Installation Instructions: SAS Subscription Manager
Version 1.5

Overview

This page provides instructions on how to configure SAS Subscription Manager. The configuration process consists of five steps:

Install the SAS Subscription Manager
Download and install the Java Plug-in (if prompted)
Java (TM) Security
Login to the SAS Subscription Manager
Reconfigure the Subscription Manager

The SAS Subscription Manager is a Java applet that interacts with an LDAP server to provide services to manage a person's subscriptions. The applet executes in a Java 1.4 Plug-in run-time environment within a Web browser and is subject to network security policies that are dictated by the Java Plug-in.

The SAS Subscription Manager installer will copy the SAS-SubscriptionManager.war file to a file system directory specified at the time the installer is run.

The SAS-SubscriptionManager.war file must be manually copied to a Web server's Web applications directory. The Web server will then install the .war file creating a "SAS-SubscriptionManager" Web application. The "site.cfg" file in this Web application's root directory specifies the location of the LDAP server and its metadata configuration details.

Note that if you ever overwrite SAS Subscription Manager with a newer version, you must be sure to first save the site.cfg file elsewhere. If the new site.cfg file contains the same configuration options then you can just overwrite the newly installed site.cfg with your saved site.cfg.

If the LDAP server is on a different machine than the Web server, then you must grant the SAS Subscription Manager applet permission to establish a connection to the LDAP server. The mechanism for doing this is to trust the applet and its digital certificate that has been signed by the SAS Institute, Inc. When you first access the applet, the Web browser will present a dialog asking whether or not to trust the applet. Answering yes will cause the digital certificate to be added to the JRE's certificate cache.

Install the SAS Subscription Manager

The installation process is automated through an installation wizard. During the installation process, you are prompted for the following information:

Destination Folder: Enter the path where the SAS Integration Technologies Subscription Manager files are to be installed. For the Windows (TM) platform, the files are installed in <SAS_HOME>\SASSubMgr\1.5 by default. Select the Browse button to choose a different folder if desired.

To install SAS Subscription Manager, follow these steps:

Run the SAS Subscription Manager installer. The installer will prompt you to specify an installation directory location.
Verify that the SAS-SubscriptionManager.war file has been installed.
Copy the SAS-SubscriptionManager.war file to your Web server's Web applications directory. For example, the Web applications directory for Tomcat 4.1.12 might be

C:\jakarta-tomcat-4.1.12\webapps
Verify that the Web server installs the .war file creating a "SAS-SubscriptionManager" Web application directory.

Download and Install the Java 1.4 Plug-in (if prompted)

Using the Web browser, navigate to the SAS Subscription Manager home page. For example, if your Web server is on host acme.com and running on port 8080, then you would access the applet using the following URL:

http://acme.com:8080/SAS-SubscriptionManager/index.html

The first time that you navigate to the SAS Subscription Manager, you will be prompted to download and install the Java Plug-in if it is not already installed on your machine.

Java Security

If the LDAP server specified in the Web application's "site.cfg" file exists on a machine different than the Web server, then the browser will present a dialog asking whether you wish to trust the applet. Granting trust is necessary for the applet to establish a connection to the LDAP server.

If you elect to always grant trust to the applet, then you will not encounter the trust dialog on subsequent visits.

Login to the SAS Subscription Manager

http://acme.com:8080/SAS-SubscriptionManager/index.html

Note that before the SAS Subscription Manager can be used, the LDAP directory administrator must set up the appropriate access control to the SAS directory tree on your directory server.

Reconfigure the Subscription Manager

Configuration details specified at install time are saved in the "site.cfg" file. If the configuration needs to be updated after the Web application has been deployed, then edit the "site.cfg" file as described in the following steps.

When you modify the site.cfg file, remember that

all of the properties are case-sensitive
do not rename any property names. Property names are not internationalizable.
each property entry must be on a single line that does not include a line-break character
each backslash (\) must be specified as a double backslash (\\) or it will be interpreted incorrectly as an escape character. For example, the directory "c:\mydirectory\myfile" would be defined as "c:\\mydirectory\\myfile"
values should be specified in quotation marks.

To modify the site.cfg file, follow these steps:

Open site.cfg in a text editor.
Specify a value for the setServer property. Replace YOUR_LDAP_SERVER with the name of the machine that hosts the LDAP server. For example, if your LDAP server is running on a machine named topgun.com, the value might read
```
          setServer("topgun.com")
```
Specify a value for the setPort property. Replace YOUR_LDAP_SERVER_PORT with the port number on which the LDAP server listens for connections. For example, if your LDAP server is running on a machine named topgun.com and listening for connections on a port number of 389, the value might read
```
          setPort("389")
```
Specify a value for the setBase property. Replace SAS_METADATA_BASE with the distinguished name for accessing the SAS Integration Technologies metadata. For example, if the metadata information is stored in the LDAP server under the distinguished name "ou=Marketing,o=ACE Industries,c=US" the setBase line would read
```
          setBase("ou=Marketing,o=ACE Industries,c=US")
```
Specify a value for the setAuthentication property. Replace SIMPLE_OR_NONE with the value that reflects the type of authentication that the server provides. The two valid values are "simple" and "none". If the value is set to "none", the LDAP server performs no authentication. However, the SAS Subscription Manager applet does prompt the user for a username. The username must have already been created as a subscriber in the publishing framework or the login will fail. An example of the authentication set to "none" would read
```
          setAuthentication("none")
```
If the value is set to "simple", the LDAP server performs authentication. This requires the user to enter a username and password in order to access the information that is stored in the LDAP server.

Note: If the value is set to "simple", users who log in must have a valid person object defined that contains a username and a valid password entry in the LDAP server. The distinguished name that is provided in the setUserBase property must point to the start of where such person information can be found. An example of the authentication set to "simple" is
```
          setAuthentication("simple")
```
The server will apply any access control information to the user and set their privileges based on their access level.

Note: You must set up the appropriate access control to the SAS directory tree on your directory server.
Specify a value for the setUserBase property. Replace LDAP_USER_BASE with the distinguished name (DN) for accessing objects that define users in LDAP. If the user's person object exists as
```
          "cn=John Smith,cn=People,o=ACE Industries,c=US"
```
the setUserBase entry would appear as
```
          setUserBase("cn=People,o=ACE Industries,c=US")
```
Specify a value for the setGroupBase property. Replace LDAP_GROUP_BASE with the distinguished name (DN) for accessing objects that define groups in LDAP. If the group's object exists as
```
          "cn=My Group,cn=Groups,o=ACE Industries,c=US"
```
the setGroupBase entry would appear as
```
          setGroupBase("cn=Groups,o=ACE Industries,c=US")
```
Save and close the site.cfg file.

Troubleshooting

If you encounter a problem installing or configuring the SAS Subscription Manager or if you have a question, please check the SAS Integration Technologies Web site for updates to the software and documentation.

Installation Instructions: SAS Subscription Manager Version 1.5