Software AG Infrastructure Administrator’s Guide Version 9.9 October 2015 This document applies to webMethods Product Suite Version 9.9 and to all subsequent releases. Specifications contained herein are subject to change and these changes will be reported in subsequent release notes or new editions. Copyright © 1999-2015 Software AG, Darmstadt, Germany and/or Software AG USA Inc., Reston, VA, USA, and/or its subsidiaries and/or its affiliates and/or their licensors. The name Software AG and all Software AG product names are either trademarks or registered trademarks of Software AG and/or Software AG USA Inc. and/or its subsidiaries and/or its affiliates and/or their licensors. Other company and product names mentioned herein may be trademarks of their respective owners. Detailed information on trademarks and patents owned by Software AG and/or its subsidiaries is located at hp://softwareag.com/licenses. Use of this software is subject to adherence to Software AG's licensing conditions and terms. These terms are part of the product documentation, located at hp://softwareag.com/licenses and/or in the root installation directory of the licensed product(s). This software may include portions of third-party products. For third-party copyright notices, license terms, additional rights or restrictions, please refer to "License Texts, Copyright Notices and Disclaimers of Third Party Products". For certain specific third-party license restrictions, please refer to section E of the Legal Notices available under "License Terms and Conditions for Use of Software AG Products / Copyright and Trademark Notices of Software AG Products". These documents are part of the product documentation, located at hp://softwareag.com/licenses and/or in the root installation directory of the licensed product(s). Use, reproduction, transfer, publication or disclosure is prohibited except as specifically provided for in your License Agreement with Software AG. Document ID: SAG-INFRA-99-20151015 M Table of Contents Table of Contents About this Guide..............................................................................................................................7 Document Conventions.............................................................................................................. 7 Online Information...................................................................................................................... 8 Concepts...........................................................................................................................................9 Software AG Common Platform............................................................................................... 10 Software AG Runtime............................................................................................................... 10 Software AG Security Infrastructure.........................................................................................11 Software AG Web Services Stack............................................................................................13 Java Service Wrapper.............................................................................................................. 14 Running Web Applications........................................................................................................... 15 Configure Software AG Runtime Credentials...........................................................................16 Change the Default Software AG Runtime Keystore and Truststore....................................... 16 Work with HTTP Connectors....................................................................................................18 Use the Predefined HTTP Connector............................................................................... 18 Configure a User-Defined HTTP Connector..................................................................... 19 Work with HTTPS Connectors................................................................................................. 20 Use the Predefined HTTPS Connector.............................................................................20 Configure a User-Defined HTTPS Connector...................................................................21 Server-Side Configuration.......................................................................................... 22 Securing the HTTPS Connector Passwords.......................................................22 Client-Side Configuration............................................................................................23 Predefined Connector...............................................................................................................23 Configure JNDI Resources.......................................................................................................23 Configure the JNDI Injection Framework.......................................................................... 23 Configure JNDI Resources................................................................................................24 Configure Environment Entries......................................................................................... 26 Configure the Software AG Runtime Java Service Wrapper................................................... 27 Configure Software AG Runtime Log Settings.........................................................................27 Hot Configuration Update.........................................................................................................27 Use Path Tokens...................................................................................................................... 28 Start and Stop Software AG Runtime...................................................................................... 29 Start and Stop Software AG Runtime on a Windows System.......................................... 29 Start and Stop Software AG Runtime on a UNIX System................................................ 29 Manage Software AG Runtime Security.................................................................................. 30 Setting Up Security........................................................................................................................31 Set Up the JAAS Configuration File.........................................................................................32 Create the JAAS Configuration File..................................................................................32 Define a Login Context..................................................................................................... 32 Define the Login Modules................................................................................................. 33 Software AG Infrastructure Administrator’s Guide Version 9.9 3 M Table of Contents Verify JAAS Configuration.................................................................................................35 Turn On Logging.......................................................................................................................35 Make the JAAS Configuration File Active................................................................................ 36 Create Technical User Credential Files....................................................................................36 Create or Edit Internal User Repository Files.......................................................................... 37 Create Login Modules.............................................................................................................. 39 Use the LDAP Framework....................................................................................................... 40 Update the Single Sign-On System for Your Product.............................................................. 42 Create Custom Keys and Certificates......................................................................................43 Develop a JAAS Client.............................................................................................................45 Troubleshoot Problems.............................................................................................................45 Verify the JAAS Configuration...........................................................................................45 When Problems Persist.....................................................................................................45 Predefined Login Modules........................................................................................................46 SagAbstractLoginModule...................................................................................................46 InternalLoginModule.......................................................................................................... 46 LDAPLoginModule.............................................................................................................48 SAMLAssertValidatorLoginModule.....................................................................................52 SAMLAssertIssuerLoginModule.........................................................................................53 JMXDelegatedAuthLoginModule....................................................................................... 53 ServletHeaderLoginModule............................................................................................... 54 SimpleNameMappingLoginModule...................................................................................