IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

Forms
authentication
Tivoli
Access
Manager
provides
forms
authentication
as
an
alternative
to
the
standard
basic
authentication
mechanism.
This
method
produces
a
custom
HTML
login
form
from
Tivoli
Access
Manager
instead
of
the
standard
login
prompt
resulting
from
a
basic
authentication
challenge.
When
you
use
forms-based
login,
the
browser
does
not
cache
the
username
and
password
information
as
it
does
in
basic
authentication.
Enabling
and
disabling
forms
authentication
The
forms-auth
parameter,
located
in
the
[forms]
stanza
of
the
WebSEAL
configuration
file,
enables
and
disables
the
forms
authentication
method.
v
To
enable
the
forms
Authentication
method,
enter
″http″,
″https″,
or
″both″.
v
To
disable
the
forms
Authentication
method,
enter
″none″.
For
example:
[forms]
forms-auth
=
https
Configuring
the
forms
authentication
mechanism
The
passwd-ldap
parameter
specifies
the
shared
library
used
to
process
username
and
password
authentication.
v
On
UNIX,
the
file
that
provides
the
built-in
mapping
function
is
a
shared
library
called
libldapauthn.
v
On
Windows,
the
file
that
provides
the
built-in
mapping
function
is
a
DLL
called
ldapauthn.
Table
24.
Shared
library
names
for
forms
authentication
Operating
system
Shared
Library
Solaris
libldapauthn.so
AIX
libldapauthn.a
Linux
libldapauthn.so
HP-UX
libldapauthn.sl
Windows
ldapauthn.dll
You
can
configure
the
username
and
password
authentication
mechanism
by
entering
the
passwd-ldap
parameter
with
the
platform-specific
name
of
the
shared
library
file
in
the
[authentication-mechanism]
stanza
of
the
WebSEAL
configuration
file.
For
example:
Solaris:
[authentication-mechanisms]
passwd-ldap
=
libldapauthn.so
Windows:
[authentication-mechanisms]
passwd-ldap
=
ldapauthn.dll
Chapter
6.
Authentication
147