IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

The
GSKit
cache
also
maintains
session
state
information
for
the
SSL
connection
between
WebSEAL
and
the
LDAP
user
registry.
Configuring
the
GSKit
SSL
session
ID
cache
The
following
configuration
tasks
are
available
for
the
GSKit
SSL
session
ID
cache:
v
Setting
the
cache
entry
timeout
value
v
Setting
the
maximum
concurrent
entries
value
Setting
the
cache
entry
timeout
value
The
parameters
for
setting
the
maximum
lifetime
timeout
for
an
entry
in
the
GSKit
SSL
session
ID
cache
are
located
in
the
[ssl]
stanza
of
the
WebSEAL
configuration
file.
There
are
two
parameters:
one
for
SSL
V2
connections
(ssl-v2-timeout)
and
one
for
SSL
V3
connections
(ssl-v3-timeout).
The
default
SSL
V2
session
timeout
(in
seconds)
is
100
(with
a
possible
range
of
1-100):
[ssl]
ssl-v2-timeout
=
100
The
default
SSL
V3
session
timeout
(in
seconds)
is
7200
(with
a
possible
range
of
1-86400):
[ssl]
ssl-v3-timeout
=
7200
Setting
the
maximum
concurrent
entries
value
The
ssl-max-entries
parameter,
located
in
the
[ssl]
stanza
of
the
WebSEAL
configuration
file,
sets
the
maximum
number
of
concurrent
entries
in
the
GSKit
SSL
session
ID
cache.
This
value
corresponds
to
the
number
of
concurrent
login
sessions.
When
the
cache
size
reaches
this
value,
entries
are
removed
from
the
cache
according
to
a
least
recently
used
algorithm
to
allow
new
incoming
logins.
The
default
number
of
concurrent
login
sessions
is
4096:
[ssl]
ssl-max-entries
=
4096
For
performance
considerations,
see
the
IBM
Tivoli
Access
Manager
for
e-business
Performance
Tuning
Guide.
Configuring
the
WebSEAL
session/credentials
cache
The
following
sections
describe
configuration
and
use
of
the
WebSEAL
session/credentials
cache:
v
Setting
the
maximum
concurrent
entries
value
v
Setting
the
cache
entry
lifetime
timeout
value
v
Setting
the
cache
entry
inactivity
timeout
value
v
“Credentials
cache
limitation”
on
page
134
Setting
the
maximum
concurrent
entries
value
The
max-entries
parameter,
located
in
the
[session]
stanza
of
the
WebSEAL
configuration
file,
sets
the
maximum
number
of
concurrent
entries
in
the
WebSEAL
session/credentials
cache.
Chapter
6.
Authentication
133