IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

Appendix
A.
WebSEAL
configuration
file
reference
The
operation
of
the
WebSEAL
server
is
controlled
through
the
use
of
the
WebSEAL
configuration
file.
The
file
contains
sections
that
control
specific
portions
of
WebSEAL
functionality.
Each
section
contains
further
divisions
called
stanzas.
Stanza
labels
appear
within
brackets,
such
as:
[stanza_name].
For
example,
the
[ssl]
stanza
defines
the
SSL
configuration
settings
for
use
by
the
WebSEAL
server.
Each
stanza
in
a
Tivoli
Access
Manager
configuration
file
contains
one
or
more
stanza
entries.
A
stanza
entry
consists
of
a
key
value
pair,
which
contain
information
that
is
expressed
as
a
paired
set
of
parameters.
Each
stanza
entry
has
the
following
format:
key
=
value
The
initial
installation
of
WebSEAL
establishes
many
of
the
default
values.
Some
values
are
static
and
will
never
change;
other
values
can
be
modified
to
customize
server
functionality
and
performance.
Configuration
file
name
and
location
A
unique
WebSEAL
configuration
file
is
created
for
each
WebSEAL
server
instance.
The
name
of
the
configuration
file
includes
the
instance
name.
The
format
is:
/opt/pdweb/etc/webseald-instance_name.conf
The
first
WebSEAL
server
instance
installed
on
a
computer
has
an
instance_name
of
default.
The
administrator
has
the
option
of
changing
this
name
during
the
server
configuration.
When
the
administrator
accepts
the
default
name,
the
configuration
file
is
named
as
follows:
UNIX
/opt/pdweb/etc/webseald-default.conf
Windows
C:\Program
Files\Tivoli\PDWeb\etc\webseald-default.conf
When
additional
WebSEAL
server
instances
are
configured,
the
administrator
specifies
the
instance_name.
This
method
for
specifying
the
name
is
dependent
on
the
configuration
utility
method,
either
as
a
field
entry
in
the
pdconfig
GUI
or
as
a
command
line
argument
to
amwebcfg
v
Interactive
installation:
As
a
GUI
field
entry
in
pdconfig.
v
Command
line
installation:
As
a
command
line
option
to
amwebcfg
v
Silent
installation:
As
an
entry
in
a
response
file
used
by
amwebcfg
In
all
cases,
the
configuration
utility
uses
the
entered
instance_name
to
name
the
new
WebSEAL
configuration
file.
For
example,
if
you
name
the
new
server
instance
webseal2,
the
following
configuration
file
is
created:
UNIX
/opt/pdweb/etc/webseald-webseal2.conf
©
Copyright
IBM
Corp.
1999,
2003
377