(Access Manager 5.0 Service Pack 1 and later)
By default, a constant passcode is used to communicate between HTTPD and Tomcat. For higher security, you can change this passcode. You must change the passcode in the httpd proxy service configuration file and the secret in /opt/novell/nam/mag/conf/serverl.xml and /opt/novell/nam/idp/conf/server.xml.
To change the passcode in the HTTPD configuration file, perform the following steps:
Click Devices > Access Gateways > Edit > Advanced Options.
Set the AJPToken <passcode> option and specify the passcode. For example,
AJPToken <new-passcode>
The following list includes the supported special characters:
Click OK.
To change the secret in the server.xml file, perform the following steps:
In /opt/novell/nam/mag/conf/serverl.xml and /opt/novell/nam/idp/conf/server.xml, modify the value of secret in the AJP protocol section.
The value must be the same as the passcode specified in the AJPToken <new-passcode> option that you specified in Step 2.
<Connector port="9009" enableLookups="false" redirectPort="8443" protocol="AJP/1.3" address="127.0.0.1" minSpareThreads="25" maxThreads="600" backlog="0" connectionTimeout="20000" packetSize="65536" maxPostSize="65536" secret="value" />
NOTE:Due to the tomcat restriction, special characters need to be specified in a specific format. For example, to include &, specify &
To specify a special character in the value, refer to the following list:
|
To Use |
Specify |
|---|---|
|
& |
& |
|
[ |
[ |
|
] |
] |
|
| |
| |
|
{ |
{ |
|
} |
} |
|
^ |
^ |
|
\ |
\ |
|
` |
` |
|
" |
" |
|
< |
< |
|
> |
> |
Save the file.
Restart Access Gateway and Identity Server.
Access Gateway: /etc/init.d/novell-mag restart
Identity Server: /etc/init.d/novell-idp restart