************************************* Siteminder Webagent Install on host01 Unzip the file zip swma-5qmr6-linux.zip somewhere under /var/tmp And launch ./nete-wa-install to start webagent install. Use /usr/local/netegrity/siteminder dir for install location. ***************** Extarct the swma-5qmr6-hf009-linux.zip file under /var/tmp. Copy the *.tar file siteminder webagent install location usr/local/netegrity/siteminder/netegrity And extracts its contents. ************************************************* [root@host01 webagent]# ./nete-wa-config ( from temp dir /var/tmp/swa/smwa-5qmr6-linux/linux/nete-wa-5QMR6-linux-install, used for tar extarct) Netegrity, Inc. Copyright 1997-2004 SiteMinder Web Agent version 5QMR6 for Unix Platforms This procedure will configure a single Web server to act Enter the name of the administrator who has the right to register a host with the Policy Server[SiteMinder]: linuxtrust Enter the password for the administrator: Enter the name of the host we will register with the Policy Server:[host01] equest-stage Specify the IP address of the Policy Server where you are registering Enter the name of the host configuration object to use for this registration: equest-stage Enter the name of the directory where we will write your SmHost.conf file:[/usr/local/netegrity/siteminder/webagent/config] Preparing to run registration using the following information: Is this information correct? ([y]/n)? y Host Registration written to ‘/usr/local/netegrity/siteminder/webagent/config/SmHost.conf’. Do you want to configure an iPlanet or Sun ONE Web Server ([y]/n)? n Do you want to configure an Apache Web server ([y]/n)? y NOTE: If you have Covalent Enterprise Ready Server or IBM HTTP Server, Please enter your Apache server’s Server Root *** Invalid Apache Configuration *** 1) I would like to re-enter the Apache Server Root. NOTE: If you have Covalent Enterprise Ready Server or IBM HTTP Server, What would you like to do? Enter a choice 1-3: 2 Please select a choice for the Apache version. Enter a choice 1 or 2: 2 Enter the name of the Web Agent configuration object [host01]: host01-dev This is the end of the basic Web Agent configuration. Do you want to configure Self Registration for DMS2 (y/[n])? Configuration Selections Agent Configuration Object: host01-dev Is this correct (y/n)? y The Apache Web server at /etc/httpd Edit the WebAgent.conf file and change the “enablewebagent” setting to “YES”. The WebAgent.conf file contains the necessary default settings for the Web Agent. ********************************* Open /etc/httpd/conf/httpd.conf file add below module lines to it under modules section LoadModule sm_module /usr/local/siteminder/webagent/lib/mod2_sm.so SmInitFile /etc/httpd/conf/WebAgent.conf (at the end of httpd.conf file) ************** ************** Add /usr/local/netegrity/siteminder/webagent/lib line to /etc/ld.so.conf *************** # service httpd stop ****************** Browse http://equest.stage.erc.ge.com to check it is working ok
***************************************
Hotfix Install
*****************
Siteminder Web Agent Configuration on host01
*************************************************
as a SiteMinder Web Agent or, if it is already configured,
it will allow you to remove the configuration or update it.
Re-enter password for confirmation:
this host. If the Policy Server is configured on a non-default port,
enter the IP address followed by a colon(:) and the port number.
For example xx.xx.xx.xx:port_number.
Enter the IP address:[3.177.44.26] 3.177.70.76
Do you want to enable PKCS11 cryptographic hardware?[N]
Registered Host: equest-stage
Policy Server: 3.177.70.76
Username: linuxtrust
Password: Not Shown
Host Configuration Object: equest-stage
Host File: /usr/local/netegrity/siteminder/webagent/config/SmHost.conf
y
Running Command:
/usr/local/netegrity/siteminder/webagent/bin/smreghost -i 3.177.70.76 -u linuxtrust -p XX -hn equest-stage -hc equest-stage -f /usr/local/netegrity/siteminder/webagent/config/SmHost.conf
please enter a specific configuration path.
[/usr/apache]: /etc/httpd
Directory /etc/httpd is not an Apache Server root.
2) I have multiple instances of Apache Web server
and would like to enter a specific configuration path.
3) I don’t have an Apache Web server.
please select choice number 2.
Please enter the Apache configuration path
[/etc/httpd/conf]:
1) Apache version 1.0
2) Apache version 2.0
This Web Agent by default will enforce policies on the Web server, provide forms-based \nauthentication, and provide single-signon across multiple domains.
\————————
Installation root: /usr/local/netegrity/siteminder/webagent
Web server target: /etc/httpd
has been configured as a SiteMinder Web Agent.
follow the instructions in the documentation for modifying your
httpd.conf file to enable the web agent.
Restart the Web server for the configuration changes to take effect.
This should be done AFTER configuring the Web Agent.
Refer to the “Siteminder Agent Guide” for explanations of these settings and how they may be tuned to best suit your needs.
./nete-wa-config: line 3428: [: too many arguments
[root@host01 webagent]#
Configuration after above steps
**********************************
Modify enablewebagent=”YES” in /etc/httpd/conf/WebAgent.conf file
try starting web server
# service httpd start
Incoming search terms:
- netegrity webagent debian
- how to re-register host to siteminder on linux server
- siteminder policy server installation steps
- siteminder web agent version