IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

4.
Restart
the
WebSEAL
server.
See
also:
v
“Token
authentication
concepts”
on
page
160
v
“Authentication
libraries”
on
page
419
Enable
access
to
the
SecurID
client
library
For
successful
communication
between
the
SecurID
client
and
ACE/Server,
you
must
manually
set
the
proper
permissions
on
a
SecurID
node
secret
file.
You
must
also
set
an
environment
variable
that
points
WebSEAL
to
the
location
of
the
node
secret
file.
The
file
is
called
securid.
The
file
is
sent
upon
the
first
successful
authentication
between
the
SecurID
client
and
server.
Subsequent
RSA
client/server
communication
relies
on
an
exchange
of
the
node
secret
to
verify
one
another’s
authenticity.
To
enable
WebSEAL
to
access
the
SecurID
client
library,
complete
the
following
steps:
1.
Change
the
permissions
of
the
securid
and
sdconf.rec
client
configuration
files
to
allow
read
access
by
the
ivmgr
group.
The
following
example
assumes
that
the
location
of
these
files
is
the
/opt/ace/data
directory:
UNIX:
#
cd
/opt/ace/data
#
chmod
444
securid
#
chmod
444
sdconf.rec
Windows:
Set
the
Security
Properties
on
the
files
to
″Everyone″.
2.
Set
the
VAR_ACE
environment
variable
to
inform
WebSEAL
of
the
directory
location
of
these
two
files.
The
following
example
assumes
the
location
of
the
files
is
the
/opt/ace/data
directory:
UNIX:
#
export
VAR_ACE=/opt/ace/data
Windows:
Start
>
Settings
>
Control
Panel
>
System
>
Environment
For
more
information
on
WebSEAL
support
for
the
SecurID
client,
see
“Token
authentication
concepts”
on
page
160
Specify
a
customized
password
strength
library
This
configuration
entry
is
required
only
when
a
customized
password
strength
library
is
used.
Edit
the
WebSEAL
configuration
file.
In
the
[authentication-mechanisms]
stanza,
add
an
entry
with
the
entry
keyword
passwd-strength.
Specify
the
name
of
the
customized
password
strength
library
at
the
value
for
the
entry.
The
following
example
shows
a
sample
configuration
file
entry
for
use
of
token
authentication
with
a
password
strength
library:
164
IBM
Tivoli
Access
Manager
for
e-business:
WebSEAL
Administration
Guide