Digipass Plug-In for SBR Administrator Reference - Vasco

More documents

Recommendations

Info

Digipass Plug-In for SBR Administrator Reference Web Sites 9 Web Sites 9.1 Customizing the Web Sites The User Self Management Web Site and OTP Request Site can be customized by modifying the pages provided with the installation. You may wish to: change the colors and graphics to match your corporate colors/logos. integrate the pages into a larger web site. translate or customize the text Any cosmetic part of the web pages may be modified. Completely new web pages may be used, provided that the correct form fields are posted to the CGI program, and query string variables are interpreted correctly. Server scripting languages such as PHP or ASP, or any other way of generating HTML, can be used. This section provides the instructions and reference material that you require to customize the site. It is assumed that the reader has some web development knowledge. 9.2 Setup Required in SBR Plug-In and SBR 9.2.1 SBR Plug-In A Component record in the SBR Plug-In(s) is required for each Web Site. This allows the Web Site to make authentication requests to the SBR Plug-In via Steel-Belted RADIUS. 9.2.2 Steel-Belted RADIUS Steel-Belted RADIUS must have a RADIUS Client record for each Web Site in order to pass its authentication requests to the SBR Plug-In. The Make/model for the RADIUS Client must be set to VASCO. 9.3 CGI Program A single CGI script is used for both the User Self Management Web Site and the OTP Request Site. The functionality provided depends on the Site. For each function, the CGI program carries out the following actions: Read and validate the input. This input is gathered from: Configuration settings from the registry Form variables posted Send an authentication request to the SBR Plug-In (provided that there were no validation errors) and interpret the response. Requests are sent to the Server using the RADIUS protocol. A component identifier Self-Mgt Site will indicate in the Audit Console which audit messages relate to requests from the User Self-Management Web Site or OTP Request Site. © 2006 VASCO Data Security Inc. 102
Digipass Plug-In for SBR Administrator Reference Web Sites (OTP Request Site only) Send a request to the Message Delivery Component to send an OTP to the User's mobile phone via text message. Output the HTML to direct the user to the page that will indicate success or failure, or display a challenge. This is achieved by returning the HTML for a basic ‘please wait’ page with a ‘meta-refresh’ instruction to go directly to the appropriate page. The meta-refresh will happen immediately, but on a slow link you may notice the intermediate page. The CGI program cannot be customized. Its behaviour is controlled by the configuration settings and the posted form variables. The configuration settings are listed below; the posted form variables are specified in the Customizing the Web Site section. 9.3.1 Configuration Settings Various configuration settings are used by the CGI program to locate the server(s) and to enable tracing. These can be modified using the Start -> Programs -> VASCO -> Digipass Plug-In for SBR -> User CGI Configuration menu option. The configuration settings are stored in the Windows Registry, at the path: HKEY_LOCAL_MACHINE\Software\VASCO\User CGI Table 39: Configuration Settings for CGI Program Name Type Value Default Trace-Mask Number (DWORD) Trace-Header Number (DWORD) Used to enable internal tracing levels. In general, just use these values: 0 = no tracing 3FFFFFFF (hexadecimal) = full tracing Used to configure tracing. In general, leave with the default value. 47 Trace-File String Full path and filename of output file for internal tracing. NB: the file will be created if it is missing, but not the directory. Source-IP- Address Server1-IP- Address Server1-Port Number (DWORD) Server1- Shared-Secret Server2-IP- Address Server2-Port Number (DWORD) Server2- Shared-Secret Timeout Number (DWORD) No-Of-Retries Number (DWORD) String Source IP address to bind to when sending API requests, if any (only required if there are multiple IP addresses on the machine).eg. 10.9.255.7 0 String IP address of primary server. eg. 10.2.255.45 127.0.0.1 API port of primary server (in general, this should not be changed from the default). 1812 String Shared Secret for primary server. String IP address of backup server, or blank if there is no backup. API port of backup server (in general, this should not be changed from the default) 1812 String Shared Secret for backup server. Timeout waiting for each server to respond, in seconds. 5 Number of times to retry each server when they time out. 0 Protocol String The only protocol supported currently is RADIUS. RADIUS © 2006 VASCO Data Security Inc. 103
Page 1 and 2:
Modify these field values (right-cl
Page 3 and 4:
Digipass Plug-In for SBR Administra
Page 5 and 6:
Page 7 and 8:
Page 9 and 10:
Page 11 and 12:
Page 13 and 14:
Page 15 and 16:
Page 17 and 18:
Page 19 and 20:
Page 21 and 22:
Page 23 and 24:
Page 25 and 26:
Page 27 and 28:
Page 29 and 30:
Page 31 and 32:
Page 33 and 34:
Page 35 and 36:
Page 37 and 38:
Page 39 and 40:
Page 41 and 42:
Page 43 and 44:
Page 45 and 46:
Page 47 and 48:
Page 49 and 50:
Page 51 and 52: Digipass Plug-In for SBR Administra
Page 101: Digipass Plug-In for SBR Administra
Page 153 and 154:
Page 155 and 156:
Page 157 and 158:
Page 159 and 160:
Page 161 and 162:
Page 163 and 164:
Page 165 and 166:
Page 167 and 168:
Page 169 and 170:
Page 171 and 172:
Page 173 and 174:
Page 175 and 176:
Page 177 and 178:
Page 179 and 180:
Page 181 and 182:
Page 183 and 184:
Page 185:
show all

Digipass Plug-In for SBR Administrator Reference - Vasco

Create successful ePaper yourself

Delete template?

Save as template?