IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

When
client-notify-tod
=
yes,
WebSEAL
sends
the
client
an
error
message
stating
that
the
authorization
failure
was
due
to
a
failed
time-of-day
#
POP
access
check.
This
entry
is
set
to
no
by
default.
Specifying
error
page
location
To
specify
the
directory
location
for
the
error
pages,
set
the
error-dir
entry
in
the
[content]
stanza:
[content]
error-dir
=
lib/errors
The
value
lib/errors
is
the
default
directory.
You
can
modify
this
value.
This
location
is
relative
to
the
directory
specified
by
the
server-root
entry
in
the
[server]
stanza.
In
addition,
the
directory
specific
to
your
locale
is
automatically
appended
to
the
end
of
the
directory
hierarchy.
For
example,
given
a
system
with
the
instance
name
webseal1,
and
the
following
configuration
settings:
v
server-root
=
/opt/pdweb/www-webseal1
v
error-dir
=
lib/errors
v
English
locale
directory
of
C
the
location
of
the
error
pages
would
be:
/opt/pdweb/www-webseal1/lib/errors/C
Backwards
compatibility
v
WebSEAL
Version
5.1
introduced
the
following
new
error
pages:
–
38cf04d7.html
–
38cf04c6.html
These
messages
provide
information
indicating
that
the
encountered
failure
originated
with
a
backend
server,
not
with
WebSEAL.
In
past
releases,
WebSEAL
returned
the
default
error
page
only.
If
you
want
to
retain
the
previous
behavior,
remove
the
new
HTTP
error
message
pages
from
the
error
message
page
directory.
v
WebSEAL
Version
5.1
introduced
a
new
HTTP
error
message
for
use
when
access
is
denied
because
a
protected
object
policy
(POP)
time
of
day
policy
was
not
satisfied.
Use
of
this
error
message
page
is
controlled
by
a
WebSEAL
configuration
file
setting.
To
disable
use
of
this
page,
change
the
following
configuration
setting:
[acnt-mgmt]
client-notify-tod
=
no
Note:
A
403
is
always
logged,
regardless
of
the
value
assigned
to
client-notify-tod.
Chapter
3.
WebSEAL
server
administration
87