Instructions for installing and configuring the 6x WebAgent for your HTTP server
Instructions are the same for Windows and UNIX .
There are some extra steps at the end to be followed on UNIX machines .
There are some extra steps at the end to be followed on Domino HTTP Servers.
(If necessary) extract all files from the ZIP file provided by the CS SiteMinder contact.
Launch the WebAgent executable (usually named in the following format: nete-wa-6qmrX-platform.exe e.g. nete-wa-6qmr5-win32.exe)
The 'Introduction' screen will appear. Click Next.
On the 'License Agreement' screen, click on the 'I accept the terms of the License Agreement' radio button and click Next.
Click Next on the 'Important Information' screen.
On the 'Choose Install Location' screen, select the default location for the installation of the WebAgent (C:\Program Files\netegrity\webagent) or click the 'Choose' button to select a location of your choice. When selected, click Next.
On the 'Choose Shortcut Folder' screen, accept the defaults and click Next.
On the 'Pre-Installation Summary'screen, click Install.
On the 'Install Complete' screen, accept the defaults and click Done.
When your system has restarted, Go to the Start Menu item → Start-Programs-Siteminder-Web Agent Configuration Wizard
The Web Agent Configuration Wizard will then Launch On the 'Host Registration' screen, select 'Yes, I would like to do Host Registration now' but do not select the 'Enable PKCS11 DLL Cryptographic Hardware.' option. Then click Next.
On the 'Admin Registration' screen, , enter the SiteMinder Administrator name and password supplied by the CS SiteMinder Contact. Do not check the 'Enable Shared Secret Rollover' box. Then click Next.
On the 'Trusted Host Name and Configuration Object' screen, enter the Trusted Hostname and Host Conf Object supplied by the CS SiteMinder Contact. Then click Next.
On the 'Policy Server IP Address' screen, enter the SiteMinder Policy Server IP address supplied by the CS SiteMinder Contact and click the 'Add' button. Then click Next.
On the 'Host Configuration file location' screen, accept the default filename and location and click Next.
On the 'Select Web Server(s)' screen, select the http server that you wish to configure with the WebAgent from the available listing by clicking on the checkbox next to it in the list and then click Next.
On the 'Agent Configuration Object' screen, enter the Agent Conf Object supplied by the CS SiteMinder Contact and click Next.
On the 'Web Server Configuration Summary' screen, click Install.
The WebAgent will then be configured and then the 'Configuration Complete' screen will appear. Click Done to complete the configuration process. Note: You can ignore any message saying that 'some warnings occurred during the install'. These warnings appear by default during the installation and do not affect the functionality of the WebAgent.
The WebAgent should now be installed and configured correctly for your HTTP server.
Note: There are additional steps that will need to be completed in order for the WebAgent to be enabled and function correctly for your server.
Please follow these additional instructions for Enabling the Web Agent on Domino
Add the DSAPI filter file name to names.nsf - Open names.nsf on your server
1. Open the server document for your Domino server
2. Select the Internet Protocols - HTTP tab, and in the DSAPI filter file names field, enter the name and full path of the Siteminder Web agent: \DOMINOWebAgent.dll. (e.g. c:\program files\netegrity\Siteminder Web Agent\bin\DOMINOWebAgent.dll)
3. Ensure Session Authentication is set to Disabled in the Domino Server document.
4. Save and close
Copy the Login files if you have configured the SiteMinder Policy Server to use a Forms-based Authentication Scheme: - Create a folder under your Domino server \data\domino\html directory called 'siteminderagent'
1. Copy the contents of the folder c:\program files\netegrity\siteminder web agent\Samples to the siteminderagent folder
2. Restart the Domino Server for the changes to take affect.
To enable SiteMinder to protect your Lotus Domino Server, complete the following steps:
In the Local WebAgent Configuration file (WebAgent.conf) of the SiteMinder WebAgent that has been configured with your HTTP server, set the EnableWebAgent parameter to “YES”
Restart your HTTP/Domino Server.
To test that the integration is working correctly, complete the following steps:
Access your Lotus Domino server via a browser using the normal URL
When you go to one of the protected realms created above, SiteMinder authentication should be invoked and when valid user credentials are entered, the user should be successfully logged into Lotus Domino (and they should not be prompted for authentication credentials by Lotus Domino).
If you are directed to the Lotus Domino login screen then there is a problem with the configuration and you will need to revisit the setup to determine the cause.
Please follow these additional instructions for installing the Web Agent on UNIX
Post-Installation, there are certain Siteminder Environment variables that need to be set.
They are in a script named /nete_wa_env.sh
Here is a sample of the file :
You need to source this script so : . ./nete_wa_env.sh
This script can be listed in the users profile file, or the environment variables can be set seperately.