[root@sso httpd]# su - apache
This account is currently not available.
[root@sso httpd]# vim /etc/passwd
※略
apache:x:48:48:Apache:/usr/share/httpd:/sbin/nologin  <== /bin/bash に変更する

[root@sso httpd]#
[root@sso httpd]# su - apache
-bash-4.2$ exit
[root@sso httpd]# chown apache:root -R /etc/httpd

[root@sso ~]# unzip Apache_v24_Linux_64bit_4.0.0.zip
Archive:  Apache_v24_Linux_64bit_4.0.0.zip
   creating: web_agents/apache24_agent/
   creating: web_agents/apache24_agent/log/
   creating: web_agents/apache24_agent/instances/
   creating: web_agents/apache24_agent/config/
  inflating: web_agents/apache24_agent/config/agent.vcl3.template
  inflating: web_agents/apache24_agent/config/agent.vcl.template
  inflating: web_agents/apache24_agent/config/agent.conf.template
  inflating: web_agents/apache24_agent/config/mod_iis_openam_schema.xml
   creating: web_agents/apache24_agent/legal/
  inflating: web_agents/apache24_agent/legal/THIRDPARTYREADME.txt
  inflating: web_agents/apache24_agent/legal/CDDLv1.0.txt
  inflating: web_agents/apache24_agent/legal/Forgerock_License.txt
   creating: web_agents/apache24_agent/lib/
  inflating: web_agents/apache24_agent/lib/mod_openam.so
   creating: web_agents/apache24_agent/bin/
  inflating: web_agents/apache24_agent/bin/agentadmin

[root@sso ~]# chown apache -R web_agents
[root@sso ~]# mv web_agents ~apache

[root@sso ~]# echo hogehoge > /tmp/passwd

-bash-4.2$ cd web_agents/apache24_agent/bin/
-bash-4.2$ ./agentadmin --i
Please read the following License Agreement carefully:

READ THIS SOFTWARE LICENSE AGREEMENT CAREFULLY. BY DOWNLOADING OR INSTALLING
THE FORGEROCK SOFTWARE, YOU, ON BEHALF OF YOURSELF AND YOUR COMPANY, AGREE TO
BE BOUND BY THIS SOFTWARE LICENSE AGREEMENT. IF YOU DO NOT AGREE TO THESE
TERMS, DO NOT DOWNLOAD OR INSTALL THE FORGEROCK SOFTWARE.

1. Software License.

1.1. Development Right to Use. If Company intends to or does use the ForgeRock
Software only for the purpose(s) of developing, testing, prototyping and

※略

7.7. Entire Agreement. This Agreement constitutes the entire and exclusive
agreement between the parties with respect to the subject matter hereof and
supersede any prior agreements between the parties with respect to such subject
matter


Do you completely agree with all the terms and conditions
of this License Agreement (yes/no): [no]: yes

OpenAM Web Agent for Apache Server interactive installation.


Enter the complete path to the httpd.conf file which is used by Apache HTTP
Server to store its configuration.
[ q or 'ctrl+c' to exit ]
Configuration file [/opt/apache/conf/httpd.conf]: /etc/httpd/conf/httpd.conf  <== httpdのコンフィグファイルのパスを入力

Change ownership of created directories using User and Group settings in httpd.conf
[ q or 'ctrl+c' to exit ]
(yes/no): [no]: yes    <== 新しく作るディレクトリをhttpd.confに書かれているユーザの権限にして良いかどうか。yesで良いと思う。

To set properties from an existing configuration enter path to file
[ q or 'ctrl+c' to exit, return to ignore ]
Existing OpenSSOAgentBootstrap.properties file: <== 空エンターでok

Enter the URL where the OpenAM server is running. Please include the
deployment URI also as shown below:
(http://openam.example.com:58080/openam)
[ q or 'ctrl+c' to exit ]
OpenAM server URL: http://sso.test.local:8080/openam <== OpenAMのURLを指定

Enter the Agent URL as shown below:
(http://agent.example.com:1234)
[ q or 'ctrl+c' to exit ]
Agent URL: http://sso.test.local <== SPのURLを指定、これはOpenAMで作成するときと違ってポート番号はなくても良い。

Enter the Agent profile name
[ q or 'ctrl+c' to exit ]
Agent Profile name: web_agent <== エージェントプロファイルの名前を指定。OpenAM側と同一にしておいたほうが良い。

Enter the Agent realm/organization
[ q or 'ctrl+c' to exit ]
Agent realm/organization name: [/]: <== 空エンターでok

Enter the path to a file that contains the password to be used
for identifying the Agent
[ q or 'ctrl+c' to exit ]
The path and name of the password file: /tmp/passwd <== 下準備のときに作ったパスワードファイルを指定

Installation parameters:

   OpenAM URL: http://sso.test.local:8080/openam
   Agent URL: http://sso.test.local
   Agent Profile name: web_agent
   Agent realm/organization name: /
   Agent Profile password source: /tmp/passwd

Confirm configuration (yes/no): [no]: yes <== ただの確認

Validating...

Validating... Success.

Cleaning up validation data...

Creating configuration...

Installation complete. <== うまくいけばこうなる

-bash-4.2$ ./agentadmin --l <== --l でインストール済エージェントの一覧を表示

OpenAM Web Agent configuration instances:

   id:            agent_1
   configuration: /usr/share/httpd/web_agents/apache24_agent/bin/../instances/agent_1
   server/site:   /etc/httpd/conf/httpd.conf

-bash-4.2$ tail /etc/httpd/conf/httpd.conf
IncludeOptional conf.d/*.conf

LoadModule amagent_module /usr/share/httpd/web_agents/apache24_agent/bin/../lib/mod_openam.so
AmAgent On
AmAgentConf /usr/share/httpd/web_agents/apache24_agent/bin/../instances/agent_1/config/agent.conf

-bash-4.2$ exit
[root@sso ]# systemctl start httpd
[root@sso ]# rm -rf /tmp/passwd  <== パスワードファイルは削除しておきましょう

ex)
http://sso.test.local:8080/openam/identity/attributes?subjectid=[iPlanetDirectoryPro]