10.02.2013 Views

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

The<br />

file<br />

currently<br />

contains<br />

sample<br />

entries<br />

<strong>for</strong><br />

the<br />

Microsoft<br />

Internet<br />

In<strong>for</strong>mation<br />

Server<br />

and<br />

Netscape<br />

FastTrack<br />

servers.<br />

The<br />

lines<br />

in<br />

this<br />

file<br />

that<br />

start<br />

with<br />

a<br />

semi-colon<br />

(;)<br />

are<br />

comments<br />

and<br />

are<br />

ignored<br />

by<br />

the<br />

query_contents<br />

program.<br />

6.<br />

Create<br />

a<br />

junction<br />

to<br />

the<br />

back-end<br />

Windows<br />

server<br />

and<br />

use<br />

the<br />

–q<br />

option<br />

to<br />

specify<br />

query_contents.exe<br />

as<br />

the<br />

correct<br />

file.<br />

For<br />

example:<br />

pdadmin><br />

server<br />

task<br />

web1-webseald-cruz<br />

create<br />

-t<br />

tcp<br />

-h<br />

host-name<br />

...<br />

\<br />

-q<br />

/cgi-bin/query_contents.exe<br />

/junction-name<br />

Testing<br />

the<br />

configuration<br />

1.<br />

From<br />

an<br />

MS-DOS<br />

prompt<br />

on<br />

the<br />

Win32<br />

machine,<br />

execute<br />

the<br />

query_contents<br />

program<br />

from<br />

the<br />

CGI<br />

directory<br />

as<br />

follows:<br />

MSDOS><br />

query_contents<br />

dirlist=/<br />

You<br />

should<br />

see<br />

something<br />

similar<br />

to<br />

the<br />

following<br />

output:<br />

100<br />

index.html<br />

cgi-bin//<br />

pics//<br />

The<br />

number<br />

100<br />

is<br />

a<br />

return<br />

status<br />

that<br />

indicates<br />

success.<br />

It<br />

is<br />

most<br />

important<br />

to<br />

see<br />

at<br />

least<br />

the<br />

number<br />

100<br />

as<br />

the<br />

first<br />

(and<br />

perhaps<br />

only)<br />

value.<br />

If<br />

you<br />

see<br />

an<br />

error<br />

code<br />

instead,<br />

then<br />

the<br />

configuration<br />

file<br />

is<br />

not<br />

in<br />

the<br />

correct<br />

place,<br />

or<br />

does<br />

not<br />

contain<br />

a<br />

valid<br />

document<br />

root<br />

entry.<br />

Check<br />

the<br />

configuration<br />

of<br />

the<br />

query_contents.cfg<br />

file<br />

and<br />

make<br />

sure<br />

that<br />

the<br />

document<br />

root<br />

exists.<br />

2.<br />

From<br />

a<br />

browser,<br />

enter<br />

the<br />

following<br />

URL<br />

http://win32-machine-name/cgi-bin/query_contents.exe?dirlist=/<br />

This<br />

should<br />

return<br />

the<br />

same<br />

result<br />

as<br />

the<br />

preceding<br />

step.<br />

If<br />

it<br />

does<br />

not<br />

return<br />

this<br />

result,<br />

the<br />

CGI<br />

configuration<br />

of<br />

your<br />

Web<br />

server<br />

is<br />

not<br />

correct.<br />

See<br />

the<br />

server’s<br />

documentation<br />

to<br />

correct<br />

the<br />

problem.<br />

Customizing<br />

query_contents<br />

The<br />

job<br />

of<br />

query_contents<br />

is<br />

to<br />

return<br />

the<br />

contents<br />

of<br />

directories<br />

included<br />

in<br />

a<br />

URL<br />

request.<br />

For<br />

example,<br />

to<br />

get<br />

the<br />

contents<br />

of<br />

the<br />

root<br />

directory<br />

of<br />

a<br />

server’s<br />

Web<br />

space,<br />

the<br />

browser<br />

runs<br />

query_contents<br />

on<br />

a<br />

URL<br />

such<br />

as:<br />

http://third-party-server/cgi-bin/query_contents?dirlist=/<br />

The<br />

query_contents<br />

script<br />

per<strong>for</strong>ms<br />

the<br />

following<br />

actions:<br />

1.<br />

Reads<br />

$SERVER_SOFTWARE,<br />

a<br />

standard<br />

CGI<br />

environment<br />

variable,<br />

to<br />

determine<br />

the<br />

server<br />

type.<br />

Based<br />

on<br />

the<br />

Web<br />

server<br />

type,<br />

the<br />

variable<br />

$DOCROOTDIR<br />

is<br />

set<br />

to<br />

a<br />

typical<br />

document<br />

root<br />

location.<br />

2.<br />

Reads<br />

the<br />

environment<br />

variable<br />

$QUERY_STRING<br />

from<br />

the<br />

requested<br />

URL<br />

to<br />

obtain<br />

the<br />

requested<br />

operation<br />

and<br />

get<br />

the<br />

object<br />

path.<br />

The<br />

operation<br />

value<br />

is<br />

stored<br />

in<br />

the<br />

variable<br />

$OPERATION,<br />

and<br />

the<br />

object<br />

path<br />

in<br />

$OBJPATH.<br />

In<br />

the<br />

above<br />

example,<br />

the<br />

$OPERATION<br />

is<br />

dirlist<br />

and<br />

$OBJPATH<br />

is<br />

″/″.<br />

3.<br />

Per<strong>for</strong>ms<br />

a<br />

directory<br />

listing<br />

(ls)<br />

on<br />

the<br />

object<br />

path<br />

and<br />

places<br />

the<br />

results<br />

on<br />

standard<br />

output,<br />

<strong>for</strong><br />

use<br />

by<br />

the<br />

<strong>Tivoli</strong><br />

<strong>Access</strong><br />

<strong>Manager</strong><br />

server.<br />

Entries<br />

that<br />

indicate<br />

subdirectories<br />

have<br />

a<br />

double<br />

slash<br />

(//)<br />

appended<br />

to<br />

them.<br />

Chapter<br />

10.<br />

<strong>WebSEAL</strong><br />

junctions<br />

311

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!