10.02.2013 Views

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

v<br />

Short<br />

name<br />

of<br />

the<br />

server<br />

v<br />

IP<br />

address<br />

of<br />

the<br />

server<br />

<strong>WebSEAL</strong><br />

identifies<br />

absolute<br />

URLs<br />

to<br />

filter<br />

based<br />

on<br />

its<br />

knowledge<br />

of<br />

the<br />

back-end<br />

junctioned<br />

server<br />

name.<br />

Depending<br />

on<br />

your<br />

network<br />

environment,<br />

the<br />

–h<br />

short-name<br />

configuration<br />

might<br />

not<br />

provide<br />

<strong>WebSEAL</strong><br />

with<br />

sufficient<br />

in<strong>for</strong>mation.<br />

In<br />

the<br />

following<br />

example,<br />

a<br />

junction<br />

is<br />

created<br />

using<br />

the<br />

following<br />

option<br />

and<br />

argument<br />

<strong>for</strong><br />

a<br />

back-end<br />

server,<br />

located<br />

in<br />

the<br />

ibm.com<br />

network,<br />

with<br />

a<br />

short<br />

name<br />

of<br />

“xyz”:<br />

-h<br />

xyz<br />

A<br />

link<br />

on<br />

an<br />

HTML<br />

page<br />

from<br />

this<br />

server<br />

appears<br />

as<br />

follows:<br />

http://xyz.ibm.com/doc/release-notes.html<br />

When<br />

this<br />

page<br />

passes<br />

to<br />

the<br />

client<br />

during<br />

a<br />

request,<br />

<strong>WebSEAL</strong><br />

might<br />

fail<br />

to<br />

filter<br />

this<br />

URL<br />

because,<br />

based<br />

on<br />

the<br />

in<strong>for</strong>mation<br />

provided<br />

by<br />

–h,<br />

it<br />

could<br />

not<br />

recognize<br />

“xyz.ibm.com”<br />

as<br />

the<br />

server<br />

name.<br />

Without<br />

the<br />

junction<br />

name<br />

in<br />

the<br />

path,<br />

a<br />

request<br />

<strong>for</strong><br />

the<br />

release<br />

notes<br />

document<br />

fails.<br />

To<br />

support<br />

proper<br />

filtering<br />

of<br />

static<br />

absolute<br />

URLs,<br />

the<br />

“best<br />

practices”<br />

recommendation<br />

is<br />

to<br />

always<br />

use<br />

the<br />

fully<br />

qualified<br />

domain<br />

name<br />

of<br />

the<br />

junctioned<br />

server<br />

in<br />

the<br />

–h<br />

option<br />

when<br />

creating<br />

or<br />

adding<br />

the<br />

junction.<br />

340<br />

<strong>IBM</strong><br />

<strong>Tivoli</strong><br />

<strong>Access</strong><br />

<strong>Manager</strong><br />

<strong>for</strong><br />

e-<strong>business</strong>:<br />

<strong>WebSEAL</strong><br />

<strong>Administration</strong><br />

Guide

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!