Symantec SiteMinder

 View Only

Tech Tip - CA Single Sign-On:Web Agent: How to configure Single Sign-On Webagent for OHS 12c manually

By Ujwol posted Jun 09, 2016 03:03 AM

  

Introduction:

Following guide explains the steps required to configure OHS 12c manually in the supported Single Sign-On Web Agent release.

 

Environment :

  • Oracle HTTP Server 12c
  • Single Sign-On Web Agent :  Certified Web Agent Version for OHS 12c
  • Operating System : Red Hat Linux

 

Instructions:

Step 1. Changes to httpd.conf file at <Instance Directory>\instance1\config\OHS\ohs1

1. Add LoadModule entry to the DSO Support Section

The following line(s) are added to the Dynamic Shared Object (DSO) Support configuration section, which precedes the Main server configuration section of the file.

LoadModule sm_module "<web_agent_home>/bin/libmod_sm24.so"

e.g.

LoadModule sm_module "/home/siteminder/CA/webagent/bin/libmod_sm24.so"

Note: As OHS 12c is based on Apache 2.4 , libmod_sm24.so needs to be loaded, other library files will not work.

2. Add SmInitFile Entry

This entry is placed after the LoadModule entry that you added in (1). A full path is used, not a relative path.

SmInitFile  "<Path_To_The_Component_Directory>/OHS/<component_name>/WebAgent.conf"

e.g.

SmInitFile "/home/siteminder/Oracle/Middleware/Oracle_Home/user_projects/domains/base_domain/config/fmwconfig/components/OHS/ohs1/WebAgent.conf"

Note :

In the above example , ohs1 is the component/instance name.

3. Alias Entries Added

In the Aliases section of the file, following entries are added to enable SiteMinder features.

Note:

The Alias /siteminderagent/ "<web_agent_home>/samples/"� entry must come after all other aliases in the Aliases section.

Alias /siteminderagent/nocert/[0-9]+/(.*) "/<web_agent_home>/$1"
<Directory "/<web_agent_home>/$1">
Options Indexes MultiViews
AllowOverride None
Require all granted
</Directory>
Alias /siteminderagent/pwcgi/ "/<web_agent_home>/pw/"
<Directory "/<web_agent_home>/pw/">
Options Indexes MultiViews ExecCGI
AllowOverride None
Require all granted
</Directory>
Alias /siteminderagent/pw/ "/<web_agent_home>/pw/"
<Directory "/<web_agent_home>/pw/">
Options Indexes MultiViews ExecCGI
AllowOverride None
Require all granted
</Directory>
Alias /siteminderagent/ "/<web_agent_home>/samples/"
<Directory "/<web_agent_home>/samples/">

e.g.

Alias /siteminderagent/nocert/[0-9]+/(.*) "/home/siteminder/CA/webagent/$1"
<Directory "/home/siteminder/CA/webagent/$1">
Options Indexes MultiViews
AllowOverride None
Require all granted
</Directory>
Alias /siteminderagent/pwcgi/ "/home/siteminder/CA/webagent/pw/"
<Directory "/home/siteminder/CA/webagent/pw/">
Options Indexes MultiViews ExecCGI
AllowOverride None
Require all granted
</Directory>
Alias /siteminderagent/pw/ "/home/siteminder/CA/webagent/pw/"
<Directory "/home/siteminder/CA/webagent/pw/">
Options Indexes MultiViews ExecCGI
AllowOverride None
Require all granted
</Directory>
Alias /siteminderagent/ "/home/siteminder/CA/webagent/samples/"
<Directory "/home/siteminder/CA/webagent/samples/">

 

Step 2. Create WebAgent.conf file with the following content and copy it in  "<Path_To_The_Component_Directory>/OHS/<component_name>"� directory

e.g.  "/home/siteminder/Oracle/Middleware/Oracle_Home/user_projects/domains/base_domain/config/fmwconfig/components/OHS/ohs1/WebAgent.conf"

# WebAgent.conf - configuration file for SiteMinder Web Agent
# Web Agent Version = 12.52, Build = 2112, Update = 1.5

LOCALE=en-US

HostConfigFile="/<web_agent_home>/config/SmHost.conf"
AgentConfigObject="<name_of_aco>"
EnableWebAgent="Yes"
ServerPath="<Path_To_The_Component_Directory>/OHS/<component_name>"
LoadPlugin="/<web_agent_home>/bin/libHttpPlugin.so"
AgentIdFile="<Path_To_The_Component_Directory>/OHS/<component_name>/AgentId.dat"

e.g.

# WebAgent.conf - configuration file for SiteMinder Web Agent
# Web Agent Version = 12.52, Build = 2112, Update = 1.5

LOCALE=en-US

HostConfigFile="/home/siteminder/CA/webagent/config/SmHost.conf"
AgentConfigObject="aco_ohs"
EnableWebAgent="Yes"
ServerPath="/home/siteminder/Oracle/Middleware/Oracle_Home/user_projects/domains/base_domain/config/fmwconfig/components/OHS/ohs1"
LoadPlugin="/home/siteminder/CA/webagent/bin/libHttpPlugin.so"
AgentIdFile="/home/siteminder/Oracle/Middleware/Oracle_Home/user_projects/domains/base_domain/config/fmwconfig/components/OHS/ohs1/AgentId.dat"

(Note : If SmHost.conf is not already created, you can create one by registering the agent with the policy server using smreghost.sh script)

 

Step 3. Create AgentId.dat file with the following content and copy it in <Path_To_The_Component_Directory>/OHS/<component_name> directory

e.g.  "/home/siteminder/Oracle/Middleware/Oracle_Home/user_projects/domains/base_domain/config/fmwconfig/components/OHS/ohs1/AgentId.dat"

GUID=000080fe0000000075939d10c0597d33-0bf0-5643dc86-0bf4-0339021c

(Specify unique GUID value for each of the Agent Instance )

Step 4. Change ohs.plugins.nodemanager.properties file at <Path_To_The_Component_Directory>/OHS/<component_name> directory

e.g.  "/home/siteminder/Oracle/Middleware/Oracle_Home/user_projects/domains/base_domain/config/fmwconfig/components/OHS/ohs1/ohs.plugins.nodemanager.properties"

Adding following entries right below the line where it says "#Environment variable configuration"

environment.NETE_WA_PATH = /<web_agent_home>/bin;
environment.NETE_WA_ROOT = /<web_agent_home>;
environment.append.1.PATH = $NETE_WA_PATH;
environment.append.1.LD_LIBRARY_PATH = $NETE_WA_PATH;
environment.CAPKIHOME = /<web_agent_home>/CAPKI;

e.g.

environment.NETE_WA_PATH = /home/siteminder/CA/webagent/bin;
environment.NETE_WA_ROOT = /home/siteminder/CA/webagent;
environment.append.1.PATH = $NETE_WA_PATH;
environment.append.1.LD_LIBRARY_PATH = $NETE_WA_PATH;
environment.CAPKIHOME = /home/siteminder/CA/webagent/CAPKI;

0 comments
5 views