IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

Table
4.
P3P
default
header
values
(continued)
CUR
Cookie
helps
provide
the
current
service.
The
current
service
is
the
access
to
the
protected
Web
site.
OTPi
Cookie
provides
another
service,
to
which
the
user
has
opted-in.
OUR
The
Web
site
itself
is
the
only
recipient
of
the
cookie
and
the
information
linked
to
by
the
cookie
NOR
Neither
the
cookie
data
nor
the
data
to
which
it
links
is
retained
after
the
user
logs
out
or
after
the
user
session
expires.
UNI
The
cookie
uses
a
unique
identifier
that
represents
the
user,
by
using
the
session
ID
and
the
user
name.
P3P
header
configuration
User
that
deploy
WebSEAL
servers
as
part
of
the
security
solution
for
their
Web
servers
must
specify
the
P3P
compact
policy
for
their
site.
This
step
requires
determining
policy
for
each
of
the
privacy
settings
defined
by
the
P3P
specification.
WebSEAL
provides
a
default
policy
that
is
accepted
by
the
default
settings
for
the
Microsoft
Internet
Explorer
6
browser.
Web
administrators
should
modify
the
default
policy
as
needed
to
match
the
site
policies
for
handling
of
user
data
in
cookies.
Web
administrators
should
test
use
of
their
policies
with
IE
6
to
ensure
that
the
WebSEAL
cookies
continue
to
be
accepted
by
IE
6
browsers.
Web
administrators
should
consult
the
P3P
specification
when
defining
their
site
policy.
Multiple
values
are
allowed
for
each
configuration
entry,
with
the
exception
of
the
entries
that
require
a
value
of
yes
or
no.
When
a
particular
configuration
entry
is
not
declared,
no
indicators
are
added
to
the
compact
policy
for
that
entry.
To
configure
the
P3P
compact
policy
for
use
with
WebSEAL,
complete
the
following
steps:
1.
Open
the
WebSEAL
configuration
file
for
editing.
Go
to
the
[server]
stanza.
2.
Decide
if
P3P
headers
from
junctioned
servers
will
be
replaced
or
preserved.
Set
the
following
value:
preserve-p3p-policy
=
{yes|no}
The
default
value
is
no.
Set
this
to
yes
if
you
want
to
preserve
P3P
headers.
For
more
information,
see
“Junction
header
preservation”
on
page
60
3.
Go
to
the
[p3p-header]
stanza.
Specify
the
access
that
the
user
will
have
to
the
information
in
the
cookie.
Set
the
value
for
the
following
entry:
access
=
{none|all|nonident|contact-and-other|ident-contact|other-ident}
The
default
setting
is:
access
=
none
Table
5.
Supported
values
for
the
access
entry
Value
Description
none
No
access
to
identified
data
is
given.
all
Access
is
given
to
all
identified
data
nonident
Web
site
does
not
collect
identified
data.
62
IBM
Tivoli
Access
Manager
for
e-business:
WebSEAL
Administration
Guide