IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

Active
Directory
domain
name
system
(DNS)
host
name.
The
value
is
filled
in
automatically,
based
on
information
supplied
during
the
runtime
configuration.
The
hostname
is
an
alphanumeric,
non-case
sensitive
string.
The
dot
(.)
cannot
be
the
last
character
of
the
host
name.
The
maximum
string
length
for
the
Active
Directory
user
registry
is
256
alphanumeric
characters.
This
stanza
entry
is
required
when
your
user
registry
is
Microsoft
Active
Directory.
There
is
no
default
value.
Example:
hostname
=
adserver.tivoli.com
domain
=
root_domain_name
Active
Directory
root
(primary)
domain.
The
value
is
filled
in
automatically,
based
on
information
supplied
during
the
runtime
configuration.
The
root_domain_name
is
an
alphanumeric,
non-case
sensitive
string.
The
maximum
length
for
the
domain
name
is
user
registry
dependent.
For
Active
Directory
that
maximum
length
is
256
alphanumeric
characters.
This
stanza
entry
is
required
when
multi-domain
=
true.
There
is
no
default
behavior.
Example:
domain
=
dc=tivoli,dc=com
useEncryption
=
{true|false}
Indication
of
whether
encryption
communication
to
Active
Directory
is
being
used.
This
value
is
filled
in
automatically,
based
on
information
supplied
during
the
runtime
configuration.
Valid
values:
true
Enables
encryption
communication.
false
Disables
encryption
communication.
This
stanza
entry
is
required
when
your
user
registry
is
Microsoft
Active
Directory.
There
is
no
default
behavior.
Example:
useEncryption
=
false
bind-id
=
ad_id
Active
Directory
administrator
or
user
log-in
identity
that
is
used
to
bind
(sign
on)
to
the
registry
server.
If
the
ID
belongs
to
a
user
rather
than
an
administrator,
the
Active
Directory
user
must
have
enough
privileges
to
update
and
modify
data
in
the
user
registry.
The
ad_id
value
is
an
alphanumeric,
non-case
sensitive
string.
The
minimum
and
maximum
lengths
of
the
ID,
if
there
are
limits,
are
imposed
by
the
underlying
registry.
For
Active
Directory
the
maximum
length
is
256
alphanumeric
characters.
This
value
is
filled
in
automatically,
based
on
information
supplied
during
server
configuration.
Whenever
you
change
this
value
after
the
configuration
is
completed,
a
conflict
might
occur.
This
stanza
entry
is
required
when
your
user
registry
is
Microsoft
Active
Directory.
The
default
value
is
generated;
do
not
change
it.
Example:
bind-id
=
adpdadmin
Appendix
A.
WebSEAL
configuration
file
reference
401