The Sun OpenSSO Enterprise 8.0 Update 1 ZIP file (opensso_enterprise_80U1.zip) includes the admin tools, scripts, libraries, and other supporting files in the ssoAdminTools.zip file, including:

• ssoadm
• amverifyarchive
• ampassword
• amtune tuning scripts

Note – The OpenSSO Enterprise 8.0 ssoadm utility is not compatible with OpenSSO Enterprise 8.0 Update 1 ssopatch utility. Therefore, after you deploy OpenSSO Enterprise 8.0 Update 1, also re-install the Update 1 tools and scripts in the ssoAdminTools.zip file.

ssoAdminTools.zip Files

The ssoAdminTools.zip file is in the following directory:
zip-root/deploy_uri/tools
where zip-root is where you unzipped the opensso_enterprise_80U1.zip file and deploy_uri is the deployment URI.

For example: /opt/opensso/tools

The following table describes the files after you unzip ssoAdminTools.zip.

To Install the OpenSSO Enterprise Tools and Scripts

1. Make sure the the OpenSSO Enterprise 8.0 Update 1 web container is running.
2. Make sure that your JAVA_HOME environment variable points to JDK 1.5 or later.
3. Create a new directory to unzip the ssoAdminTools.zip file. For example: tools-zip-root.
4. Unzip the ssoAdminTools.zip file in the new directory.
5. In the directory where you unzipped the ssoAdminTools.zip file, run the setup script on Solaris and Linux systems or the setup.bat script on Windows. For example, on Solaris and Linux systems:
   # ./setup
6. When you are prompted, enter the path to the OpenSSO Enterprise configuration, log, and debug directories. For example: /opensso

Next Steps

You can now run the OpenSSO Enterprise CLI tools and utilities from the following directory:

tools-zip-root/deploy_uri/bin

where:

• tools-zip-root is the directory where you unzipped the ssoAdminTools.zip file.
• deploy_uri is the name of the OpenSSO Enterprise deploy URI. For example: opensso

For example: /opt/ssotools/opensso/bin

Related Information

• CLI utilities – Sun OpenSSO Enterprise 8.0 Administration Reference.

• Tuning scripts – Sun OpenSSO Enterprise 8.0 Performance and Tuning Guide.

Using ssoadm With OpenSSO Enterprise Configured as a Site

In a typical large deployment, OpenSSO Enterprise server instances are configured behind one or load balancers. The HTTP(s) traffic is usually one directional. That is, the traffic goes from one of the load balancers to the servers, but requests from servers are unable to reach the load balancers.

If the above scenario applies to your deployment and you need to use the ssoadm utility (Solaris and Linux systems) or ssoadm.bat utility (Windows), perform the following procedure.

To Use ssoadm With OpenSSO Enterprise Configured as a Site

1. After you install the tools, edit the ssoadm or ssoadm.bat utility by adding the following property to the java command:

-D"com.iplanet.am.naming.map.site.to.server=
http://lb.example.com:8080/opensso=http://sso1.example.com:8080/opensso"

where lb is the load balancer, and sso1 is the OpenSSO Enterprise server where ssoadm or ssoadm.bat is installed.

2. Save the ssoadm or ssoadm.bat utility.

The utility can now send naming requests to the OpenSSO Enterprise server instance.

Top of Page