IBM Tivoli Access Manager for e-business. BEA WebLogic Server. f> 5.1 S

Transcription

1 IBM Tivoli Access Manager for e-business BEA WebLogic Server /I8O f> 5.1 S

2

3 IBM Tivoli Access Manager for e-business BEA WebLogic Server /I8O f> 5.1 S

4 "b Z9C>JO0d'VDz7.0,kDAZ 57 3D=< C, :yw;pde"# Z;f(2003 j 11 B) >f>jcz IBM Tivoli Access Manager V5.1.0(z7E 5724-C08)T0yPsx"PfM^)f,1=ZBf>P mpyw*9# Copyright International Business Machines Corporation All rights reserved.

5 ?< 0T v >ida_ v >idz] v vfo vi "PE" vi Base E" vi Web 2+TE" vi *"_N< vii <u9d viii `Xvfo viii Z_CJvfo xi (z!n xi *5m~'V xi >ip9cd<( xi Ve<( xi Yw53xp xii Z 1 B rimev Tivoli Access Manager 2+T#M Tivoli Access Manager k WebLogic Server /I Tivoli Access Manager Security Service Provider Interface i~ _TMG+?p J4MG C Tivoli Access Manager O$ U>G<MsF I?T"ICTMIluT Z 2 B 208>E" \'V=( ELMZf*s m~hvu~ Tivoli Access Manager policy server Tivoli Access Manager Authorization Server Tivoli Access Manager WebSEAL r Tivoli Access Manager Plug-in for Web Servers BEA WebLogic Server Tivoli Access Manager Java KP C20r< install_amwls!n C>z5CLr Z AIX O Z HP-UX O Z Solaris O Z Windows O Z 3 B dc}l Z 1?V:dC Tivoli Access Manager Java runtime environment Z 2?V:* startweblogic hc CLASSPATH Z 3?V:dC Tivoli Access Manager for WebLogic CXF()9 Web &CLrdC Tivoli Access Manager for WebLogic S npdc Tivoli Access Manager for WebLogic Copyright IBM Corp iii

6 Z 4?V:dC Tivoli Access Manager r CXF()9 Web &CLrdC Tivoli Access Manager r S npdc Tivoli Access Manager r Z 5?V:* BEA WebLogic Server %cg<xpdc C WebSEAL acdc%cg< C Tivoli Access Manager Plug-in for Web Servers dc%cg< Z 6?V:Z BEA WebLogic Server `~qw73( (:/73)PdC Tivoli Access Manager for WebLogic 25 Z 7?V:bTdC Z 4 B tc%cg< C Tivoli Access Manager WebSEAL xp%cg< Z 5 B \mnq Z Tivoli Access Manager Authorization server OtCZ(~q (} Tivoli Access Manager for WebLogic xpdc'mi\m C]>&CLr C<I }N%wG<_T >} Tivoli Access Manager r !{dC Tivoli Access Manager for WebLogic JOoO<I CyZm%DG<1D%cG<'\ WebLogic Server WvZfl# V^ Q*JbMd(=( Z 6 B }%8>E" S Solaris }% S Windows }% S AIX }% S HP-UX }% =< A. ttd~n< amsspi.properties rbpf.properties amwlsjlog.properties =< B. nlyn< AMWLSConfigure action config AMWLSConfigure action unconfig AMWLSConfigure action create_realm AMWLSConfigure action delete_realm =< C. yw Lj Jcm w} iv IBM Tivoli Access Manager for e-business: BEA WebLogic Server /I8O

7 0T 6-9C IBM Tivoli Access Manager for BEA WebLogic Server (TBF* Tivoli Access Manager for WebLogic)#>z7)9K IBM Tivoli Access Manager D&\9 d'v* BEA WebLogic Server `4D&CLr# IBM Tivoli Access Manager(Tivoli Access Manager)GZ IBM Tivoli Access Manager z7w~pkp&clryhdy!m~# 'V/ICZa)cs6'DZ(M\ mbv=8d IBM Tivoli Access Manager &CLr#b)z7w*/Ibv=8v[; Ga);VCJXF\mbv=8,bV=8*gSLq&CLr/PKxgM& CLr2+T_T# ":IBM Tivoli Access Manager GH0"PDF* Tivoli SecureWay Policy Director m~db{f#,y,tzl$ Tivoli SecureWay Policy Director m~md5dc ',management server VZF* policy server# 6IBM Tivoli Access Manager for WebLogic Server C'8O7a)aO BEA WebLogic Server 9C IBM Tivoli Access Manager D20"dCM\mD8>E"# >ida_ >\m8od?ja_ (: v 2+\m1 v xg53\m1 v IT hfk1 A_&l$TBZ]: v rxx-i, ( HTTP"TCP/IP"D~+d-i(FTP)M Telnet v WebLogic Server 53D?pM\m v 2+\m, (O$MZ( g{tc2+wsvc(ssl)(e,9&l$ SSL -i"\?;;(+cm(c)" }V){"S\c(MO$PD# >idz] >D5,TBBZ: v Z 1 B,:riMEv; xv Tivoli Access Manager for WebLogic a)do$mz(~qdev# v Z 2 B,:208>E"; hvgn20 Tivoli Access Manager for WebLogic# v Z 3 B,:dC}L; hvgndc Tivoli Access Manager for WebLogic# v Z 4 B,:\mNq; Copyright IBM Corp v

