IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

–
When
the
Web
document
root
is
not
specified
on
the
command
line
or
in
the
response
file,
amwebcfg
automatically
creates
a
new
directory
and
adds
the
entry
to
the
WebSEAL
instance
configuration
file.
The
document
root
is
built
according
to
the
following
syntax:
UNIX:
installation_directory/pdweb/www-instance_name/docs
Windows:
installation_directory\pdweb\www-instance_name\docs
–
When
the
Web
document
root
is
specified
on
the
command
line
or
in
the
response
file,
amwebcfg
adds
the
entry
to
the
WebSEAL
instance
configuration
file.
Note:
The
directory
must
already
exist.
The
amwebcfg
utility
will
not
create
a
new
directory
Sharing
one
Web
document
root
directory
across
multiple
instances
Multiple
WebSEAL
server
instances
can
use
the
same
Web
document
root
directory.
When
you
want
to
use
this
scenario,
the
best
way
to
configure
the
document
root
for
each
new
server
instance
is
as
follows:
1.
Allow
amwebcfg
to
create
a
new
Web
document
root
directory.
2.
When
amwebcfg
configuration
completes,
manually
edit
the
WebSEAL
configuration
file
and
reassign
the
document
root
value
to
the
preferred
directory.
[content]
doc-root
=
full_path_to_directory
This
procedure
is
recommended
because
each
time
a
Web
document
root
hierarchy
is
created,
amwebcfg
copies
the
contents
of
the
html.tivoli
directory
hierarchy
into
the
new
Web
document
root.
The
contents
of
html.tivoli
include
an
index.html
file.
This
means
that
an
existing
index.html
could
get
overwritten
by
the
default
(template)
file
from
the
html.tivoli
directory.
Manual
editing
of
the
WebSEAL
configuration
file
avoids
this
problem.
After
editing
the
configuration
file,
you
can
remove
the
unneeded
Web
document
root
(the
one
created
automatically
by
amwebcfg).
Example
server
instance
configuration
values
The
following
table
contains
a
set
of
example
settings
for
a
WebSEAL
server
instance.
These
example
settings
will
be
used
in
the
sample
configuration
commands
used
in
the
remainder
of
the
configuration
sections
of
this
chapter.
Setting
Value
Administrative
user
ID
sec_master
Administrative
user
password
mypassw0rd
Host
name
diamond.subnet2.ibm.com
Instance
name
web1
Listening
port
7235
Enable
HTTP
usage
yes
HTTP
port
81
Enable
HTTPS
usage
yes
HTTPS
port
444
Use
logical
network
interface?
yes
20
IBM
Tivoli
Access
Manager
for
e-business:
WebSEAL
Administration
Guide