IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

example,
when
your
compact
policy
string
has
been
generated
by
another
utility,
and
you
want
to
use
that
string
for
the
P3P
policy.
To
specify
a
custom
P3P
compact
policy,
complete
the
following
steps:
1.
Remove
the
default
values
from
the
WebSEAL
configuration
file.
For
example,
change
the
default
WebSEAL
entries
to
the
following:
[p3p-header]
access
=
purpose
=
purpose
=
recipients
=
retention
=
categories
=
2.
Add
your
custom
compact
policy
string
to
the
p3p-element
entry:
p3p-element
=
CP="your_series_of_compact_policy_abbreviations"
Any
number
of
values
can
be
added.
The
order
of
the
values
is
not
significant.
Troubleshooting
v
Problem:
Browser
cannot
access
a
the
full
P3P
policy
file.
Solution:
When
the
p3p-element
is
used
to
specify
the
location
of
a
file
containing
the
full
policy,
the
browser
attempts
to
access
the
file.
The
P3P
specification
does
not
require
browsers
to
submit
cookies
with
the
request
for
the
full
policy.
Internet
Explorer
6
does
not
submit
a
session
cookie
when
accessing
the
full
policy.
This
means
that
access
to
the
full
policy
must
be
granted
to
unauthenticated
users.
When
the
browser
receives
either
a
login
form
or
a
401
error,
modify
the
permissions
on
the
full
policy
to
allow
access
by
unauthenticated
users.
68
IBM
Tivoli
Access
Manager
for
e-business:
WebSEAL
Administration
Guide