8 v hvgn9c]>&clr,"a)9c<i"joooe"mv^t# Z 5 B,:}%8>E"; hvgn}% Tivoli Access Manager for WebLogic# vfo 4iT Tivoli Access Manager b"x8vfot0`xvfodhvt7(d)vf oi\tzpoz#z7(zh*dvfo.s,kn<z_cjvfod8>e "# "PE" Base E" XZ IBM Tivoli Access Manager for e-business z7>md=se"iztbx7r =: Tivoli Access Manager b;i/*tb`p: v :"PE"; v :Base E"; v :Web 2+TE"; v Z vii 3D:*"_N<; v Z viii 3D:<u9d; v 6IBM Tivoli Access Manager for e-business khda7(g ) a)xz20m*<9c Tivoli Access Manager DE"# v 6IBM Tivoli Access Manager for e-business "P5w7(G ) a)}gm~v^"d(=(md5 BDnB;FE"# v 6IBM Tivoli Access Manager Base 208O7(S ) 5wgN20MdC Tivoli Access Manager Base m~, ( Web Portal Manager SZ#CiG6IBM Tivoli Access Manager for e-business Web Security 208O7 DS/,<Zkd Tivoli Access Manager z7(g IBM Tivoli Access Manager for Business Integration M IBM Tivoli Access Manager for Operating Systems); p9c# v 6IBM Tivoli Access Manager Base \m8o7(s ) hv9c Tivoli Access Manager ~qdenm}l#a)s Web Portal Manager g ft0(}9c pdadmin n4pnqd8>e"# Web 2+TE" v 6IBM Tivoli Access Manager for e-business Web Security 208O7(S ) a)px Tivoli Access Manager Base m~t0 Web Security i~d20"dcm }%8>E"#CiG6IBM Tivoli Access Manager Base 208O7D,/# v IBM Tivoli Access Manager Upgrade Guide(SC ) vi IBM Tivoli Access Manager for e-business: BEA WebLogic Server /I8O

9 *"_N< 5wgNS Tivoli SecureWay Policy Director V3.8 r Tivoli Access Manager DH 0f>}6= Tivoli Access Manager V5.1# v 6IBM Tivoli Access Manager for e-business WebSEAL \m8o7(s ) a)9c WebSEAL \m2+ Web rpj4d30jo"\m}lm<un<e "# v 6IBM Tivoli Access Manager for e-business IBM WebSphere Application Server / I8O7(S ) a)cz+ Tivoli Access Manager k IBM WebSphere Application Server xp/ ID20"}%M\m8>E"# v v v v v v v v IBM Tivoli Access Manager for e-business IBM WebSphere Edge Server Integration Guide(SC ) a)cz+ Tivoli Access Manager k IBM WebSphere Edge Server &CLrxP /ID20"}%M\m8>E"# 6IBM Tivoli Access Manager for e-business Plug-in for Web Servers /I8O7 (S ) a)9c Plug-in for Web Servers #$ Web r2+d208>e""\m}lm <un<e"# 6IBM Tivoli Access Manager for e-business BEA WebLogic Server /I8O7 (S ) a)cz+ Tivoli Access Manager k BEA WebLogic Server xp/id20"} %M\m8>E"# IBM Tivoli Access Manager for e-business IBM Tivoli Identity Manager Provisioning Fast Start Guide(SC ) a)k+ Tivoli Access Manager k Tivoli Identity Manager xp/i`xdnqd Ev,"5wgN9CM20 Provisioning Fast Start /O# IBM Tivoli Access Manager for e-business Authorization C API Developer Reference(SC ) a)hvgn9c Tivoli Access Manager Z( C API M Tivoli Access Manager ~ qe~sz+ Tivoli Access Manager 2+TmS=&CLrPDN<JO# IBM Tivoli Access Manager for e-business Authorization Java Classes Developer Reference(SC ) a)9cz( API D Java ot5v'v&clr9c Tivoli Access Manager 2 +TDN<E"# IBM Tivoli Access Manager for e-business Administration C API Developer Reference(SC ) a)xz9c\m API 'V&CLr4P Tivoli Access Manager \mnqdn< E"#>D5hv\m API D C 5V# IBM Tivoli Access Manager for e-business Administration Java Classes Developer Reference(SC ) a)9c\m API D Java ot5v'v&clr4p Tivoli Access Manager \m NqDN<E"# 0T vii

