IBM 5.1 manual Com.tivoli.pd.as.rbpf.PropagateChildRole, Com.tivoli.pd.as.rbpf.UseEntitlements

Page 77

com.tivoli.pd.as.rbpf.PropagateChildRole***

false.

(: ) (:

) . , userA

RoleA userA RoleA

. CopyParentRole

. CopyParentRole

.

com.tivoli.pd.as.rbpf.UseEntitlements

false.

Tivoli Access Manager Authorization Server .

false, Tivoli Access Manager Tivoli Access Manager for WebLogic . , Tivoli Access Manager Policy Server

false .

. ,

true .

com.tivoli.pd.as.rbpf.EntitlementsUser

Tivoli Access Manager for WebLogic remote-acl-user.

. Tivoli Access Manager

‘s’

. config romote-acl-useriv-admin

.

, Tivoli Access Manager

Resources ‘s’

.

com.tivoli.pd.as.rbpf.IgnorePasswordPolicyOnUserCreate

false. BEA WebLogic Server

Tivoli Access Manager policy

.

com.tivoli.pd.as.rbpf.DeleteBaseRoleRecursive

true.

.

A. 59

Image 77

Contents BEA WebLogic Server Page BEA WebLogic Server 2003 BEA IiiWebLogic Page Page Policy Server Business PolicyTivoli Access Manager WebSEAL Provisioning Fast Start API Tivoli Access Manager API CGSKit Tivoli Software Glossary TivoliDB2 Tivoli Access Manager SSLXiii WebSphere MQSeriesJMS Unix policy Tivoli Information CenterTivoli Identity Agent IBM . IBM Tivoli Identity ManagerIBM Software Support Guide Product manuals . Tivoli Software Information CenterJava Unix . Windows $variable %variable% \ . Windows bash Tivoli Access Manager Policy Tivoli Access ManagerPolicy IBM Tivoli Access Manager Tivoli Access Manager WebLogicThird-party BEA WebLogic ServerJaas Jaas Tivoli Access Manager Security Service Provider InterfaceWebLogic Management BeanMBean PDPermission WebLogicWebLogic . WebLogic Policy BEA WebLogic Server MBean WebLogic . WebLogicPolicy WebLogic J2EE PolicyWebSEAL Tivoli Access ManagerWebSEAL URL , WebSEAL WebLogic WebSEAL , , RSA SecureIDSsouser 23 WebSEAL ssouserJLog BEA WebLogic Server WebLogic BEA WebLogic ServerTivoli Access Manager Authorization Server IBM Tivoli Access Manager for e-business BEA WebLogic Server Copyright IBM Corp Tivoli Access Manager Authorization Server Tivoli Access Manager Policy Server64MB RAM Tivoli Access Manager Authorization ServerBEA WebLogic Server startWebLogic BEA WebLogic ServerTivoli Access Manager Java Windows Installamwls InstallamwlsAmwlsinstalldir/lib 32 5 BEA WebLogic ServerAIX Root Tivoli Access ManagerAIX HP-UX Solaris Windows AIXHP-UX Root Tivoli Access Manager Pfsmountd pfsd Pfsmount CDSolaris SwinstallAdministrator Windows Tivoli Access Manager InstallShield 23InstallShield Windows\amwlsinstalldir\lib IBM Tivoli Access Manager for e-business BEA WebLogic Server WebLogic . Java Runtime Tivoli Access Manager Java Runtime EnvironmentJDK Sun v1.4d JRE , pdjrtecfg Pdconfig JREPdjrtecfg Solaris, HP-UXStartWebLogic WebLogic . startWebLogic StartWebLogic ClasspathJava Classpath WebLogic StartWebLogic Classpath StartWebLogic BEA WebLogic ServerBEA WebLogic BEA WebLogic Tivoli Access Manager for WebLogic53 a AMWLSConsoleExtensions BEA WebLogic Server ConfigAMSSPIConfigure Tivoli Access Manager for WebLogicWebLogic URL Console Extension Web Application Tivoli Access ManagerAMSSPIConfigure Createrealm Access ManagerSSO Rbpf.properties 53 aTivoli Access Manager Ssopwd WebSEAL Pdadmin WebSEAL WebSEAL IBM Tivoli Access ManagerBEA