Sun Microsystems 2005Q1 - Manual

How This Book Is Organized 14 Portal Server Secure Remote Access 6 2005Q1 • Administration Guide • Java™ Web Server • JavaServer Pages™ technology • Lightweight Directory Access Protocol (LDAP) • Hypertext Markup Language (HTML) • Extensible Markup Language (XML) How This Book Is Organized Chapters ...

How This Book Is Organized Preface 15 Conventions Used in This Book The tables in this section describe the conventions used in this book. Typographic Conventions The following table describes the typographic conventions used in this book Table 1 Typographical Conventions. Appendix C, “Portal Server...

Related Documentation 16 Portal Server Secure Remote Access 6 2005Q1 • Administration Guide Related Documentation The http://docs.sun.com web site enables you to access Sun technical documentation online. You can browse the archive or search for a specific book title or subject. Books in This Docume...

Related Documentation Preface 17 Other Portal Server Documentation Other Portal Server books include: • Portal Server Desktop Customization Guide http://docs.sun.com/doc/817-5318 • Portal Server Developer's Guide http://docs.sun.com/doc/817-5319 • Portal Server Mobile Access Developer's Guide http:/...

Accessing Sun Resources Online 18 Portal Server Secure Remote Access 6 2005Q1 • Administration Guide • Application Server documentation http://docs.sun.com/coll/s1_asseu3_en • Web Proxy Server documentation http://docs.sun.com/prod/s1.webproxys#hic Accessing Sun Resources Online For product download...

Sun Welcomes Your Comments Preface 19 Sun Welcomes Your Comments Sun is interested in improving its documentation and welcomes your comments and suggestions. To share your comments, go to http://docs.sun.com and click Send Comments. In the online form, provide the document title and part number. The...

21 Chapter 1 Portal Server Architecture This chapter contains the following sections: • What is a Portal? • Types of Portals • Portal Server Capabilities • Sun Java System Portal Server • Secure Remote Access • Security, Encryption, and Authentication • Portal Server Deployment Components • Portal S...

Types of Portals 22 Portal Server 6 2005Q1 • Deployment Planning Guide Portals serve as a unified access point to web applications. Portals also provide valuable functions like security, search, collaboration, and workflow. A portal delivers integrated content and applications, plus a unified, colla...

Portal Server Capabilities Chapter 1 Portal Server Architecture 23 Collaborative services allow users to do the following: • Chat • Organize meetings • Share calendaring information • Define user communities • Participate in net meetings • Share information in discussion groups and on white boards B...

Sun Java System Portal Server 24 Portal Server 6 2005Q1 • Deployment Planning Guide • Secure access and authorized connectivity, optionally using encryption between the user’s browser and the enterprise • Authentication of users before allowing access to a set of resources that are specific for each...

Secure Remote Access Chapter 1 Portal Server Architecture 25 Each enterprise assesses its own needs and plans its own deployment of Java Enterprise System technology. The optimal deployment for each enterprise depends on the type of applications that Java Enterprise System technology supports, the n...

Secure Remote Access 26 Portal Server 6 2005Q1 • Deployment Planning Guide If the portal does not contain sensitive information (deploying public information and allowing access to free applications), then responses to access requests by a large number of users is faster than secure mode. Figure 1-1...

Security, Encryption, and Authentication 28 Portal Server 6 2005Q1 • Deployment Planning Guide You can add additional servers and Gateways for site expansion. You can also configure the components of SRA in various ways based on your business requirements. Security, Encryption, and Authentication Po...

Identity Management 30 Portal Server 6 2005Q1 • Deployment Planning Guide • Access Manager node .The server where Access Manager can reside. Access Manager does not have to reside on the same node as Portal Server. • Search node . Optional. The server you use for the Portal Server Search service. Yo...

Portal Server Software Deployment Chapter 1 Portal Server Architecture 31 • Access Manager console SDK • Authentication daemons that support the web applications See the Access Manager Deployment Planning Guide for more information. Portal Server Software Deployment This section provides information...

Portal Server Software Deployment 32 Portal Server 6 2005Q1 • Deployment Planning Guide • Static web content . These include static HTML files, images, applet JAR files, and other items that can be served up directly by the web server without using the Web Server container. For Portal Server, these ...

A Typical Portal Server Installation Chapter 1 Portal Server Architecture 33 A Typical Portal Server Installation Figure 1-3 on page 34 illustrates some of the components of a portal deployment but does not address the actual physical network design, single points of failure, nor high availability. ...

