com.tivoli.pd.jcfg.PDJrteCfg utility for ISAM single sign-on

The com.tivoli.pd.jcfg.PDJrteCfg utility configures the Access Manager Java Runtime Environment (AMJRE) for Security Access Manager. This utility enables Java applications to use the ISAM policy and authorization servers. If we are using the WebSphere Application Server, Network Deployment product, run the pdjrtecfg utility first on the deployment manager. Then, run the script on the other nodes in the cell.

java com.tivoli.pd.jcfg.PDJrteCfg \
    -action {config | unconfig} \
    -host policy_server_host  \
    -was  \
    -java_home jre_path

Parameters

-action {config|unconfig}	config Configure the AMJRE component. unconfig Reconfigure the AMJRE component. alt_config Update PD.jar file at location specified by -cfgfiles_path. To use -alt_config, we must set -cfgfiles_path.
-cfgfiles_path	Where the generated configuration files will be placed.
-host policy_server_host	Policy server host name. Valid values for policy_server_host include any valid IP host name. host = libra host = libra.dallas.ibm.com
-was	Notifies ISAM Runtime for Java that the WAS version is being configured so it is not necessary to perform certain steps such as copying the Java security jar files and PD.jar file since they were already placed in the appropriate directory by the WAS installer.
-java_home jre_path	Fully qualified path to the Java runtime (such as the directory ending in jre). If not specified, the home directory for the jre in the PATH statement is used. If the home directory for the jre is not in the PATH statement, this utility can create an incorrect parameter in the output files.

This command copies ISAM Java libraries to a library extensions directory that exists for a Java runtime that has already been installed on the system.

We can install more than one Java Runtime Environment (JRE) on a given machine. The pdjrtecfg command can be used to configure the ISAM JRE component independently for each of the JRE configurations.

Before running the PDJrteCfg utility, run "setupCmdLine.sh and set ${TIV_HOME} and ${TAM_HOST} as system environment variables.

Example:

${JAVA_HOME}/java/jre/bin/java
    -Djava.ext.dirs=${TIV_HOME}/java/jre/lib/ext \
    -Dfile.encoding=ISO8859-1 \
    -Xnoargsconversion \
    -Dwas.install.root=${WAS_HOME} \
    -Dpd.home=${TIV_HOME}/PolicyDirector \
    -cp ${TIV_HOME}/PD.jar \
    com.tivoli.pd.jcfg.PDJrteCfg \
    -action config \
    -was \
    -java_home ${WAS_HOME}/java/jre \
    -host ${TAM_HOST} \
    -port 7135 \
    -cfgfiles_path ${TIV_HOME}/ \
    -alt_config \
    -config_type full

where:

-Dpd.home	Indicates where ISAM Runtime for Java has been installed. For WAS, this is java.home/PolicyDirector
-Dwas.install.root	Indicates the root directory where the Java Runtime Environment component has been installed.

See also:

• Configure SSO capability with ISAM WebSEAL
• Application Programming Interface documentation for IBM ISAM V2R1
• The pdjrtecfg utility for IBM ISAM V2R1