Installation guide

Configuring the Agent
138 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005
❍ DEBUG: log details about program execution as well as errors, warnings,
and messages
The Oracle SSO Server debug file is defined by the property
debugFile. The
debug file provides debugging information to the Oracle SSO Server. For
further information on how this file should be set, please refer to the Oracle
Application Server 10g documentation.
Additionally, if you want to see where Java exceptions and
System.out.println lines from the SSOTPAMAuth class are logged, you can see
them at the following location:
$ ORACLE_HOME/opmn/logs/OC4J~OCJ4_SECURITY~default_island~1 .
Configuring the Agent
You can configure the agent by modifying the following properties in the file
AMAgent.properties. The AMAgent.properties file can be found in the following
directory:
/etc/opt/SUNWam/agents/apache/config/_Pathinstancename/
The following sections explains the properties you need to set for Oracle9iAS R1
and Oracle Application Server 10g.
Policy Agent for Oracle9iAS R1
To configure the agent for Oracle9iAS R1, you must modify the following
properties in the file AMAgent.properties :
fetchHeaders
Set this value to true so that additional policy response attributes can be
introduced into the HTTP headers.
com.sun.am.policy.am.fetchHeaders=true
headerAttributes
This value represents what policy attributes should be added to the HTTP header
(if the value of fetchHeaders is true ). Set this value to uid|identity-user so that
the user id of Sun ONE Identity Server is passed to Login Server.
com.sun.am.policy.am.headerAttributes=uid|identity-user