IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

String
value
containing
the
name
of
the
vouch-for
token
contained
in
a
vouch-for
reply.
This
is
used
to
construct
the
vouch-for
replies
by
the
master
authentication
server,
and
to
distinguish
incoming
requests
as
ones
with
vouch-for
information
by
participating
e-community
single
sign-on
servers.
Valid
characters
for
the
string
are
ASCII
characters
except
for
ampersand
(
&
),
equals
sign
(
=
),
and
question
mark
(
?
).
This
stanza
entry
is
optional.
Default
value:
PD-VF
Example:
vf-argument
=
PD-VF
ec-cookie-lifetime
=
number_of_minutes
Positive
integer
value
indicating
the
lifetime
of
an
e-community
cookie.
Minimum
value
is
1.
There
is
no
maximum
value.
See
the
discussion
of
integer
maximum
values
in
“Guidelines
for
configuring
stanzas”
on
page
378.
This
stanza
entry
is
required.
Default:
300
Example:
ec-cookie-lifetime
=
300
ecsso-allow-unauth
=
{yes|no}
Enables
or
disables
unauthenticated
access
to
unprotected
resources
on
an
e-community
SSO
slave
server.
The
value
yes
enables
unauthenticated
access.
The
value
no
disables
access.
For
compatibility
with
versions
of
WebSEAL
prior
to
5.1
set
this
to
no.
This
stanza
entry
is
required.
Default:
yes
Example:
ecsso-allow-unauth
=
yes
use-utf8
=
{yes|no}
Use
UTF–8
encoding
for
tokens
used
in
e-community
single
sign-on.
Beginning
with
Version
5.1,
WebSEAL
servers
use
UTF-8
encoding
by
default.
When
this
stanza
entry
is
set
to
true,
tokens
can
be
exchanged
with
other
WebSEAL
servers
that
use
UTF-8
encoding.
This
enables
tokens
to
used
across
different
code
pages
(such
as
for
a
different
language).
For
backwards
compatibility
with
tokens
created
by
WebSEAL
servers
from
version
prior
to
5.1,
set
this
stanza
entry
to
no.
This
stanza
entry
is
required.
Default:
yes
Example:
use-utf8
=
yes
See
also
“Multi-locale
support
with
UTF-8”
on
page
44.
[e-community-domain-keys]
stanza
domain_name
=
fully_quailified_path
Appendix
A.
WebSEAL
configuration
file
reference
433