IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

Integer
value
specifying
the
port
number
on
which
the
master-authn-server
listens
for
HTTP
request.
The
setting
is
necessary
when
e-community-sso-
auth
permits
use
of
the
HTTP
protocol,
and
the
master-authn-server
listens
for
HTTP
requests
on
a
port
other
than
the
standard
HTTP
port
(port
80).
This
stanza
entry
is
ignored
if
this
WebSEAL
server
is
the
master
authentication
server.
This
stanza
entry
is
optional.
There
is
no
default
value.
Example:
master-http-port
=
81
master-https-port
=
port_number
Integer
value
specifying
the
port
number
on
which
the
master-authn-server
listens
for
HTTPS
requests.
The
setting
is
necessary
when
e-community-sso-auth
permits
use
of
the
HTTPS
protocol,
and
the
master-authn-server
listens
for
HTTPS
requests
on
a
port
other
than
the
standard
HTTPS
port
(port
443).
This
stanza
entry
is
ignored
if
this
WebSEAL
server
is
the
master
authentication
server.
This
stanza
entry
is
optional.
There
is
no
default
value.
Example:
master-https-port
=
444
vf-token-lifetime
=
number_of_seconds
Positive
integer
indicating
the
lifetime,
in
seconds,
of
the
vouch-for
token.
This
is
set
to
account
for
clock
skew
between
participant
servers.
The
minimum
value
is
1
second.
There
is
no
maximum
value.
See
the
discussion
of
integer
maximum
values
in
“Guidelines
for
configuring
stanzas”
on
page
378.
This
stanza
entry
is
optional.
Default
value:
180
Example:
vf-token-lifetime
=
180
vf-url
=
URL_designation
Designator
for
vouch-for
URL.
This
specifies
the
start
of
a
URL
relative
to
the
server
root.
This
is
used
to
construct
vouch-for
requests
for
participating
e-community
single
sign-on
servers,
and
to
distinguish
requests
for
vouch-for
information
from
other
requests
by
the
master
authentication
server.
The
URL_designation
string
can
contain
alphanumerics
and
the
following
special
characters:
dollar
sign
(
$
),
hyphen
(
-
),
underscore
(
_
),
period
(
.
),
plus
sign
(
+
),
exclamation
point
(
!
),
asterisk
(
*
),
single
quote
(
’
),
parentheses
″
(
)
″
and
comma
(
,
).
Questions
marks
(
?
)
are
not
allowed
This
stanza
entry
is
optional.
When
the
stanza
entry
is
not
present
in
the
configuration
file,
the
default
value
is
/pkmsvouchfor.
Example:
vf-url
=
/pkmsvouchfor
vf-argument
=
vouch-for_token_name
432
IBM
Tivoli
Access
Manager
for
e-business:
WebSEAL
Administration
Guide