IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

Basic
authentication
Basic
authentication
(BA)
is
a
standard
method
for
providing
a
username
and
password
to
the
authentication
mechanism.
BA
is
defined
by
the
HTTP
protocol
and
can
be
implemented
over
HTTP
and
over
HTTPS.
By
default,
WebSEAL
is
configured
for
authentication
over
HTTPS
via
Basic
authentication
(BA)
username
and
password.
Enabling
and
disabling
basic
authentication
The
ba-auth
parameter,
located
in
the
[ba]
stanza
of
the
WebSEAL
configuration
file,
enables
and
disables
the
basic
authentication
method.
v
To
enable
the
basic
authentication
method,
enter
″http″,
″https″,
or
″both″.
v
To
disable
the
basic
authentication
method,
enter
″none″.
For
example:
[ba]
ba-auth
=
https
Setting
the
realm
name
The
realm
name
is
the
text
that
is
displayed
in
the
dialog
box
that
appears
when
the
browser
prompts
the
user
for
login
data.
The
realm
name
is
also
the
name
of
the
realm
to
which
the
user
will
be
authenticated
when
the
user
login
succeeds.
The
configuration
parameter
that
sets
the
realm
name
is
located
in
the
[ba]
stanza
of
the
WebSEAL
configuration
file.
For
example:
[ba]
basic-auth-realm
=
Access
Manager
The
dialog
box
would
display
(for
example):
Enter
username
for
Access
Manager
at
www.ibm.com:
Configuring
the
basic
authentication
mechanism
The
passwd-ldap
parameter
specifies
the
shared
library
used
to
process
username
and
password
authentication.
v
On
UNIX,
the
file
that
provides
the
built-in
mapping
function
is
a
shared
library
called
libldapauthn.
v
On
Windows,
the
file
that
provides
the
built-in
mapping
function
is
a
DLL
called
ldapauthn.
Table
23.
Shared
library
names
for
basic
authentication
Operating
system
Shared
Library
Solaris
libldapauthn.so
AIX
libldapauthn.a
Linux
libldapauthn.so
HP-UX
libldapauthn.sl
Windows
ldapauthn.dll
Chapter
6.
Authentication
145