Novell ACCESS MANAGER 3.1 SP2 - README 2010, Manual

Page: 36 / 374

36 Novell Access Manager 3.1 SP2 Identity Server Guide
n
ov
do
cx (e
n)
16
Ap
ril 20
10
<context-param>
<param-name>SignPost</param-name>
<param-value>true</param-value>
</context-param>
3 Save the file and copy it to each Identity Server in the cluster.
4
Restart Tomcat on each Identity Server in the cluster.
Linux: Enter the following command:
/etc/init.d/novell-tomcat5 restart
Windows: Enter the following commands:
net stop Tomcat5
net start Tomcat5
1.4.7 Blocking Access to Identity Server Pages
The Identity Server has a couple of pages that authenticated users can access and which contain
information about the user and the Identity Server that some security models deem sensitive. If you
want to block user access to these pages, see the following sections:

Section 3.6.3, “Blocking Access to the User Portal Page,” on page 135
 Section 3.6.4, “Blocking Access to the WSDL Services Page,” on page 136
1.5 Translating the Identity Server Configuration
Port
If your Identity Server must communicate through a firewall, you must either set up a hole in your
firewall for TCP ports 8080 or 8443 (default ports used respectively for non secure and secure
communication with Identity Server), or configure the Identity Server service to use TCP port 80 or
443.

Section 1.5.1, “Changing the Port on a Windows Identity Server,” on page 36

Section 1.5.2, “Changing the Port on a Linux Identity Server,” on page 37
1.5.1 Changing the Port on a Windows Identity Server
On a Windows Identity Server, you need to set the port in the Base URL and save the changes. You
then need to modify the Tomcat
server.xml
file located in the Tomcat configuration directory:
1 In the Administration Console, click Devices > Identity Server > Edit , and configure the base
URL with HTTPS as the protocol, and the TCP port as 443.
2 Click OK , then update the Identity Server.
3 In a terminal window, open the
server.xml
file.
Windows Server 2003:
\Program Files\Novell\Tomcat\conf
Windows Server 2008:
\Program Files (x86)\Novell\Tomcat\conf
4 Change the ports from 8080 and 8443 to 80 and 443.
5 Restart the Tomcat service.