37 Chapter 2 Portal Server Secure Remote Access Architecture This chapter describes the Sun Java™ System Portal Server Secure Remote Access (SRA) architecture. You administer the configuration information through the Access Manager administration console. This chapter describes the following SRA com...

SRA Gateway 38 Portal Server 6 2005Q1 • Deployment Planning Guide • Netlet request . Routes the request (traffic) to the server specified in the Netlet rule that the user clicked in the Portal Desktop. • HTTP(S) traffic . Routes the request to the server as specified by the HTTP header. Upon receivi...

SRA Gateway Chapter 2 Portal Server Secure Remote Access Architecture 39 Proxy Configuration The Gateway uses proxies that are specified in its profile to retrieve contents from various web servers within the intranet and extranet. You can dedicate proxies for hosts and DNS subdomains and domains. D...

SRA Gateway 40 Portal Server 6 2005Q1 • Deployment Planning Guide • Mandatory server authentication . The client must authenticate the server. • Optional authentication . The server is configured to authenticate the client. Personal Digital Certificate (PDC) authentication is a mechanism that authen...

Netlet Chapter 2 Portal Server Secure Remote Access Architecture 41 Gateway Logging You can monitor the complete user behavior by enabling logging on the Gateway. The Gateway uses the Access Manager logging API for creating logs. Using Accelerators with the Gateway You can configure accelerators, wh...

Netlet Chapter 2 Portal Server Secure Remote Access Architecture 43 Netlet and Application Integration Netlet works with many third parties such as Graphon, Citrix, and pcAnywhere. Each of these products provides secure access to the user’s Portal Desktop from a remote machine using Netlet. Split Tu...

Netlet Proxy 44 Portal Server 6 2005Q1 • Deployment Planning Guide Netlet Proxy A Netlet Proxy helps reduce the number of open ports needed in the firewall to connect the Gateway and the destination hosts. For example, consider a configuration where users need Netlet to connect with a large number o...

NetFile Chapter 2 Portal Server Secure Remote Access Architecture 45 • NetFile servlet(s) . Two NetFile servlets are present in the web container, one for each kind of NetFile applet. The servlets are responsible for connecting to different types of file systems, carrying out the operations that Net...

NetFile 46 Portal Server 6 2005Q1 • Deployment Planning Guide Access Control NetFile provides various means of file system access control. You can deny access to users to a particular file system based on the protocol. For example, you can deny a particular user, role, or organization access to file...

Rewriter Chapter 2 Portal Server Secure Remote Access Architecture 47 NetFile also enables users to select multiple files and compress them by using GZIP and ZIP compression. Users can select multiple files and send them in a single email as multiple attachments. NetFile also uses the SSO token of A...

Rewriter Proxy 48 Portal Server 6 2005Q1 • Deployment Planning Guide according to a Document Type Definition (DTD). Using the generic ruleset that ships with the Rewriter, you can rewrite most URLs (but not all) without any additional rules. You can also associate rulesets with domains for domain-ba...

Proxylet Chapter 2 Portal Server Secure Remote Access Architecture 49 Proxylet Proxylet is a dynamic proxy server that runs on a client machine. Proxylet redirects a URL to the Gateway. It does this by reading and modifying the proxy settings of the browser on the client machine so that the settings...

51 Chapter 3 Identifying and Evaluating Your Business and Technical Requirements The first step in planning your deployment is identifying your Sun Java™ System Portal Server business and technical requirements.. You need to gather both business and technical requirements before you can address arch...

Technical Goals Chapter 3 Identifying and Evaluating Your Business and Technical Requirements 53 Technical Goals Your technical requirement (often called functional requirement) discuss the details of your organization’s system needs and desired results, and include such factors as: • Performance • ...

Mapping Portal Server Features to Your Business Needs 56 Portal Server 6 2005Q1 • Deployment Planning Guide SRA Table 3-2 shows the Sun Java System Portal Server Secure Remote Access (SRA) features and their benefits Table 3-2 SRA Features and Benefits Feature Description Benefit Integrated security...

Mapping Portal Server Features to Your Business Needs Chapter 3 Identifying and Evaluating Your Business and Technical Requirements 57 Search Engine The Search Engine service is used in the following channels: • Subscription channel to summarize the number of hits (relevant information) that match e...

