{"id":13361,"date":"2016-12-21T11:00:29","date_gmt":"2016-12-21T02:00:29","guid":{"rendered":"http:\/\/www.techscore.com\/blog\/?p=13361"},"modified":"2018-11-14T16:33:43","modified_gmt":"2018-11-14T07:33:43","slug":"openam-reverse-proxy-sso","status":"publish","type":"post","link":"https:\/\/www.techscore.com\/blog\/2016\/12\/21\/openam-reverse-proxy-sso\/","title":{"rendered":"OpenAM\u3067\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u65b9\u5f0fSSO"},"content":{"rendered":"<p>\u3053\u3093\u306b\u3061\u306f\u3001\u767d\u5ddd\u3067\u3059\u3002<\/p>\n<p>\u3053\u308c\u306f<a href=\"http:\/\/www.techscore.com\/blog\/2016\/11\/30\/techscore-advent-calendar-2016\/\" target=\"_blank\">TECHSCORE Advent Calendar 2016<\/a>\u306e21\u65e5\u76ee\u306e\u8a18\u4e8b\u3067\u3059\u3002<\/p>\n<p>\u4eca\u56de\u306f<a href=\"https:\/\/forgerock.org\/openam\/\" target=\"_blank\">OpenAM<\/a>\u3092\u4f7f\u3063\u305f\u30b7\u30f3\u30b0\u30eb\u30b5\u30a4\u30f3\u30aa\u30f3\uff08\u4ee5\u4e0bSSO\uff09\u306b\u3064\u3044\u3066\u7d39\u4ecb\u3057\u307e\u3059\u3002<\/p>\n<h2>OpenAM\u306b\u3064\u3044\u3066<\/h2>\n<h4>OpenAM\u306e\u6982\u8981<\/h4>\n<p>Web\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306b\u304a\u3051\u308bSSO\u3092<br \/>\n\u5b9f\u73fe\u3059\u308b\u305f\u3081\u306e\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u3068\u306a\u308b\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u306e\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u3067\u3059\u3002<br \/>\nSAML\u3001OAuth2\u3001OpenID Connect\u3001\u306a\u3069\u8a8d\u8a3c\u3001\u8a8d\u53ef\u306b\u95a2\u9023\u3057\u305f\u8907\u6570\u306e\u30d7\u30ed\u30c8\u30b3\u30eb\u3092\u30b5\u30dd\u30fc\u30c8\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<h4>SSO\u306e\u5b9f\u73fe\u65b9\u5f0f<\/h4>\n<p>\u25a0 \u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u65b9\u5f0f<br \/>\n\u3000SSO\u5bfe\u8c61\u306eWeb\u30b5\u30fc\u30d0\/\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30fc\u30d0\u306bOpenAM\u306ePolicy Agent\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3066\u3001Policy Agent\u304c\u30d6\u30e9\u30a6\u30b6\u3068Web\u30b5\u30fc\u30d0\/\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30fc\u30d0\u306e\u901a\u4fe1\u306e\u4e2d\u3067\u3001OpenAM\u30b5\u30fc\u30d0\u306b\u8a8d\u8a3c\u72b6\u614b\u3092\u78ba\u8a8d\u3059\u308b\u3053\u3068\u3067SSO\u3092\u5b9f\u73fe\u3057\u307e\u3059\u3002<br \/>\n\u3000Policy Agent\u306fWeb\u30b5\u30fc\u30d0\uff08Apache\u3001IIS\uff09\u7528\u3068\u3001Java EE\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30fc\u30d0\uff08Tomcat\u3001WebLogic\uff09\u7528\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<p>\u25a0 \u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u65b9\u5f0f<br \/>\n\u3000\u30d6\u30e9\u30a6\u30b6\u3068Web\u30b5\u30fc\u30d0\/\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30fc\u30d0\u306e\u9593\u306b\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u30b5\u30fc\u30d0\u3092\u8a2d\u7f6e\u3057\u3066\u3001\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u30b5\u30fc\u30d0\u306bPolicy Agent\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\u3053\u3068\u3067\u3001SSO\u3092\u5b9f\u73fe\u3057\u307e\u3059\u3002<br \/>\n\u3000\u3053\u306e\u65b9\u5f0f\u3067\u306f\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u30b5\u30fc\u30d0\u306b\u306e\u307fPolicy Agent\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\u306e\u307f\u3067\u6e08\u307f\u307e\u3059\u306e\u3067\u3001\u8907\u6570\u306eSSO\u5bfe\u8c61\u306eWeb\u30b5\u30fc\u30d0\/\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30fc\u30d0\u304c\u5b58\u5728\u3059\u308b\u5834\u5408\u3001\u5c55\u958b\u3057\u3084\u3059\u3044\u3067\u3059\u3002<\/p>\n<p>\u25a0 \u4ee3\u7406\u8a8d\u8a3c\u65b9\u5f0f<br \/>\n\u3000SSO\u5bfe\u8c61\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u30ed\u30b0\u30a4\u30f3\u30da\u30fc\u30b8\u306b\u5bfe\u3057\u3066\u3001ID\u3068\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u9001\u4fe1\u3057\u3001\u30ed\u30b0\u30a4\u30f3\u3059\u308b\u3053\u3068\u3067\u3001SSO\u3092\u5b9f\u73fe\u3057\u307e\u3059\u3002<br \/>\n \u3000\u30d1\u30c3\u30b1\u30fc\u30b8\u30bd\u30d5\u30c8\u3092\u5229\u7528\u3057\u3066\u3044\u308b\u5834\u5408\u306a\u3069\u3001SSO\u3092\u5b9f\u73fe\u3059\u308b\u305f\u3081\u306e\u4fee\u6b63\u5bfe\u5fdc\u304c\u96e3\u3057\u3044\u5834\u5408\u306b\u4f7f\u308f\u308c\u307e\u3059\u3002<br \/>\n\u3000\u307e\u305f\u3001\u3053\u306e\u65b9\u5f0f\u3067\u306f\u3001SSO\u5bfe\u8c61\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306eID\/\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u4f55\u3089\u304b\u306e\u65b9\u5f0f\u3067\u540c\u671f\u3055\u305b\u3066\u304a\u304f\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<p>\u25a0 \u30d5\u30a7\u30c7\u30ec\u30fc\u30b7\u30e7\u30f3\u65b9\u5f0f<br \/>\n\u7570\u306a\u308b\u30c9\u30e1\u30a4\u30f3\u9593\u3067\u3001\u30d1\u30b9\u30ef\u30fc\u30c9\u7b49\u306e\u60c5\u5831\u3092\u6e21\u3059\u3053\u3068\u306a\u304f\u3001\u5b89\u5168\u306b\u8a8d\u8a3c\u3055\u308c\u305f\u30e6\u30fc\u30b6\u30fc\u306e\u60c5\u5831\u3092\u9023\u643a\u3059\u308b\u3053\u3068\u3067\u3001\u30b7\u30f3\u30b0\u30eb\u30b5\u30a4\u30f3\u30aa\u30f3(SSO)\u3092\u5b9f\u73fe\u3057\u307e\u3059\u3002<\/p>\n<p>\u4eca\u56de\u306f\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u65b9\u5f0f\u306eSSO\u3092OpenAM\u3067\u5b9f\u73fe\u3059\u308b\u30d5\u30ed\u30fc\u306b\u3064\u3044\u3066\u7d39\u4ecb\u3057\u307e\u3059\u3002<br \/>\n\u4e0b\u8a18\u304c\u4eca\u56de\u7d39\u4ecb\u3059\u308b\u30d5\u30ed\u30fc\u306e\u6982\u8981\u56f3\u3067\u3059\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/80da72009618e36bb472e8ddc69300ca.png\" rel=\"facebox\" rel=\"attachment wp-att-13447\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/80da72009618e36bb472e8ddc69300ca.png\" alt=\"\" width=\"835\" height=\"285\" class=\"alignleft size-full wp-image-13447\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/80da72009618e36bb472e8ddc69300ca.png 835w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/80da72009618e36bb472e8ddc69300ca-300x102.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/80da72009618e36bb472e8ddc69300ca-768x262.png 768w\" sizes=\"(max-width: 835px) 100vw, 835px\" \/><\/a><br \/>\n&nbsp;<br \/>\n&nbsp;<\/p>\n<ol>\n<li>\u30e6\u30fc\u30b6\u304cOpenAM\u3067\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u72b6\u614b\u3067\u3001\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u7d4c\u7531\u3067SSO\u5bfe\u8c61\u306e\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306b\u30a2\u30af\u30bb\u30b9\u3057\u307e\u3059\u3002<\/li>\n<li>OpenAM\u306ePolicy Agent(\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u76e3\u8996\u3059\u308b\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\uff09\u306b\u3088\u3063\u3066\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u3068\u5224\u65ad\u3057\u3001OpenAM\u306e\u30ed\u30b0\u30a4\u30f3\u30da\u30fc\u30b8\u306b\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3057\u307e\u3059\u3002<\/li>\n<li>\u30e6\u30fc\u30b6\u306f\u6b63\u3057\u3044ID\u3068\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5165\u529b\u3057\u3066\u3001\u30ed\u30b0\u30a4\u30f3\u3057\u307e\u3059\u3002<\/li>\n<li>OpenAM\u306b\u3088\u3063\u3066\u8a8d\u8a3c\u3055\u308c\u3001\u30e6\u30fc\u30b6\u60c5\u5831\u3092HTTP\u30d8\u30c3\u30c0\u306b\u30bb\u30c3\u30c8\u3057\u3066\u3001SSO\u5bfe\u8c61\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306b\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3057\u307e\u3059\u3002<\/li>\n<\/ol>\n<h4>\u74b0\u5883<\/h4>\n<p>\u4ee5\u4e0b\u3001\u5b9f\u969b\u306b\u8a66\u3057\u3066\u307f\u305f\u969b\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u60c5\u5831\u3067\u3059\u3002<\/p>\n<p>\u25a0 OpenAM\u30b5\u30fc\u30d0<br \/>\n\u30fbOS\uff1aCentOS 7.2<br \/>\n\u30fbApache HTTP Server\uff1a2.4.6<br \/>\n\u30fbTomcat\uff1a7.0.73<br \/>\n\u30fbJava\uff1aopenjdk-1.8.0.111<br \/>\n\u30fbOpenAM\uff1a13.0.0<\/p>\n<p>\u25a0 SSO\u5bfe\u8c61\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30fc\u30d0<br \/>\n\u30fbOS\uff1aCentOS 7.2<br \/>\n\u30fbApache HTTP Server\uff1a2.4.6<br \/>\n\u30fbPHP: 5.4.16<br \/>\n\u30fbOpenAM Web Policy Agent: 4.0.0 for Apache 2.4<\/p>\n<h2>OpenAM\u30b5\u30fc\u30d0\u306e\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7<\/h2>\n<p>\u305d\u308c\u3067\u306f\u3001OpenAM\u30b5\u30fc\u30d0\u306e\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u304b\u3089\u59cb\u3081\u307e\u3059\u3002<br \/>\n\u4e0b\u8a18\u306e\u624b\u9806\u306f\u5168\u3066root\u30e6\u30fc\u30b6\u3067\u5b9f\u65bd\u3057\u307e\u3059\u3002<\/p>\n<p>OpenAM\u3092\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u3059\u308b\u969b\u3001OpenAM\u30b5\u30fc\u30d0\u306e\u30db\u30b9\u30c8\u540d\u3092FQDN\u3067\u540d\u524d\u89e3\u6c7a\u3067\u304d\u308b\u3088\u3046\u306b\u3057\u3066\u304a\u304f\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<br \/>\n\u307e\u305f.(\u30c9\u30c3\u30c8)\u304c2\u3064\u4ee5\u4e0a\u3042\u308bFQDN\u3068\u3057\u3066\u304f\u3060\u3055\u3044\u3002<br \/>\n\u4eca\u56de\u306f\u3001OpenAM\u30b5\u30fc\u30d0\u306eFQDN\u3092\u300copenam-test.example.com\u300d\u3068\u3057\u307e\u3059\u3002<\/p>\n<p>\/etc\/hosts\u3067\u540d\u524d\u89e3\u6c7a\u3059\u308b\u305f\u3081\u306b\u4ee5\u4e0b\u3092\u8ffd\u8a18\u3057\u307e\u3059\u3002<\/p>\n<pre>\r\n[OpenAM\u30b5\u30fc\u30d0\u306eIP\u30a2\u30c9\u30ec\u30b9] openam-test.example.com\r\n<\/pre>\n<p>\/etc\/hostname\u3092\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u5909\u66f4\u3057\u307e\u3059\u3002<\/p>\n<pre>\r\nopenam-test.example.com\r\n<\/pre>\n<h4>1. Java\u3001Tomcat\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/h4>\n<p>Java\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3092\u884c\u3044\u307e\u3059\u3002<\/p>\n<pre>\r\n$ sudo su -\r\n# yum install java-1.8.0-openjdk java-1.8.0-openjdk-devel\r\njava -version\r\nopenjdk version \"1.8.0_111\"\r\nOpenJDK Runtime Environment (build 1.8.0_111-b15)\r\nOpenJDK 64-Bit Server VM (build 25.111-b15, mixed mode)\r\n<\/pre>\n<p>\u6b21\u306bTomcat\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3092\u884c\u3044\u307e\u3059\u3002<\/p>\n<pre>\r\n# wget http:\/\/ftp.riken.jp\/net\/apache\/tomcat\/tomcat-7\/v7.0.73\/bin\/apache-tomcat-7.0.73.tar.gz\r\n# tar xvzf apache-tomcat-7.0.73.tar.gz\r\n# mv apache-tomcat-7.0.73 \/usr\/local\/tomcat\r\n<\/pre>\n<p>\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u304c\u5b8c\u4e86\u3057\u305f\u3089\u3001\u74b0\u5883\u5909\u6570JAVA_HOME\u3068JAVA_OPTS\u304c\u30bb\u30c3\u30c8\u3055\u308c\u308b\u3088\u3046\u306b\u3001\/etc\/profile\u306b\u8ffd\u8a18\u3057\u307e\u3059\u3002<br \/>\nOpenAM\u306e\u8d77\u52d5\u306b\u306f\u30011GB\u306eJava\u30d2\u30fc\u30d7\u3068256MB\u306ePermanent\u9818\u57df(Java8\u304b\u3089\u306fMetaspace\u9818\u57df\uff09\u304c\u5fc5\u8981\u3067\u3059\u3002<br \/>\n\u8ffd\u8a18\u3059\u308b\u5185\u5bb9\u306f\u4e0b\u8a18\u306e\u901a\u308a\u3067\u3059\u3002<\/p>\n<pre>\r\nexport JAVA_HOME=\/usr\/lib\/jvm\/java-1.8.0-openjdk-1.8.0.111-2.b15.el7_3.x86_64\r\nexport PATH=$PATH:$JAVA_HOME\/bin\r\nexport