EJB Container

In principle you can use any EJB container. Testing has been performed with glassfish 3.1.2 and these notes refer to that version.

You must already have a Java SE installed (i.e. the command "java" is known), then you can get Java EE 6 SDK Update 4 with JDK 6 Update 31 or later from http://www.oracle.com/technetwork/java/javaee/downloads/index.html and execute the script.

Request custom installation, install and configure, and enter proxy details if necessary on your site. Request a server domain, set the domain name and set the admin password. For a secure deployment of glassfish you should obtain a trusted certificate rather than using the self-signed one in the distribution.

authn_anon.properties

In the unpacked authn_anon.ear-1.0.1-config.zip file you will find a property file, authn_anon.properties, which should be copied to the config directory for your chosen glassfish domain. You will find your domain directory at $GLASSFISH_HOME/glassfish/domains. The authn_anon.properties file may need changing:

ip

If access to the ANON authentication should only be allowed from certain IP addresses then provide a space separated list of allowed values. These take the form of an IPV4 or IPV6 address followed by the number of bits (starting from the most significant) to consider.

mechanism

if specified is a label to appear before the user name as it is made available to ICAT for authorization. For example if this is set to 'anon' then the user will be provided to ICAT as 'anon/anon', but if no mechanism is specified it will be provided simply as 'anon'.

Installing the .ear file

If you already have an authn_anon installed then you should first remove it with asadmin --port 4848 undeploy <ear> where the value of "ear" can be found by: asadmin --port 4848 list-applications Obtain authn_anon.ear-1.0.1.ear and install it with the command: asadmin --port 4848 deploy authn_anon.ear-1.0.1.ear . If you have only one domain you may not need to specify the port and if the admin port is not 4848 then specify the correct value.

Check that authn_anon works

There is currently no stand alone mechanism to check that authn_anon is working properly. Please use the test.py script that comes with the ICAT installation. This will show that you can login but will fail with: "Read access to this Group is not allowed.", unless authorization rules have been created to allow 'anon' to write - which is generally not a good idea.

In case of problems look at the log files: server.log and authn_anon.log which can both be found in the logs directory below your domain.