Mapping Portal Server Features to Your Business Needs 58 Portal Server 6 2005Q1 • Deployment Planning Guide Personalization Personalization is the ability to deliver content based on selective criteria and offer services to a user. Table 3-4 shows the personalization features and their benefits. Agg...

Understanding User Behaviors and Patterns Chapter 3 Identifying and Evaluating Your Business and Technical Requirements 59 Table 3-5 shows the aggregation and integration features and their benefits. Understanding User Behaviors and Patterns Study the people who will use your portal. Factors such as...

61 Chapter 4 Pre-Deployment Considerations This chapter contains the following sections: • Determine Your Tuning Goals • Portal Sizing Tips • Establish Performance Methodology • Portal Sizing • SRA Sizing Determine Your Tuning Goals Before tuning you portal, work with portal system administrators an...

Portal Sizing Tips 62 Portal Server 6 2005Q1 • Deployment Planning Guide time, the number of Portal desktop activity requests, the amount of portal channel usage, acceptable response time for the end-user which is determined by your organization, and an optimal hardware configuration to meet the cri...

Portal Sizing Chapter 4 Pre-Deployment Considerations 63 2. Setup a controlled environment to minimize the margin of error (defined as less than ten percent variation between identical runs). By knowing the starting data measurement baseline, you can measure the differences in data performance betwe...

Portal Sizing 64 Portal Server 6 2005Q1 • Deployment Planning Guide Establish Baseline Sizing Figures Once you have identified your business and technical requirements, and mapped Portal Server features to your needs, your sizing requirements emerge as you plan your overall Portal Server deployment....

Portal Sizing Chapter 4 Pre-Deployment Considerations 65 maximum number of concurrent sessions = expected percent of users online * user base To identify the size of the user base or pool of potential users for an enterprise portal, here are some suggestions: • Identify only users who are active. Do...

Portal Sizing 66 Portal Server 6 2005Q1 • Deployment Planning Guide Calculate maximum number of concurrent users after you calculate maximum number of concurrent sessions. To calculate the maximum number of concurrent users, use this formula: concurrent users = number of concurrent sessions / averag...

Portal Sizing Chapter 4 Pre-Deployment Considerations 67 The average size adjusts for variations in sizes of RDs. A collection of long, complex RDs with many indexed terms and a list of short RDs with a few indexed terms require different search times, even if the complex RDs have the same number of...

Portal Sizing 68 Portal Server 6 2005Q1 • Deployment Planning Guide Hardware and Applications CPU speed and size of the virtual machine for the Java™ platform (Java™ Virtual Machine or JVM™ software) memory heap affect Portal Server performance. The faster the CPU speed, the higher the throughput. T...

Portal Sizing Chapter 4 Pre-Deployment Considerations 69 When you calculate transaction time, size your Portal Server so that processing time under regular or peak load conditions does not exceed your performance requirement threshold and so that you can sustain processing time over time. Workload C...

Portal Sizing 70 Portal Server 6 2005Q1 • Deployment Planning Guide After you have an estimate of your sizing, consider: • LDAP Transaction Numbers • Application Server Requirements LDAP Transaction Numbers Use the following LDAP transaction numbers for an out-of-the-box portal deployment to underst...

Portal Sizing Chapter 4 Pre-Deployment Considerations 71 Use a trial deployment to determine your final sizing estimates. A trial deployment helps you to size back-end integration, to avoid potential bottlenecks with Portal Server operations. Refine Baseline Sizing Figures Your next step is to refin...

SRA Sizing 72 Portal Server 6 2005Q1 • Deployment Planning Guide ❍ Maintenance demands Considering these factors enables you to develop a sizing figure that is flexible and enables you to avoid risk when your assumptions regarding your portal change following deployment. The resulting figure ensures...

SRA Sizing Chapter 4 Pre-Deployment Considerations 73 Identifying Gateway Key Performance Requirements Key performance factors are metrics that your technical representative uses as input to an automated sizing tool. The sizing tool calculates the estimated number of Gateway instances your SRA deplo...

SRA Sizing 74 Portal Server 6 2005Q1 • Deployment Planning Guide • Session average time This determines how many logins per second that the Gateway must sustain for a given number of concurrent users. Netlet Usage Characteristics Consider the following Netlet characteristics of the Gateway, which ca...

SRA Sizing Chapter 4 Pre-Deployment Considerations 75 Advanced Gateway Settings Use the settings in this section to obtain more accurate results when estimating the number of Gateway instances for your deployment. These advanced Gateway settings are used as input to the automated sizing tool. These ...