JAVA_OPTS=\"-Xmx1024m -XX:MaxMetaspaceSize=256m\"\r\nexport TOMCAT_HOME=\/usr\/local\/tomcat\r\nexport CATALINA_HOME=\/usr\/local\/tomcat\r\nexport CLASSPATH=.:$JAVA_HOME\/jre\/lib:$JAVA_HOME\/lib:$JAVA_HOME\/lib\/tools.jar:$CATALINA_HOME\/lib\r\n<\/pre>\n<p>\u203b JAVA_HOME \u306f bin\/java \u5b9f\u884c\u53ef\u80fd\u30d5\u30a1\u30a4\u30eb\u3092\u542b\u3080\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u30fc\u3092\u53c2\u7167\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<br \/>\n\u4e0d\u660e\u306a\u5834\u5408\u306f\u4e0b\u8a18\u30b3\u30de\u30f3\u30c9\u3067\u78ba\u8a8d\u3067\u304d\u307e\u3059\u3002<\/p>\n<pre>\r\n# readlink -f \/usr\/bin\/javac | sed s:\/bin\/javac::\r\n\/usr\/lib\/jvm\/java-1.8.0-openjdk-1.8.0.111-2.b15.el7_3.x86_64\r\n<\/pre>\n<p>\/etc\/profile\u306b\u8ffd\u8a18\u3057\u305f\u5185\u5bb9\u3092\u53cd\u6620\u3055\u305b\u307e\u3059\u3002<\/p>\n<pre>\r\n# source \/etc\/profile\r\n<\/pre>\n<p>Tomcat\u304c\u8d77\u52d5\u3059\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u307e\u3059\u3002<\/p>\n<pre>\r\n# \/usr\/local\/tomcat\/bin\/startup.sh\r\n<\/pre>\n<p>http:\/\/openam-test.example.com:8080\u306b<br \/>\n\u30d6\u30e9\u30a6\u30b6\u304b\u3089\u30a2\u30af\u30bb\u30b9\u3057\u3066Tomcat\u306eTop\u753b\u9762\u304c\u8868\u793a\u3055\u308c\u308c\u3070\u3053\u3053\u307e\u3067\u306fOK\u3067\u3059\u3002<br \/>\n\u203b \u30a2\u30af\u30bb\u30b9\u3059\u308b\u7aef\u672b\u306ehosts\u30d5\u30a1\u30a4\u30eb\u306b\u3082\u4ee5\u4e0b\u3092\u8a2d\u5b9a\u3057\u3066\u304a\u3044\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<pre>\r\n[OpenAM\u30b5\u30fc\u30d0\u306eIP\u30a2\u30c9\u30ec\u30b9] 192.168.56.80\r\n<\/pre>\n<h4>2. OpenAM\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/h4>\n<p><a href=\"https:\/\/backstage.forgerock.com\" target=\"_blank\">\u3053\u3061\u3089<\/a>\u304b\u3089\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u307e\u3059\u3002<\/p>\n<p>\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3059\u308b\u305f\u3081\u306b\u306f\u3001forgerock\u793e\u3078\u306e\u30a2\u30ab\u30a6\u30f3\u30c8\u767b\u9332\u30fb\u30b5\u30a4\u30f3\u30a4\u30f3\u304c\u5fc5\u8981\u3067\u3059\u3002<\/p>\n<p>\u307e\u305f\u3001OpenAM\u306e\u30e9\u30a4\u30bb\u30f3\u30b9\u306fCDDL\u3068\u3057\u3066\u30bd\u30fc\u30b9\u30b3\u30fc\u30c9\u304c\u516c\u958b\u3055\u308c\u3066\u3044\u307e\u3059\u304c\u3001<br \/>\n\u3044\u3064\u304b\u3089\u305d\u3046\u306a\u3063\u305f\u304b\u306f\u4e0d\u660e\u3067\u3059\u304c\u3001\u30e1\u30b8\u30e3\u30fc\u30d0\u30fc\u30b8\u30e7\u30f3\u306e\u307f\u7121\u511f\u3067\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u53ef\u80fd\u3068\u306a\u3063\u305f\u3088\u3046\u3067\u3059\u3002<br \/>\n\u30de\u30a4\u30ca\u30fc\u30d0\u30fc\u30b8\u30e7\u30f3\u306e\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u306f\u30b5\u30d6\u30b9\u30af\u30ea\u30d7\u30b7\u30e7\u30f3\u306e\u8cfc\u5165\u304c\u5fc5\u8981\u3067\u3059\u3002<\/p>\n<p>\u4eca\u56de\u306fOpenAM-13.0.0.zip\u3092\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u307e\u3057\u305f\u3002<\/p>\n<p>\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u305fzip\u30d5\u30a1\u30a4\u30eb\u3092\u89e3\u51cd\u3057\u305f\u4e2d\u306b\u3001<br \/>\nOpenAM-13.0.0.war\u304c\u3042\u308a\u307e\u3059\u306e\u3067\u3001<br \/>\nTomcat\u306ewebapps\u30d5\u30a9\u30eb\u30c0\u306b\u30b3\u30d4\u30fc\u3057\u3066\u3001Tomcat\u3092\u518d\u8d77\u52d5\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<pre>\r\ncp OpenAM-13.0.0.war \/usr\/local\/tomcat\/webapps\/login.war\r\n<\/pre>\n<h4>3. OpenAM\u306e\u521d\u671f\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7<\/h4>\n<p>http:\/\/openam-example.com:8080\/login\u306b<br \/>\n\u30d6\u30e9\u30a6\u30b6\u304b\u3089\u30a2\u30af\u30bb\u30b9\u3057\u3066\u521d\u671f\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u3092\u884c\u3044\u307e\u3059\u3002<\/p>\n<p>\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3068\u4e0b\u8a18\u306e\u753b\u9762\u304c\u73fe\u308c\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/top.png\" rel=\"facebox\" rel=\"attachment wp-att-13450\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/top.png\" alt=\"\" width=\"1035\" height=\"484\" class=\"alignleft size-full wp-image-13450\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/top.png 1035w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/top-300x140.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/top-768x359.png 768w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/top-1024x479.png 1024w\" sizes=\"(max-width: 1035px) 100vw, 1035px\" \/><\/a><br \/>\n&nbsp;<br \/>\n\u3053\u3053\u3067\u306f\u5fc5\u305a\u300c\u30ab\u30b9\u30bf\u30e0\u8a2d\u5b9a\u300d\u3092\u9078\u629e\u3057\u3066\u304f\u3060\u3055\u3044\u3002<br \/>\n\u300c\u30c7\u30d5\u30a9\u30eb\u30c8\u8a2d\u5b9a\u300d\u306b\u306f<a href=\"https:\/\/bugster.forgerock.org\/jira\/browse\/OPENAM-1945\" target=\"_blank\">\u4e0d\u5177\u5408<\/a>\u304c\u3042\u308a\u3001\u5f8c\u306b\u554f\u984c\u304c\u8d77\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u305f\u3081\u3067\u3059\u3002<\/p>\n<p>\u30e9\u30a4\u30bb\u30f3\u30b9\u306b\u540c\u610f\u3057\u305f\u5f8c\u306b\u3001amAdmin\u30e6\u30fc\u30b6\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u8a2d\u5b9a\u3059\u308b\u753b\u9762\u304c\u8868\u793a\u3055\u308c\u307e\u3059\u3002<br \/>\namAdmin\u30e6\u30fc\u30b6\u306fopenam\u306e\u7ba1\u7406\u8005\u6a29\u9650\u3092\u6301\u3064\u30e6\u30fc\u30b6\u3067\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5fd8\u308c\u3066\u3057\u307e\u3046\u3068\u3001openam\u306e\u4e00\u5207\u306e\u8a2d\u5b9a\u304c\u3067\u304d\u306a\u304f\u306a\u3063\u3066\u3057\u307e\u3046\u305f\u3081\u3001\u5fd8\u308c\u306a\u3044\u3088\u3046\u306b\u6ce8\u610f\u304c\u5fc5\u8981\u3067\u3059\u3002<br \/>\n\u3053\u3053\u3067\u306fopenam01\u3068\u3057\u307e\u3057\u305f\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/02_amadmin_password.png\" rel=\"facebox\" rel=\"attachment wp-att-13452\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/02_amadmin_password.png\" alt=\"OpenAM admin \u30d1\u30b9\u30ef\u30fc\u30c9\u8a2d\u5b9a\" width=\"813\" height=\"653\" class=\"alignleft size-full wp-image-13452\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/02_amadmin_password.png 813w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/02_amadmin_password-300x241.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/02_amadmin_password-768x617.png 768w\" sizes=\"(max-width: 813px) 100vw, 813px\" \/><\/a><br \/>\n&nbsp;<br \/>\n&nbsp;<br \/>\n\u6b21\u306b\u300c\u30b5\u30fc\u30d0\u30fc\u8a2d\u5b9a\u300d\u753b\u9762\u306b\u9077\u79fb\u3057\u307e\u3059\u3002<br \/>\n\u3053\u3053\u3067\u306f\u3001\u8a2d\u5b9a\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306e\u307f\u300c\/usr\/local\/openam\u300d\u3068\u3057\u307e\u3057\u305f\u3002<br \/>\n\u305d\u306e\u4ed6\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u8a2d\u5b9a\u3055\u308c\u308b\u5185\u5bb9\u306e\u307e\u307e\u6b21\u306b\u9032\u307f\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/03_server_setting.png\" rel=\"facebox\" rel=\"attachment wp-att-13456\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/03_server_setting.png\" alt=\"\u30b5\u30fc\u30d0\u30fc\u8a2d\u5b9a\u753b\u9762\" width=\"813\" height=\"655\" class=\"alignleft size-full wp-image-13456\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/03_server_setting.png 813w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/03_server_setting-300x242.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/03_server_setting-768x619.png 768w\" sizes=\"(max-width: 813px) 100vw, 813px\" \/><\/a><br \/>\n&nbsp;<br \/>\n&nbsp;<br \/>\n\u6b21\u306b\u300c\u8a2d\u5b9a\u30c7\u30fc\u30bf\u30b9\u30c8\u30a2\u300d\u753b\u9762\u306b\u9077\u79fb\u3057\u307e\u3059\u3002<br \/>\n\u3053\u3053\u306f\u300cOpenAM\u300d\u304c\u521d\u671f\u3067\u9078\u629e\u3055\u308c\u3066\u304a\u308a\u3001\u8a2d\u5b9a\u5185\u5bb9\u306f\u5909\u66f4\u305b\u305a\u306b\u6b21\u306b\u9032\u307f\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/04_setting_data_store.png\" rel=\"facebox\" rel=\"attachment wp-att-13458\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/04_setting_data_store.png\" alt=\"\u8a2d\u5b9a\u30c7\u30fc\u30bf\u30b9\u30c8\u30a2\u753b\u9762\" width=\"810\" height=\"656\" class=\"alignleft size-full wp-image-13458\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/04_setting_data_store.png 810w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/04_setting_data_store-300x243.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/04_setting_data_store-768x622.png 768w\" sizes=\"(max-width: 810px) 100vw, 810px\" \/><\/a><br \/>\n&nbsp;<br \/>\n&nbsp;<br \/>\n\u6b21\u306b\u300c\u30e6\u30fc\u30b6\u30c7\u30fc\u30bf\u30b9\u30c8\u30a2\u300d\u753b\u9762\u306b\u9077\u79fb\u3057\u307e\u3059\u3002<br \/>\n\u3053\u3053\u306f\u300cOpenAM\u306e\u30e6\u30fc\u30b6\u30b9\u30c8\u30a2\u300d\u3092\u9078\u629e\u3057\u3066\u3001\u6b21\u306b\u9032\u307f\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/05_user_data_store.png\" rel=\"facebox\" rel=\"attachment wp-att-13459\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/05_user_data_store.png\" alt=\"\u30e6\u30fc\u30b6\u30c7\u30fc\u30bf\u30b9\u30c8\u30a2\u753b\u9762\" width=\"812\" height=\"654\" class=\"alignleft size-full wp-image-13459\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/05_user_data_store.png 812w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/05_user_data_store-300x242.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/05_user_data_store-768x619.png 768w\" sizes=\"(max-width: 812px) 100vw, 812px\" \/><\/a><br \/>\n&nbsp;<br \/>\n&nbsp;<br \/>\n\u6b21\u306b\u300c\u30b5\u30a4\u30c8\u8a2d\u5b9a\u300d\u753b\u9762\u306b\u9077\u79fb\u3057\u307e\u3059\u3002<br \/>\n\u30ed\u30fc\u30c9\u30d0\u30e9\u30f3\u30b5\u306e\u4e0b\u306b\u914d\u7f6e\u3055\u308c\u308bOpenAM\u30b5\u30fc\u30d0\u304b\u3069\u3046\u304b\u3092\u554f\u308f\u308c\u307e\u3059\u3002<br \/>\nOpenAM\u3092\u5197\u9577\u5316\u3059\u308b\u5834\u5408\u306bYES\u306b\u3059\u308b\u3088\u3046\u3067\u3059\u304c\u3001\u4eca\u56de\u306fNO\u3067\u6b21\u306b\u9032\u307f\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/06_load_balancer.png\" rel=\"facebox\" rel=\"attachment wp-att-13460\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/06_load_balancer.png\" alt=\"\u30b5\u30a4\u30c8\u8a2d\u5b9a\u753b\u9762\" width=\"809\" height=\"654\" class=\"alignleft size-full wp-image-13460\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/06_load_balancer.png 809w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/06_load_balancer-300x243.