IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

The
authentication
method
parameters
specify
which
authentication
mechanism
WebSEAL
uses
to
build
the
user
credential.
Each
of
these
entries
is
required.
WebSEAL
verifies
that
all
required
data
is
present
in
the
submitted
form.
If
data
is
missing,
the
form
is
returned
to
the
administrator
with
a
descriptive
message.
When
all
required
data
is
present,
WebSEAL
submits
data
from
the
switch
user
form
data
to
the
/pkmssu.form
action
URL.
Note:
Only
members
of
the
su-admins
group
can
invoke
the
form.
An
ACL
is
not
required
on
this
file.
WebSEAL
performs
an
internally
hard-coded
group
membership
check.
WebSEAL
returns
a
404
″Not
Found″
error
when
the
group
membership
check
fails.
The
full
path
name
for
the
switch
user
form
is
defined
in
the
WebSEAL
configuration
file.
This
path
name
can
be
modified.
The
values
for
three
parameters
are
combined
to
build
the
full
path
name:
v
The
server-root
parameter
located
in
the
[server]
stanza
specifies
the
root
of
the
server
hierarchy.
v
The
mgt-pages-root
parameter
in
the
[acnt-mgt]
stanza
specifies
the
localization
sub-directory.
v
The
switch-user
parameter
in
the
[acnt-mgt]
stanza
specifies
the
name
of
the
switch
user
file.
For
example,
on
a
UNIX
system,
the
configuration
file
entries
would
be:
[server]
server-root
=
/opt/pdweb/www-instance_name
....
[acnt-mgt]
mgt-pages-root
=
lib/html/
switch-user
=
switchuser.html
The
value
of
the
LANG
directory
is
specific
to
the
locale.
You
can
determine
the
full
path
to
the
switch
user
form
by
combining
the
values.
For
example,
on
a
UNIX
system,
with
a
U.S.
English
locale
where
the
LANG
directory
is
called
″C″,
the
full
path
would
be:
/opt/pdweb/www-instance_name/lib/html/C/switchuser.html
The
default
value
of
server-root
on
Windows
is:
C:\Program
Files\Tivoli\PDWeb\www-instance_name
The
full
path
on
Windows
would
be:
C:\Program
Files\Tivoli\PDWeb\www-instance_name\lib\html\C\switchuser.html
How
to
customize
the
HTML
form
To
customize
the
switch
user
form,
open
the
form
for
editing,
and
complete
the
following
steps:
1.
Specify
the
location
and
contents
of
the
destination
URL.
You
can
configure
this
as
hidden
input
containing
an
appropriate
home
page
or
a
successful
switch
user
confirmation
page.
2.
Specify
the
authentication
methods
You
can
configure
this
field
as
hidden
input.
Valid
values
for
the
authentication
method
include:
194
IBM
Tivoli
Access
Manager
for
e-business:
WebSEAL
Administration
Guide