IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

v
Entries
in
the
configuration
file
should
be
ASCII
characters.
WebSEAL
does
not
expect
to
read
non-ASCII
characters,
such
as
those
supported
by
multi-byte
locales,
in
the
values
for
configuration
file
entries.
Default
values
v
Many
values
are
created
or
modified
only
by
using
configuration
programs.
You
should
not
manually
edit
these
stanzas
or
values.
v
Some
values
are
filled
in
automatically
during
WebSEAL
configuration.
These
values
are
needed
for
the
initialization
of
the
server
after
the
configuration.
v
The
default
values
for
a
stanza
entry
might
be
different,
depending
on
the
server
configuration.
Some
stanza
entries
are
not
applicable
to
certain
configurations
and
are
omitted
from
the
default
configuration
file
for
this
server.
Strings
Some
values
accept
a
string
value.
When
you
manually
edit
the
configuration
file,
use
the
following
guidelines
to
change
configuration
settings
that
require
a
string:
v
String
values
are
expected
to
be
characters
that
are
part
of
the
local
codeset.
v
Some
WebSEAL
strings
impose
additional
or
different
restrictions
on
the
set
of
allowable
string
characters.
For
example,
many
strings
are
restricted
to
ASCII
characters.
The
restrictions
applicable
to
each
string
are
listed
under
the
appropriate
stanza
entry
discussion
later
in
this
chapter.
Consult
each
stanza
entry
description
for
any
additional
restrictions.
v
Double
quotation
marks
are
sometimes,
but
not
always,
required
if
spaces
or
more
than
one
word
are
used
for
values.
Refer
to
the
descriptions
or
examples
for
each
stanza
entry
when
in
doubt.
v
The
minimum
and
maximum
lengths
of
user
registry-related
string
values,
if
there
are
limits,
are
imposed
by
the
underlying
registry.
For
example,
for
Active
Directory
the
maximum
length
is
256
alphanumeric
characters.
Defined
strings
Some
values
accept
a
string
value,
but
the
value
must
be
one
of
a
set
of
defined
strings.
When
you
manually
edit
the
configuration
file,
make
sure
that
the
string
value
you
type
matches
one
of
the
valid
defined
strings
values.
For
example,
the
[ba]
stanza
in
the
authentication
mechanisms
section
contains
the
following
entry:
ba-auth
=
{
none
|
http
|
https
|
both
}
WebSEAL
expects
the
value
of
ba-auth
to
be
either
none
or
http
or
https
or
both.
Any
other
value
is
invalid
and
will
result
in
an
error.
Lists
The
WebSEAL
configuration
file
contains
some
stanzas
that
use
stanza
entries
that
do
not
have
defined
key
names.
The
contents
of
these
stanzas
are
called
lists.
Lists
are
configurable,
and
are
specified
by
the
administrator.
Some
lists
are
included
by
default
and
can
be
appended
by
the
administrator.
Other
lists
are
empty
be
default
and
can
be
created
by
the
administrator.
Lists
are
used
by
WebSEAL
for
a
number
of
purposes.
WebSEAL
filters
incoming
data
based
on
document
type,
event
handler
type,
MIME
type,
and
header
request
data.
WebSEAL
also
uses
lists
for
content
management
in
a
number
of
areas,
Appendix
A.
WebSEAL
configuration
file
reference
379