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/06_load_balancer-768x621.png 768w\" sizes=\"(max-width: 809px) 100vw, 809px\" \/><\/a><br \/>\n&nbsp;<br \/>\n&nbsp;<br \/>\n\u6b21\u306bPolicy Agent\u3067\u4f7f\u7528\u3059\u308b\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u8a2d\u5b9a\u3057\u307e\u3059\u3002<br \/>\n\u5f8c\u306e\u624b\u9806\u3067\u5fc5\u8981\u3068\u306a\u308a\u307e\u3059\u306e\u3067\u3001\u5fd8\u308c\u306a\u3044\u3088\u3046\u306b\u6ce8\u610f\u304c\u5fc5\u8981\u3067\u3059\u3002\u3053\u3053\u3067\u306fopenam02\u3068\u3057\u307e\u3057\u305f\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/07_policy_agent_password.png\" rel=\"facebox\" rel=\"attachment wp-att-13461\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/07_policy_agent_password.png\" alt=\"Policy Agent \u30d1\u30b9\u30ef\u30fc\u30c9\u8a2d\u5b9a\" width=\"812\" height=\"653\" class=\"alignleft size-full wp-image-13461\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/07_policy_agent_password.png 812w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/07_policy_agent_password-300x241.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/07_policy_agent_password-768x618.png 768w\" sizes=\"(max-width: 812px) 100vw, 812px\" \/><\/a><br \/>\n&nbsp;<br \/>\n&nbsp;<br \/>\n\u6700\u7d42\u78ba\u8a8d\u753b\u9762\u304c\u8868\u793a\u3055\u308c\u307e\u3059\u306e\u3067\u3001<br \/>\n\u300c\u8a2d\u5b9a\u306e\u4f5c\u6210\u300d\u30dc\u30bf\u30f3\u3092\u30af\u30ea\u30c3\u30af\u3057\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/08_last_confirm.png\" rel=\"facebox\" rel=\"attachment wp-att-13462\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/08_last_confirm.png\" alt=\"\u6700\u7d42\u78ba\u8a8d\u753b\u9762\" width=\"812\" height=\"657\" class=\"alignleft size-full wp-image-13462\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/08_last_confirm.png 812w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/08_last_confirm-300x243.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/08_last_confirm-768x621.png 768w\" sizes=\"(max-width: 812px) 100vw, 812px\" \/><\/a><br \/>\n&nbsp;<br \/>\n&nbsp;<br \/>\n\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u753b\u9762\u8868\u793a\u3055\u308c\u308c\u3070\u3001\u5b8c\u4e86\u3067\u3059\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/09_end.png\" rel=\"facebox\" rel=\"attachment wp-att-13463\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/09_end.png\" alt=\"\u5b8c\u4e86\u753b\u9762\" width=\"809\" height=\"654\" class=\"alignleft size-full wp-image-13463\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/09_end.png 809w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/09_end-300x243.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/09_end-768x621.png 768w\" sizes=\"(max-width: 809px) 100vw, 809px\" \/><\/a><br \/>\n&nbsp;<br \/>\n&nbsp;<br \/>\n\u3082\u3057\u3053\u3053\u3067\u5931\u6557\u3057\u305f\u5834\u5408\u306f\u3001OpenAM\u306e\u8a2d\u5b9a\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\uff08\u4eca\u56de\u3067\u306f\/usr\/local\/openam\uff09\u76f4\u4e0b\u306b\u3042\u308binstall.log\u306b\u3001<br \/>\n\u30a8\u30e9\u30fc\u5185\u5bb9\u304c\u51fa\u529b\u3055\u308c\u3066\u3044\u307e\u3059\u3002<br \/>\n\u30a8\u30e9\u30fc\u5185\u5bb9\u78ba\u8a8d\u306e\u4e0a\u3001\u518d\u5ea6\u521d\u671f\u8a2d\u5b9a\u304b\u3089\u884c\u3046\u5834\u5408\u306f\u3001OpenPM\u306e\u8a2d\u5b9a\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3001Tomcat\u306e\u914d\u5099\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3092\u524a\u9664\u3057\u3066\u3001<br \/>\nTomcat\u3092\u518d\u8d77\u52d5\u3057\u307e\u3059\u3002<\/p>\n<pre>\r\n\/usr\/local\/tomcat\/bin\/shutdown.sh\r\nrm -Rf \/usr\/local\/openam\r\nrm -Rf \/usr\/local\/tomcat\/webapps\/login\r\n\/usr\/local\/tomcat\/bin\/startup.sh\r\n<\/pre>\n<hr\/>\n<h4>4. \u72ec\u81ea\u8a8d\u8a3c\u30e2\u30b8\u30e5\u30fc\u30eb\u4f5c\u6210<\/h4>\n<p>OpenAM\u3067\u306f\u6a19\u6e96\u3067Active Directory\u3084LDAP\u3001JDBC\u306a\u3069\u69d8\u3005\u306a\u30ed\u30b0\u30a4\u30f3\u8a8d\u8a3c\u306e\u30e2\u30b8\u30e5\u30fc\u30eb\u304c\u7528\u610f\u3055\u308c\u3066\u3044\u307e\u3059\u304c\u3001<br \/>\n\u72ec\u81ea\u306e\u8a8d\u8a3c\u30e2\u30b8\u30e5\u30fc\u30eb\u3092\u4f5c\u6210\u3059\u308b\u3053\u3068\u304c\u53ef\u80fd\u3067\u3059\u3002<br \/>\n<a href=\"https:\/\/backstage.forgerock.com\/docs\/openam\/13\/dev-guide#sec-auth-spi\" target=\"_blank\">OpenAM\u306eDevelopers Guide<\/a>\u306b\u65b9\u6cd5\u304c\u8a18\u8f09\u3055\u308c\u3066\u3044\u307e\u3059\u306e\u3067\u3001<br \/>\n\u3053\u3061\u3089\u3092\u53c2\u8003\u306b\u4f5c\u6210\u3057\u3066\u307f\u307e\u3059\u3002<\/p>\n<p>\u4eca\u56de\u306f\u4ee5\u4e0b\u306e\u4ed5\u69d8\u3067\u8a8d\u8a3c\u30e2\u30b8\u30e5\u30fc\u30eb\u3092\u4f5c\u6210\u3057\u307e\u3059\u3002<\/p>\n<ul>\n<li>sample\u3068\u3044\u3046realm\uff08\u30ec\u30eb\u30e0\u3068\u8a00\u3044\u307e\u3059\u3002OpenAM\u3067\u4e00\u9023\u306e\u8a2d\u5b9a\u3092\u7ba1\u7406\u3059\u308b\u5358\u4f4d\u306e\u3053\u3068\uff09\u3067\u4f7f\u7528\u3059\u308b<\/li>\n<li>\u30ed\u30b0\u30a4\u30f3\u53ef\u80fd\u3068\u306a\u308b\u56fa\u5b9a\u306e\u30e6\u30fc\u30b6\u540d\u3068\u30d1\u30b9\u30ef\u30fc\u30c9\u3092OpenAM\u306e\u7ba1\u7406\u753b\u9762\u3067\u8a2d\u5b9a\u53ef\u80fd\u3068\u3059\u308b<\/li>\n<li>\u8a8d\u8a3cOK\u3067\u3042\u308c\u3070\u3001\u30bb\u30c3\u30b7\u30e7\u30f3\u306b\u30e6\u30fc\u30b6\u60c5\u5831\u3092\u30bb\u30c3\u30c8\u3059\u308b<\/li>\n<\/ul>\n<p>\u8a8d\u8a3c\u30e2\u30b8\u30e5\u30fc\u30eb\u306f\u4e0b\u8a18\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u69cb\u6210\u3067\u4f5c\u6210\u3057\u307e\u3059\u3002<br \/>\n\u2605\u3092\u3064\u3051\u305f\u3082\u306e\u3092\u7528\u610f\u3057\u3066\u3044\u304d\u307e\u3059\u3002<\/p>\n<pre>\r\n\u251c\u2500\u2500 pom.xml \u2605\r\n\u2514\u2500\u2500 src\r\n\u00a0\u00a0 \u2514\u2500\u2500 main\r\n\u00a0\u00a0     \u251c\u2500\u2500 java\r\n\u00a0\u00a0     \u2502\u00a0\u00a0 \u2514\u2500\u2500 com\r\n\u00a0\u00a0     \u2502\u00a0\u00a0     \u2514\u2500\u2500 example\r\n\u00a0\u00a0     \u2502\u00a0\u00a0         \u2514\u2500\u2500 openam\r\n\u00a0\u00a0     \u2502\u00a0\u00a0             \u251c\u2500\u2500 SampleAuth.java \u2605\r\n\u00a0\u00a0     \u2502\u00a0\u00a0             \u2514\u2500\u2500 SampleAuthPrincipal.java \u2605\r\n\u00a0\u00a0     \u2514\u2500\u2500 resources\r\n\u00a0\u00a0         \u251c\u2500\u2500 amAuthSampleAuth.properties \u2605\r\n\u00a0\u00a0         \u251c\u2500\u2500 amAuthSampleAuth.xml \u2605\r\n\u00a0\u00a0         \u2514\u2500\u2500 config\r\n\u00a0\u00a0             \u2514\u2500\u2500 auth\r\n\u00a0\u00a0                 \u2514\u2500\u2500 default\r\n\u00a0\u00a0                     \u2514\u2500\u2500 login\r\n \u00a0                         \u2514\u2500\u2500 services\r\n\u00a0                              \u2514\u2500\u2500 sample\r\n\u00a0\u00a0                                 \u2514\u2500\u2500 html\r\n \u00a0                                     \u2514\u2500\u2500 SampleAuth.xml\u2605\r\n<\/pre>\n<h5>4-1. pom.xml\u306e\u6e96\u5099<\/h5>\n<p>\u4ee5\u4e0b\u306e\u5185\u5bb9\u3067\u4f5c\u6210\u3057\u307e\u3059\u3002<\/p>\n<pre>\r\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n<project xmlns=\"http:\/\/maven.apache.org\/POM\/4.0.0\"\r\n         xmlns:xsi=\"http:\/\/www.w3.org\/2001\/XMLSchema-instance\"\r\n         xsi:schemaLocation=\"http:\/\/maven.apache.org\/POM\/4.0.0 http:\/\/maven.apache.org\/xsd\/maven-4.0.0.xsd\">\r\n    <modelVersion>4.0.0<\/modelVersion>\r\n\r\n    <groupId>com.example.openam<\/groupId>\r\n    <artifactId>sample-auth-module<\/artifactId>\r\n    <version>1.0.0<\/version>\r\n    <packaging>jar<\/packaging>\r\n\r\n    <properties>\r\n        <openam.version>13.0.0<\/openam.version>\r\n        <project.build.sourceEncoding>UTF-8<\/project.build.sourceEncoding>\r\n    <\/properties>\r\n\r\n     <repositories>\r\n        <repository>\r\n            <id>forgerock-releases<\/id>\r\n            <url>http:\/\/maven.forgerock.org\/repo\/releases<\/url>\r\n        <\/repository>\r\n        <repository>\r\n            <id>forgerock-snapshots<\/id>\r\n            <url>http:\/\/maven.forgerock.org\/repo\/openam-snapshots<\/url>\r\n        <\/repository>\r\n    <\/repositories>\r\n\r\n    <dependencies>\r\n        <dependency>\r\n            <groupId>org.forgerock.openam<\/groupId>\r\n            <artifactId>openam-core<\/artifactId>\r\n            <version>${openam.version}<\/version>\r\n        <\/dependency>\r\n        <dependency>\r\n            <groupId>org.forgerock.openam<\/groupId>\r\n            <artifactId>openam-shared<\/artifactId>\r\n            <version>${openam.version}<\/version>\r\n        <\/dependency>\r\n        <dependency>\r\n            <groupId>javax.servlet<\/groupId>\r\n            <artifactId>servlet-api<\/artifactId>\r\n            <version>2.5<\/version>\r\n            <scope>provided<\/scope>\r\n        <\/dependency>\r\n    <\/dependencies>\r\n\r\n    <build>\r\n        <plugins>\r\n            <plugin>\r\n                <groupId>org.apache.maven.plugins<\/groupId>\r\n                <artifactId>maven-compiler-plugin<\/artifactId>\r\n                <version>3.3<\/version>\r\n                <configuration>\r\n                    <source>1.8<\/source>\r\n                    <target>1.8<\/target>\r\n                <\/configuration>\r\n            <\/plugin>\r\n        <\/plugins>\r\n    <\/build>\r\n<\/project>\r\n<\/pre>\n<h5>4-2. src\/main\/java\/org\/forgerock\/openam\/examples\/SampleAuth.java<\/h5>\n<p>com.sun.identity.authentication.spi.AMLoginModule\u3092\u7d99\u627f\u3057\u305f\u30af\u30e9\u30b9\u3092\u4f5c\u6210\u3057\u307e\u3059\u3002<br \/>\nprocess\u3068\u3044\u3046\u30e1\u30bd\u30c3\u30c9\u306ecase\u6587\u306eSTATE_AUTH\u306e\u90e8\u5206\u306b\u30ed\u30b0\u30a4\u30f3\u30dc\u30bf\u30f3\u62bc\u4e0b\u6642\u306e\u30ed\u30b8\u30c3\u30af\u3092\u8a18\u8ff0\u3057\u307e\u3059\u3002<br \/>\n\u4eca\u56de\u306f\u3001<a href=\"https:\/\/backstage.forgerock.com\/docs\/openam\/13\/dev-guide#authentication-logic-sample-auth-module\" target=\"_blank\">\u3053\u3061\u3089<\/a>\u3092\u53c2\u8003\u306b\u3001\u4ee5\u4e0b\u306e\u5185\u5bb9\u3067\u4f5c\u6210\u3057\u307e\u3057\u305f\u3002<\/p>\n<pre>\r\npackage com.example.openam;\r\n\r\nimport java.security.Principal;\r\nimport java.util.Map;\r\nimport java.util.ResourceBundle;\r\n\r\nimport javax.security.auth.Subject;\r\nimport javax.security.auth.callback.Callback;\r\nimport javax.security.auth.callback.NameCallback;\r\nimport javax.security.auth.callback.PasswordCallback;\r\nimport javax.security.auth.login.LoginException;\r\n\r\nimport com.sun.identity.authentication.spi.AMLoginModule;\r\nimport com.sun.identity.authentication.spi.AuthLoginException;\r\nimport com.sun.identity.authentication.util.ISAuthConstants;\r\nimport com.sun.identity.shared.datastruct.CollectionHelper;\r\nimport com.sun.identity.shared.debug.Debug;\r\n\r\n\/**\r\n * SampleAuth authentication module example.\r\n *\r\n * If you create your own module based on this example, you must modify all\r\n * occurrences of \"SampleAuth\" in addition to changing the name of the class.\r\n *\r\n * Please refer to OpenAM documentation for further information.\r\n *\r\n * Feel free to look at the code for authentication modules delivered with\r\n * OpenAM, as they implement this same API.