IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

Integer
value
for
lifetime,
in
seconds,
of
inactive
entries
in
the
credential
cache.
The
minimum
number
for
this
value
is
0.
A
value
of
0
means
that
when
the
cache
is
full,
the
entries
are
cleared
based
on
a
Least
Recently
Used
algorithm.
WebSEAL
does
not
impose
a
maximum
value.
See
the
guidelines
on
maximum
size
of
integer
values
in
“Guidelines
for
configuring
stanzas”
on
page
378.
This
stanza
entry
is
required.
Default
value:
600
Example:
inactive-timeout
=
600
See
also
“Configuring
the
WebSEAL
session/credentials
cache”
on
page
133.
ssl-id-sessions
=
{yes|no}
Indicates
whether
to
use
the
SSL
ID
to
maintain
a
user’s
HTTP
login
session.
The
Opera
browser,
in
its
default
configuration,
does
not
maintain
SSL
IDs
across
SSL
connections.
When
using
the
Opera
browser,
ssl-id-sessions
must
be
set
to
no.
This
stanza
entry
is
required.
Default
value:
yes
Example:
ssl-id-sessions
=
yes
See
also
“Maintaining
state
with
session
cookies”
on
page
135.
Usage
note:
This
value
must
be
set
to
no
when
the
following
key
=
value
pair
is
set:
[certificate]
accept-client-certs
=
prompt_as_needed
For
more
information,
see
“Specify
the
certificate
authentication
mechanism”
on
page
152.
use-same-session
=
{yes|no}
Indicates
whether
to
use
the
same
session
for
SSL
and
HTTP
clients.
When
set
to
yes,
a
user
who
has
authenticated
over
HTTP
will
be
authenticated
when
connecting
over
HTTPS.
Likewise,
the
user
who
has
authenticated
over
HTTPS
will
be
authenticated
when
connecting
over
HTTP.
Using
yes
will
override
ssl-id-sessions
=
yes,
because
HTTP
clients
do
not
read
an
SSL
ID
to
maintain
sessions.
This
stanza
entry
is
required.
Default
value:
no
Example:
use-same-session
=
no
See
also
“Maintaining
state
with
session
cookies”
on
page
135
resend-webseal-cookies
=
{yes|no}
438
IBM
Tivoli
Access
Manager
for
e-business:
WebSEAL
Administration
Guide