IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

Silent
configuration
overview
You
can
use
amwebcfg
to
configure
a
WebSEAL
server
instance
by
reading
all
necessary
values
from
a
text
file.
The
text
file
is
called
a
response
file.
When
amwebcfg
obtains
settings
from
the
response
file,
it
completes
the
configuration
without
further
prompting
of
the
administrator.
The
response
file
is
not
supplied
by
default.
You
must
use
a
text
editor
to
create
it
and
enter
the
necessary
values.
The
values
consist
of
a
series
of
key
=
value
pairs.
Each
parameter
entry
is
based
on
an
option
to
amwebcfg.
Each
key
=
value
pair
is
placed
on
a
separate
line.
To
insert
a
comment
line
,
place
a
hash
character
(
#
)
at
the
start
of
the
line.
The
format
of
the
response
file
is
identical
to
the
format
of
the
WebSEAL
configuration
file.
This
installation
option
is
useful
when
you
have
to
create
multiple
WebSEAL
instances.
After
you
have
created
and
used
one
response
file,
you
can
use
it
as
a
template
for
future
response
files.
Copy
the
existing
file
to
a
new
location,
and
edit
it
with
values
appropriate
to
the
server
instance.
There
are
no
restrictions
on
the
location
of
the
response
file.
Example
command
line
amwebcfg
-rspfile
/tmp/response_file_name
The
following
table
shows
an
example
response
file
for
the
server
instance
values
shown
in
“Example
server
instance
configuration
values”
on
page
20.
Example
response
file
[webseal-config]
action
=
config
host
=
diamond.subnet2.ibm.com
listener_port
=
7234
admin_id
=
sec_master
admin_pwd
=
mypassw0rd
inst_name
=
web1
nw_interface_yn
=
yes
#
If
nw_interface_yn
=
no,
do
not
need
to
specify
the
value
for
ip_address
ip_address
=
1.2.3.5
#
if
SSL
is
not
enabled,
do
not
need
to
specify
the
values
for
ssl_yn,
#
key_file,
key_file_pwd,
cert_label,
and
ssl_port
ssl_yn
=
yes
key_file
=
/tmp/client.kdb
key_file_pwd
=
keyfilepassw0rd
#
cert_label
is
optional.
#
If
you
have
no
cert
label,
remove
entry
from
response
file
cert_label
=
ibm_cert
ssl_port
=
636
http_yn
=
yes
http_port
=
81
https_yn
=
yes
https_port
=
444
#
If
the
doc-root
is
not
provided,
amwebcfg
creates
the
default
one.
#
The
default
is
/install_dir/pdweb/www-instance/docs
#
If
you
do
not
provide
a
value
for
doc-root,
remove
the
entry
from
the
#
response
file
or
you
will
be
prompted
to
enter
it
doc_root
=
/usr/www-web1/docs
Chapter
2.
WebSEAL
server
configuration
23