Download Red Hat NETSCAPE DIRECTORY SERVER 6.02 - DEPLOYMENT Installation guide

Configuring the Agent
notenforcedList
Since the property reverse_the_meaning_of_notenforcedList is set to true, this
property becomes the list of URLs that the agent enforces (in other words, the
URLs in this list require user authentication to grant access). For example, if the
fully qualified hostname of the system where the Oracle 10g Infrastructure is
installed is agent1.example.com and the port where the Oracle SSO Server is running
is 7777, then this value should be set as follows:
com.sun.am.policy.agents.notenforcedList =
http://agent1.example.com:7777/pls/orasso/ORASSO.wwsso_app_admin.ls_login
http://agent1.example.com:7777/sso/auth*
Note that a space separates the two URLs. Additionally, the value of this property
must not change based on the number or type of partner applications. It should
always be set as detailed above.
logout.url
This value specifies the logout URLs of Oracle SSO Server and the partner
applications. These URLs are never enforced by the agent. When the agent sees any
of these URLs, it checks whether a valid session ID for the user still exists. If one
does exist, the agent invalidates it, which basically logs the user out of Sun ONE
Identity Server. The agent then passes the request onto Oracle SSO Server so that
the logout can be processed there. In this integration, the Logout URL for Oracle
SSO Server and Oracle Portal 3.0.9 are included since the Oracle Portal is the
partner application that was chosen for verification. Note that these values are
separated by only a space. Here is an example:
com.sun.am.policy.agents.logout.url =
http://hostname:port/pls/portal30_sso/PORTAL30_SSO.wwsec_app_priv.logout?p_do
ne_url=http%3A%2F%2F<hostname>%3A<port>%2Fpls%2Fportal30_sso%2FPORTAL30_SS
O.home
http://hostname:port/pls/portal30/PORTAL30.wwsec_app_priv.logout?p_done_url=h
ttp%3A%2F%2F<hostname>%3A<port>%2Fpls%2Fportal30%2FPORTAL30.home
Here, the hostname refers to the host where the agent is installed and the port is the
port of the Oracle HTTP Server. For example, if the hostname is agent1 and the port
is 7779, then this value should be set as follows:
com.sun.am.policy.agents.logout.url=http://agent1:7779/pls/portal30_sso/PO
RTAL30_SSO.wwsec_app_priv.logout?p_done_url=http%3A%2F%2Fagent1%3A7779%2Fp
ls%2Fportal30_sso%2FPORTAL30_SSO.home
http://agent1:7779/pls/portal30/PORTAL30.wwsec_app_priv.logout?p_done_url=
http%3A%2F%2Fagent1%3A7779%2Fpls%2Fportal30%2FPORTAL30.home
Chapter 5
Single Sign-on Solution for Oracle Application Servers
143