WebLogic Server WebSEALPdadmin Tivoli Access Manager Plug-in for Web ServersPlug-ininstalldir/etc pdwebpi.conf Junction URLSsouser BEA WebLogic Server Tivoli Access Manager for WebLogicBA add-hdr supply-password BA Page IBM Tivoli Access Manager for e-business BEA WebLogic Server Dummy Tivoli Access Manager WebSEALWs-passwd WebSEAL WebSEAL ID user-144 3 policy Tivoli Access Manager Authorization ServerTivoli Access Manager BEA WebLogic Server Access Manager Aznapi-entitlement-servicesPath TrueWeb.xml Servlet ServletRole WebSEAL EJBDoPost ServletRole EAR AMWLSinstalldir/demo BEA WebLogic ServerEjb-jar.xml GetBalance EJBRole GetBalance Banker1 Banker1BankMembersServlet Servlet BankMembersEJB WebSEAL URL BankerPolicy Policy pdadmin policy WebLogic Tivoli Access ManagerPolicy Policy Ldap Web Portal Manager Ldap . , Ldap63 B Pdadmin LdapServlet AMWLSConfigure Amsspidir WebLogicWebLogic Active Directory administratorsWebLogic Server BEA WebLogic Server BEACertificate.war Administrator WebLogic Active Directory AdministratorSolaris Tivoli Access Manager IBM Tivoli AccessSolaris Windows AIX HP-UX RootTivoli Access Manager IBM Tivoli Access Manager Access Manager for WebLogic Application ServerWindows AIXSwremove HP-UXIBM Tivoli Access Manager for e-business BEA WebLogic Server Amsspi.properties Config createrealm .in ACL Tivoli Access ManagerWlsrealmname BEA WebLogic Server BEA WebLogic Server SspiCom.tivoli.amwls.sspi.config.MonitorGroupProp Com.tivoli.amwls.sspi.config.DeployerGroupPropCom.tivoli.amwls.sspi.config.OperatorGroupProp Com.tivoli.amwls.sspi.config.AdminGroupPropRbpf.properties Com.tivoli.pd.as.rbpf.PosRoot Com.tivoli.pd.as.cache.EnableDynamicRoleCachingCom.tivoli.pd.as.rbpf.ProductId Com.tivoli.pd.as.rbpf.AMActionGroupCom.tivoli.pd.as.cache.EnableObjectCaching Com.tivoli.pd.as.cache.EnableStaticRoleCachingCom.tivoli.pd.as.cache.StaticRoleCache Com.tivoli.pd.as.cache.StaticRoleCache.RolesCom.tivoli.pd.as.cache.ObjectCache.MaxResources Com.tivoli.pd.as.rbpf.GrantUnprotectedAccessCom.tivoli.pd.as.rbpf.ExcludedRoles Com.tivoli.pd.as.rbpf.CopyParentRoleCom.tivoli.pd.as.rbpf.PropagateChildRole Com.tivoli.pd.as.rbpf.IgnorePasswordPolicyOnUserCreateCom.tivoli.pd.as.rbpf.UseEntitlements Com.tivoli.pd.as.rbpf.EntitlementsUserAmwlsjlog.properties IsLogging Amwlsjlog.propertiesTrue True false BaseGroup traceLogger baseGroup messageLoggerIBM Tivoli Access Manager for e-business BEA WebLogic Server Copyright IBM Corp AMWLSConfigure -action config Secmasterpwd secmasterpwd Remoteacluser remoteacluserVerbose truefalse True . falseAMWLSConfigure -action unconfig Ssoenabled truefalse AMWLSConfigure -action createrealmWLS False Ssopwd ssopwdIBM Tivoli Access Manager Error Message Reference Registryclean truefalse AMWLSConfigure -action deleterealmIBM Tivoli Access Manager for e-business BEA WebLogic Server IBM IBM IBM , IBM467-12 2DBCS IBM 467-12 IBM IBM , IBM Ipla Unix Open Group IBM CorporationIBM Tivoli Access Manager for e-business BEA WebLogic Server Virtual hosting Network-based authentication Protected object. ACL POP Entitlement service ACLAccess Control List PAC privilege attribute certificate service URLUniform Resource Locator IBM Tivoli Access Manager for e-business BEA WebLogic Server Page AIX Page SA30-2210-00