Can we have two entries in AMConfig.properties for `com.iplanet.am.server.host`?

115 Views Asked by At

Can we have two entries in AMConfig.properties com.iplanet.am.server.host?
eg.
com.iplanet.am.server.host=server1.example.com,server1.example.info

OR

com.iplanet.am.server.host=server1.example.com
com.iplanet.am.server.host=server1.example.info

If not, how can we configure two identity_servers?

Update: Just one OpenAM instance servicing multiple FQDNs.

1

There are 1 best solutions below

0
Bernhard Thalmayr On

You can't have 2 entries for com.iplanet.am.server.host in AMConfig.properties.

You just need to configure an fqdnMap entry

com.sun.identity.server.fqdnMap[server1.example.info]=server1.example.info

as advanced server property. However please keep in mind that in your case the two FQDNs do not share a common cookie domain. From cookie security point of view you should use host-based cookies anyway by removing all cookie domains from OpenAM's platform service (global configuration). If you still want to use domain cookies, make sure to have cookie domains

example.info
example.com

set in platform service. Make sure you understand 'cookie spec'