconfig"
copy this file and adjust it to your settings (which variables haven't you understood?)
run amconfig -f <your_sample_install_file>
-Bernhard

Regarding Access Manager Console Not Coming

Hi
I had installed glass fish application server on one zone.....its working fine.....then i try to install access manager 7.1 on same zone it shows successfully installed in the logs....then i try to open access console through firefox....*it showing the erroor:-http status 500 ....root cause [java.lng .null pointer exception]*
My directory server 6.3 is working fine and it is on some other zone ...
kindly tell me what's going wrong...
Thanks
Sarvar Ahmed

welcome.eis wrote:
I had installed glass fish application server on one zone.....its working fine.....then i try to install access manager 7.1 on same zone it shows successfully installed in the logs....then i try to open access console through firefox....*it showing the erroor:-http status 500 ....root cause [java.lng .null pointer exception]*As this question has nothing to do with Messaging Server I suggest asking this question in the Access Manager forum instead:
http://forums.sun.com/forum.jspa?forumID=760
Regards,
Shane.

Installing Access Manager

Similar Messages

Maybe you are looking for