IBM 5.1 manual WebLogic

Page 6

Windows￿ ￿￿ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

￿ 3 ￿ ￿￿ ￿￿ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

￿1 ￿: Tivoli Access Manager Java Runtime Environment ￿￿ . . . . . . . . . . . . . . . . 23

￿2 ￿: startWebLogic￿ ￿￿ CLASSPATH ￿￿ . . . . . . . . . . . . . . . . . . . . . 25

￿3 ￿: Tivoli Access Manager for WebLogic ￿￿ . . . . . . . . . . . . . . . . . . . . 26

Console Extension Web Application￿ ￿￿￿￿ Tivoli Access Manager for WebLogic ￿￿. . . . . . 26

￿￿￿￿￿ Tivoli Access Manager for WebLogic ￿￿ . . . . . . . . . . . . . . . . . . . 28

￿4 ￿: Tivoli Access Manager ￿￿ ￿￿ . . . . . . . . . . . . . . . . . . . . . . . . 29

Console Extension Web Application￿ ￿￿￿￿ Tivoli Access Manager ￿￿ ￿￿ . . . . . . . . . 29

￿￿￿￿￿ Tivoli Access Manager ￿￿ ￿￿ . . . . . . . . . . . . . . . . . . . . . . 30

￿5 ￿: BEA WebLogic Server ￿￿ ￿￿ ￿ ￿￿ . . . . . . . . . . . . . . . . . . . . . 32 WebSEAL ￿￿￿ ￿￿￿￿ ￿￿ ￿￿ ￿ ￿￿ . . . . . . . . . . . . . . . . . . . . . . 32 Tivoli Access Manager Plug-in for Web Servers￿ ￿￿￿￿ ￿￿ ￿￿ ￿ ￿￿ . . . . . . . . . . 33

￿6 ￿: ￿￿￿￿￿ ￿￿￿ ￿￿￿￿ BEA WebLogic Server ￿￿ ￿￿ ￿￿￿￿ Tivoli Access Manager for

WebLogic ￿￿ . . . .

. . . . . . .

.

. . . .

.

.

. . . .

.

. . . .

.

.

.

.

.

.

. 34

￿ 7 ￿: ￿￿ ￿￿￿ . .

. . . . . . .

.

. . . .

.

.

. . . .

.

. . . .

.

.

.

.

.

.

. 34

￿4 ￿ ￿￿ ￿￿ ￿ ￿￿ ￿￿ . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37 Tivoli Access Manager WebSEAL￿ ￿￿￿ ￿￿ ￿￿ ￿ . . . . . . . . . . . . . . . . . . . 37

￿5 ￿ ￿￿ ￿￿￿ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Tivoli Access Manager Authorization Server￿￿ ￿￿￿￿￿￿ ￿￿￿ ￿￿ . . . . . . . . . . . . . 39 Tivoli Access Manager for WebLogic￿￿ ￿￿￿ ￿ ￿￿ ￿￿ . . . . . . . . . . . . . . . . . 40

￿￿ ￿￿￿￿￿￿ ￿￿

.

.

. 41

￿￿ ￿

.

.

. 43

3￿ ￿￿ ￿￿￿ policy

.

.

. 44

Tivoli Access

Manager ￿￿ ￿￿

.

.

. 45

Tivoli Access

Manager for WebLogic ￿￿ ￿￿

.

.

. 46

￿￿￿ ￿￿ ￿

.

.

. 46

￿￿ ￿￿ ￿￿￿￿ ￿￿￿￿ ￿￿ ￿￿ ￿ ￿￿ . . . . . . . . . . . . . . . . . . . . . . 46

WebLogic ￿￿￿ ￿￿￿ ￿￿￿ ￿￿￿

. . .

.

. . . . .

.

.

. . . . . . . . . . .

.

. 47

￿￿￿￿

. . .

.

. . . . .

.

.

. . . . . . . . . . .

.

. 47

￿￿￿ ￿￿￿ ￿ ￿￿￿￿ ￿￿ . . . .

. . .

.