SRA Sizing 76 Portal Server 6 2005Q1 • Deployment Planning Guide • Regular-JSP. Describes a configuration of two tabs with seven channels each. • Heavy—JSP. Describes a configuration of three tabs with seventeen channels each. Scalability You can choose between one, two, and four CPUs per Gateway in...

SRA Sizing Chapter 4 Pre-Deployment Considerations 77 See the Portal Server Secure Remote Access 6 Administration Guide for more information on the Sun Crypto Accelerator 1000 board and other accelerators. You could use a hardware accelerator on the Netlet Proxy and Rewriter Proxy machine and derive...

79 Chapter 5 Creating Your Portal Design This chapter describes how to create your high-level and low-level portal design and provides information on creating specific sections of your design plan. This chapter contains the following sections: • Portal Design Approach • Portal Server and Scalability...

Portal Design Approach 80 Portal Server 6 2005Q1 • Deployment Planning Guide Your high-level portal design communicates the architecture of the system and provides the basis for the low-level design of your solution. Further, the high-level design needs to describe a logical architecture that meets ...

Portal Design Approach Chapter 5 Creating Your Portal Design 81 Overview of Low-Level Portal Design The low-level design focuses on specifying the processes and standards you use to build your portal solution, and specifying the actual hardware and software components of the solution, including: • T...

Portal Server and Scalability Chapter 5 Creating Your Portal Design 83 Portal Server and Scalability Scalability is a system’s ability to accommodate a growing user population, without performance degradation, by the addition of processing resources. The two general means of scaling a system are ver...

Portal Server and High Availability 84 Portal Server 6 2005Q1 • Deployment Planning Guide The section “Working with Portal Server Building Modules” on page 89 , discusses an approach to a specific type of configuration that provides optimum performance and horizontal scalability. Portal Server and H...

Portal Server and High Availability Chapter 5 Creating Your Portal Design 85 System Availability System availability is often expressed as a percentage of the system uptime. A basic equation to calculate system availability is: Availability = uptime / (uptime + downtime) * 100 For instance, a servic...

Portal Server System Communication Links 86 Portal Server 6 2005Q1 • Deployment Planning Guide • Gateway . A load balancer used with the Gateway detects a failed Gateway component and routes new requests to other Gateways. A load balancer also has the ability to intelligently distribute the workload...

Working with Portal Server Building Modules Chapter 5 Creating Your Portal Design 89 SRA includes other Java technology processes called Netlet Proxy and Rewriter Proxy. You use these proxies to extend the security perimeter from behind the firewall, and limit the number of holes in the DMZ. You can...

Working with Portal Server Building Modules 90 Portal Server 6 2005Q1 • Deployment Planning Guide Building Modules and High Availability Scenarios Portal Server provides three scenarios for high availability: • Best Effort The system is available as long as the hardware does not fail and as long as ...

Working with Portal Server Building Modules 92 Portal Server 6 2005Q1 • Deployment Planning Guide Best Effort In this scenario, you install Portal Server and Directory Server on a single node that has a secured hardware configuration for continuous availability, such as Sun Fire UltraSPARC® III mach...

Working with Portal Server Building Modules Chapter 5 Creating Your Portal Design 93 No Single Point of Failure Portal Server natively supports the no single point of failure (NSPOF) scenario. NSPOF is built on top of the best effort scenario, and in addition, introduces replication and load balanci...

Working with Portal Server Building Modules 96 Portal Server 6 2005Q1 • Deployment Planning Guide Transparent Failover Transparent failover uses the same replication model as the NSPOF scenario but provides additional high availability features, which make the failover to a backup server transparent...

Working with Portal Server Building Modules Chapter 5 Creating Your Portal Design 97 The session repository is provided by the application server software. Portal Server is running in an application server. Portal Server supports transparent failover on application servers that support HttpSession f...

Working with Portal Server Building Modules 98 Portal Server 6 2005Q1 • Deployment Planning Guide • If you use multiple machines, or if your Portal Server machine is running a large number of instances, use a fast network interconnect. • On servers with more than eight CPUs, create processor sets or...

Designing Portal Use Case Scenarios Chapter 5 Creating Your Portal Design 99 • You can install Search on a machine separate from Portal Server, to keep the main server dedicated to portal activity. When you do so, you use the searchURL property of the Search provider to point to the second machine w...

