IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

The
session
cookie
links
to
session
data,
and
the
failover
cookie
contains
enough
session
information
to
enable
reconstruction
of
the
session.
The
session
cookie
is
intended
only
for
the
origin
server,
is
not
retained
past
the
end
of
the
session,
and
assists
in
the
process
of
session
maintenance.
The
failover
cookie
is
intended
for
the
failover
(replicated)
server,
is
not
retained
past
the
end
of
the
session,
and
also
assists
in
the
process
of
session
maintenance.
Thus,
session
and
failover
cookies
have
the
same
P3P
policy.
This
means
that
the
combined
worst
case
policy
for
the
cookies
is
the
session
cookie
policy.
Compact
policy
declaration
The
WebSEAL
configuration
file
provides
a
set
of
configuration
options
that
match
the
compact
policy
XML
syntax
as
specified
in
the
World
Wide
Web
Consortium
Platform
for
Privacy
Preferences
specification.
The
complete
specification
can
be
accessed
at
the
following
URL:
http://www.w3.org/TR/P3P/
WebSEAL
provides
configuration
file
entries
that
map
to
the
following
XML
elements
in
the
compact
policy:
v
access
Indicates
whether
the
site
provides
access
to
various
kinds
of
information.
v
categories
The
type
of
information
stored
in
the
cookie
v
disputes
Specifies
whether
the
full
P3P
policy
contains
some
information
regarding
disputes
over
the
information
contained
within
the
cookie.
v
non-identifiable
This
element
signifies
that
either
no
data
is
collected
(including
Web
logs),
or
that
the
organization
collecting
the
data
will
make
the
data
anonymous.
v
purpose
Purposes
for
data
processing
relevant
to
the
Web.
v
recipients
The
legal
entity,
or
domain,
beyond
the
service
provider
and
its
agents
where
data
may
be
distributed.
v
remedies
Remedies
in
case
a
policy
breach
occurs.
v
retention
The
type
of
retention
policy
in
effect.
v
p3p-element
This
entry
can
be
used
to
specify
any
elements
to
add
to
the
P3P
header
in
addition
to
the
compact
policy.
This
can
be
used
to
supply
a
reference
to
a
full
XML
policy.
The
values
for
purpose
(except
current)
and
recipients
(except
ours)
have
an
additional
option
describing
how
the
cookie
data
can
be
used.
This
defines
whether
the
user
is
given
a
choice
to
opt-in
or
opt-out.
Junction
header
preservation
WebSEAL
enables
you
to
specify
whether
P3P
headers
from
junctioned
applications
are
preserved
or
replaced.
Note
that
this
is
not
part
of
the
P3P
compact
policy,
but
is
a
WebSEAL
function.
60
IBM
Tivoli
Access
Manager
for
e-business:
WebSEAL
Administration
Guide