IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

Note:
This
step
is
specific
to
use
of
an
LDAP
user
registry.
This
step
is
not
required
when
using
other
registry
types.
If
you
want
to
use
secure
SSL
communication
between
a
WebSEAL
instance
and
the
LDAP
registry
server,
you
must
use
the
LDAP
SSL
key
file
for
this
purpose.
This
is
the
key
file
that
was
created
and
distributed
during
installation
of
the
LDAP
client.
If
the
initial
WebSEAL
server
is
set
up
to
use
secure
SSL
communication
with
LDAP,
multiple
instances
can
use
the
same
key
file.
When
enabling
SSL
communication
between
WebSEAL
and
the
LDAP
server,
you
must
provide
the
following
information:
–
SSL
key
file
name
The
file
that
contains
the
LDAP
SSL
certificate.
–
SSL
key
file
password
The
password
necessary
to
access
the
LDAP
SSL
key
file
–
SSL
Certificate
label
The
LDAP
client
certificate
label.
This
is
optional.
When
the
client
label
is
not
specified,
the
default
certificate
contained
in
the
keyfile
is
used.
Specify
the
client
label
when
the
keyfile
contains
more
than
one
certificate,
and
the
certificate
to
be
used
is
not
the
default
certificate.
–
SSL
LDAP
server
port
number
The
port
number
through
which
to
communicate
with
the
LDAP
server.
The
default
LDAP
server
port
number
is
636.
v
Web
document
root
directory
The
root
directory
of
the
hierarchy
where
the
resources
(protected
objects)
to
be
protected
by
WebSEAL
will
be
created.
The
name
of
the
directory
can
be
any
valid
directory
name.
The
directory
used
by
the
default
(first)
WebSEAL
instance
is:
UNIX:
installation_directory/pdweb/www-default/docs
Windows:
installation_directory\pdweb\www-default\docs
Note
that
this
directory
could
have
been
changed
by
the
administrator
during
the
configuration
of
the
initial
WebSEAL
server
instance.
When
adding
a
new
WebSEAL
server
instance,
a
new
Web
document
root
directory
is
usually
created
for
the
instance.
During
an
interactive
installation,
a
new
directory
is
suggested,
based
on
the
following
syntax:
UNIX:
installation_directory/pdweb/www-instance_name/docs
Windows:
installation_directory\pdweb\www-instance_name\docs
The
administrator
can
accept
this
name
or
specify
an
alternative.
When
adding
a
server
instance
by
using
the
amwebcfg
command
line,
or
by
using
amwebcfg
with
a
response
file,
the
Web
document
root
directory
is
created
as
follows:
Chapter
2.
WebSEAL
server
configuration
19