\r\n *\/\r\npublic class SampleAuth extends AMLoginModule {\r\n\r\n    \/\/ Name for the debug-log\r\n    private final static String DEBUG_NAME = \"SampleAuth\";\r\n    private final static Debug debug = Debug.getInstance(DEBUG_NAME);\r\n\r\n    \/\/ Name of the resource bundle\r\n    private final static String amAuthSampleAuth = \"amAuthSampleAuth\";\r\n\r\n    \/\/ User names for authentication logic\r\n    private static String USERNAME;\r\n    private static String PASSWORD;\r\n\r\n    \/\/ Orders defined in the callbacks file\r\n    private final static int STATE_BEGIN = 1;\r\n    private final static int STATE_AUTH = 2;\r\n    private final static int STATE_ERROR = 3;\r\n\r\n    \/\/ Errors properties\r\n    private final static String SAMPLE_AUTH_ERROR_REQUIRED_USERNAME = \"sampleauth-error-required-username\";\r\n    private final static String SAMPLE_AUTH_ERROR_REQUIRED_PASSWORD = \"sampleauth-error-required-password\";\r\n    private final static String SAMPLE_AUTH_ERROR_INVALID_USERNAME_OR_PASSWORD = \"sampleauth-error-invalid-username-or-password\";\r\n    \r\n    private Map<String, String> options;\r\n    private ResourceBundle bundle;\r\n    private Map<String, String> sharedState;\r\n\r\n    public SampleAuth() {\r\n        super();\r\n    }\r\n\r\n\r\n    \/**\r\n     * This method stores service attributes and localized properties for later\r\n     * use.\r\n     * @param subject\r\n     * @param sharedState\r\n     * @param options\r\n     *\/\r\n    @Override\r\n    public void init(Subject subject, Map sharedState, Map options) {\r\n\r\n        debug.message(\"SampleAuth::init\");\r\n\r\n        this.options = options;\r\n        this.sharedState = sharedState;\r\n        this.bundle = amCache.getResBundle(amAuthSampleAuth, getLoginLocale());\r\n        \/\/ OpenAM\u306e\u7ba1\u7406\u753b\u9762\u3067\u8a2d\u5b9a\u3057\u305f\u30e6\u30fc\u30b6\u540d\u3068\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u53d6\u5f97\r\n        USERNAME = CollectionHelper.getMapAttr(options,\"sampleauth-service-valid-username\");\r\n        PASSWORD = CollectionHelper.getMapAttr(options,\"sampleauth-service-valid-password\");\r\n    }\r\n\r\n    @Override\r\n    public int process(Callback[] callbacks, int state) throws LoginException {\r\n\r\n        debug.message(\"SampleAuth::process state: {}\", state);\r\n\r\n        switch (state) {\r\n\r\n            case STATE_BEGIN:\r\n                substituteUIStrings();\r\n                return STATE_AUTH;\r\n\r\n            case STATE_AUTH:\r\n                \/\/ \u753b\u9762\u3067\u5165\u529b\u3055\u308c\u305f\u30e6\u30fc\u30b6\u540d\u3068\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u53d6\u5f97\r\n                NameCallback nc = (NameCallback) callbacks[0];\r\n                PasswordCallback pc = (PasswordCallback) callbacks[1];\r\n                String username = nc.getName();\r\n                String password = String.valueOf(pc.getPassword());\r\n\r\n                if (username == null || \"\".equals(username)) {\r\n                    setErrorText(SAMPLE_AUTH_ERROR_REQUIRED_USERNAME);\r\n                    return STATE_ERROR;\r\n                }\r\n\r\n                if (password == null || \"\".equals(password)) {\r\n                    setErrorText(SAMPLE_AUTH_ERROR_REQUIRED_PASSWORD);\r\n                    return STATE_ERROR;\r\n                }\r\n\r\n                if (!USERNAME.equals(username) || !PASSWORD.equals(password)) {\r\n                \tsetErrorText(SAMPLE_AUTH_ERROR_INVALID_USERNAME_OR_PASSWORD);\r\n                    return STATE_ERROR;\r\n                }\r\n                \r\n                \/\/ \u30bb\u30c3\u30b7\u30e7\u30f3\u306b\u30e6\u30fc\u30b6\u60c5\u5831\u3092\u30bb\u30c3\u30c8\r\n                \/\/ SSO\u5bfe\u8c61\u306e\u30a2\u30d7\u30ea\u306b\u30a2\u30af\u30bb\u30b9\u306e\u969b\u3001Policy Agent\u304cHTTP\u30d8\u30c3\u30c0\u306b\u4e0b\u8a18\u60c5\u5831\u3092\u30bb\u30c3\u30c8\u3059\u308b\r\n                setUserSessionProperty(\"sample-username\", username);\r\n                setUserSessionProperty(\"sample-organization\", \"Synergy Marcketing\");\r\n\r\n                return ISAuthConstants.LOGIN_SUCCEED;\r\n\r\n            case STATE_ERROR:\r\n                return STATE_ERROR;\r\n            default:\r\n                throw new AuthLoginException(\"invalid state\");\r\n        }\r\n    }\r\n\r\n    @Override\r\n    public Principal getPrincipal() {\r\n        return new SampleAuthPrincipal(USERNAME);\r\n    }\r\n\r\n    private void setErrorText(String err) throws AuthLoginException {\r\n        \/\/ Receive correct string from properties and substitute the\r\n        \/\/ header in callbacks order 3.\r\n        substituteHeader(STATE_ERROR, bundle.getString(err));\r\n    }\r\n\r\n    \/**\r\n    * \u30ed\u30b0\u30a4\u30f3\u753b\u9762\u306eUI\u6587\u5b57\u5217\u5dee\u66ff\u3048\r\n    *\/\r\n    private void substituteUIStrings() throws AuthLoginException {\r\n        \/\/ Get service specific attribute configured in OpenAM\r\n        String ssa = CollectionHelper.getMapAttr(options, \"specificAttribute\");\r\n\r\n        \/\/ Get property from bundle\r\n        String newHeader = ssa + \" \" +\r\n                bundle.getString(\"sampleauth-ui-login-header\");\r\n        substituteHeader(STATE_AUTH, newHeader);\r\n\r\n        replaceCallback(STATE_AUTH, 0, new NameCallback(\r\n                bundle.getString(\"sampleauth-ui-username-prompt\")));\r\n        replaceCallback(STATE_AUTH, 1, new PasswordCallback(\r\n                bundle.getString(\"sampleauth-ui-password-prompt\"), false));\r\n    }\r\n}\r\n<\/pre>\n<h5>4-3. src\/main\/java\/org\/forgerock\/openam\/examples\/SampleAuthPrincipal.java<\/h5>\n<p>java.security.Principal\u3092\u5b9f\u88c5\u3057\u305f\u30af\u30e9\u30b9\u3067\u3059\u3002<br \/>\n\u3053\u3053\u3067\u306f<a href=\"https:\/\/backstage.forgerock.com\/docs\/openam\/13\/dev-guide#principal-sample-auth-module\" target=\"_blank\">\u3053\u3061\u3089<\/a>\u306e\u5185\u5bb9\u3092\u305d\u306e\u307e\u307e\u5229\u7528\u3057\u307e\u3059\u3002\uff08\u5185\u5bb9\u306f\u5272\u611b\u3057\u307e\u3059\u3002\uff09<\/p>\n<h5>4-4. src\/main\/resources\/amAuthSampleAuth.properties<\/h5>\n<p>\u30ed\u30b0\u30a4\u30f3\u753b\u9762\u3067\u5dee\u3057\u66ff\u3048\u306b\u5fc5\u8981\u3068\u306a\u308b\u6587\u5b57\u5217\u306a\u3069\u3092\u5b9a\u7fa9\u3057\u305f\u30d7\u30ed\u30d1\u30c6\u30a3\u30d5\u30a1\u30a4\u30eb\u3067\u3059\u3002<br \/>\n<a href=\"https:\/\/backstage.forgerock.com\/docs\/openam\/13\/dev-guide#properties-sample-auth-module\" target=\"_blank\">\u3053\u3061\u3089<\/a>\u3092\u53c2\u8003\u306b\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u4f5c\u6210\u3057\u307e\u3057\u305f\u3002<br \/>\n\u203b native2ascii\u3067Unicode\u306b\u5909\u63db\u3059\u308b\u524d\u306e\u5185\u5bb9\u3067\u3059\u3002<\/p>\n<pre>\r\nsampleauth-service-description=\u30b5\u30f3\u30d7\u30eb\u8a8d\u8a3c\u30e2\u30b8\u30e5\u30fc\u30eb\r\na500=\u8a8d\u8a3c\u30ec\u30d9\u30eb\r\na501=Service Specific Attribute\r\na502=\u30ed\u30b0\u30a4\u30f3\u30e6\u30fc\u30b6\u540d\r\na503=\u30ed\u30b0\u30a4\u30f3\u30d1\u30b9\u30ef\u30fc\u30c9\r\n\r\nsampleauth-ui-login-header=\u30b5\u30f3\u30d7\u30eb\u30ed\u30b0\u30a4\u30f3\u753b\u9762\r\nsampleauth-ui-username-prompt=\u30e6\u30fc\u30b6\u540d:\r\nsampleauth-ui-password-prompt=\u30d1\u30b9\u30ef\u30fc\u30c9:\r\nsampleauth-error-required-username=\u30e6\u30fc\u30b6\u540d\u3092\u5165\u529b\u3057\u3066\u304f\u3060\u3055\u3044\u3002\r\nsampleauth-error-required-password=\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5165\u529b\u3057\u3066\u304f\u3060\u3055\u3044\u3002\r\nsampleauth-error-invalid-username-or-password=\u30e6\u30fc\u30b6\u540d\u307e\u305f\u306f\u30d1\u30b9\u30ef\u30fc\u30c9\u304c\u9055\u3044\u307e\u3059\u3002\r\n<\/pre>\n<h5>4-5. src\/main\/resources\/amAuthSampleAuth.xml<\/h5>\n<p>\u4f5c\u6210\u3059\u308b\u8a8d\u8a3c\u30e2\u30b8\u30e5\u30fc\u30eb\u3092OpenAM\u306b\u30b5\u30fc\u30d3\u30b9\u3068\u3057\u3066\u8aad\u307f\u8fbc\u307e\u305b\u308b\u305f\u3081\u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u3067\u3059\u3002<br \/>\n\u30b5\u30fc\u30d3\u30b9\u540d\u306fiPlanetAMAuth \u304b sunAMAuth \u3067\u958b\u59cb\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<br \/>\nAttributeSchema\u3067OpenAM\u306e\u7ba1\u7406\u753b\u9762\u3067\u8a8d\u8a3c\u30e2\u30b8\u30e5\u30fc\u30eb\u304c\u4f7f\u3046\u8a2d\u5b9a\u5185\u5bb9\u3092\u5b9a\u7fa9\u3057\u307e\u3059\u3002<br \/>\n<a href=\"https:\/\/backstage.forgerock.com\/docs\/openam\/13\/dev-guide#service-conf-sample-auth-module\" target=\"_blank\">\u3053\u3061\u3089<\/a>\u3092\u53c2\u8003\u306b\u4ee5\u4e0b\u306e\u5185\u5bb9\u3067\u4f5c\u6210\u3057\u307e\u3057\u305f\u3002<\/p>\n<pre>\r\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n<!--\r\n   DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.\r\n\r\n   Copyright (c) 2011-2015 ForgeRock AS.\r\n\r\n   The contents of this file are subject to the terms\r\n   of the Common Development and Distribution License\r\n   (the License). You may not use this file except in\r\n   compliance with the License.\r\n\r\n   You can obtain a copy of the License at legal\/CDDLv1.0.txt.\r\n   See the License for the specific language governing\r\n   permission and limitations under the License.\r\n\r\n   When distributing Covered Code, include this CDDL\r\n   Header Notice in each file and include the License file at legal\/CDDLv1.0.txt.\r\n   If applicable, add the following below the CDDL Header,\r\n   with the fields enclosed by brackets [] replaced by\r\n   your own identifying information:\r\n   \"Portions Copyrighted [year] [name of copyright owner]\"\r\n-->\r\n<!DOCTYPE ServicesConfiguration\r\n    PUBLIC \"=\/\/iPlanet\/\/Service Management Services (SMS) 1.0 DTD\/\/EN\"\r\n    \"jar:\/\/com\/sun\/identity\/sm\/sms.dtd\">\r\n\r\n<ServicesConfiguration>\r\n <Service name=\"iPlanetAMAuthSampleAuthService\" version=\"1.0\">\r\n  <Schema\r\n   serviceHierarchy=\"\/DSAMEConfig\/authentication\/iPlanetAMAuthSampleAuthService\"\r\n   i18nFileName=\"amAuthSampleAuth\" revisionNumber=\"10\"\r\n   i18nKey=\"sampleauth-service-description\" resourceName=\"sample\">\r\n   <Organization>\r\n    <!-- Specify resourceName for a JSON-friendly property in the REST SMS -->\r\n    <AttributeSchema name=\"iplanet-am-auth-sampleauth-auth-level\" resourceName=\"authLevel\"\r\n     type=\"single\" syntax=\"number_range\" rangeStart=\"0\" rangeEnd=\"2147483647\"\r\n     i18nKey=\"a500\">\r\n     <DefaultValues>\r\n      <Value>1<\/Value>\r\n     <\/DefaultValues>\r\n    <\/AttributeSchema>\r\n\r\n    <!-- No need for resourceName when the name is JSON-compatible -->\r\n    <AttributeSchema name=\"specificAttribute\"\r\n     type=\"single\" syntax=\"string\" validator=\"no\" i18nKey=\"a501\" \/>\r\n     \r\n    <AttributeSchema name=\"sampleauth-service-valid-username\"\r\n     type=\"single\" syntax=\"string\" validator=\"no\" i18nKey=\"a502\" \/>\r\n     \r\n    <AttributeSchema name=\"sampleauth-service-valid-password\"\r\n     type=\"single\" syntax=\"string\" validator=\"no\" i18nKey=\"a503\" \/>\r\n\r\n    <!