IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

Note:
If
you
use
Web
Portal
Manager
to
view
the
file
and
the
file
does
not
exist,
the
following
error
message
is
displayed:
The
dynurl
configuration
file
/opt/pdweb/www-instance/lib/dynurl.conf
cannot
be
opened
for
reading.
You
can
eliminate
this
error
message
by
creating
the
file.
To
create
the
file,
enter
text
in
the
text
area
and
click
Apply.
Edit
this
file
to
modify
these
mappings.
Entries
in
the
file
are
of
the
format:
object
template
You
can
use
the
Tivoli
Access
Manager
Web
Portal
Manager
to
edit
this
file
remotely.
In
Web
Portal
Manager,
select
the
″Dynamic
URL
Files″
link
from
the
″WebSEAL″
menu.
The
Dynamic
URL
page
allows
you
to
select
a
WebSEAL
server
and
then
view,
edit,
and
save
the
dynurl.conf
configuration
file
located
on
that
server.
Tivoli
Access
Manager
uses
a
subset
of
UNIX
shell
pattern
matching
(including
wildcards)
to
define
the
set
of
parameters
that
constitute
one
object
in
the
object
space.
Any
dynamic
URL
that
matches
those
parameters
is
mapped
to
that
object.
Tivoli
Access
Manager
supports
the
following
UNIX
shell
pattern-matching
characters:
Character
Description
\
The
character
that
follows
the
backslash
is
part
of
a
special
sequence.
For
example,
\t
is
the
TAB
character.
Can
also
act
as
an
escape
character.
?
Wildcard
that
matches
a
single
character.
For
example,
the
string
“abcde”
is
matched
by
the
expression
“ab?de”
*
Wildcard
that
matches
zero
or
more
characters.
[]
Defines
a
set
of
characters,
from
which
any
can
match.
For
example,
the
string
“abcde”
is
matched
with
the
regular
expression
“ab[cty]de”.
^
Indicates
a
negation.
For
example,
the
expression
[^ab]
matches
anything
but
the
‘a’
or
‘b’
characters.
The
following
example
illustrates
the
form
of
a
dynamic
URL
that
performs
credit
balance
lookup:
http://server-name/home-bank/owa/acct.bal?acc=
The
object
that
represents
this
dynamic
URL
would
appear
as
follows:
http://server-name/home-bank/owa/acct.bal?acc=*
Careful
examination
of
the
dynamic
URL
in
this
example
shows
that
it
describes
a
specific
account
number.
The
object
for
account
balances
at
home-bank
shows
that
the
ACL
and
POP
permissions
apply
to
any
account,
because
the
last
portion
of
the
entry
(acc=*)
uses
the
asterisk
wildcard
which
matches
all
characters.
The
following
figure
illustrates
a
complete
scenario
of
a
specific
dynamic
URL
mapped
to
a
specific
protected
object:
348
IBM
Tivoli
Access
Manager
for
e-business:
WebSEAL
Administration
Guide