10 <u9d `Xvfo v IBM Tivoli Access Manager for e-business Web Security Developer Reference(SC ) a)pxgro$~q(cdas)"gr3dr\(cdmf)t0\ks?#id\ mm`le"# v IBM Tivoli Access Manager for e-business Command Reference(SC ) a)xz Tivoli Access Manager a)d np5clrme>de"# v IBM Tivoli Access Manager Error Message Reference(SC ) a) Tivoli Access Manager yzz{"d5wmfvdyw# v IBM Tivoli Access Manager for e-business Problem Determination Guide(SC ) a) Tivoli Access Manager DJb7(E"# v 6IBM Tivoli Access Manager for e-business T\w{8O7(S ) a)it IBM Tivoli Directory Server w*c'"amd Tivoli Access Manager y 9ID73DT\w{E"# >ZPvk Tivoli Access Manager b`xdvfo# Tivoli Software Library a)kwv Tivoli vfo,}gw$i"}]m"]>" Redbooks Myw/#Tivoli Software Library ITSTB Web >coq!: Tivoli Software Glossary,m`k Tivoli m~`xd<uuod(e#tivoli Software Glossary(v"of)ISTB Tivoli Software Library Web 3fOs_D Glossary 4Sq!: IBM Global Security Kit Tivoli Access Manager (}9C IBM Global Security Kit(GSKit)V7.0 a)}]s \#GSKit,ZT&ZzX(=(D IBM Tivoli Access Manager Base CD"IBM Tivoli Access Manager Web Security CD"IBM Tivoli Access Manager Web Administration Interfaces CD M IBM Tivoli Access Manager Directory Server CD O# GSKit m~ a) ikeyman \?\m5clr gsk7ikm, CZ4(\?}]b"+ C-(C\?TT0$iks#TBD5IS Tivoli Information Center Web >cok IBM Tivoli Access Manager z7d5`,d?vpr=: v IBM Global Security Kit Secure Sockets Layer and ikeyman User s Guide(SC ) a)kf.zd Tivoli Access Manager 73PtC SSL (EDxgr532+\ m1de"# IBM Tivoli Directory Server IBM Tivoli Directory Server V5.2,ZT&ZZ{DYw53D IBM Tivoli Access Manager Directory Server CD O# viii ":IBM Tivoli Directory Server GH0"PD{FgBDm~DB{F: IBM Tivoli Access Manager for e-business: BEA WebLogic Server /I8O

11 v v IBM Directory Server(V4.1 M V5.1) IBM SecureWay Directory Server(V3.2.2) IBM Directory Server V4.1"IBM Directory Server V5.1 M IBM Tivoli Directory Server V5.2 <\ IBM Tivoli Access Manager V5.1 D'V# XZ IBM Tivoli Directory Server D=SE"IZTBX7R=: IBM DB2 (C}]b IBM DB2 Universal Database ((C}]b)s5~qwff> 8.1 Z IBM Tivoli Access Manager Directory Server CD Oa),"k IBM Tivoli Directory Server m~ ;p20#z+ IBM Tivoli Directory Server"z/OS r OS/390 LDAP ~qww* Tivoli Access Manager DC'"am9C1,DB2 GXhD# XZ DB2 D=SE"IZTBX7R=: IBM WebSphere Application Server IBM WebSphere Application Server, Advanced Single Server Edition 5.0,ZT&Z Z{DYw53D IBM Tivoli Access Manager Web Administration Interfaces CD O# WebSphere Application Server tct Web Portal Manager SZ(CZ\m Tivoli Access Manager)M Web \m$_(cz\m IBM Tivoli Directory Server)b=_D'V# IBM WebSphere Application Server Fix Pack 2 2G Tivoli Access Manager yxhd, "Z IBM Tivoli Access Manager WebSphere Fix Pack CD Oa)# XZ IBM WebSphere Application Server D=SE"IZTBX7R=: IBM Tivoli Access Manager for Business Integration IBM Tivoli Access Manager for Business Integration w*i%@):dz7, * IBM MQSeries V5.2 M V5.3 {"D IBM WebSphere MQ a)k2+tbv=8#ibm Tivoli Access Manager for Business Integration 'V WebSphere MQSeries &CLr( }9Ck"MMSU&CLrX*D\?=\X"Rj{X"M}]#s WebSEAL M IBM Tivoli Access Manager for Operating Systems ;y,ibm Tivoli Access Manager for Business Integration G9C IBM Tivoli Access Manager ~qdj4\mw.;# XZ IBM Tivoli Access Manager for Business Integration D=SE"IZTBX7R =: TBk IBM Tivoli Access Manager for Business Integration V5.1 `XDD5IZ Tivoli Information Center Web >cor=: v 6IBM Tivoli Access Manager for Business Integration \m8o7(s ) v 6IBM Tivoli Access Manager for Business Integration Jb7(8O7(G ) v 6IBM Tivoli Access Manager for Business Integration "P5w7(G ) 0T ix