. . . . .

.

.

. . . . . . . . . . .

.

. 48

￿6 ￿ ￿￿ ￿￿￿￿ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49 Solaris￿￿ ￿￿. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49 Windows￿￿ ￿￿ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50 AIX￿￿ ￿￿ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

HP-UX￿￿ ￿￿ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

￿￿ A. ￿￿ ￿￿ ￿￿ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 amsspi.properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 rbpf.properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55 amwlsjlog.properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

￿￿ B. ￿￿ ￿￿ ￿￿ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 AMWLSConfigure -action config . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

ivIBM Tivoli Access Manager for e-business: BEA WebLogic Server ￿￿ ￿￿￿

Image 6
Contents BEA WebLogic Server Page BEA WebLogic Server 2003 Iii BEAWebLogic Page Page Business Policy Policy ServerTivoli Access Manager WebSEAL API Tivoli Access Manager API C Provisioning Fast StartTivoli Software Glossary Tivoli GSKitTivoli Access Manager SSL DB2WebSphere MQSeries JMSXiii Tivoli Identity Tivoli Information CenterUnix policy Agent IBM . IBM Tivoli Identity ManagerProduct manuals . Tivoli Software Information Center IBM Software Support GuideJava Unix . Windows $variable %variable% \ . Windows bash Tivoli Access Manager Tivoli Access Manager PolicyThird-party Tivoli Access Manager WebLogicPolicy IBM Tivoli Access Manager BEA WebLogic ServerTivoli Access Manager Security Service Provider Interface WebLogic Management BeanMBeanJaas Jaas WebLogic . WebLogic Policy BEA WebLogic Server WebLogicPDPermission MBean WebLogic . WebLogicPolicy Policy WebLogic J2EETivoli Access Manager WebSEALSsouser 23 WebSEAL , , RSA SecureIDWebSEAL URL , WebSEAL WebLogic WebSEAL ssouserWebLogic BEA WebLogic Server JLog BEA WebLogic ServerTivoli Access Manager Authorization Server IBM Tivoli Access Manager for e-business BEA WebLogic Server Copyright IBM Corp 64MB RAM Tivoli Access Manager Tivoli Access Manager Policy ServerTivoli Access Manager Authorization Server Authorization ServerBEA WebLogic Server BEA WebLogic Server startWebLogicTivoli Access Manager Java Windows Amwlsinstalldir/lib InstallamwlsInstallamwls 32 5 BEA WebLogic ServerAIX HP-UX Solaris Windows Root Tivoli Access ManagerAIX AIXRoot Tivoli Access Manager Pfsmountd pfsd Pfsmount CD HP-UXSwinstall SolarisInstallShield InstallShield 23Administrator Windows Tivoli Access Manager Windows\amwlsinstalldir\lib IBM Tivoli Access Manager for e-business BEA WebLogic Server Tivoli Access Manager Java Runtime Environment WebLogic . Java RuntimePdjrtecfg Sun v1.4d JRE , pdjrtecfg Pdconfig JREJDK Solaris, HP-UXJava Classpath WebLogic StartWebLogic Classpath StartWebLogic ClasspathStartWebLogic WebLogic . startWebLogic StartWebLogic BEA WebLogic ServerTivoli Access Manager for WebLogic 53 aBEA WebLogic BEA WebLogic Config AMWLSConsoleExtensions BEA WebLogic ServerTivoli Access Manager for WebLogic AMSSPIConfigureConsole Extension Web Application Tivoli Access Manager WebLogic URLSSO Access ManagerAMSSPIConfigure Createrealm Rbpf.properties 53 aTivoli Access Manager BEA WebLogic Server WebSEAL IBM Tivoli Access