IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

The
configuration
file
entry
is:
[p3p-header]
preserve-p3p-policy
=
{yes|no}
The
default
behavior
is
no.
This
means
that
P3P
headers
from
junctioned
servers
are
replaced.
WebSEAL
replaces
backend
P3P
policy
headers
by
default
to
ensure
that
WebSEAL
cookies
are
not
excluded
due
to
a
more
strict
policy
set
by
the
backend
server.
When
using
the
default
setting,
you
might
find
that
cookies
that
the
backend
server
must
set
are
not
allowed
due
to
the
WebSEAL
compact
policy.
In
this
case,
you
should
choose
one
of
the
following
options:
v
Set
preserve-p3p-policy
=
yes
to
force
WebSEAL
to
preserve
the
compact
policy
set
by
the
backend
server.
v
Modify
the
WebSEAL
compact
policy
header
to
make
the
policy
more
permissive,
so
that
backend
cookies
are
allowed.
When
WebSEAL
processes
responses
from
backend
servers,
WebSEAL’s
actions
can
include
the
addition
of
a
cookie
to
the
response.
This
occurs
when
the
WebSEAL
junction
has
been
created
to
generate
junction
cookies.
These
cookies
are
used
to
map
URLs
across
junctions,
to
ensure
connectivity
between
the
browser
and
the
backend
server.
This
means
that
when
the
administrator
chooses
to
preserve
the
compact
policy
set
by
the
backend
server
(preserve-p3p-policy
=
yes),
the
administrator
must
ensure
that
the
compact
policy
is
permissive
enough
to
accept
the
addition
of
the
WebSEAL
junction
cookie.
When
the
compact
policy
forbids
the
addition
of
the
junction
cookie,
the
URL
requests
from
the
browser
will
not
successfully
resolve
to
the
URLs
on
the
backend
server.
Default
compact
policy
in
the
P3P
header
WebSEAL
adds
a
P3P
header
to
every
response
in
which
cookies
are
set.
The
header
contains
a
P3P
Compact
Policy.
The
policy
is
a
sequence
of
terms
that
describe
the
policy
regarding
information
contained
within
the
cookies
in
the
response.
The
following
WebSEAL
configuration
file
entries
represent
the
default
P3P
compact
policy:
[p3p-header]
access
=
none
purpose
=
current
purpose
=
other-purpose:opt-in
recipients
=
ours
retention
=
no-retention
categories
=
uniqueid
The
default
configuration
file
entries
result
in
a
P3P
header
with
the
following
contents:
P3P:
CP="NON
CUR
OTPi
OUR
NOR
UNI"
The
following
table
explains
the
values
in
the
default
policy
header:
Table
4.
P3P
default
header
values
Term
Definition
NON
User
has
no
access
to
information
either
in
the
cookie
or
linked
to
by
the
cookie.
Chapter
2.
WebSEAL
server
configuration
61