12 v 6IBM Tivoli Access Manager for Business Integration khda7(g ) IBM Tivoli Access Manager for WebSphere Business Integration Brokers IBM Tivoli Access Manager for WebSphere Business Integration Brokers w* IBM Tivoli Access Manager for Business Integration D;?Vxa),* WebSphere Business Integration Message Broker V5.0 M WebSphere Business Integration Event Broker V5.0 a)k2+tbv=8#ibm Tivoli Access Manager for WebSphere Business Integration Brokers (}a)yz\km>$do$"/p(edz(msf~q4k Tivoli Access Manager -,KPT#$ JMS "</$)&CLr# XZ IBM Tivoli Access Manager for WebSphere Integration Brokers D=SE"IZ TBX7R=: TBk IBM Tivoli Access Manager for WebSphere Integration Brokers V5.1 `XDD 5IZ Tivoli Information Center Web >cor=: v 6IBM Tivoli Access Manager for WebSphere Business Integration Brokers \m8o7 (S ) v 6IBM Tivoli Access Manager for WebSphere Business Integration Brokers "P5w7 (G ) v 6IBM Tivoli Access Manager for Business Integration khda7(g ) IBM Tivoli Access Manager for Operating Systems IBM Tivoli Access Manager for Operating Systems w*i%@):dz7, a)} K>zYw53ya)DTbZ UNIX 53ODZ(_Tv?c#IBM Tivoli Access Manager for Operating Systems s WebSEAL M IBM Tivoli Access Manager for Business Integration ;y,g9c IBM Tivoli Access Manager ~qdj4\mw.;# XZ IBM Tivoli Access Manager for Operating Systems D=SE"IZTBX7R=: TBk IBM Tivoli Access Manager for Operating Systems V5.1 `XDD5IZ Tivoli Information Center Web >cor=: v 6IBM Tivoli Access Manager for Operating Systems 208O7(S ) v 6IBM Tivoli Access Manager for Operating Systems \m8o7(s ) v 6IBM Tivoli Access Manager for Operating Systems Jb7(8O7(S ) v 6IBM Tivoli Access Manager for Operating Systems "P5w7(G ) v 6IBM Tivoli Access Manager for Operating Systems khda7(g ) IBM Tivoli Identity Manager IBM Tivoli Identity Manager V4.5 w*i%@):dz7xa),9zit/p\mc '(gc'j6m\k)m)&(a)r7zt&clr"j4ryw53dcj)# Tivoli Identity Manager IT(}9C Tivoli Access Manager zmlrxk Tivoli Access Manager /IZ;p#k*5zD IBM M'zmTq!XZ:rCzmLrD `E "# x IBM Tivoli Access Manager for e-business: BEA WebLogic Server /I8O

13 XZ IBM Tivoli Identity Manager D=SE"IZTBX7R=: Z_CJvfo TB Tivoli Software Library PZ_a)>z7DIF2D5q=(PDF)M/r,D >jgot(html)q=dvfo: *ZbPR=z7vfo,k%wb3fs`D Product manuals 4S#;sZ Tivoli software information center 3fOR="%wz7{F# z7vfo ("P5w"208O"C'8O"\m18OT0*"_N<s+# ":*7#\}7r! PDF vfo,kz Adobe Acrobat0r!10Z(I(}%w D~ r!4t>c0z)p!qjo3f4!r# (z!n *5m~'V (z!n&\oz_pmepo(gp/;crs&o-)dc'i&9cwvm~ L!zsj 4Yw<NC'gfDyP&\# ZM3;Jb*5 IBM Tivoli m~'v.0,k%w;ztb Web >cd Tivoli support 4STCJ IBM Tivoli m~'v>c: g{h*d oz,rk(}9ctb Web >cd IBM Software Support Guide Py hvd=(4*5m~'v: C8Oa)KTBE": v XZSU'VD"aMJq*s v g0ek(y]zyzdzrrxx) v *5M''V.0&U/D;5PE" >ip9cd<( Ve<( >N<TXbuoMYwT0!vZYw53D nm769ckti<(# >N<P9CKTBVM<(: VeV QTk\'D>xVD!4 nrs!4lo n"x V"N}"!n" Java `{T0TsyTVeVT># 1eV d?"vfojbm?wdxb%jrloyt1evt># HmVM zk>}" np"a;dv"qtk\'d>xvdd~0?<{"53{ ""C'XkdkDD>T0N}r n!nd5ythmvmt># 0T xi

