Novell ACCESS MANAGER 3.1 SP1 - GATEWAY GUIDE Manual page 37

"Creating a Pin List" on page 40
"Configuring Single Sign-On" on page 40
For information on other possible Access Gateway configurations, see
Manager 3.1.1 IR1 Linux Access Gateway with Teaming 2.0" (http://www.novell.com/support/php/
search.do?cmd=displayKC&docType=kc&externalId=7004284&sliceId=1&docTypeID=DT_TID_
1_1&dialogID=49882022&stateId=1%200%2049878366).
Configuring the Teaming Server to Trust the Access Gateway
To use Teaming as a protected resource of a Novell Access Gateway and to use Identity Injection for
single sign-on, the Teaming server needs a trusted relationship with the Access Gateway. With a
trusted relationship, the Teaming server can process the Authorization header credentials. The
Teaming server accepts only a simple username (such as user1) and password in the Authorization
header.
This section explains how to set up the trusted relationship and how to enable simultaneous logout,
so that when the user logs out of Teaming, the user is also logged out of the Access Gateway.
To configure the trusted relationship:
1 Log in to the Teaming server.
2 Stop the Teaming server with the following command:
/etc/init.d/teaming stop
3 Run the
installer-teaming.linux
4 Follow the prompts, then select Reconfigure settings.
5 Follow the prompts, then select Advanced installation.
6 Follow the prompts, selecting the defaults until the Enable Access Gateway option appears,
then type .
Yes
7 In the Access Gateway address(es) section, include the IP address of the Access Gateway that
is used for the connection to the Teaming server.
If the Access Gateway is part of a cluster, add the IP address for each cluster member.
Wildcards such as 164.99.*.* are allowed.
When you specify IP addresses in this option, Teaming logins are allowed only from the
specified addresses. Also, if Authorization header credentials are not present or are incorrect,
the user is prompted for login using Basic Authentication.
8 When prompted for the Logout URL, specify the URL of the published DNS name of the proxy
service plus
/AGLogout
For example, if the published DNS name of the proxy service is teaming.doc.provo.novell.com,
specify the following URL:
https://teaming.doc.provo.novell.com/AGLogout
9 When prompted to use the Access Gateway for WebDAV connections, type
10 Follow the prompts to complete the reconfiguration process.
11 Start the Teaming server with the following command:
/etc/init.d/teaming start
12 Continue with "Configuring a Domain-Based Multi-Homing Service for Novell Teaming" on
page 38.
script.
.
Configuring the Access Gateway to Protect Web Resources
"How-to: Integrating Access
.
No
37