Novell ACCESS MANAGER 3.1 SP1 - QUICK STARTS 11-20-2009 Quick Start Manual page 23

3 Configure a reverse proxy:
In the Authentication Settings section, select
In the Reverse Proxy section, click New, specify
4 To configure a proxy service, click New in the Proxy Service section, then fill in the following
fields:
Proxy Service Name:
Published DNS Name:
Web Server IP Address:
Host Header: Select the Web Server Host Name from the drop-down list.
Web Server Host Name:
5 On the Reverse Proxy page, configure a protected resource.
5a In the Proxy Service List section, click the name of proxy service (DA), then click the
Protected Resources tab.
5b In the Protected Resource List section, click New, specify
5c For the contract, select Secure Name/Password - Form.
5d In the URL Path section, examine the path. It should be set to /* to match everything on
the Web server.
5e Click OK twice.
6 On the Reverse Proxy page, enable SSL:
6a Select Enable SSL with Embedded Service Provider.
6b Select Enable SSL between Browser and Access Gateway.
6c Select Redirect Requests from Non-Secure Port to Secure Port.
6d Select Auto-generate Key, then click OK.
6e Ensure that the certificate is selected, then click OK.
7 Click OK until you return to the Access Gateway page.
8 On the Access Gateways page, click Update.
Wait for the health status to turn green. If it doesn't turn green, click the Health icon to discover
the cause.
If the Access Gateway cannot connect to the Web server, verify the IP address of the Web
server.
Use the command to verify that the Access Gateway can communicate with the Web
ping
server and the Identity Server.
Verify that the Access Gateway can resolve the DNS name of the Identity Server.
For other problems, see
Access Manager 3.1 SP1 Identity Server
9 Click the Identity Servers task, then click Update.
10 To test that the Access Gateway is protecting the Web server, open a browser and enter the
following URL:
https://lag.test.novell.com:443/
DA
lag.test.novell.com
10.10.16.16
digital.test.novell.com
"General Authentication Troubleshooting
Guide.
from the drop-down list.
idpa
, then click OK.
DigitalAirlines
everything
Tips" in the
SSL Configuration Quick Start
, then click OK.
Novell
23