14 Yw53xp >itz8(73d?m?<{e9ck UNIX <(#9C Windows np1,tz 73d?kC %variable% f; $variable,"c41\(\)f;?<76pd?v}1 \(/)#g{z Windows 53O9C bash shell,rit9c UNIX <(# xii IBM Tivoli Access Manager for e-business: BEA WebLogic Server /I8O

15 Z 1 B rimev Tivoli Access Manager for WebLogic G Tivoli Access Manager D)9, 9C Tivoli Access Manager D2+&\,#$T BEA WebLogic Server &CLrDCJ#(}9 C BEA WebLogic Server Security Service Provider Interface,Tivoli Access Manager for WebLogic 9C Tivoli Access Manager \mdc'"am4o$m'z#ibm Tivoli Access Manager WebSEAL(WebSEAL)r IBM Tivoli Access Manager Plug-in for Web Servers IC4)9 Tivoli Access Manager for WebLogic D2+&\,T*nUC' %cg<a)'v# Tivoli Access Manager for WebLogic 9 WebLogic Server &CLr\;9C Tivoli Access Manager 2+T,x;h*NN`kr?p D# XkZ20 Tivoli Access Manager for WebLogic 0?p Tivoli Access Manager 2+ r# T Tivoli Access Manager 0zDC'Z?p2+r.0&14i Tivoli Access Manager 2+T#M#K&a)KT2+T#MDr%**# Tivoli Access Manager 2+T#M Tivoli Access Manager G;vj+DZ(Mxg2+T_T\mDbv=8, TXm OV"DZ?xMb?xDJ4a)KKTK#$# Tivoli Access Manager DX+ZZ GG#HxD2+T_T\m#Kb, 9'VO $"Z("}]2+TMJ4\m&\#+ Tivoli Access Manager kj<dyzrx xd&clrao9c,i9(_h2+r<c\mdz?xmb?x# ZdKD,Tivoli Access Manager a): v O$r\ Tivoli Access Manager 'Vc:DO$zF, (:$i"y>o$"m%m HTTP 7# v Z(r\ Tivoli Access Manager a)z(_t\mdr\#z(_tg/p\md"+t/v "={vs56'zdwcj5)c#tivoli Access Manager Z(~qT>z Tivoli Access Manager ~qwmz}=&clrdcjksa)mim\xv_# WebSEAL GCZyZ Web DJ4D Tivoli Access Manager J42+T\mw# WebSEAL G;V_T\"`_LD Web ~qw, +8#H2+T&C=\#$D Web J4# Tivoli Access Manager Plug-in for Web Servers k Tivoli Access Manager /I,T* zd Web J4a)j{D2+Tbv=8#Ke~w*k Web ~qw`,dxld ;?VKP,9X=oD?vks"7(Gqh*Z(v_"*C'O$a)=( (g{x*)# Copyright IBM Corp

16 Tivoli Access Manager Plug-in for Web Servers M WebSEAL yia)%cg<bv =8,"+ Web &CLrJ4"k GD2+_T# (}4i IBM Tivoli Access Manager DD5,zITKbXZ Tivoli Access Manager D `E", (F(?pv_yhDE"#>vfoD0T,K`X Tivoli Access Manager D5DPm# + Tivoli Access Manager k WebLogic Server /I Tivoli Access Manager for WebLogic V5.1 'V: v BEA WebLogic Server V7.0 SP2 v BEA WebLogic Server V8.1 SP1 Tivoli Access Manager for WebLogic V5.1 (}9C Security Service Provider Interface(SSPI)4* BEA WebLogic Server a)j+2+tr\# ":Tivoli Access Manager for WebLogic V5.1 ;'V BEA WebLogic Server (Fr# 'V BEA WebLogic Server (FrG Tivoli Access Manager for WebLogic V4.1 D;?V# BEA WebLogic Server *Z}=2+a)Lr(}g Tivoli Access Manager for WebLogic)a) SSPI,T+ GD2+&\^l/I= BEA WebLogic Server e5 a9p# Tivoli Access Manager Security Service Provider Interface i~ Tivoli Access Manager for WebLogic C?v BEA WebLogic Server 2+r(domain) 4fz4(D1!2+r(realm),"a)TB BEA WebLogic Server 2+a)Lr: v O$a)Lr v Z(a)Lr v G+3da)Lr Tivoli Access Manager for WebLogic 9C1! BEA WebLogic Server >$3d2+ a)lrm1! keystore# TOPvD?va)Lr9,(} WebLogic XF(tCdC`-D Management Bean(MBean)#TBwZj8hvKb)a)LrM MBean PD?;vya)D& \# Tivoli Access Manager a)k BEA WebLogic Server DTB/Ic: O$a)Lr Tivoli Access Manager for WebLogic O$a)Lr5V BEA WebLogic Server r% O$#Zr%O$P,C'"T9CC'{M\kDiO4r BEA WebLogic Server O $#KC'{M\kI Tivoli Access Manager 9C Tivoli Access Manager Java KP 1i~4li# 2 IBM Tivoli Access Manager for e-business: BEA WebLogic Server /I8O

