10.02.2013 Views

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

–f<br />

Force<br />

the<br />

replacement<br />

of<br />

an<br />

existing<br />

junction.<br />

Junction<br />

Point<br />

Location<br />

in<br />

the<br />

<strong>WebSEAL</strong><br />

namespace<br />

to<br />

create<br />

the<br />

junction.<br />

Add<br />

a<br />

server<br />

to<br />

an<br />

existing<br />

junction<br />

Operation:<br />

Adds<br />

a<br />

server<br />

to<br />

an<br />

existing<br />

junction<br />

point.<br />

Syntax:<br />

add<br />

-h<br />

host-name<br />

[options]<br />

junction-point<br />

Host<br />

Name<br />

–h<br />

host-name<br />

**Required**<br />

The<br />

DNS<br />

host<br />

name<br />

or<br />

IP<br />

address<br />

of<br />

the<br />

target<br />

back-end<br />

server.<br />

Options<br />

Mutual<br />

Authentication<br />

Over<br />

SSL<br />

–D<br />

″DN″<br />

Specify<br />

Distinguished<br />

Name<br />

of<br />

back-end<br />

server<br />

certificate.<br />

This<br />

value,<br />

matched<br />

with<br />

actual<br />

certificate<br />

DN<br />

enhances<br />

authentication.<br />

Proxy<br />

junction<br />

options<br />

(required<br />

with<br />

–t<br />

tcpproxy<br />

and<br />

–t<br />

sslproxy)<br />

–H<br />

host-name<br />

DNS<br />

host<br />

name<br />

or<br />

IP<br />

address<br />

of<br />

the<br />

proxy<br />

server.<br />

–P<br />

port<br />

The<br />

TCP<br />

port<br />

of<br />

the<br />

proxy<br />

server.<br />

General<br />

TCP<br />

and<br />

SSL<br />

junction<br />

options<br />

–i<br />

<strong>WebSEAL</strong><br />

server<br />

treats<br />

URLs<br />

as<br />

case<br />

insensitive.<br />

–p<br />

port<br />

TCP<br />

port<br />

of<br />

back-end<br />

third-party<br />

server.<br />

Default<br />

is<br />

80<br />

<strong>for</strong><br />

TCP<br />

junctions;<br />

443<br />

<strong>for</strong><br />

SSL<br />

junctions.<br />

–q<br />

url<br />

Relative<br />

URL<br />

<strong>for</strong><br />

query_contents<br />

script.<br />

<strong>Access</strong><br />

<strong>Manager</strong><br />

looks<br />

<strong>for</strong><br />

query_contents<br />

in<br />

/cgi_bin/.<br />

If<br />

this<br />

directory<br />

is<br />

different<br />

or<br />

the<br />

query_contents<br />

file<br />

renamed,<br />

use<br />

this<br />

option<br />

to<br />

indicate<br />

to<br />

<strong>WebSEAL</strong><br />

the<br />

new<br />

URL<br />

to<br />

the<br />

file.<br />

–u<br />

UUID<br />

Specifies<br />

the<br />

UUID<br />

of<br />

a<br />

back-end<br />

server<br />

connected<br />

to<br />

<strong>WebSEAL</strong><br />

via<br />

a<br />

stateful<br />

junction<br />

(–s).<br />

–v<br />

virt-host-name<br />

Virtual<br />

host<br />

name<br />

represented<br />

on<br />

the<br />

back-end<br />

server.<br />

This<br />

option<br />

supports<br />

a<br />

virtual<br />

host<br />

setup<br />

on<br />

the<br />

back-end<br />

server.<br />

You<br />

use<br />

–v<br />

when<br />

the<br />

back-end<br />

junction<br />

server<br />

expects<br />

a<br />

host<br />

name<br />

header<br />

because<br />

you<br />

are<br />

junctioning<br />

to<br />

one<br />

virtual<br />

instance<br />

of<br />

that<br />

server.<br />

The<br />

default<br />

HTTP<br />

header<br />

request<br />

from<br />

the<br />

browser<br />

does<br />

not<br />

know<br />

that<br />

the<br />

back-end<br />

server<br />

has<br />

multiple<br />

names<br />

and<br />

multiple<br />

virtual<br />

servers.<br />

You<br />

must<br />

configure<br />

<strong>WebSEAL</strong><br />

to<br />

supply<br />

that<br />

extra<br />

header<br />

in<strong>for</strong>mation<br />

in<br />

requests<br />

destined<br />

<strong>for</strong><br />

a<br />

back-end<br />

server<br />

set<br />

up<br />

as<br />

a<br />

virtual<br />

host.<br />

–w<br />

Win32<br />

filesystem<br />

support.<br />

Junction<br />

Point<br />

Add<br />

server<br />

to<br />

this<br />

existing<br />

junction<br />

point.<br />

Appendix<br />

B.<br />

<strong>WebSEAL</strong><br />

junction<br />

reference<br />

495

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!