In the Administration Console, click Devices > Identity Server > Edit, and configure the base URL with HTTPS as the protocol, and the TCP Port as 443.

Click OK, then update the Identity Server.

At a terminal window, log in as the root user.

Create a file to hold the iptables rule and place it in the /etc/init.d directory.

For example, /etc/init.d/AM_IDP_Redirect. Ensure it has execute rights. You can use CHMOD as appropriate.

An example of a redirect startup file for this purpose might be:

#!/bin/sh
# Copyright (c) 2010 Novell, Inc.
# All rights reserved.
#
#! /bin/sh
#! /etc/init.d/idp_8443_redirect
# ### BEGIN INIT INFO
# Provides: idp_8443_redirect
# Required-Start:
# Required-Stop:
# Default-Start: 2 3 5
# Default-Stop: 0 1 6
# Description: Redirect 8443 to 443 for Novell IDP
### END INIT INFO #

# Environment-specific variables.
IPT_BIN=/usr/sbin/iptables
INTF=eth0
ADDR=10.10.0.1

. /etc/rc.status

# First reset status of this service
rc_reset

case "$1" in
    start)
        echo -n "Starting IP Port redirection"
        $IPT_BIN -t nat --flush
        $IPT_BIN -t nat -A PREROUTING -i $INTF -p tcp --dport 80 -j DNAT --to ${ADDR}:8080
        $IPT_BIN -t nat -A PREROUTING -i $INTF -p tcp --dport 443 -j DNAT --to ${ADDR}:8443
        $IPT_BIN -t nat -A OUTPUT -p tcp -d $ADDR --dport 443 -j DNAT --to ${ADDR}:8443
        $IPT_BIN -t nat -A OUTPUT -p tcp -d $ADDR --dport 80 -j DNAT --to ${ADDR}:8080
        rc_status -v
        ;;
    stop)
        echo -n "Flushing all IP Port redirection rules"
        $IPT_BIN -t nat --flush
        rc_status -v
        ;;
    restart)
        $0 stop
        $0 start
        rc_status
        ;;
    *)
        echo "Usage: $0 {start|stop|restart}"
        exit 1
        ;;
esac
rc_exit

For more information about init scripts for SUSE Linux Enterprise Server 10, see “Section 20.2.2 Init Scripts” in the SUSE Linux Enterprise Server 10 Installation and Administration Guide.

For more information about init scripts for SUSE Linux Enterprise Server 11, see “Section 7.2.2 Init Scripts” in the SLES 11 Administration Guide.

Modify the environment-specific variables found in the following lines:

# Environment-specific variables.
IPT_BIN=/usr/sbin/iptables
INTF=eth0
ADDR=10.10.0.1

To ensure that the iptables rule is active after rebooting, start YaST, click System, > System Services (Runlevel), select Expert Mode, select the file you created, enable runlevels boot, 3 and 5 for the file, then start the service.

To verify that your script is running, enter the following command:

ls /etc/init.d/rc3.d | grep -i AM_IDP_Redirect

Reboot the Identity Server machine.

After rebooting, verify that port 443 is being routed to the Identity Server by entering the following command:

iptables -t nat -nvL

You should see an entry similar to the following:

pkts bytes target     prot opt in     out     source               destination         
17   748    DNAT       tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 to:10.10.0.1:8443 

This entry states that eth0 is routing TCP port 443 to IP address 10.10.0.1.

(Conditional) If your Identity Server cluster configuration contains more than one Identity Server, repeat these steps on each server in the cluster.