10.02.2013 Views

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Relative<br />

URLs<br />

are<br />

always<br />

handled<br />

appropriately<br />

by<br />

the<br />

browser.<br />

By<br />

default,<br />

the<br />

browser<br />

handles<br />

relative<br />

URLs<br />

in<br />

links<br />

by<br />

prepending<br />

the<br />

correct<br />

scheme,<br />

server,<br />

and<br />

directory<br />

in<strong>for</strong>mation<br />

(including<br />

the<br />

junction)<br />

to<br />

the<br />

relative<br />

URL.<br />

The<br />

prepended<br />

in<strong>for</strong>mation<br />

is<br />

derived<br />

from<br />

the<br />

request<br />

URL<br />

<strong>for</strong><br />

the<br />

page<br />

on<br />

which<br />

the<br />

link<br />

is<br />

located.<br />

However,<br />

<strong>WebSEAL</strong><br />

must<br />

add<br />

the<br />

junction<br />

name<br />

to<br />

the<br />

path<br />

of<br />

absolute<br />

and<br />

server-relative<br />

URLs<br />

that<br />

refer<br />

to<br />

resources<br />

located<br />

on<br />

junctioned<br />

servers.<br />

v<br />

Server-relative<br />

URLs<br />

indicate<br />

a<br />

URL<br />

position<br />

in<br />

relation<br />

to<br />

the<br />

document<br />

root<br />

of<br />

the<br />

junctioned<br />

server,<br />

<strong>for</strong><br />

example:<br />

/dir/file.html<br />

Server-relative<br />

URLs<br />

are<br />

modified<br />

by<br />

adding<br />

the<br />

junction<br />

point<br />

of<br />

the<br />

junctioned<br />

server<br />

to<br />

the<br />

path<br />

name.<br />

For<br />

example:<br />

/jct/dir/file.html<br />

v<br />

Absolute<br />

URLs<br />

indicate<br />

a<br />

URL<br />

position<br />

in<br />

relation<br />

to<br />

a<br />

host<br />

name<br />

or<br />

IP<br />

address<br />

(and,<br />

optionally,<br />

a<br />

network<br />

port).<br />

For<br />

example:<br />

http://host-name[:port]/file.html,<br />

or<br />

https://host-name[:port]/file.html<br />

Absolute<br />

URLs<br />

are<br />

modified<br />

according<br />

to<br />

the<br />

following<br />

set<br />

of<br />

rules:<br />

–<br />

If<br />

the<br />

URL<br />

is<br />

HTTP<br />

and<br />

the<br />

host/port<br />

matches<br />

a<br />

TCP<br />

junctioned<br />

server,<br />

the<br />

URL<br />

is<br />

modified<br />

to<br />

be<br />

server-relative<br />

to<br />

<strong>WebSEAL</strong><br />

and<br />

reflect<br />

the<br />

junction<br />

point.<br />

For<br />

example:<br />

http://host-name[:port]/file.html<br />

becomes:<br />

/tcpjct/file.html<br />

–<br />

If<br />

the<br />

URL<br />

is<br />

HTTPS<br />

and<br />

the<br />

host/port<br />

matches<br />

an<br />

SSL<br />

junctioned<br />

server,<br />

the<br />

URL<br />

is<br />

modified<br />

to<br />

be<br />

server-relative<br />

to<br />

<strong>WebSEAL</strong><br />

and<br />

reflect<br />

the<br />

junction<br />

point.<br />

For<br />

example:<br />

https://host-name[:port]/file.html<br />

becomes:<br />

/ssljct/file.html<br />

In<br />

addition:<br />

v<br />

Only<br />

URLs<br />

in<br />

content<br />

types<br />

defined<br />

in<br />

the<br />

[filter-content-types]<br />

stanza<br />

of<br />

the<br />

<strong>WebSEAL</strong><br />

configuration<br />

file<br />

are<br />

filtered.<br />

v<br />

META<br />

tags<br />

are<br />

always<br />

filtered<br />

<strong>for</strong><br />

refresh<br />

requests,<br />

<strong>for</strong><br />

example:<br />

<br />

v<br />

If<br />

a<br />

BASE<br />

tag<br />

contains<br />

an<br />

HREF<br />

attribute,<br />

the<br />

tag<br />

is<br />

removed<br />

from<br />

the<br />

response<br />

to<br />

the<br />

client.<br />

Parameters<br />

<strong>for</strong><br />

filtering<br />

URLs<br />

through<br />

junctioned<br />

servers<br />

are<br />

located<br />

in<br />

the<br />

[filter-url]<br />

stanza<br />

of<br />

the<br />

<strong>WebSEAL</strong><br />

configuration<br />

file.<br />

The<br />

[filter-url]<br />

stanza<br />

contains<br />

a<br />

list<br />

of<br />

HTML<br />

tags<br />

that<br />

the<br />

<strong>WebSEAL</strong><br />

server<br />

filters<br />

or<br />

modifies<br />

to<br />

adjust<br />

absolute<br />

URLs<br />

obtained<br />

through<br />

a<br />

junctioned<br />

server.<br />

All<br />

commonly<br />

used<br />

HTML<br />

tags<br />

are<br />

configured<br />

by<br />

default.<br />

The<br />

administrator<br />

may<br />

need<br />

to<br />

add<br />

additional<br />

HTML<br />

tags<br />

that<br />

contain<br />

URLs.<br />

Chapter<br />

10.<br />

<strong>WebSEAL</strong><br />

junctions<br />

289

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!