17 Tivoli Access Manager for WebLogic 9a) T:DCZa) WebSEAL r Tivoli Access Manager Plug-in for Web Servers %cg<&\dg<#i#z 27 3DZ 4 B, :tc%cg<;,tc%cg<&\dj8e"# Tivoli Access Manager for WebLogic DO$a)LrI8vi~iI: v O$a)Lr + IBM Tivoli Access Manager for WebLogic Server O$a)Lr/I= WebLogic Security Framework P# v Java O$MZ(~q(JAAS)G<#i 4Pr%M%cG<O$# JAAS G<#i5X;v;2kwe(CweI JAAS j <8()Dwb# Tivoli Access Manager for WebLogic a) T:DG<#i,C #i9c Tivoli Access Manager Java KP1i~4r Tivoli Access Manager authorization server O$# v O$ MBean (} WebLogic XF(tCO$a)LrDdC# 9JmC'4PC'"am\m Nq,}g9C Tivoli Access Manager for WebLogic XF()94mSM>}C'# Z(a)Lr Z(a)LrZ BEA WebLogic Server Mb?Z(~q.da)SZ#Z(a)Lr 7(GmI9G\xT BEA WebLogic Server J4DCJ#CJv(G9Cf Tivoli Access Manager Java KP1i~V"D PDPermission `4wvD# Tivoli Access Manager for WebLogic DZ(a)LrITBi~iI# v Z(a)Lr +Z(a)Lr/I= WebLogic Security Framework P#}XFT BEA WebLogic Server J4DCJb,Tivoli Access Manager for WebLogic Z(a)Lr9&m_ TD?p(+_T?p= Tivoli Access Manager TsUdP)M_TD}%(S Tivoli Access Manager TsUdP}%_T)# v Z( MBean (} WebLogic XF(tCZ(a)LrDdC#2aZxP;)Yw(}g(} WebLogic XF(4(M>}_T)1wCZ(a)Lr# G+3da)Lr G+3da)LrCZZ BEA WebLogic Server M}ZC4\mG+Db?Z(~q.da)SZ#G+3da)LrX"DGG+x;G_T(_TGZ(a)LrD 0p)# G+3da)LrITBi~iI: v G+3da)Lr# +G+3da)Lr/I= WebLogic Security Framework P#Tivoli Access Manager for WebLogic G+3da)Lr:pG+D?pM}%# v G+3d MBean# (} WebLogic XF(tCG+3da)LrDdC#2aZxP;)Yw(}g( } WebLogic XF(>}G+44(M BG+I1Jq)1wCG+3da)L r# Z 1 B rimev 3

18 _TMG+?p J4MG+ _TMG+IZ?phv{P(er(} WebLogic XF(4(#?p J2EE &CLr s,z&clr?phv{z(edg+m_ta;<v= Tivoli Access Manager \ #$TsUd#!\PI\,+T;#{9C Tivoli Access Manager \m5clr pdadmin r Tivoli Access Manager Web Portal Manager 4P_T4(#Zt/}Z9C Tivoli Access Manager for WebLogic D BEA WebLogic Server 0,Z Tivoli Access Manager P4 (;)1!_TGX*D#KYwZ Tivoli Access Manager for WebLogic dc}l(z Z 17 3DZ 3 B, :dc}l;p-gk Tivoli Access Manager for WebLogic dc Dj8E")P4P# BEA WebLogic Server (ekm`;,dj4`m,b)j4`m<\ Tivoli Access Manager for WebLogic 'V#yPDJ4`MZ Tivoli Access Manager for WebLogic Z<;O*G`,D,rK* BEA WebLogic Server Dsx"Pfx4(DBJ4` M+;T/'V# *ypj4`m(ed_tmg+<t3;==f"z Tivoli Access Manager \#$ TsUdP# IST#$D\'VD BEA WebLogic Server J4D10Pm*: v \mj4 v &CLrJ4 v COM J4 v EIS J4 v EJB J4 v JDBC J4 v JMS J4 v ~qwj4 v URL J4 v Web ~qj4 Z Tivoli Access Manager \#$TsUdPTBPq=m>J4: /WebAppServer/WLS/Resources/wls_domain/wls_realm/resource_type/Details Z Tivoli Access Manager \#$TsUdPTBPq=m>G+: /WebAppServer/WLS/Roles/wls_domain/wls_realm/role_name/AppName I9CC Tivoli Access Manager for WebLogic dcdttd~tb) Tivoli Access Manager \#$Ts]w{xPj+dC#rKI+yP BEA WebLogic Server Md &CLr~qwdC=,;v Tivoli Access Manager r#bymit*ypd&c Lr~qw`M4(G+M_TD/P;C# 4 IBM Tivoli Access Manager for e-business: BEA WebLogic Server /I8O

