IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

The
following
table
lists
the
supported
values:
Table
13.
Opt-in
policy
values
Value
Description
opt-in
Data
may
be
used
for
this
purpose
only
when
the
user
affirmatively
requests
this
use.
opt-out
Data
may
be
used
for
this
purpose
unless
the
user
requests
that
it
not
be
used
in
this
way.
always
Users
cannot
opt-in
or
opt-out
of
this
use
of
their
data.
This
is
the
default
value.
When
the
opt-in
policy
is
not
specified,
the
always
policy
applies.
10.
Specifies
how
long
the
information
in
the
cookie
is
retained.
Set
the
value
for
the
following
entry:
retention
=
{no-retention|stated-purpose|legal-requirement|business-practices|
indefinitely}
The
default
setting
is:
retention
=
no-retention
Table
14.
Supported
values
for
the
retention
entry
Value
Description
no-retention
Information
is
not
retained
for
more
than
a
brief
period
of
time
necessary
to
make
use
of
it
during
the
course
of
a
single
online
interaction.
stated-purpose
Information
is
retained
to
meet
the
stated
purpose,
and
is
to
be
discarded
at
the
earliest
time
possible.
legal-requirement
Information
is
retained
to
meet
a
stated
purpose,
but
the
retention
period
is
longer
because
of
a
legal
requirement
or
liability.
business-practices
Information
is
retained
under
a
service
provider’s
stated
business
practices.
indefinitely
Information
is
retained
for
an
indeterminate
period
of
time.
11.
Optionally,
specify
a
reference
to
a
full
XML
compact
policy
file.
Specify
a
value
for
the
following
entry:
p3p-element
=
policyref=url_to_default_location_of_full_policy
This
entry
is
present
but
commented
out,
and
therefore
not
active,
in
the
default
WebSEAL
configuration
file.
The
default
entry
is
the
default
location
for
the
full
policy
on
any
web
site.
#
p3p-element
=
policyref=="/w3c/p3p.xml"
When
p3p-element
is
not
set,
browsers
look
by
default
for
the
full
policy
in
/w3c/p3p.xml.
Note
that
some
browsers
might
not
refer
to
p3p-element
but
proceed
directly
to
/w3c/p3p.xml.
Note:
Ensure
that
unauthenticated
access
is
granted
to
/w3c/p3p.xml.
See
“Troubleshooting”
on
page
68.
Specifying
a
custom
P3P
compact
policy
As
an
alternative
to
setting
values
for
the
entries
in
the
WebSEAL
configuration
file,
you
can
specify
the
exact
contents
of
the
P3P
header.
This
can
be
useful,
for
Chapter
2.
WebSEAL
server
configuration
67