--\r\n     For Auth Modules, the parent Schema element specifies the REST SMS resourceName,\r\n     and the nested SubSchema must have resourceName=\"USE-PARENT\"\r\n    -->\r\n    <SubSchema name=\"serverconfig\" inheritance=\"multiple\" resourceName=\"USE-PARENT\">\r\n     <AttributeSchema name=\"iplanet-am-auth-sampleauth-auth-level\" resourceName=\"authLevel\"\r\n      type=\"single\" syntax=\"number_range\" rangeStart=\"0\" rangeEnd=\"2147483647\"\r\n      i18nKey=\"a500\">\r\n      <DefaultValues>\r\n       <Value>1<\/Value>\r\n      <\/DefaultValues>\r\n     <\/AttributeSchema>\r\n\r\n     <!-- No need for a DefaultValues element when the default is blank -->\r\n     <AttributeSchema name=\"specificAttribute\"\r\n      type=\"single\" syntax=\"string\" validator=\"no\" i18nKey=\"a501\" \/>\r\n      \r\n     <AttributeSchema name=\"sampleauth-service-valid-username\"\r\n      type=\"single\" syntax=\"string\" validator=\"no\" i18nKey=\"a502\" \/>\r\n     \r\n     <AttributeSchema name=\"sampleauth-service-valid-password\"\r\n      type=\"single\" syntax=\"string\" validator=\"no\" i18nKey=\"a503\" \/>\r\n\r\n    <\/SubSchema>\r\n   <\/Organization>\r\n  <\/Schema>\r\n <\/Service>\r\n<\/ServicesConfiguration>\r\n<\/pre>\n<h5>4-6. src\/main\/resources\/config\/auth\/default\/openam\/services\/sample\/SampleAuth.xml<\/h5>\n<p>\u30ed\u30b0\u30a4\u30f3\u753b\u9762\u306eUI\u8868\u793a\u306b\u4f7f\u7528\u3059\u308bxml\u30d5\u30a1\u30a4\u30eb\u3067\u3059\u3002<br \/>\n\u901a\u5e38\u306fsrc\/main\/resources\/config\/auth\/default\/SampleAuth.xml\u3068\u3057\u3066\u4f5c\u6210\u3057\u307e\u3059\u304c\u3001<br \/>\n\u4eca\u56de\u306fsample\u3068\u3044\u3046realm\u3067\u4f5c\u6210\u3057\u307e\u3059\u306e\u3067\u3001<br \/>\n<a href=\"https:\/\/backstage.forgerock.com\/docs\/openam\/13\/install-guide#copy-ui-to-customize-subrealm\">\u3053\u3061\u3089<\/a>\u306b\u5f93\u3044\u3001<br \/>\nsrc\/main\/resources\/config\/auth\/default\/openam\/services\/sample\/SampleAuth.xml \u3068\u3057\u3066\u4f5c\u6210\u3057\u307e\u3059\u3002<\/p>\n<p>\u5185\u5bb9\u306f<a href=\"https:\/\/backstage.forgerock.com\/docs\/openam\/13\/dev-guide#callbacks-file-sample-auth-module\" target=\"_blank\">\u3053\u3061\u3089<\/a>\u3068\u540c\u5185\u5bb9\u3067\u4f5c\u6210\u3057\u307e\u3059\u3002<\/p>\n<p>\u3053\u3053\u307e\u3067\u7528\u610f\u3067\u304d\u308c\u3070\u30d3\u30eb\u30c9\u3092\u884c\u3044\u307e\u3059\u3002<\/p>\n<pre>\r\n#\u3000mvn install\r\n<\/pre>\n<p>target\u306e\u4e0b\u306b\u3001sample-auth-module-1.0.0.jar\u304c\u4f5c\u6210\u3055\u308c\u307e\u3059\u306e\u3067\u3001<br \/>\nOpenAM\u304c\u914d\u5099\u3055\u308c\u305f\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306eWEB-INF\/lib\u914d\u4e0b\u306b\u30b3\u30d4\u30fc\u3057\u307e\u3059\u3002<\/p>\n<pre>\r\n# cp target\/sample-auth-module-1.0.0.jar \/usr\/local\/tomcat\/webapps\/login\/WEB-INF\/lib\/\r\n<\/pre>\n<h4>5. \u72ec\u81ea\u8a8d\u8a3c\u30e2\u30b8\u30e5\u30fc\u30eb\u3092OpenAM\u306b\u767b\u9332<\/h4>\n<p>\u4f5c\u6210\u3057\u305f\u8a8d\u8a3c\u30e2\u30b8\u30e5\u30fc\u30eb\u3092OpenAM\u306b\u767b\u9332\u3059\u308b\u305f\u3081\u306b\u3001<br \/>\nssoadm\u3068\u3044\u3046\u30c4\u30fc\u30eb\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<p>\u6700\u521d\u306b\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u305fOpenAM-13.0.0.zip\u306e\u4e2d\u306e\u3001<br \/>\nSSOAdminTools-13.0.0.zip\u304cssoadm\u3067\u3059\u3002<\/p>\n<p>\u3053\u308c\u3092OpenAM\u30b5\u30fc\u30d0\u306b\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3057\u3066\u3001<br \/>\n\u4e0b\u8a18\u30b3\u30de\u30f3\u30c9\u3067\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u307e\u3059\u3002<\/p>\n<pre>\r\n# mkdir -p \/usr\/local\/ssoadmintools\r\n# cd \/usr\/local\/ssoadmintools\r\n# unzip \/path\/to\/SSOAdminTools-13.0.0.zip\r\n# .\/setup\r\nDo you accept the license? y\r\nOpenAM \u30b5\u30fc\u30d0\u30fc\u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306e\u30d1\u30b9 [\/root\/openam]:\/usr\/local\/openam\r\n\u30c7\u30d0\u30c3\u30b0\u30c7\u30a3\u30ec\u30af\u30c8\u30ea [\/usr\/local\/ssoadmintools\/debug]:\r\n\u30ed\u30b0\u30c7\u30a3\u30ec\u30af\u30c8\u30ea [\/usr\/local\/ssoadmintools\/log]:\r\n\r\n\u30b9\u30af\u30ea\u30d7\u30c8\u306f\u6b21\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b\u6b63\u3057\u304f\u8a2d\u5b9a\u3055\u308c\u3066\u3044\u307e\u3059:  \/usr\/local\/ssoadmintools\/login\r\n\u30c7\u30d0\u30c3\u30b0\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306f \/usr\/local\/ssoadmintools\/debug \u3067\u3059\u3002\r\n\u30ed\u30b0\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306f \/usr\/local\/ssoadmintools\/log \u3067\u3059\u3002\r\n\u3053\u306e tools.zip \u306e\u30d0\u30fc\u30b8\u30e7\u30f3:  OpenAM 13.0.0\r\n\u30b5\u30fc\u30d0\u30fc\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306e\u30d0\u30fc\u30b8\u30e7\u30f3:  OpenAM 13.0.0 Build 5d4589530d (2016-January-14 21:15)\r\n<\/pre>\n<p>\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u305fssoadm\u3067\u4f5c\u6210\u3057\u305f\u8a8d\u8a3c\u30e2\u30b8\u30e5\u30fc\u30eb\u3092OpenAM\u306b\u767b\u9332\u3057\u307e\u3059\u3002<\/p>\n<pre>\r\n# echo [amAdmin\u30e6\u30fc\u30b6\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u3002\u3053\u3053\u3067\u306fopenam01] > \/tmp\/password.txt\r\n# chmod 400 \/tmp\/password.txt\r\n# cd \/usr\/local\/ssoadmintools\/login\/bin\r\n# .\/ssoadm create-svc --adminid amAdmin --password-file \/tmp\/password.txt --xmlfile path\/to\/amAuthSampleAuth.xml\r\n# .\/ssoadm register-auth-module --adminid amAdmin --password-file \/tmp\/password.txt --authmodule com.example.openam.SampleAuth\r\n<\/pre>\n<p>\u767b\u9332\u5b8c\u4e86\u5f8c\u3001Tomcat\u3092\u518d\u8d77\u52d5\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<hr\/>\n<h4>6. OpenAM\u306e\u8a2d\u5b9a<\/h4>\n<p>http:\/\/openam-test.example:8080\/login\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3066\u3001<br \/>\namAdmin\u30e6\u30fc\u30b6\u3067\u30ed\u30b0\u30a4\u30f3\u3057\u307e\u3059\u3002<\/p>\n<p>\u307e\u305a\u3001\u8a8d\u8a3c\u3092\u884c\u3046\u30ec\u30eb\u30e0(\u4e00\u9023\u306e\u8a8d\u8a3c\u8a2d\u5b9a\u3092\u7ba1\u7406\u3059\u308b\u5358\u4f4d\uff09\u3092\u4f5c\u6210\u3057\u3066\u3044\u304d\u307e\u3059\u3002<br \/>\n\u30ed\u30b0\u30a4\u30f3\u3059\u308b\u3068\u3001OpenAM\u306b\u4f5c\u6210\u3055\u308c\u305f\u30ec\u30eb\u30e0\u4e00\u89a7\u304c\u8868\u793a\u3055\u308c\u307e\u3059\u3002<br \/>\n\u521d\u671f\u72b6\u614b\u3067\u306fTop Level Realm\u304c\u767b\u9332\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n<p>\u300cNew Realm\u300d\u30dc\u30bf\u30f3\u3092\u30af\u30ea\u30c3\u30af\u3059\u308b\u3068\u3001<br \/>\n\u30ec\u30eb\u30e0\u306e\u65b0\u898f\u767b\u9332\u753b\u9762\u304c\u8868\u793a\u3055\u308c\u307e\u3059\u306e\u3067\u3001<br \/>\n\u5148\u307b\u3069\u767b\u9332\u3057\u305f\u8a8d\u8a3c\u30e2\u30b8\u30e5\u30fc\u30eb\u306f\u30ec\u30eb\u30e0\u540d\u3092sample\u3068\u3057\u3066\u4f7f\u3046\u60f3\u5b9a\u3067\u3057\u305f\u306e\u3067\u3001<br \/>\n\u30ec\u30eb\u30e0\u540d\u3092sample\u3068\u3057\u3066\u767b\u9332\u3057\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/01_new_subrealm.png\" rel=\"facebox\" rel=\"attachment wp-att-13466\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/01_new_subrealm.png\" alt=\"\" width=\"995\" height=\"665\" class=\"alignleft size-full wp-image-13466\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/01_new_subrealm.png 995w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/01_new_subrealm-300x201.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/01_new_subrealm-768x513.png 768w\" sizes=\"(max-width: 995px) 100vw, 995px\" \/><\/a><br \/>\n&nbsp;<br \/>\n&nbsp;<\/p>\n<h5>6-1. sample\u30ec\u30eb\u30e0\u306e\u8a8d\u8a3c\u8a2d\u5b9a<\/h5>\n<p>sample\u30ec\u30eb\u30e0\u306b\u5bfe\u3057\u3066\u8a8d\u8a3c\u8a2d\u5b9a\u3092\u884c\u3063\u3066\u3044\u304d\u307e\u3059\u3002<\/p>\n<p>sample\u30ec\u30eb\u30e0\u3092Authentication > Settings\u3092\u9078\u629e\u3057\u307e\u3059\u3002<\/p>\n<p>\u307e\u305a\u3001\u30e6\u30fc\u30b6\u30d7\u30ed\u30d5\u30a1\u30a4\u30eb\u30bf\u30d6\u3067\u3001<br \/>\n\u300c\u30e6\u30fc\u30b6\u30d7\u30ed\u30d5\u30a1\u30a4\u30eb\u300d\u3092\u300c\u5fc5\u9808\u300d\u2192\u300c\u52d5\u7684\u300d\u306b\u5909\u66f4\u3057\u307e\u3059\u3002<br \/>\n<a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/UserProfileModify.png\" rel=\"facebox\" rel=\"attachment wp-att-13468\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/UserProfileModify.png\" alt=\"\u30e6\u30fc\u30b6\u30d7\u30ed\u30d5\u30a1\u30a4\u30eb\u8a2d\u5b9a\" width=\"1166\" height=\"449\" class=\"alignleft size-full wp-image-13468\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/UserProfileModify.png 1166w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/UserProfileModify-300x116.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/UserProfileModify-768x296.png 768w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/UserProfileModify-1024x394.png 1024w\" sizes=\"(max-width: 1166px) 100vw, 1166px\" \/><\/a><br \/>\n&nbsp;<br \/>\n&nbsp;<br \/>\nOpenAM\u306e\u8a8d\u8a3c\u30d5\u30ed\u30fc\u3067\u306f\u3001<br \/>\n\u8a8d\u8a3c\u5f8c\u306b\u300c\u30e6\u30fc\u30b6\u304cOpenAM\u304c\u7ba1\u7406\u3059\u308b\u30e6\u30fc\u30b6\u30c7\u30fc\u30bf\u30b9\u30c8\u30a2\u306b\u5b58\u5728\u3057\u3066\u3044\u308b\u304b\u300d\u3092\u5fc5\u305a\u30c1\u30a7\u30c3\u30af\u3057\u3066\u3001\u5b58\u5728\u3057\u306a\u3044\u5834\u5408\u306f\u30ed\u30b0\u30a4\u30f3\u753b\u9762\u306b\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3055\u308c\u3066\u3057\u307e\u3044\u307e\u3059\u3002\uff08\u8a73\u3057\u304f\u306f<a href=\"http:\/\/blogs.forgerock.org\/petermajor\/2015\/04\/understanding-the-login-process\/\" target=\"_blank\">\u3053\u3061\u3089\u3092\u53c2\u7167<\/a>\u304f\u3060\u3055\u3044\u3002\uff09<br \/>\nID\/\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u4e88\u3081OpenAM\u306e\u7ba1\u7406\u3059\u308b\u30e6\u30fc\u30b6\u30c7\u30fc\u30bf\u30b9\u30c8\u30a2\u306b\u767b\u9332\u3057\u3066\u304a\u304f\u5fc5\u8981\u304c\u3042\u308b\u306e\u3067\u3059\u304c\u3001<br \/>\n\u4e0a\u8a18\u306e\u8a2d\u5b9a\u3092\u65bd\u3059\u3053\u3068\u3067\u3001\u8a8d\u8a3c\u5f8c\u306b\u8a72\u5f53\u306e\u30e6\u30fc\u30b6\u304cOpenAM\u304c\u7ba1\u7406\u3059\u308b\u30c7\u30fc\u30bf\u30b9\u30c8\u30a2\u306b\u5b58\u5728\u3057\u306a\u3044\u5834\u5408\u3001<br \/>\nOpenAM\u306e\u65b9\u3067\u30e6\u30fc\u30b6\u3092\u4f5c\u6210\u3057\u3066\u304f\u308c\u307e\u3059\u306e\u3067\u3001\u8a8d\u8a3c\u6210\u529f\u3057\u305f\u306b\u3082\u304b\u304b\u308f\u3089\u305a\u30ed\u30b0\u30a4\u30f3\u753b\u9762\u306b\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3055\u308c\u308b\u3088\u3046\u306a\u3053\u3068\u306f\u306a\u304f\u306a\u308a\u307e\u3059\u3002<br \/>\n\u5916\u90e8\u30b5\u30fc\u30d0\u3068\u3084\u308a\u3068\u308a\u3057\u3066\u8a8d\u8a3c\u3092\u884c\u306a\u3046\u3088\u3046\u306a\u30e2\u30b8\u30e5\u30fc\u30eb\u306e\u5834\u5408\u306f\u3001ID\/\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u4e8b\u524d\u306e\u540c\u671f\u304c\u4e0d\u8981\u306b\u306a\u308a\u307e\u3059\u306e\u3067\u3001\u3053\u306e\u8a2d\u5b9a\u304c\u4f7f\u3048\u308b\u306e\u3067\u306f\u306a\u3044\u304b\u3068\u8003\u3048\u307e\u3059\u3002<\/p>\n<p>\u6b21\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30bf\u30d6\u3067\u3001<br \/>\n\u30e2\u30b8\u30e5\u30fc\u30eb\u30d9\u30fc\u30b9\u306e\u8a8d\u8a3c\u3092\u7121\u52b9\u5316\u3057\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/DisableModuleBaseAuth.png\" rel=\"facebox\" rel=\"attachment wp-att-13469\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/DisableModuleBaseAuth.png\" alt=\"\u30e2\u30b8\u30e5\u30fc\u30eb\u30d9\u30fc\u30b9\u8a8d\u8a3c\u306e\u7121\u52b9\u5316\" width=\"1156\" height=\"594\" class=\"alignleft size-full wp-image-13469\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/DisableModuleBaseAuth.png 1156w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/DisableModuleBaseAuth-300x154.