User guide

High-Performance and High-Reliability System
1-51
Examples of the reverse settings in the figure above are shown in the table below.
In the URL for the directory from which the request originated that is entered in the business server
reverse settings, specify a directory layer for each business server. Example: /www1/, /www2/.
Table 1-7 Reverse Settings
Request-source URL Conversion
control
Relay-destination URL Remarks
https://sd.fujitsu.com:44
3/www1/
<----------> http://www.fujitsu.com:80/ Reverse settings of
Business server
https://sd.fujitsu.com:44
3/auth/
<----------> http://auth.fujitsu.com:80/
https://sd.fujitsu.com:44
3/auth/
<---------- https://auth.fujitsu.com:443/
Reverse settings of
Authentication server
When “Set-Cookies Header” is specified in the HTTP response header, and path and domain that
are specified to “Set-Cookies Header” are same as directory and server name of Relay-destination
URL that is defined in the table (1-7) above, set path and domain as to replace the compatible
Request-source URL.
Setup of authentication server
• For a small-scale system
When using a small-scale system, select, on the Interstage Management Console of the
authentication server, [System] > [Security] > [Single Sign-on] > [Authentication infrastructure] >
[Authentication infrastructureSettings] tab > [Setup Repository server and Authentication server to a
single server.]. Then, specify "On the others" for [Where does SSL operate?] under [General
Settings].
• For a middle-scale or large-scale system
When using a medium-scale or large-scale system, select, on the Interstage Management Console
of the authentication server, [System] > [Security] > [Single Sign-on] > [Authentication
infrastructure] > [Authentication infrastructureSettings] tab > [Setup Repository server and
Authentication server to the separate servers.]. Then, select [Create a new Authentication server],
and specify "On the others" for [Where does SSL operate?] under [General Settings].
[Using SSL communication between Application Gateway and authentication server]