Symantec Access Management

  • 1.  Configuring SiteMinder, Apache, VirtualHosts and multiple Policy Servers

    Posted Feb 11, 2016 03:37 AM

    Hi all

     

    This is Sascha from Red Hat.

     

    Can you please quickly guide me in how to configure one running Apache httpd with multiple Vhosts to connect to different Policy Servers?

     

    Please also refer to https://communities.ca.com/message/101113471

     

    Thank you very much for help

     

    Kind Regards

    Sascha



  • 2.  Re: Configuring SiteMinder, Apache, VirtualHosts and multiple Policy Servers
    Best Answer

    Broadcom Employee
    Posted May 06, 2016 10:11 AM

    Hi

     

    To configure serveral virtualhosts runnning different configuration of the Web Agent on each, you need to differentiate each WebAgent with the ServerPath and WebAgent.conf file :

     

    Manage Web Agents with Multiple Web Server Instances - CA Single Sign-On - 12.52 SP1 - CA Technologies Documentation

     

    I hope that helps,

     

    Patrick



  • 3.  Re: Configuring SiteMinder, Apache, VirtualHosts and multiple Policy Servers

    Posted May 06, 2016 11:00 AM

    Sascha

     

    If you need to point different Apache instances to different Policy Server you would need different smhost.conf.

     

    There are few things we need to consider and take care of.

     

    • One install of WebAgent.
    • Multiple instances of Apache.
    • ServerPath in WebAgent.conf for Each Apache instance needs to be unique.
    • We could have different WebAgent.conf for different Apache instances. This allows using different ACOs i.e. different log paths for each instance.
    • Mapping Agent Identities to correct hostname in AgentName parameter in a single ACO OR using DefaultAgentName incase we are using different ACOs.
    • We could also generate multiple SmHost.conf (one for each Policy Server infrastructure i.e. Dev / Test / Prodn). Then reference the correct SmHost.conf within the WebAgent.conf to allow each instance of Apache to point to right Policy Server Infrastructure. Suggestion do not mix PreProdn and Prodn instances of Apache on same server.

     

     

     

    RE: Seperate ACOs for Multiple virtual Hosts on apache

    How do I create an Apache virtual host when using a SiteMinder Agent?

    Configuring SiteMinder, Apache and VirtualHosts

     

    CA SiteMinder® Integrated Documents 12.51

    CA SiteMinder® Integrated Documents 12.51

     

     

     

    Regards

     

    Hubert