Interesting, I need to check on Express Build 8. I can
attest though that this works fine on the latest OpenSSO
releases since this is what we use for our OpenID testing.
As for Apache DS, yes it’s a nice ldap editor although
I think it does not work very well with the latest
OpenDS (2.0)…

I have noticed that in that version you also have to change ou=SelfWriteAttributes,ou=default,ou=default,ou=OrganizationConfig,ou=1.0,ou=sunEntitlementIndexes,ou=services,o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=opensso,dc=java,dc=net.

BTW. Apache Directory Studio is an excellent LDAP editor for doing this kind of stuff.

Hubert

Cheers,
Hubert

## Variables used below ..
ds_installpath == where Directory server will be deployed
suffix == root suffix for LDAP tree in DS instance
ds_instance == path to DS instance, usually /var/opt/$something
dscc_instance == path to DSCC instance, usually $ds_installpath/var/dscc6/dcc/ads
sges_installpath == where sges will be deployed, usually /opt/SUNWappserver
hostname == hostname of our host

1) download software:
download from sun.com DSEE.6.3.1.Solaris-Sparc-full.tar.gz and sges_ee-2_1-solaris-sparc-ml.bin

2) install Directory Server 6.3:
you need to unpack archives .. there will be ds6.3 and ds6.3.1-patch ..

## we need install first ds6.3
cd $ds63_unpacked/DSEE_ZIP_Distribution
./dsee_deploy install -i $ds_installpath –no-cacao

## then install patch
cd $ds_631-patch_unpacked
./dsee_deploy install -i $ds_installpath –no-cacao

3) Configure our new DS:

## create dscc instance:
cd $ds_installpath/dscc6/bin
./dsccsetup ads-create ## you’ll be prompted for passwd

## you can optionally create normal instance
cd $ds_installpath/ds6/bin
./dsadm create $ds_instance
./dsadm start $ds_instance
./dsconf create-suffix -h localhost -p 389 dc=$suffix

## and register it into our dscc one:
cd $ds_installpath/dscc6/bin
./dsccreg add-server -h localhost –description “muehehe” $ds_instance

## add ds/dscc instances as smf services:
cd $ds_installpath/ds6/bin
./dsadm stop $ds_instance
./dsadm enable-service $ds_instance
./dsadm stop $dscc_instance
./dsadm enable-service $dscc_instance
svcs -a | grep ds: ## prints out a service names, then use `svcadm enable $svc` to enable them

## OPTIONAL STEPS:
## disable cacao and smcwebserver as far as we don’t like them ;)
smcwebserver disable; smcwebserver stop
cacaoadm disable; cacaoadm stop

## heal freshly installed DS, which is already molested by cacao
cd $ds_installpath/dscc6/bin
./dsccsetup cacao-unreg

## check, if cacao deployed with ds6 is not running and if yes, use
kill -11 `pgrep cacao` ## it doesn’t deserves anything better than be segfaulted

4) install GlassFish Enterprise Server:
go where you store sges_ee-2_1-solaris-sparc-ml.bin and if it’s already not, chmod +x it

## just begin installation, you’ll be asked for few questions
./sges_ee-2_1-solaris-sparc-ml.bin -tmpdir /var/tmp/sso -console

5) configure newly installed sges:

## create domain and configure it for deploying dscc controlcenter
mkdir $sges_domaindir
cd $sges_installpath/bin
./asadmin create-domain –domaindir $sges_domaindir –adminport 4848 –user admin dscc

## append following in $sges_domaindir/dscc/config/server.policy

// Permissions for Directory Service Control Center
grant codeBase “file:${com.sun.aas.instanceRoot}/applications/j2ee-modules/dscc/-”
{
permission java.security.AllPermission;
};

## then end the process of configuration
./asadmin start-domain –domaindir $sges_domaindir –user admin dscc
cp $ds_installpath/var/dscc6/dscc.war $sges_domaindir/dscc/autodeploy

6) check if all services are running:

## admin iface for GlassFish
https://$hostname:4848

## our Directory Server Control Center
http://$hostname:8080/dscc

7) enjoy !!

Frustrating! Shouldn’t need to log support calls just to get the software installed!

is it possible to contact you by mail? Please send me one so that i can tell you more. It is nothing about your blog and definitly no spam ;)

thanks in advance
aY