Designing Portal Use Case Scenarios 100 Portal Server 6 2005Q1 • Deployment Planning Guide Use case steps are written in an easy-to-understand structured narrative using the vocabulary of the domain. Use case scenarios are an instance of a use case, representing a single path through the use case. T...

Designing Portal Use Case Scenarios Chapter 5 Creating Your Portal Design 101 Example Use Case: Authenticate Portal User Table 5-2 describes a use case for a portal user to authenticate with the portal. Table 5-2 Use Case: Authenticate Portal User Item Description Priority Must have. Context of Use ...

Designing Portal Security Strategies 102 Portal Server 6 2005Q1 • Deployment Planning Guide Designing Portal Security Strategies Security is the set of hardware, software, practices, and technologies that protect a server and its users from malicious outsiders. In that regard, security protects agai...

Designing Portal Security Strategies Chapter 5 Creating Your Portal Design 103 • Minimize the size of the operating environment installation . When installing a Sun server in an environment that is exposed to the Internet, or any untrusted network, reduce the Solaris installation to the minimum numb...

Designing Portal Security Strategies 104 Portal Server 6 2005Q1 • Deployment Planning Guide The user nobody does not have a password, which prevents a regular user from becoming nobody. Only the superuser can change users without being prompted for a password. Thus, you still need root access to sta...

Designing SRA Deployment Scenarios Chapter 5 Creating Your Portal Design 111 Designing SRA Deployment Scenarios The SRA Gateway provides the interface and security barrier between the remote user sessions originating from the Internet and your organization’s intranet. The Gateway serves two main fun...

Designing SRA Deployment Scenarios 118 Portal Server 6 2005Q1 • Deployment Planning Guide Netlet and Rewriter Proxies on Separate Nodes To reduce the load on the Portal Server node and still provide the same level of security at increased performance, you can install Netlet and Rewriter Proxies on s...

Designing SRA Deployment Scenarios Chapter 5 Creating Your Portal Design 119 Using Two Gateways and Netlet Proxy Load balancers provide a failover mechanism for higher availability for redundancy of services on the Portal Servers and Access Managers. Figure 5-16 Two Gateways and Netlet Proxy Gateway...

Designing SRA Deployment Scenarios 120 Portal Server 6 2005Q1 • Deployment Planning Guide Using an Accelerator You can configure an external SSL device to run in front of the Gateway in open mode. It provides the SSL link between the client and SRA. For information on accelerators, see the Portal Se...

Designing SRA Deployment Scenarios Chapter 5 Creating Your Portal Design 121 Netlet with 3rd Party Proxy Figure 5-18 illustrates using a third-party proxy to limit the number of ports in the second firewall to one. You can configure the Gateway to use a third-party proxy to reach the Rewriter and th...

Designing SRA Deployment Scenarios 122 Portal Server 6 2005Q1 • Deployment Planning Guide Reverse Proxy A proxy server serves Internet content to the intranet, while a reverse proxy serves intranet content to the Internet. Certain deployments of reverse proxy are configured to serve the Internet con...

Designing for Localization Chapter 5 Creating Your Portal Design 123 Designing for Localization Localization is the process of adapting text and cultural content to a specific audience. Localization can be approached in two different ways: 1. Localization of the entire product into a language that w...

Content and Design Implementation 124 Portal Server 6 2005Q1 • Deployment Planning Guide See the Portal Server 6 Developer’s Guide and Portal Server 6 Desktop Customization Guide for more information. Placement of Static Portal Content Place your static portal content in the web-container-install-ro...

Content and Design Implementation Chapter 5 Creating Your Portal Design 125 • Portlet . Pluggable web component that processes requests and generates content within the context of a portal. In Portal Server software, a portlet is managed by the Portlet Container. Conceptually, a portlet is equivalen...

Content and Design Implementation 126 Portal Server 6 2005Q1 • Deployment Planning Guide • Portal capability augmentation . This integration enables products to add functionality to Portal Server. Examples include Altio, Bowstreet, rule engines to add group capability, and dynamic standard Portal De...

Identity and Directory Structure Design Chapter 5 Creating Your Portal Design 127 JavaMail provides a common uniform API for managing mail. It enables service providers to provide a standard interface to their standards based or proprietary messaging systems using Java programming language. Using th...