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/DisableModuleBaseAuth-768x395.png 768w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/DisableModuleBaseAuth-1024x526.png 1024w\" sizes=\"(max-width: 1156px) 100vw, 1156px\" \/><\/a><br \/>\n&nbsp;<br \/>\n&nbsp;<br \/>\n\u30dd\u30b9\u30c8\u8a8d\u8a3c\u30d7\u30ed\u30bb\u30b9\u30bf\u30d6\u3067\u3001\u30ed\u30b0\u30a4\u30f3\u6210\u529f\u6642\u306b\u8fd4\u3059\u30c7\u30d5\u30a9\u30eb\u30c8\u306e URL \u3092\u300c\/sample\/?realm=sample\u300d\u306b\u5909\u66f4\u3057\u307e\u3059\u3002<br \/>\n\u300c?realm=sample\u300d\u3068\u3044\u3046\u30d1\u30e9\u30e1\u30fc\u30bf\u306f\u3001<br \/>\nsample\u30ec\u30eb\u30e0\u306b\u8a2d\u5b9a\u3057\u305f\u8a8d\u8a3c\u8a2d\u5b9a\u3067\u30ed\u30b0\u30a4\u30f3\u3057\u307e\u3059\u3001\u307e\u305f\u306f\u3057\u305f\u3088\u3001\u3068\u3044\u3046\u610f\u5473\u3067\u3059\u3002<br \/>\n\u307e\u305f\u3001\u30e6\u30fc\u30b6\u30fcID\u751f\u6210\u30e2\u30fc\u30c9\u306e\u30c1\u30a7\u30c3\u30af\u3092\u5916\u3057\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/ModifyPostAuth.png\" rel=\"facebox\" rel=\"attachment wp-att-13470\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/ModifyPostAuth.png\" alt=\"\u30dd\u30b9\u30c8\u8a8d\u8a3c\u30d7\u30ed\u30bb\u30b9\u8a2d\u5b9a\" width=\"1162\" height=\"599\" class=\"alignleft size-full wp-image-13470\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/ModifyPostAuth.png 1162w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/ModifyPostAuth-300x155.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/ModifyPostAuth-768x396.png 768w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/ModifyPostAuth-1024x528.png 1024w\" sizes=\"(max-width: 1162px) 100vw, 1162px\" \/><\/a><br \/>\n&nbsp;<br \/>\n&nbsp;<br \/>\n\u6b21\u306bAuthentication > Modules\u304b\u3089\u3001\u81ea\u4f5c\u3057\u305f\u8a8d\u8a3c\u30e2\u30b8\u30e5\u30fc\u30eb\u3092\u8ffd\u52a0\u3057\u307e\u3059\u3002<\/p>\n<p>\u300cAdd Module\u300d\u3092\u30af\u30ea\u30c3\u30af\u3059\u308b\u3068\u3001\u30e2\u30b8\u30e5\u30fc\u30eb\u8ffd\u52a0\u753b\u9762\u304c\u8868\u793a\u3055\u308c\u307e\u3059\u3002<br \/>\nModule Name\u306b\u300cSampleAuthModule\u300d\u3092\u5165\u529b\u3001<br \/>\nType\u306e\u30d7\u30eb\u30c0\u30a6\u30f3\u306b\u5148\u307b\u3069\u4f5c\u6210\u3057\u305f\u30e2\u30b8\u30e5\u30fc\u30eb\u304c\u300c\u30b5\u30f3\u30d7\u30eb\u8a8d\u8a3c\u30e2\u30b8\u30e5\u30fc\u30eb\u300d\u3068\u3057\u3066\u9078\u629e\u53ef\u80fd\u3068\u306a\u3063\u3066\u3044\u307e\u3059\u306e\u3067\u3001<br \/>\n\u305d\u308c\u3092\u9078\u629e\u3057\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/AddNewModule.png\" rel=\"facebox\" rel=\"attachment wp-att-13471\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/AddNewModule.png\" alt=\"\u65b0\u30e2\u30b8\u30e5\u30fc\u30eb\u8ffd\u52a0\" width=\"1183\" height=\"356\" class=\"alignleft size-full wp-image-13471\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/AddNewModule.png 1183w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/AddNewModule-300x90.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/AddNewModule-768x231.png 768w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/AddNewModule-1024x308.png 1024w\" sizes=\"(max-width: 1183px) 100vw, 1183px\" \/><\/a><br \/>\n&nbsp;<br \/>\n&nbsp;<br \/>\n\u30e2\u30b8\u30e5\u30fc\u30eb\u3092\u8ffd\u52a0\u3059\u308b\u3068\u3001\u305d\u306e\u30e2\u30b8\u30e5\u30fc\u30eb\u306e\u8a2d\u5b9a\u753b\u9762\u306b\u9032\u307f\u307e\u3059\u3002<br \/>\namAuthSampleAuth.xml\u3067\u5b9a\u7fa9\u3057\u305f\u8a2d\u5b9a\u9805\u76ee\u304c\u8868\u793a\u3055\u308c\u307e\u3059\u3002<br \/>\n\u4eca\u56de\u306f\u30ed\u30b0\u30a4\u30f3\u30e6\u30fc\u30b6\u540d\u3001\u30ed\u30b0\u30a4\u30f3\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u8a2d\u5b9a\u3067\u304d\u308b\u3088\u3046\u306b\u3057\u307e\u3057\u305f\u306e\u3067\u3001<br \/>\n\u305d\u308c\u305e\u308cSynergy\u3001changeit\u306b\u8a2d\u5b9a\u3057\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/ModuleSettings.png\" rel=\"facebox\" rel=\"attachment wp-att-13472\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/ModuleSettings.png\" alt=\"\u30e2\u30b8\u30e5\u30fc\u30eb\u8a2d\u5b9a\" width=\"969\" height=\"439\" class=\"alignleft size-full wp-image-13472\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/ModuleSettings.png 969w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/ModuleSettings-300x136.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/ModuleSettings-768x348.png 768w\" sizes=\"(max-width: 969px) 100vw, 969px\" \/><\/a><br \/>\n&nbsp;<br \/>\n&nbsp;<br \/>\n\u6b21\u306b\u3001\u8ffd\u52a0\u3057\u305f\u8a8d\u8a3c\u30e2\u30b8\u30e5\u30fc\u30eb\u3092\u5fc5\u9808\u3068\u3059\u308b\u65b0\u898f\u8a8d\u8a3c\u9023\u9396\u3092\u4f5c\u6210\u3057\u307e\u3059\u3002<\/p>\n<p>Authentication > Chains > \u300cAdd Chain\u300d\u3092\u30af\u30ea\u30c3\u30af\u3059\u308b\u3068\u3001\u65b0\u898f\u8a8d\u8a3c\u9023\u9396\u767b\u9332\u753b\u9762\u304c\u8868\u793a\u3055\u308c\u307e\u3059\u3002<br \/>\nChain Name\u306f\u300cSampleAuthChain\u300d\u3068\u3057\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/AddNewChain.png\" rel=\"facebox\" rel=\"attachment wp-att-13473\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/AddNewChain.png\" alt=\"\u65b0\u898f\u8a8d\u8a3c\u9023\u9396\u753b\u9762\" width=\"624\" height=\"230\" class=\"alignleft size-full wp-image-13473\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/AddNewChain.png 624w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/AddNewChain-300x111.png 300w\" sizes=\"(max-width: 624px) 100vw, 624px\" \/><\/a><br \/>\n&nbsp;<br \/>\n&nbsp;<br \/>\n\u4f5c\u6210\u3057\u305f\u8a8d\u8a3c\u9023\u9396\u306b\u30e2\u30b8\u30e5\u30fc\u30eb\u3092\u8ffd\u52a0\u3057\u307e\u3059\u3002<br \/>\n\u300cSampleAuthModule\u300d\u3092\u9078\u629e\u3057\u3001\u6761\u4ef6\u306f\u300cRequired\u300d\u3068\u3057\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/SettingChainModule.png\" rel=\"facebox\" rel=\"attachment wp-att-13474\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/SettingChainModule.png\" alt=\"\u8a8d\u8a3c\u9023\u9396\u8a2d\u5b9a1\" width=\"973\" height=\"654\" class=\"alignleft size-full wp-image-13474\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/SettingChainModule.png 973w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/SettingChainModule-300x202.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/SettingChainModule-768x516.png 768w\" sizes=\"(max-width: 973px) 100vw, 973px\" \/><\/a><br \/>\n&nbsp;<br \/>\n&nbsp;<br \/>\n\u30ed\u30b0\u30a4\u30f3\u5f8c\u306b\u8fd4\u3059URL\u306b\u300chttp:\/\/openam-test.example.com\/sample\/?realm=sample\u300d\u3092\u8a2d\u5b9a\u3057\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/SampleChainModule2.png\" rel=\"facebox\" rel=\"attachment wp-att-13475\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/SampleChainModule2.png\" alt=\"\u8a8d\u8a3c\u9023\u9396\u8a2d\u5b9a2\" width=\"963\" height=\"623\" class=\"alignleft size-full wp-image-13475\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/SampleChainModule2.png 963w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/SampleChainModule2-300x194.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/SampleChainModule2-768x497.png 768w\" sizes=\"(max-width: 963px) 100vw, 963px\" \/><\/a><br \/>\n&nbsp;<br \/>\n&nbsp;<br \/>\n\u6b21\u306b\u3055\u3063\u304d\u8ffd\u52a0\u3057\u305f\u8a8d\u8a3c\u9023\u9396\u3092\u8a8d\u8a3c\u3067\u4f7f\u7528\u3059\u308b\u3088\u3046\u306b\u8a2d\u5b9a\u3057\u307e\u3059\u3002<\/p>\n<p>Authentication > Settings > Core\u30bf\u30d6\u3092\u9078\u629e\u3057\u3001<br \/>\n\u7ba1\u7406\u8005\u8a8d\u8a3c\u8a2d\u5b9a\u3001\u7d44\u7e54\u8a8d\u8a3c\u8a2d\u5b9a\u3068\u3082\u306b\u300cSampleAuthChain\u300d\u3092\u9078\u629e\u3057\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/AuthCore.png\" rel=\"facebox\" rel=\"attachment wp-att-13476\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/AuthCore.png\" alt=\"\u8a8d\u8a3c\u30b3\u30a2\u8a2d\u5b9a\" width=\"972\" height=\"315\" class=\"alignleft size-full wp-image-13476\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/AuthCore.png 972w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/AuthCore-300x97.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/AuthCore-768x249.png 768w\" sizes=\"(max-width: 972px) 100vw, 972px\" \/><\/a><br \/>\n&nbsp;<br \/>\n&nbsp;<\/p>\n<hr\/>\n<h5>6-2. sample\u30ec\u30eb\u30e0\u306e\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u306e\u8a2d\u5b9a<\/h5>\n<p>\u6b21\u306b\u300c\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u300d\u306e\u8a2d\u5b9a\u3092\u884c\u306a\u3044\u307e\u3059\u3002<br \/>\nPolicy Agent\u306b\u3069\u306e\u3088\u3046\u306a\u632f\u308b\u821e\u3044\u3092\u884c\u308f\u305b\u308b\u304b\u306e\u8a2d\u5b9a\u3092\u3057\u3066\u3044\u304d\u307e\u3059\u3002<\/p>\n<p>sample\u30ec\u30eb\u30e0 > Agents \u3092\u30af\u30ea\u30c3\u30af\u3059\u308b\u3068\u3001\u4e0b\u8a18\u753b\u9762\u304c\u8868\u793a\u3055\u308c\u307e\u3059\u3002<br \/>\n\u4eca\u56de\u306fApache\u306bPolicy Agent\u3092\u7d44\u307f\u8fbc\u307f\u307e\u3059\u306e\u3067\u3001<br \/>\nWeb\u30bf\u30d6\u3092\u9078\u629e\u3057\u3066\u3001\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u306e\u65b0\u898f\u30dc\u30bf\u30f3\u3092\u30af\u30ea\u30c3\u30af\u3057\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/agent_top.png\" rel=\"facebox\" rel=\"attachment wp-att-13477\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/agent_top.png\" alt=\"\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u8a2d\u5b9aTOP\" width=\"1391\" height=\"592\" class=\"alignleft size-full wp-image-13477\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/agent_top.png 1391w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/agent_top-300x128.