ManagerSsopwd WebSEAL Pdadmin WebSEAL WebSEALPlug-ininstalldir/etc pdwebpi.conf Tivoli Access Manager Plug-in for Web ServersPdadmin Junction URLBEA WebLogic Server Tivoli Access Manager for WebLogic BA add-hdr supply-password BASsouser Page IBM Tivoli Access Manager for e-business BEA WebLogic Server Tivoli Access Manager WebSEAL DummyWebSEAL ID user-1 Ws-passwd WebSEALTivoli Access Manager Authorization Server Tivoli Access Manager44 3 policy Path Aznapi-entitlement-servicesBEA WebLogic Server Access Manager TrueWebSEAL EJB Web.xml Servlet ServletRoleEjb-jar.xml GetBalance EJBRole EAR AMWLSinstalldir/demo BEA WebLogic ServerDoPost ServletRole GetBalance Banker1 Banker1Banker BankMembersServlet Servlet BankMembersEJB WebSEAL URLPolicy WebLogic Tivoli Access ManagerPolicy Policy pdadmin policy Policy Ldap Web Portal Manager Ldap . , LdapPdadmin Ldap 63 BAMWLSConfigure Amsspidir WebLogic ServletWebLogic Server Active Directory administratorsWebLogic BEA WebLogic Server BEAWebLogic Active Directory Administrator Certificate.war AdministratorSolaris Windows AIX HP-UX Tivoli Access Manager IBM Tivoli AccessSolaris RootWindows Access Manager for WebLogic Application ServerTivoli Access Manager IBM Tivoli Access Manager AIXHP-UX SwremoveIBM Tivoli Access Manager for e-business BEA WebLogic Server Wlsrealmname BEA WebLogic Server Config createrealm .in ACL Tivoli Access ManagerAmsspi.properties BEA WebLogic Server SspiCom.tivoli.amwls.sspi.config.OperatorGroupProp Com.tivoli.amwls.sspi.config.DeployerGroupPropCom.tivoli.amwls.sspi.config.MonitorGroupProp Com.tivoli.amwls.sspi.config.AdminGroupPropRbpf.properties Com.tivoli.pd.as.rbpf.ProductId Com.tivoli.pd.as.cache.EnableDynamicRoleCachingCom.tivoli.pd.as.rbpf.PosRoot Com.tivoli.pd.as.rbpf.AMActionGroupCom.tivoli.pd.as.cache.StaticRoleCache Com.tivoli.pd.as.cache.EnableStaticRoleCachingCom.tivoli.pd.as.cache.EnableObjectCaching Com.tivoli.pd.as.cache.StaticRoleCache.RolesCom.tivoli.pd.as.rbpf.ExcludedRoles Com.tivoli.pd.as.rbpf.GrantUnprotectedAccessCom.tivoli.pd.as.cache.ObjectCache.MaxResources Com.tivoli.pd.as.rbpf.CopyParentRoleCom.tivoli.pd.as.rbpf.UseEntitlements Com.tivoli.pd.as.rbpf.IgnorePasswordPolicyOnUserCreateCom.tivoli.pd.as.rbpf.PropagateChildRole Com.tivoli.pd.as.rbpf.EntitlementsUserAmwlsjlog.properties Amwlsjlog.properties IsLoggingBaseGroup traceLogger baseGroup messageLogger True True falseIBM Tivoli Access Manager for e-business BEA WebLogic Server Copyright IBM Corp AMWLSConfigure -action config Verbose truefalse Remoteacluser remoteacluserSecmasterpwd secmasterpwd True . falseAMWLSConfigure -action unconfig WLS AMWLSConfigure -action createrealmSsoenabled truefalse False Ssopwd ssopwdIBM Tivoli Access Manager Error Message Reference AMWLSConfigure -action deleterealm Registryclean truefalseIBM Tivoli Access Manager for e-business BEA WebLogic Server IBM IBM , IBM 467-12 2DBCS IBMIBM 467-12 IBM IBM , IBM Ipla IBM Corporation Unix Open GroupIBM Tivoli Access Manager for e-business BEA WebLogic Server Virtual hosting Network-based authentication Protected object. ACL POP Entitlement service ACLAccess Control List PAC privilege attribute certificate service URLUniform Resource Locator IBM Tivoli Access Manager for e-business BEA WebLogic Server Page AIX Page SA30-2210-00