Openan: Authentication LDAP Module: creation and configuration via command line

./ssoadm list-auth-instances -e / -u amadmin -f /tmp/pwd.txt



./ssoadm create-auth-instance \
 -e / -m LDAPQuercia          \
 -t LDAP -u amadmin -f        \
 /tmp/pwd.txt



./ssoadm update-auth-instance   \
 -e / -m LDAPQuercia            \
 -u amadmin -f /tmp/pwd.txt     \
 --datafile ~/OpenAMstuff/datafile



where datafile is:



iplanet-am-auth-ldap-ssl-enabled=false
iplanet-am-auth-ldap-return-user-dn=true
iplanet-am-auth-ldap-base-dn=o=client,dc=ericsson,dc=org
iplanet-am-auth-ldap-server=am01.tirasa.net:1389
iplanet-am-auth-ldap-user-naming-attribute=uid
iplanet-am-auth-ldap-auth-level=0
iplanet-am-auth-ldap-bind-passwd=password
iplanet-am-auth-ldap-ssl-trust-all=false
iplanet-am-auth-ldap-user-search-attributes=uid
iplanet-am-auth-ldap-behera-password-policy-enabled=false
iplanet-am-auth-ldap-bind-dn=cn=openam,dc=ericsson,dc=com




login to module:

http://mat.workstation.net:6080/openam/XUI/#login?module=LDAPQuercia

Installing OpenAM via command line

How to install openam via command line

1) Create openamConfigTools dir and openamAdminTools,  unzip OpenAM-12.0.0.zip and unzip SSOConfiguratorTools-12.0.0.zip and SSOAdminTools-12.0.0.zip in the directories just created.

2) cd openamConfigTools and create config.properties file:

----------------------------------------------
SERVER_URL=http://mat.example.net:6080
DEPLOYMENT_URI=/openam
BASE_DIR=/home/matteo/openam-test
locale=en_US
PLATFORM_LOCALE=en_US
AM_ENC_KEY=
ADMIN_PWD=password
AMLDAPUSERPASSWD=secret12
COOKIE_DOMAIN=.example.net
ACCEPT_LICENSES=true

DATA_STORE=embedded
DIRECTORY_SSL=SIMPLE
DIRECTORY_SERVER=mat.example.net
DIRECTORY_PORT=50389
DIRECTORY_ADMIN_PORT=4444
DIRECTORY_JMX_PORT=1389
ROOT_SUFFIX=dc=example,dc=net
DS_DIRMGRDN=cn=Directory Manager
DS_DIRMGRPASSWD=password

----------------------------------------------

3) Deploy openam

4) run the jar:

    java -jar openam-configurator-tool-12.0.0.jar --file config.properties

Setup OpenDj and replication

on both machines:  

./setup -i -n -b "dc=example,dc=com"\

 -h localhost -p 1389 \
  --adminConnectorPort 4444 \

 -D "cn=Directory Manager" \ 

 -w "secret12" -q -Z 1636 \
 --generateSelfSignedCertificate

on am1:

 ./dsreplication enable --host1 cfg1.example.net \

 --port1 4446  --bindDN1 "cn=directory manager" \

 --bindPassword1 password --replicationPort1 8991 \

 --host2 cfg2.example.net --port2 4446 \

 --bindDN2 "cn=directory manager" \

 --bindPassword2 password \

 --replicationPort2 8991 \

 --adminUID admin \

 --adminPassword password \

 --baseDN "dc=ericsson,dc=com" -X -n


 ./dsreplication initialize --baseDN "dc=example,dc=com" \

 --adminUID admin --adminPassword password  \

 --hostSource ctsdj01.tirasa.net \

 --portSource 4446 \

 --hostDestination cfg2.example.net \ 

 --portDestination 4446 -X -n --trustAll --no-prompt


on am2:
./dsreplication initialize --baseDN "dc=example,dc=com" \

--adminUID admin --adminPassword password \

--hostSource cfg2.example.net \

--portSource 4446  \

--hostDestination cfg1.example.net \

--portDestination 4446 -X -n