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/agent_top-768x327.png 768w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/agent_top-1024x436.png 1024w\" sizes=\"(max-width: 1391px) 100vw, 1391px\" \/><\/a><\/p>\n<p>&nbsp;<br \/>\n&nbsp;<br \/>\n\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u65b0\u898f\u767b\u9332\u753b\u9762\u3067\u3001\u4e0b\u8a18\u5185\u5bb9\u3092\u5165\u529b\u3057\u3066\u767b\u9332\u3057\u307e\u3059\u3002<\/p>\n<ul>\n<li>\u540d\u524d\uff1aopenam-reverse-proxy<\/li>\n<li>\u30d1\u30b9\u30ef\u30fc\u30c9\uff1aopenam02<\/li>\n<li>\u30b5\u30fc\u30d0\u30fc URL:http:\/\/openam-test.example.com:8080\/login<\/li>\n<li>\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8 URL:http:\/\/openam-test.example.com:80<\/li>\n<\/ul>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/addNewAgentSetting.png\" rel=\"facebox\" rel=\"attachment wp-att-13478\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/addNewAgentSetting.png\" alt=\"\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u767b\u9332\u753b\u9762\" width=\"960\" height=\"334\" class=\"alignleft size-full wp-image-13478\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/addNewAgentSetting.png 960w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/addNewAgentSetting-300x104.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/addNewAgentSetting-768x267.png 768w\" sizes=\"(max-width: 960px) 100vw, 960px\" \/><\/a><\/p>\n<p>&nbsp;<br \/>\n&nbsp;<br \/>\n\u4f5c\u6210\u3057\u305f\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u3092\u9078\u629e\u3057\u3066\u8a73\u7d30\u8a2d\u5b9a\u3092\u884c\u3063\u3066\u3044\u304d\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/afterCreateAgent.png\" rel=\"facebox\" rel=\"attachment wp-att-13480\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/afterCreateAgent.png\" alt=\"\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u9078\u629e\" width=\"319\" height=\"241\" class=\"alignleft size-full wp-image-13480\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/afterCreateAgent.png 319w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/afterCreateAgent-300x227.png 300w\" sizes=\"(max-width: 319px) 100vw, 319px\" \/><\/a><\/p>\n<p style=\"clear:both;\">&nbsp;<\/p>\n<p>&nbsp;<br \/>\n\u25a0 \u30b0\u30ed\u30fc\u30d0\u30eb\u30bf\u30d6<br \/>\n\u300cSSO\u306e\u307f\u30e2\u30fc\u30c9\u300d\u306e\u300c\u6709\u52b9\u300d\u306b\u30c1\u30a7\u30c3\u30af\u3092\u5165\u308c\u307e\u3059\u3002<br \/>\n\u300cSSO\u306e\u307f\u30e2\u30fc\u30c9\u300d\u3068\u3044\u3046\u306e\u306f\u3001Policy Agent\u3067\u8a8d\u8a3c\u306e\u307f\u3092\u884c\u306a\u3044\u8a8d\u53ef\u306f\u884c\u308f\u306a\u3044\u3001\u3068\u3044\u3046\u610f\u5473\u3067\u3059\u3002<br \/>\n\u3069\u306e\u30e6\u30fc\u30b6\u304c\u3069\u306e\u30ea\u30bd\u30fc\u30b9\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u304b\u3092\u5236\u5fa1\u3057\u307e\u305b\u3093\u3002<br \/>\n\uff08\u8a8d\u53ef\u3092\u884c\u306a\u3046\u5834\u5408\u306f\u30dd\u30ea\u30b7\u30fc\u306e\u8a2d\u5b9a\u304c\u5fc5\u8981\u3068\u306a\u308a\u307e\u3059\u3002\u8a2d\u5b9a\u65b9\u6cd5\u306f<a href=\"https:\/\/backstage.forgerock.com\/docs\/openam\/13\/admin-guide#chap-authz-policy\" target=\"_blank\">\u3053\u3061\u3089<\/a>\u3092\u3054\u89a7\u304f\u3060\u3055\u3044\u3002\uff09<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/ssoonly.png\" rel=\"facebox\" rel=\"attachment wp-att-13482\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/ssoonly.png\" alt=\"ssoonlymode\" width=\"820\" height=\"387\" class=\"alignleft size-full wp-image-13482\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/ssoonly.png 820w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/ssoonly-300x142.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/ssoonly-768x362.png 768w\" sizes=\"(max-width: 820px) 100vw, 820px\" \/><\/a><br \/>\n&nbsp;<br \/>\n&nbsp;<br \/>\n\u25a0 \u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30bf\u30d6<br \/>\nOpenAM\u306e\u30bb\u30c3\u30b7\u30e7\u30f3\u3067\u7ba1\u7406\u3057\u3066\u3044\u308b\u60c5\u5831\u3092\u3001SSO\u5bfe\u8c61\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306b\u5bfe\u3059\u308b\u30ea\u30af\u30a8\u30b9\u30c8\u306eHTTP\u30d8\u30c3\u30c0\u306bPolicy Agent\u304c\u4ed8\u4e0e\u3059\u308b\u8a2d\u5b9a\u3092\u3057\u307e\u3059\u3002<\/p>\n<p>\u30bb\u30c3\u30b7\u30e7\u30f3\u5c5e\u6027\u30d5\u30a7\u30c3\u30c1\u30e2\u30fc\u30c9\u306f\u300cHTTP HEADER\u300d\u3092\u9078\u629e\u3057\u3001<br \/>\n\u30bb\u30c3\u30b7\u30e7\u30f3\u5c5e\u6027\u30de\u30c3\u30d7\u306e\u8a2d\u5b9a\u7b87\u6240\u3067\u4e0b\u8a18\u5185\u5bb9\u3092\u8a2d\u5b9a\u3057\u307e\u3059\u3002<br \/>\n\u5de6\u5074\u304c\u30bb\u30c3\u30b7\u30e7\u30f3\u3067\u7ba1\u7406\u3057\u3066\u3044\u308b\u30ad\u30fc\u3001\u53f3\u5074\u304cHTTP\u30d8\u30c3\u30c0\u306b\u4ed8\u4e0e\u3059\u308b\u30ad\u30fc\u3067\u3059\u3002<\/p>\n<ul>\n<li>[sample-username]=CUSTOM-sample-username<\/li>\n<li>[sample-organization]=CUSTOM-sample-organization<\/li>\n<\/ul>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/sessionToHttpHeader.png\" rel=\"facebox\" rel=\"attachment wp-att-13483\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/sessionToHttpHeader.png\" alt=\"\u30bb\u30c3\u30b7\u30e7\u30f3\u5c5e\u6027\u51e6\u7406\" width=\"683\" height=\"479\" class=\"alignleft size-full wp-image-13483\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/sessionToHttpHeader.png 683w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/sessionToHttpHeader-300x210.png 300w\" sizes=\"(max-width: 683px) 100vw, 683px\" \/><\/a><br \/>\n&nbsp;<br \/>\n&nbsp;<br \/>\n\u25a0 OpenAM\u30b5\u30fc\u30d3\u30b9\u30bf\u30d6<br \/>\n\u30ed\u30b0\u30a4\u30f3\u306eURL\u306b\u300c?realm=sample\u300d\u3092\u4ed8\u4e0e\u3057\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/login_url_modify.png\" rel=\"facebox\" rel=\"attachment wp-att-13484\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/login_url_modify.png\" alt=\"\u30ed\u30b0\u30a4\u30f3URL\u5909\u66f4\" width=\"855\" height=\"475\" class=\"alignleft size-full wp-image-13484\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/login_url_modify.png 855w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/login_url_modify-300x167.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/login_url_modify-768x427.png 768w\" sizes=\"(max-width: 855px) 100vw, 855px\" \/><\/a><\/p>\n<p style=\"clear:both;\">&nbsp;<\/p>\n<p>&nbsp;<br \/>\n\u30ed\u30b0\u30a2\u30a6\u30c8\u306eURL\u306b\u3082\u300c?realm=sample\u300d\u3092\u4ed8\u4e0e\u3057\u307e\u3059\u3002<br \/>\n<a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/logout_url_modify.png\" rel=\"facebox\" rel=\"attachment wp-att-13485\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/logout_url_modify.png\" alt=\"\u30ed\u30b0\u30a2\u30a6\u30c8URL\u5909\u66f4\" width=\"535\" height=\"373\" class=\"alignleft size-full wp-image-13485\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/logout_url_modify.png 535w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/logout_url_modify-300x209.png 300w\" sizes=\"(max-width: 535px) 100vw, 535px\" \/><\/a><\/p>\n<p style=\"clear:both;\">&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<hr\/>\n<h4>7. Policy Agent\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/h4>\n<p>Apache\u306b\u7d44\u307f\u8fbc\u3080Policy Agent\u3092<a href=\"https:\/\/backstage.forgerock.com\" target=\"_blank\">\u3053\u3061\u3089<\/a>\u304b\u3089\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u307e\u3059\u3002<\/p>\n<p>\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3059\u308b\u305f\u3081\u306b\u306f\u3001forgerock\u793e\u3078\u306e\u30a2\u30ab\u30a6\u30f3\u30c8\u767b\u9332\u30fb\u30b5\u30a4\u30f3\u30a4\u30f3\u304c\u5fc5\u8981\u3067\u3059\u3002<\/p>\n<p>\u7121\u511f\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3067\u304d\u308b\u6700\u65b0\u306ePolicy Agent\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u304c4.0.0\u3067\u3059\u304c\u3001<br \/>\n<a href=\"https:\/\/bugster.forgerock.org\/jira\/browse\/OPENAM-8450?page=com.atlassian.jira.plugin.system.issuetabpanels%3Achangehistory-tabpanel\" target=\"_blank\">\u30bb\u30c3\u30b7\u30e7\u30f3\u5c5e\u6027\u3092HTTP\u30d8\u30c3\u30c0\u306b\u30bb\u30c3\u30c8\u3057\u3066\u304f\u308c\u306a\u3044\u4e0d\u5177\u5408<\/a>\u304c\u3042\u308b\u3088\u3046\u306a\u306e\u3067\u3001<br \/>\n\u4eca\u56de\u306f\u30d0\u30fc\u30b8\u30e7\u30f33.3.0\uff08Apache-v2.4-Linux-64-Agent-3.3.0.zip\uff09\u3092\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u307e\u3057\u305f\u3002<\/p>\n<p>\u4eca\u56de\u306f\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u65b9\u5f0f\u3067\u3059\u306e\u3067\u3001OpenAM\u30b5\u30fc\u30d0\u306eApache 2.4\u306bPolicy Agent\u3092\u7d44\u307f\u8fbc\u307f\u307e\u3059\u3002<br \/>\n\uff08\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u65b9\u5f0f\u3067\u3042\u308c\u3070\u3001SSO\u5bfe\u8c61\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30fc\u30d0\u5074\u306bPolicy Agent\u3092\u7d44\u307f\u8fbc\u3080\u5f62\u3068\u306a\u308a\u307e\u3059\u3002\uff09<\/p>\n<p>Apache\u304c\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u3066\u3044\u306a\u3044\u5834\u5408\u306f\u3001yum\u3067\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u307e\u3059\u3002<\/p>\n<pre>\r\nyum install httpd\r\n<\/pre>\n<p>\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u305fPolicy Agent\u3092\u89e3\u51cd\u3057\u307e\u3059\u3002<\/p>\n<pre>\r\n# cd \/etc\/httpd\r\n# unzip \/path\/to\/Apache_v24_Linux_64bit_4.0.0.zip\r\n<\/pre>\n<p>\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u524d\u306bApache\u3092\u505c\u6b62\u3057\u3066\u304a\u304d\u307e\u3059\u3002<\/p>\n<pre>\r\n# systemctl stop httpd\r\n<\/pre>\n<p>\u305d\u308c\u3067\u306fPolicy Agent\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3066\u3044\u304d\u307e\u3059\u3002<\/p>\n<pre>\r\n# cd web_agents\/apache24_agent\/bin\r\n# echo [\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u30d7\u30ed\u30d5\u30a1\u30a4\u30eb\u4f5c\u6210\u6642\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u3002\u3053\u3053\u3067\u306fopenam02] > password.txt\r\n# chmod 400 password.txt\r\n# .\/agentadmin --install\r\n\r\n[Press <Enter> to continue...] or [Enter n To Finish]\r\n\u2192Enter\u30ad\u30fc\u62bc\u4e0b\r\n\uff08\u30e9\u30a4\u30bb\u30f3\u30b9\u304c\u8868\u793a\u3055\u308c\u308b\u306e\u3067\u3001Enter\u304bn\u3067\u8aad\u307f\u9032\u3081\u308b\uff09\r\nAgreement (yes\/no): [no]: yes \u2190\u5165\u529b\r\n\r\nEnter the complete path to the directory which is used by Apache Server to\r\nstore its configuration Files. This directory uniquely identifies the\r\nApache Server instance that is secured by this Agent.\r\n[ ? : Help, ! : Exit ]\r\nEnter the Apache Server Config Directory Path [\/opt\/apache24\/conf]: \/etc\/httpd\/conf\r\n\r\nEnter the URL where the OpenAM server is running. Please include the\r\ndeployment URI also as shown below:\r\n(http:\/\/openam.sample.com:58080\/openam)\r\n[ ? : Help, < : Back, ! : Exit ]\r\nOpenAM server URL: http:\/\/openam-test.example.com:8080\/login\r\n\r\nEnter the Agent URL as shown below: (http:\/\/agent1.sample.com:1234)\r\n[ ? : Help, < : Back, ! : Exit ]\r\nAgent URL: http:\/\/openam-test.example.com:80\r\n\r\nEnter the Agent profile name\r\n[ ? : Help, < : Back, ! : Exit ]\r\nEnter the Agent Profile name: openam-reverse-proxy(\u5148\u306bOpenAM\u306e\u7ba1\u7406\u753b\u9762\u3067\u4f5c\u6210\u3057\u305f\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u30d7\u30ed\u30d5\u30a1\u30a4\u30eb\u540d\u3092\u5165\u529b\uff09\r\n\r\nEnter the path to a file that contains the password to be used for identifying\r\nthe Agent.