Identity and Directory Structure Design 128 Portal Server 6 2005Q1 • Deployment Planning Guide See the Portal Server 6 Administration Guide, Directory Server Deployment Guide, and the Access Manager Deployment Guide for more information on planning your Access Manager and Directory Server structure....

Identity and Directory Structure Design Chapter 5 Creating Your Portal Design 129 Choosing and Implementing the Correct Aggregration Strategy The options for implementing portal channels for speed and scalability include: • Keeping processing functions on back-end systems and application servers, no...

Identity and Directory Structure Design Chapter 5 Creating Your Portal Design 131 large amount of processing to display the data in the Portal Desktop. If you use this type of provider, push as much data processing logic to the database as possible. Also, benchmark your portal performance with and w...

133 Chapter 6 The Production Environment This chapter describes how to monitor and tune Sun Java™ System Portal Server software, including the Sun Java System Portal Server Secure Remote Access product. This chapter contains the following sections: • Moving to a Production Environment • Monitoring P...

Moving to a Production Environment 134 Portal Server 6 2005Q1 • Deployment Planning Guide • Determine whether your current physical infrastructure is capable of supporting the transaction volume requirement you have defined. Identify services that are the first to max out as you increase the activit...

Monitoring Portal Server Chapter 6 The Production Environment 135 Monitoring Portal Server This section describes the variables that affect portal performance, as well as the portal monitoring you can perform. Areas to monitor include: • Sun Java System Access Manager • Portal Desktop • Sun Java Sys...

Monitoring Portal Server 136 Portal Server 6 2005Q1 • Deployment Planning Guide Most applications suggest using a larger percentage of the total heap for the new generation, but in the case of Portal Server, using only one eighth the space for the young generation is appropriate, because most memory...

Monitoring Portal Server Chapter 6 The Production Environment 137 Expect peak loads to be four to eight times higher than the average load, but over short periods of time. Access Manager Cache and Sessions The performance of a portal system is affected to a large extent by the cache hit ratio of the...

Monitoring Portal Server 138 Portal Server 6 2005Q1 • Deployment Planning Guide Portal Usage Information Portal Server does not include a built-in reporting mechanism to monitor portal usage information by portal users. This includes which channels are accessed, how long the channels are accessed, a...

139 Appendix A Installed Product Layout This appendix describes the Sun Java™ System Portal Server directory structure and properties files used to store configuration and operational data. Directories Installed for Portal Server Table A-1 shows the platform-specific directory structures that are in...

Directories Installed for SRA 140 Portal Server 6 2005Q1 • Deployment Planning Guide Directories Installed for SRA This section describes the Sun Java™ System Secure Remote Access (SRA) directory structure and configuration files used to store configuration and operational data. Table A-2 shows the ...

Configuration Files Appendix A Installed Product Layout 141 Configuration Files All Portal Server and SRA configuration data is stored using the Sun Java System Access Manager Services Management function. Access Manager provides the bootstrap configuration file that is needed to find the Sun Java S...

143 Appendix B Analysis Tools The Sun Java™ Enterprsie System and SDK include default setting options to ensure a satisfactory out-of-the-box experience. However these options might not provide optimal performance for your web applications in the Sun Java System Portal Server production environment....

mpstat 144 Portal Server 6 2005Q1 • Deployment Planning Guide mpstat The mpstat utility is a useful tool to monitor CPU utilization, especially with multithreaded applications running on multiprocessor machines, which is a typical configuration for enterprise solutions. Use mpstat with an argument b...

mpstat Appendix B Analysis Tools 145 What to Look For Note the much higher intr and ithr values for certain CPUs. Solaris will select some CPUs to handle the system interrupts. The CPUs and the number that are chosen depend on the I/O devices attached to the system, the physical location of the devi...

netstat 148 Portal Server 6 2005Q1 • Deployment Planning Guide • errs - errors. The presence of errors could indicate device errors. If your network is switched, errors indicate that you are nearly consuming the bandwidth capacity of your network. The solution to this problem is to give the system m...

netstat Appendix B Analysis Tools 149 tcpListenDrop = 0 tcpListenDropQ0 = 0 tcpHalfOpenDrop = 0 tcpOutSackRetrans = 56 What to look for • tcpListenDrop - If after several looks at the command output the tcpListenDrop continues to increase, it could indicate a problem with queue size. Considerations:...

Tuning Parameters for /etc/system 150 Portal Server 6 2005Q1 • Deployment Planning Guide Tuning Parameters for /etc/system Table B-2 is a list of /etc/system tuning parameters used during the performance study. The changes are applied by appending each to the /etc/system file. A description of all /...