19 9C Tivoli Access Manager O$ Tivoli Access Manager WebSEAL r Tivoli Access Manager Plug-in for Web Servers D%cG<\&#*K q!nqdxg2+t,?v(} WebSEAL r Tivoli Access Manager Plug-in for Web Servers SU4Tb?C'CJksD WebLogic Server,<;&1S\4TZ?C'D CJks#TBwZhvKgNTb?MZ?C'&mO$# C WebSEAL O$b?C' B<T>K&m4Tb?C'"*T\#$J4xPCJDksD#M# < 1. Tivoli Access Manager Tb?C'a)%cG<O$ TBPmhvKO<T>D}L# 1. 3b?C'ksCJ\#$J4#CksZxks5D2+xg.0; WebSEAL S U# 2. WebSEAL Z Tivoli Access Manager 2+rP9XCC'ks"O$CC'# WebSEAL 'VTBO$=(:C'{M\k"$i"C'{M RSA 2+j6,r _3V(FO$zF# WebSEAL y]ksd URL M Tivoli Access Manager CJ_T&CdTmDZ( v_#webseal IT&C;)"bBn,}gJ'P'T"?U1dMO$zF# 3. ;)TCC'D URL ksxpz(,webseal c+cks*"a WebLogic Server#Cks+b?C'{MXb\k,Zy>O$7P#KXb\ktZ sso_user, 9 Security Service Provider Interface IT+ WebSEAL 7O*ksD p4# PX sso_user D `E",kNDZ 17 3DZ 3 B, :dc}l;# 4. WebLogic ~qw+-}o$dc'm]m\k8wx+]x Security Service Provider Interface# 5. Security Service Provider Interface 9C Tivoli Access Manager O$~qi$TZ Ov sso_user,webseal a)d\kgq}7#mg5,k\ka)ktcksd 44G WebSEAL DENDy!# Z 1 B rimev 5

20 VZCksQ-Mw,ITZ(# O$Z?C' B<T>K&mZ?C'(;h*(} WebSEAL re~2+t)*t\#$j4xp CJDksD#M: < 2. Tivoli Access Manager (FrTZ?C'a)O$ TBPmhvKO<T>D}L# 1. 3Z?C'ksCJ\#$J4# 2. WebLogic C'O$#i+CC'm]"M= Security Service Provider Interface# 3. Security Service Provider Interface +CO$ks"M=C'"am# g{o$i&,r Security Service Provider Interface +CC'{w*QO$C'5 Xx WebLogic Server# 4. *xksz(,bea WebLogic Server i/ Tivoli Access Manager for WebLogic Z(a)Lr,Ca)Lr7(GqQZ(10QO$C'(2mG4O$C') CJyksDJ4# CJ(IT Tivoli Access Manager Authorization Server(!q;Z(CJJ4D G+"7(Gq+b)G+PDNN;vZh10QO$C')DwCv(# U>G<MsF Z Tivoli Access Manager for WebLogic ZDU>G<If Tivoli Access Manager Java KP1i~V"D IBM JLog `&m#(}9c Tivoli Access Manager for WebLogic Mf Tivoli Access Manager for WebLogic a)d JLog properties D~,I+ JLog `dc*9c BEA WebLogic Server U>G<`#b9C Tivoli Access Manager for WebLogic I+B~1SG<= WebLogic U>D~P# 6 IBM Tivoli Access Manager for e-business: BEA WebLogic Server /I8O

21 I?T"ICTMIluT Tivoli Access Manager for WebLogic 9C Tivoli Access Manager Java KP1`4Y w Tivoli Access Manager \#$Ts}]bMC'"am#Z? Tivoli Access Manager for WebLogic _Y:fI*CJv(a)T\Dx# Tivoli Access Manager Java KP1`'V Tivoli Access Manager authorization server JO*F#g{w authorization FvD73hCG9C4FD acld M Tivoli Access Manager for WebLogic Z(~q# I9C Tivoli Access Manager Policy Server rf Tivoli Access Manager for WebLogic a)d Tivoli Access Manager Authorization Server Z(~q4wvCJv(# IZ%;JOcMT\Jb,Tivoli Access Manager Policy Server dc;\zbt73 P9C#Z(~qG(*Zzz73P9Cx*"D#PX `j8e",kndz 29 3D:Z Tivoli Access Manager Authorization server OtCZ(~q;# Z 1 B rimev 7