\r\n[ ? : Help, < : Back, ! : Exit ]\r\nEnter the path to the password file: \/etc\/httpd\/web_agents\/apache24_agent\/bin\/password.txt\r\n\r\n-----------------------------------------------\r\nSUMMARY OF YOUR RESPONSES\r\n-----------------------------------------------\r\nApache Server Config Directory : \/etc\/httpd\/conf\r\nOpenAM server URL : http:\/\/openam-test.example.com:8080\/login\r\nAgent URL : http:\/\/openam-test.example.com:80\r\nAgent Profile name : openam-reverse-proxy\r\nAgent Profile Password file name :\r\n\/etc\/httpd\/web_agents\/apache24_agent\/bin\/password.txt\r\n\r\nVerify your settings above and decide from the choices below.\r\n1. Continue with Installation\r\n2. Back to the last interaction\r\n3. Start Over\r\n4. Exit\r\nPlease make your selection [1]: 1\r\n\r\n(\u4e2d\u7565)\r\n\r\nSUMMARY OF AGENT INSTALLATION\r\n-----------------------------\r\nAgent instance name: Agent_001\r\nAgent Bootstrap file location:\r\n\/etc\/httpd\/web_agents\/apache24_agent\/Agent_001\/config\/OpenSSOAgentBootstrap.properties\r\nAgent Configuration Tag file location\r\n\/etc\/httpd\/web_agents\/apache24_agent\/Agent_001\/config\/OpenSSOAgentConfiguration.properties\r\nAgent Audit directory location:\r\n\/etc\/httpd\/web_agents\/apache24_agent\/Agent_001\/logs\/audit\r\nAgent Debug directory location:\r\n\/etc\/httpd\/web_agents\/apache24_agent\/Agent_001\/logs\/debug\r\n\r\n\r\nInstall log file location:\r\n\/etc\/httpd\/web_agents\/apache24_agent\/installer-logs\/audit\/install.log\r\n\r\nThank you for using OpenAM Policy Agent\r\n<\/pre>\n<p>\u3053\u308c\u3067Policy Agent\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u306f\u5b8c\u4e86\u3057\u307e\u3057\u305f\u304c\u3001<br \/>\nPolicy Agent\u304c\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u30c8\u30c3\u30d7\u30ec\u30d9\u30eb\u306e\u30ec\u30eb\u30e0\u3092\u53c2\u7167\u3059\u308b\u8a2d\u5b9a\u306b\u306a\u3063\u3066\u3044\u307e\u3059\u306e\u3067\u3001<br \/>\nOpenSSOAgentBootstrap.properties\uff08\u79c1\u306e\u74b0\u5883\u3067\u306f\/etc\/httpd\/web_agents\/apache24_agent\/Agent_001\/config\/OpenSSOAgentBootstrap.properties\uff09\u306e\u4e0b\u8a18\u306e\u884c\u3092\u7de8\u96c6\u3057\u3066\u3001<br \/>\n\u4f5c\u6210\u3057\u305fsample\u3068\u3044\u3046\u30ec\u30eb\u30e0\u3092\u53c2\u7167\u3059\u308b\u3088\u3046\u306b\u5909\u66f4\u3057\u307e\u3059\u3002<\/p>\n<pre>\r\ncom.sun.identity.agents.config.organization.name = sample\r\n<\/pre>\n<hr\/>\n<h4>8. \u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u8a2d\u5b9a<\/h4>\n<p>SSO\u5bfe\u8c61\u306e\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3078\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u306e\u8a2d\u5b9a\u3092\u884c\u3044\u307e\u3059\u3002<br \/>\nOpenAM\u30b5\u30fc\u30d0\u306ehttpd.conf\u306b\u4ee5\u4e0b\u306e\u8a2d\u5b9a\u3092\u8ffd\u52a0\u3057\u307e\u3059\u3002<\/p>\n<pre>\r\n<Location \"\/sample\">\r\n   ProxyPass http:\/\/[sso\u5bfe\u8c61\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u30b5\u30fc\u30d0IP\u3082\u3057\u304f\u306fFQDN]\/\r\n   ProxyPassReverse http:\/\/[sso\u5bfe\u8c61\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u30b5\u30fc\u30d0IP\u3082\u3057\u304f\u306fFQDN]\/\r\n   ProxyPassReverseCookiePath \/ \/sample\r\n<\/Location>\r\n<\/pre>\n<p>\u203b SSO\u5bfe\u8c61\u306e\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3092\u5897\u3084\u3059\u5834\u5408\u306f\u3001\u4e0a\u8a18\u306eLocation\u306e\u8a2d\u5b9a\u3092\u8ffd\u52a0\u3057\u307e\u3059\u3002<\/p>\n<p>\u3053\u3053\u307e\u3067\u5b8c\u4e86\u3057\u305f\u3089\u3001OpenAM\u30b5\u30fc\u30d0\u306eApache\u3092\u8d77\u52d5\u3057\u307e\u3059\u3002<\/p>\n<pre>\r\nsystemctl start http\r\n<\/pre>\n<h2>\u52d5\u4f5c\u78ba\u8a8d<\/h2>\n<p>\u5b9f\u969b\u306b\u52d5\u4f5c\u78ba\u8a8d\u3057\u3066\u307f\u307e\u3059\u3002<\/p>\n<p>\u307e\u305a\u3001HTTP\u30d8\u30c3\u30c0\u306e\u5185\u5bb9\u3092\u51fa\u529b\u3059\u308bPHP\u30d5\u30a1\u30a4\u30eb\u3092\u4f5c\u6210\u3057\u307e\u3059\u3002<br \/>\n\u4e0b\u8a18\u5185\u5bb9\u3092SSO\u5bfe\u8c61\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30fc\u30d0\u5074\u306eApache\u306e\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u30eb\u30fc\u30c8\u306bindex.php\u3068\u3057\u3066\u4fdd\u5b58\u3057\u307e\u3059\u3002<\/p>\n<pre>\r\n<?php\r\necho \"\u3010HTTP Header List\u3011<br>\";\r\nforeach (getallheaders() as $key => $value) {\r\n  echo \"$key: $value<br>\";\r\n}\r\n?>\r\n<\/pre>\n<p>\u3067\u306f\u3001\u30d6\u30e9\u30a6\u30b6\u304b\u3089http:\/\/openam-test.example.com\/sample\u306b\u30a2\u30af\u30bb\u30b9\u3057\u307e\u3059\u3002<br \/>\nPolicy Agent\u304c\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u691c\u77e5\u3057\u3066\u3001OpenAM\u306b\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u308b\u304b\u3069\u3046\u304b\u30c1\u30a7\u30c3\u30af\u3057\u3001<br \/>\n\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u305f\u3081\u3001OpenAM\u306e\u30ed\u30b0\u30a4\u30f3\u30da\u30fc\u30b8\u306b\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3055\u308c\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/sample_login_screen.png\" rel=\"facebox\" rel=\"attachment wp-att-13491\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/sample_login_screen.png\" alt=\"\u30ed\u30b0\u30a4\u30f3\u753b\u9762\" width=\"519\" height=\"486\" class=\"alignleft size-full wp-image-13491\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/sample_login_screen.png 519w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/sample_login_screen-300x281.png 300w\" sizes=\"(max-width: 519px) 100vw, 519px\" \/><\/a><\/p>\n<p style=\"clear:both;\">&nbsp;<\/p>\n<p>\u203b\u4e0a\u8a18\u306e\u30ed\u30b0\u30a4\u30f3\u753b\u9762\u306e\u30c7\u30b6\u30a4\u30f3\u306f\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u53ef\u80fd\u3067\u3059\u3002\u65b9\u6cd5\u306f<a href=\"https:\/\/backstage.forgerock.com\/docs\/openam\/13\/install-guide#chap-custom-ui\" target=\"_blank\">\u3053\u3061\u3089<\/a>\u3092\u53c2\u7167\u304f\u3060\u3055\u3044\u3002<\/p>\n<p>&nbsp;<\/p>\n<p>OpenAM\u306e\u8a2d\u5b9a\u753b\u9762\u3067\u8a2d\u5b9a\u3057\u305f\u30ed\u30b0\u30a4\u30f3\u30e6\u30fc\u30b6\u540d\u3068\u30ed\u30b0\u30a4\u30f3\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5165\u529b\u3057\u3066\u30ed\u30b0\u30a4\u30f3\u3059\u308b\u3068\u3001<br \/>\nOpenAM\u306b\u3088\u3063\u3066\u8a8d\u8a3c\u5f8c\u3001\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u5148\u306eSSO\u5bfe\u8c61\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306b\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3055\u308c\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/login_success.png\" rel=\"facebox\" rel=\"attachment wp-att-13492\"><img loading=\"lazy\" src=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/login_success.png\" alt=\"\u30ed\u30b0\u30a4\u30f3\u6210\u529f\" width=\"1138\" height=\"393\" class=\"alignleft size-full wp-image-13492\" srcset=\"https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/login_success.png 1138w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/login_success-300x104.png 300w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/login_success-768x265.png 768w, https:\/\/www.techscore.com\/blog\/wp\/wp-content\/uploads\/2016\/12\/login_success-1024x354.png 1024w\" sizes=\"(max-width: 1138px) 100vw, 1138px\" \/><\/a><\/p>\n<p style=\"clear:both;\">&nbsp;<\/p>\n<p>&nbsp;<br \/>\nHTTP\u30d8\u30c3\u30c0\u306e\u4e00\u89a7\u304c\u51fa\u529b\u3055\u308c\u3066\u304a\u308a\u3001<br \/>\nCUSTOM-sample-username\u3068CUSTOM-sample-organization\u304cPolicy Agent\u306b\u3088\u3063\u3066\u4ed8\u4e0e\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u304c\u5206\u304b\u308a\u307e\u3059\u3002<br \/>\niPlanetDirectoryPro=xxxx\u3068\u3044\u3046\u306e\u304c\u8a8d\u8a3cCookie\u30ad\u30fc\u3067\u3001<br \/>\nPolicy Agent\u306f\u3053\u308c\u306e\u6709\u7121\u3092\u30c1\u30a7\u30c3\u30af\u3057\u3001\u6709\u308c\u3070OpenAM\u306b\u554f\u3044\u5408\u308f\u305b\u3057\u3066\u6709\u52b9\u306a\u5024\u3067\u3042\u308b\u304b\u3069\u3046\u304b\u3092\u30c1\u30a7\u30c3\u30af\u3057\u3066\u3044\u308b\u3088\u3046\u3067\u3059\u3002<\/p>\n<h2>\u7d42\u308f\u308a\u306b<\/h2>\n<p>\u9577\u6587\u3068\u306a\u3063\u3066\u3057\u307e\u3044\u307e\u3057\u305f\u304c\u3001\u6700\u5f8c\u307e\u3067\u304a\u8aad\u307f\u3044\u305f\u3060\u304d\u3042\u308a\u304c\u3068\u3046\u3054\u3056\u3044\u307e\u3057\u305f\u3002<\/p>\n<p>OpenAM\u3067\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u65b9\u5f0f\u306eSSO\u3092\u5b9f\u73fe\u3059\u308b\u305f\u3081\u306e\u624b\u9806\u3092\u3056\u3063\u3068\u7d39\u4ecb\u3055\u305b\u3066\u3044\u305f\u3060\u304d\u307e\u3057\u305f\u304c\u3001<br \/>\nOpenAM\u306f\u3001\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u65b9\u5f0f\u4ee5\u5916\u306b\u3082SAML(Security Assertion Markup Language)\u3084OpenID Connect\u306b\u5bfe\u5fdc\u3057\u3066\u304a\u308a\u3001\u307e\u305f\u8981\u4ef6\u306b\u5408\u308f\u305b\u305f\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u3082\u53ef\u80fd\u3067\u3059\u3002<br \/>\n\u500b\u4eba\u7684\u306b\u306f\u6642\u9593\u304c\u3042\u308c\u3070OpenID Connect\u306e\u8a2d\u5b9a\u3082\u8a66\u3057\u3066\u307f\u305f\u3044\u306a\u3068\u601d\u3063\u3066\u3044\u307e\u3059\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u3053\u3093\u306b\u3061\u306f\u3001\u767d\u5ddd\u3067\u3059\u3002<\/p>\n<p>\u3053\u308c\u306fTECHSCORE Advent Calendar 2016\u306e21\u65e5\u76ee\u306e\u8a18\u4e8b\u3067\u3059\u3002<\/p>\n<p>\u4eca\u56de\u306fOpenAM\u3092\u4f7f\u3063\u305f\u30b7\u30f3\u30b0\u30eb\u30b5\u30a4\u30f3\u30aa\u30f3\uff08\u4ee5\u4e0bSSO\uff09\u306b\u3064\u3044\u3066\u7d39\u4ecb\u3057\u307e\u3059\u3002<br \/><a href=\"https:\/\/www.techscore.com\/blog\/2016\/12\/21\/openam-reverse-proxy-sso\/\">\u7d9a\u304d\u3092\u8aad\u3080...<\/a><\/p>\n","protected":false},"author":40,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[239],"tags":[141],"_links":{"self":[{"href":"https:\/\/www.techscore.com\/blog\/wp-json\/wp\/v2\/posts\/13361"}],"collection":[{"href":"https:\/\/www.techscore.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.techscore.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.techscore.com\/blog\/wp-json\/wp\/v2\/users\/40"}],"replies":[{"embeddable":true,"href":"https:\/\/www.techscore.com\/blog\/wp-json\/wp\/v2\/comments?post=13361"}],"version-history":[{"count":52,"href":"https:\/\/www.techscore.com\/blog\/wp-json\/wp\/v2\/posts\/13361\/revisions"}],"predecessor-version":[{"id":13652,"href":"https:\/\/www.techscore.com\/blog\/wp-json\/wp\/v2\/posts\/13361\/revisions\/13652"}],"wp:attachment":[{"href":"https:\/\/www.techscore.com\/blog\/wp-json\/wp\/v2\/media?parent=13361"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.techscore.com\/blog\/wp-json\/wp\/v2\/categories?post=13361"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.techscore.com\/blog\/wp-json\/wp\/v2\/tags?post=13361"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}