IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

File
names
for
keys
for
any
domains
that
are
participating
in
the
e-community.
This
includes
the
domain
in
which
the
WebSEAL
server
is
running.
These
are
shared
on
a
pair-wise-by-domain
basis.
This
stanza
entry
is
optional.
There
is
no
default
value.
Example:
ecssoserver.subnet.ibm.com
=
/tmp/ecsso.key
[ecsso-token-attributes]
stanza
domain_name
=
pattern1
[pattern2,]
[patternN,
....
]
Credential
attributes
to
include
in
eCSSO
authentication
tokens.
The
domain_name
specifies
the
destination
domain
containing
the
server
that
will
consume
the
token.
The
value
for
domain_name
can
be
one
or
more
entries.
The
value
can
be
either
a
specific
value
or
can
be
a
pattern
that
uses
standard
Tivoli
Access
Manager
wildcard
characters
(
*,
[],
^,
\,
?).
This
stanza
entry
is
optional.
There
is
no
default
value
Example:
example1.com
=
my_cdas_attr_*
=
pattern1
[pattern2,]
[patternN,
....
]
Credential
attributes
to
include
in
eCSSO
authentication
tokens.
When
WebSEAL
cannot
find
a
domain_name
entry
to
match
the
domain,
the
entries
in
″″
are
used.
The
word
is
a
key
word
and
must
not
be
modified.
This
stanza
entry
is
optional.
There
is
no
default
value
Example:
=
my_cdas_attr_*
[ecsso-incoming-attributes]
stanza
attribute_pattern
=
{preserve|refresh}
Extended
attributes
to
extract
from
incoming
eCSSO
authentication
tokens.
The
attributes
typically
match
those
declared
in
the
[cdsso-token-
attributes]
stanza
for
the
WebSEAL
server
in
the
source
domain.
The
attribute_pattern
can
be
either
a
specific
value
or
can
be
a
pattern
that
uses
standard
Tivoli
Access
Manager
wildcard
characters
(
*,
[],
^,
\,
?).
The
order
of
attribute_pattern
entries
is
important.
The
first
entry
that
matches
the
attribute
is
used.
Other
entries
are
ignored.
This
stanza
entry
is
optional.
There
is
no
default
value
Example:
my_cred_attr1
=
preserve
434
IBM
Tivoli
Access
Manager
for
e-business:
WebSEAL
Administration
Guide