Novell ACCESS MANAGER 3.1 SP1 - S 11-20-2009 User manual

Novell®
www.novell.com
novdocx (en) 17 September 2009
AUTHORIZED DOCUMENTATION
Novell Access Manager 3.1 SP1 Quick Starts
Access Manager
3.1 SP1
November 20, 2009
Quick Starts

novdocx (en) 17 September 2009
Legal Notices
Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and
specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.
Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time,
without obligation to notify any person or entity of such revisions or changes.
Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims
any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.,
reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to
notify any person or entity of such changes.
Any products or technical information provided under this Agreement may be subject to U.S. export controls and the
trade laws of other countries. You agree to comply with all export control regulations and to obtain any required
licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on
the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws.
You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. See the
Novell International Trade Services Web page (http://www.novell.com/info/exports/) for more information on
exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export
approvals.
Copyright © 2008-2009 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied,
stored on a retrieval system, or transmitted without the express written consent of the publisher.
Novell, Inc., has intellectual property rights relating to technology embodied in the product that is described in this
document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S.
patents listed on the Novell Legal Patents Web page (http://www.novell.com/company/legal/patents/) and one or
more additional patents or pending patent applications in the U.S. and in other countries.
Novell, Inc.
404 Wyman Street, Suite 500
Waltham, MA 02451
U.S.A.
www.novell.com
Online Documentation: To access the latest online documentation for this and other Novell products, see
the Novell Documentation Web page (http://www.novell.com/documentation).

novdocx (en) 17 September 2009
Novell Trademarks
For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/
trademarks/tmlist.html).
Third-Party Materials
All third-party trademarks are the property of their respective owners.

4Novell Access Manager 3.1 SP1 Quick Starts
novdocx (en) 17 September 2009

Contents 5
Contents
novdocx (en) 17 September 2009
About This Guide 7
1 Installation Quick Start 9
1.1 System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
1.2 Administration Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
1.2.1 Linux Administration Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
1.2.2 Windows Administration Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
1.3 Identity Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
1.3.1 Linux Identity Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
1.3.2 Windows Identity Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
1.4 Linux Access Gateway. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
1.5 Verifying the Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
2 Configuration Quick Start 13
2.1 New Identity Server Cluster Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
2.2 First Reverse Proxy Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
2.3 Configuring the Protected Resource for Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
3 SSL Configuration Quick Start 19
3.1 Configuring a New Identity Server Cluster with SSL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
3.2 Configuring a New Access Gateway for SSL. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

6Novell Access Manager 3.1 SP1 Quick Starts
novdocx (en) 17 September 2009

About This Guide 7
novdocx (en) 17 September 2009
About This Guide
This guide is designed to help you get a basic Access Manager system installed and configured. It
contains the following:
Chapter 1, “Installation Quick Start,” on page 9
Chapter 2, “Configuration Quick Start,” on page 13
For an explanation of the options, please see the following manuals:
Novell Access Manager 3.1 SP1 Installation Guide
Novell Access Manager 3.1 SP1 Setup Guide
Audience
This guide is intended for Access Manager administrators who are new to the product.
Feedback
We want to hear your comments and suggestions about this manual and the other documentation
included with this product. Please use the User Comments feature at the bottom of each page of the
online documentation, or go to www.novell.com/documentation/feedback.html and enter your
comments there.
Documentation Updates
For the most recent version of the Access Manager Quick Start Guide, visit the Novell Access
Manager Documentation Web site (http://www.novell.com/documentation/novellaccessmanager).
Additional Documentation
Novell Access Manager 3.1 SP1 Installation Guide
Novell Access Manager 3.1 SP1 Setup Guide
Novell Access Manager 3.1 SP1 Administration Console Guide
Novell Access Manager 3.1 SP1 Policy Management Guide
Novell Access Manager 3.1 SP1 Identity Server Guide
Novell Access Manager 3.1 SP1 Access Gateway Guide
Novell Access Manager 3.1 SP1 SSL VPN Server Guide
Novell Access Manager 3.1 SP1 Agent Guide
Documentation Conventions
In Novell®documentation, a greater-than symbol (>) is used to separate actions within a step and
items in a cross-reference path.
A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party
trademark.

8Novell Access Manager 3.1 SP1 Quick Starts
novdocx (en) 17 September 2009
When a single pathname can be written with a backslash for some platforms or a forward slash for
other platforms, the pathname is presented with a backslash. Users of platforms that require a
forward slash, such as Linux* or UNIX*, should use forward slashes as required by your software.

Installation Quick Start
1
9
novdocx (en) 17 September 2009
1
Installation Quick Start
A basic Access Manager installation has three Access Manager components (an Administration
Console, an Identity Server, and an Access Gateway), an LDAP server, and Web servers with
applications and data. Figure 1-1 illustrates a configuration where these components are installed on
separate machines.
Figure 1-1 Basic Installation
The Administration Console must be installed first. The other components can then be installed in
any order.
Section 1.1, “System Requirements,” on page 9
Section 1.2, “Administration Console,” on page 10
Section 1.3, “Identity Server,” on page 10
Section 1.4, “Linux Access Gateway,” on page 11
Section 1.5, “Verifying the Installation,” on page 11
1.1 System Requirements
Review the following sections in the Novell Access Manager 3.1 SP1 Installation Guide to ensure
that your machines or virtual images meet the installation prerequisites:
“Administration Console Requirements”
“Identity Server Requirements”
“Access Gateway Requirements”
LDAP ServerIdentity Server
Access Gateway
A
dministration Console Web Servers

10 Novell Access Manager 3.1 SP1 Quick Starts
novdocx (en) 17 September 2009
1.2 Administration Console
1.2.1 Linux Administration Console
1Use install.sh to start the installation.
2At the Installation menu, select 1, then follow the prompts.
3Answer yes to the primary installation prompt.
1.2.2 Windows Administration Console
1Download the Windows file and execute it.
For software download instructions, see the “Novell Access Manager Readme” (http://
www.novell.com/documentation/novellaccessmanager31/readme/
accessmanager_readme.html).
2Select to install the Novell Access Manager Administration component.
3Answer yes to the primary installation prompt.
1.3 Identity Server
1.3.1 Linux Identity Server
1Use install.sh to start the installation.
2At the Installation menu, select 2, then follow the prompts.
1.3.2 Windows Identity Server
1Download the Windows file and execute it.
What you need to know The username and password you want to use for the Access
Manager administrator.
This is your first installation of an Administration Console, so when
prompted, answer Yes for a primary installation.
You can create a failover environment by installing more than one
Administration Console. For more information, see “Clustering and
Fault Tolerance” in the Novell Access Manager 3.1 SP1 Setup Guide.
For more information See “Installing the Access Manager Administration Console” in the Novell
Access Manager 3.1 SP1 Installation Guide.
What you need to know Username and password of the Access Manager administrator.
(Conditional) IP address of the Administration Console if it is installed
on a separate machine
For more information See “Installing the Novell Identity Server” in the Novell Access Manager 3.1
SP1 Installation Guide.