153 Appendix C Portal Server and Application Servers This appendix provides an overview of the Sun Java™ System Portal Server product and its support for application servers. This appendix contains the following sections: • Introduction to Application Server Support in Portal Server • Portal Server ...

Portal Server on an Application Server Cluster 154 Portal Server 6 2005Q1 • Deployment Planning Guide Running Portal Server on an application server enables you to: • Decouple the portal platform from the application server platform, allowing you to choose the best combination of Portal Server and a...

Portal Server on an Application Server Cluster Appendix C Portal Server and Application Servers 155 2. Deploy the three web applications (portal, amserver, and amconsole) to the cluster. The following sections explain what it means to enable Portal Server to run on an application server cluster. Ove...

Portal Server on an Application Server Cluster Appendix C Portal Server and Application Servers 157 To install a BEA cluster, your BEA license for each machine participating in the cluster must be a special BEA cluster license. See the BEA documentation for the procedure to get the license and set u...

159 Appendix D Troubleshooting Your Portal Deployment This appendix describes how to troubleshoot the Sun Java™ System Portal Server software and the Sun Java System Portal Server Secure Remote Access (SRA) software. This appendix contains the following sections: • Troubleshooting Portal Server • Tr...

Troubleshooting Portal Server 160 Portal Server 6 2005Q1 • Deployment Planning Guide ./uxwdog -d portal-server-install-root /SUNWam/servers/https- server /config ns-httpd -d portal-server-install-root /SUNWam/servers/https- server /config Admin Web Server (optional, but usually running): ./uxwdog -d...

Troubleshooting Portal Server Appendix D Troubleshooting Your Portal Deployment 161 ➤ To Extract the Display Profile 1. Login as administrator. 2. Use the dpadmin command to extract the display profile. For example: ./dpadmin list -u "uid=amAdmin,ou=People,o=sesta.com,o=isp" -w password -d &...

Troubleshooting SRA 162 Portal Server 6 2005Q1 • Deployment Planning Guide Configuring a Sun Java System Portal Server Instance to Use an HTTP Proxy If the Portal Server software is installed on a host that cannot directly access certain portions of the Internet or your intranet, you can receive err...

Troubleshooting SRA Appendix D Troubleshooting Your Portal Deployment 163 gateway-install-root /SUNWam/config/ AMConfig- instance-name .properties 2. Set the debug level: com.iplanet.services.debug.level= The debug levels are: error - Only serious errors are logged in the debug file. Rewriter usuall...

Troubleshooting SRA 164 Portal Server 6 2005Q1 • Deployment Planning Guide • The settings in the Gateway script such as the JVM™ settings including heap usage, and library path • Gateway service settings • Tuning settings in various files used for configuring Sun Java System Access Manager, Sun Java...

Troubleshooting SRA Appendix D Troubleshooting Your Portal Deployment 165 At the end of the test period, run shooter to collect the output of gctool along with other data. memfoot.sh This script tracks the memory footprint of a process. Start this script after starting the Gateway and allow it to ru...

167 Appendix E Portal Deployment Worksheets This appendix provides worksheets to help with the portal deployment process. This appendix contains the following sections: • Portal Assessment Worksheets • Portal Design Task List Portal Assessment Worksheets Use these worksheets to learn more about your...

Portal Design Task List Appendix E Portal Deployment Worksheets 171 Portal Design Task List Table E-8 lists the major portal deployment phases and design tasks. Use this task list to help develop your portal project plan. Though these tasks will vary depending on your organization and the scale of e...

179 Appendix F Portal Server on the Linux Platform Sun Java™ System Portal Server supports RedHat 3.0 Linux platform, however, please note the differences between the Solaris and Linux platforms. Limitations Using Linux Please note the following: • Portal Server and Access Manager must reside on the...

181 Glossary Refer to the Java Enterprise System Glossary (http://docs.sun.com/doc/816-6873) for a complete list of terms that are used in this documentation set.

183 Index SYMBOLS /etc/opt/SUNWps directory 139 /etc/system tuning parameters 150 /opt/SUNWps directory 139 /opt/SUNWps/sdk directory 139 A accelerators and Gateway 41 , 76 access control Gateway 40 limiting 104 NetFile 46 Netlet 43 Access Control Instructions 127 Access Manager administration conso...