Installation guide

Before You Begin Installation
26 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005
a valid hostname in the URL, it redirects the user to the corresponding URL with a
valid hostname. The difference between the redirect URL and the URL originally
used by the user is only the hostname, which is changed by the agent to a fully
qualified domain name (FQDN) as per the value specified in this property.
This is a required configuration property without which the web server may not
start up correctly.This propertyis set during the agentinstallation and must not be
modified unless absolutely necessary to accommodate deployment requirements.
An invalid value for this property can result in the web server becoming unusable
or the resources becoming inaccessible.
The property com.sun.am.policy.agents.fqdnMap provides another way by
which the agent can resolve partial or malformed access URLs and take corrective
action. The agent gives precedence to the entries defined in this property over the
value definedin the com.sun.am.policy.agents.fqdnDefault property. If none
of the entries in this property matches the hostname specified in the user request,
the agent uses the value specified for com.sun.am.policy.agents.fqdnDefault
property.
The com.sun.am.policy.agents.fqdnMap property can be used for creating a
mapping for more than one hostname. This may be the case when the web server
protected by this agent is accessible by more than one hostname. However, this
feature must be used with caution as it can lead to the web server resources
becoming inaccessible.
This property can also be used to override the behavior of the agent in cases where
necessary. The format for specifying the property
com.sun.am.policy.agents.fqdnMap is:
com.sun.am.policy.agents.fqdnMap =
[invalid_hostname|valid_hostname][,...]
where:
invalid_hostname is a possible invalid hostname such as partial hostname or
an IP address that the user may provide .
valid_hostname is the corresponding valid hostname that is fully qualified.
For example, the following is a possible value specified for hostname
xyz.domain1.com:
com.sun.am.policy.agents.fqdnMap = xyz|xyz.domain1.com,
xyz.domain1|xyz.domain1.com
This value maps xyz and xyz.domain1 to the FQDN xyz.domain1.com.
This property can also be used in such a way that the agent uses the name
specified in this map instead of the web server’s actual name.