IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

Entitlement
services
[aznapi-entitlement-services]
stanza
service-id
=
library_base_name
The
Tivoli
Access
Manager
authorization
API
provides
a
framework
for
adding
entitlement
services
into
the
authorization
decision
making
process.
The
authorization
API
obtains
knowledge
of
active
entitlement
services
by
reading
entries
from
stanza
files,
such
as
this
one,
and
by
reading
initialization
stanza
entries
that
are
sent
to
the
API
upon
startup.
WebSEAL
uses
a
built-in
entitlement
service
that
is
supplied
as
a
shared
library.
This
configuration
file
entry
provides
a
service-id
of
AZN_ENT_EXT_ATR.
Note:
The
Authorization
API
uses
the
service-id
to
denote
the
presence
of
a
service
that
is
to
be
loaded
at
API
initialization
time.
For
more
information,
see
IBM
Tivoli
Access
Manager
for
e-business
Authorization
C
API
Developer
Reference.
This
configuration
file
entry
also
specifies
the
name
of
the
shared
library:
azn_ent_ext_attr.
The
file
name
of
the
azn_ent_ext_attr
shared
library,
and
its
location
within
the
file
system,
is
specific
to
each
operating
system.
For
example,
on
Windows
platforms,
the
names
of
shared
libraries
contain
the
suffix
.dll.
However,
the
base
name
for
the
library
is
common
across
operating
systems.
This
value
is
specified
in
library_base_name.
WebSEAL
reads
the
library_base_name
and
then
uses
an
internal
search
algorithm
to
find
the
appropriate
shared
library
by
cycling
through
the
known
prefixes,
suffixes,
and
file
locations.
This
stanza
entry
is
required.
Administrator
should
not
change
this
entry.
For
more
information
on
entitlement
services,
see
the
IBM
Tivoli
Access
Manager
for
e-business
Authorization
C
API
Developer
Reference
WebSEAL
contains
one
default
entry
for
an
entitlement
service:
AZN_ENT_EXT_ATTR
=
azn_ent_ext_attr
Appendix
A.
WebSEAL
configuration
file
reference
479