IBM Tivoli Access Manager for e-business: WebSEAL Administration ...
IBM Tivoli Access Manager for e-business: WebSEAL Administration ...
IBM Tivoli Access Manager for e-business: WebSEAL Administration ...
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Supporting<br />
CGI<br />
programming<br />
To<br />
support<br />
CGI<br />
programming,<br />
<strong>WebSEAL</strong><br />
adds<br />
three<br />
additional<br />
environment<br />
variables<br />
to<br />
the<br />
standard<br />
set<br />
of<br />
CGI<br />
variables.<br />
These<br />
environment<br />
variables<br />
can<br />
be<br />
used<br />
by<br />
CGI<br />
applications<br />
running<br />
on<br />
either<br />
the<br />
local<br />
<strong>WebSEAL</strong><br />
server<br />
or<br />
a<br />
junctioned<br />
back-end<br />
server.<br />
The<br />
variables<br />
provide<br />
<strong>Tivoli</strong><br />
<strong>Access</strong><br />
<strong>Manager</strong>-specific<br />
user,<br />
group,<br />
and<br />
credential<br />
in<strong>for</strong>mation<br />
to<br />
the<br />
CGI<br />
application.<br />
On<br />
a<br />
local<br />
<strong>WebSEAL</strong><br />
server,<br />
these<br />
environment<br />
variables<br />
are<br />
automatically<br />
available<br />
to<br />
CGI<br />
programs.<br />
Environment<br />
variables<br />
used<br />
by<br />
a<br />
CGI<br />
application<br />
running<br />
on<br />
a<br />
junctioned<br />
third-party<br />
server<br />
are<br />
produced<br />
from<br />
the<br />
HTTP<br />
header<br />
in<strong>for</strong>mation<br />
passed<br />
to<br />
the<br />
server<br />
from<br />
<strong>WebSEAL</strong>.<br />
You<br />
must<br />
use<br />
the<br />
–c<br />
option<br />
to<br />
create<br />
a<br />
junction<br />
that<br />
supports<br />
<strong>Tivoli</strong><br />
<strong>Access</strong><br />
<strong>Manager</strong>-specific<br />
header<br />
in<strong>for</strong>mation<br />
in<br />
HTTP<br />
requests<br />
destined<br />
<strong>for</strong><br />
a<br />
back-end<br />
server.<br />
See<br />
also“Supplying<br />
client<br />
identity<br />
in<br />
HTTP<br />
headers<br />
(–c)”<br />
on<br />
page<br />
298.<br />
Additional<br />
<strong>Tivoli</strong><br />
<strong>Access</strong><br />
<strong>Manager</strong>-specific<br />
environment<br />
variables:<br />
CGI<br />
Environment<br />
Variables<br />
Description<br />
HTTP_IV_USER<br />
The<br />
<strong>Tivoli</strong><br />
<strong>Access</strong><br />
<strong>Manager</strong><br />
user<br />
account<br />
name<br />
of<br />
the<br />
requester.<br />
HTTP_IV_GROUPS<br />
The<br />
<strong>Tivoli</strong><br />
<strong>Access</strong><br />
<strong>Manager</strong><br />
groups<br />
to<br />
which<br />
the<br />
requester<br />
belongs.<br />
Specified<br />
as<br />
a<br />
comma-separated<br />
list<br />
of<br />
groups<br />
—<br />
each<br />
group<br />
is<br />
surrounded<br />
by<br />
double-quotation<br />
marks.<br />
HTTP_IV_CREDS<br />
Encoded<br />
opaque<br />
data<br />
structure<br />
representing<br />
a<br />
<strong>Tivoli</strong><br />
<strong>Access</strong><br />
<strong>Manager</strong><br />
credential.<br />
Supplies<br />
credentials<br />
to<br />
remote<br />
servers<br />
so<br />
mid-tier<br />
applications<br />
can<br />
use<br />
the<br />
authorization<br />
API<br />
to<br />
call<br />
the<br />
authorization<br />
service.<br />
Refer<br />
to<br />
the<br />
<strong>IBM</strong><br />
<strong>Tivoli</strong><br />
<strong>Access</strong><br />
<strong>Manager</strong><br />
Authorization<br />
C<br />
API<br />
Developer’s<br />
Reference.<br />
The<br />
REMOTE_USER<br />
variable<br />
on<br />
a<br />
local<br />
<strong>WebSEAL</strong><br />
server:<br />
On<br />
a<br />
local<br />
server<br />
environment<br />
controlled<br />
by<br />
<strong>WebSEAL</strong>,<br />
the<br />
value<br />
of<br />
the<br />
HTTP_IV_USER<br />
variable<br />
listed<br />
above<br />
is<br />
provided<br />
as<br />
the<br />
value<br />
<strong>for</strong><br />
the<br />
standard<br />
REMOTE_USER<br />
variable.<br />
Note<br />
that<br />
the<br />
REMOTE_USER<br />
variable<br />
may<br />
also<br />
be<br />
present<br />
in<br />
the<br />
environment<br />
of<br />
a<br />
CGI<br />
application<br />
running<br />
on<br />
a<br />
junctioned<br />
back-end<br />
server.<br />
However,<br />
in<br />
this<br />
situation,<br />
its<br />
value<br />
is<br />
not<br />
controlled<br />
by<br />
<strong>WebSEAL</strong>.<br />
CGI<br />
Environment<br />
Variable<br />
Description<br />
REMOTE_USER<br />
Contains<br />
the<br />
same<br />
value<br />
as<br />
the<br />
HTTP_IV_USER<br />
field.<br />
UTF-8<br />
environment<br />
variables<br />
<strong>for</strong><br />
CGI<br />
programs<br />
CGI<br />
scripts<br />
use<br />
environment<br />
variables<br />
to<br />
communicate<br />
with<br />
<strong>WebSEAL</strong>,<br />
and<br />
the<br />
environment<br />
variables<br />
must<br />
be<br />
in<br />
the<br />
local<br />
code<br />
page.<br />
Legacy<br />
CGI<br />
scripts<br />
expect<br />
raw<br />
(binary)<br />
local<br />
code<br />
page<br />
strings.<br />
To<br />
enable<br />
CGI<br />
scripts<br />
to<br />
understand<br />
environment<br />
variable<br />
values<br />
that<br />
can<br />
consist<br />
of<br />
UTF-8<br />
data,<br />
<strong>WebSEAL</strong><br />
provides<br />
additional<br />
environment<br />
variables.<br />
These<br />
variables<br />
have<br />
the<br />
same<br />
names<br />
as<br />
current<br />
CGI<br />
variables,<br />
but<br />
with<br />
the<br />
characters<br />
336<br />
<strong>IBM</strong><br />
<strong>Tivoli</strong><br />
<strong>Access</strong><br />
<strong>Manager</strong><br />
<strong>for</strong><br />
e-<strong>business</strong>:<br />
<strong>WebSEAL</strong><br />
<strong>Administration</strong><br />
Guide
Change language