22 8 IBM Tivoli Access Manager for e-business: BEA WebLogic Server /I8O

23 Z 2 B 208>E" >B,TBwb: v :\'V=(; v :ELMZf*s; v Z 10 3D:m~Hvu~; v Z 11 3D:9C20r<20; v Z 14 3D:9C>z5CLr20; \'V=( Tivoli Access Manager for WebLogic V5.1 'V: v BEA WebLogic Server V7.0 SP2 v BEA WebLogic Server V8.1 SP1 Tivoli Access Manager for WebLogic ZK"PfP;'V(Fr#xK/I'V BEA WebLogic Server Security Service Provider Interface(SSPI)# Tivoli Access Manager for WebLogic ZTBYw53O\'V: v IBM AIX 5.1 v Sun Solaris 8 M 9 v Hewlett-Packard HP-UX 11.0 M 11i(v BEA WebLogic Server V7.0) v Microsoft Windows 2000 Server M Advanced Server(Service Pack 3) ":Tivoli Access Manager for WebLogic 'V53ZtC Java 2 Security Manager D ivbkp#java _TD~fm~a),Cm~ ( Java 2 Security Manager K PyXhDX(zkbDmI(# ELMZf*s Tivoli Access Manager for WebLogic _PTBELMZf*s: v 64 MB RAM((i 128 MB)# bg} BEA WebLogic Server Md NN Tivoli Access Manager i~8(dzf *s.b9hdzf?#=sd 64 MB RAM CZE/_Y:fT\# d Tivoli Access Manager i~yhdzf?+!vzd) Tivoli Access Manager i~20zwz53o#xz `E",kND6IBM Tivoli Access Manager Base 2 08O7# v 2MBELUd((i 4MB)# K*sG} BEA WebLogic Server Md NN Tivoli Access Manager i~yhd ELUd.b9hDELUd# v 5MBELUd(CZU>D~)# KELUdG}m~i~yhDELUd.b9hDELUd# Copyright IBM Corp

24 m~hvu~ I&20 Tivoli Access Manager for WebLogic h*tbbzhvdhvu~: v :Tivoli Access Manager policy server; v :Tivoli Access Manager WebSEAL r Tivoli Access Manager Plug-in for Web Servers; v Z 11 3D:BEA WebLogic Server; v Z 11 3D:Tivoli Access Manager Java KP1; Tivoli Access Manager policy server 20 Tivoli Access Manager for WebLogic.0Xk(" Tivoli Access Manager 2+ r# 20 Tivoli Access Manager policy server 1,+(" Tivoli Access Manager 2+r# K policy server GZzYw53D IBM Tivoli Access Manager Base CD OV"D# (#,Tivoli Access Manager policy server 20Z;,Zw\ Tivoli Access Manager for WebLogic D53O# Tivoli Access Manager Authorization Server Tivoli Access Manager Authorization Server &k BEA WebLogic Server M Tivoli Access Manager for WebLogic 20Z,;(wzO# authorization server * BEA WebLogic Server a)t Tivoli Access Manager Z(~ qdcj(#authorization server 9d1U>G<MsFU/~qw4f"~qwn/ DG<# Tivoli Access Manager WebSEAL r Tivoli Access Manager Plug-in for Web Servers Tivoli Access Manager WebSEAL(WebSEAL)M Tivoli Access Manager Plug-in for Web Servers(e~)a)II Tivoli Access Manager for WebLogic 9CDyZ Web D2+~q#20s,b)&CLrICZa) BEA WebLogic Server %cg<bv =8# WebSEAL re~;g20 Tivoli Access Manager for WebLogic DX8m~#+Gg {zh*%cg<bv=8, GGXhD# PX20 WebSEAL re~d8>e",knd6ibm Tivoli Access Manager for e-business Web Security 208O7# 19C WebSEAL rd zm~qw,s= BEA WebLogic Server 1,&7#Kzm ~qwgc'cj BEA WebLogic Server J4D%;*5c#*^FCJ,+h*4 ( BEA WebLogic Server,S}Kw#,S}Kw9z\;Zxg6p#$J4,x ;G(}9CG+4^FCJ#PX4(,S}KwDj8E",kND BEA WebLogic Server D5# 10 IBM Tivoli Access Manager for e-business: BEA WebLogic Server /I8O

25 BEA WebLogic Server BEA WebLogic Server Xk20"dCZ+w\ Tivoli Access Manager for WebLogic D53O#9C startweblogic nt/ BEA WebLogic Server# BEA WebLogic Server fyp\'v=((} AIX b)oyhd Java Runtime Environment V"# Tivoli Access Manager for WebLogic 9Cb,;v Java Runtime Environment#I&20 BEA WebLogic Server Izc Tivoli Access Manager for WebLogic T Java Runtime Environment DHvu~# Z AIX OD IBM Java Runtime Environment Z AIX 53O,BEA WebLogic Server 7.0 *s IBM Java Runtime Environment V1.3 20Z+w\ Tivoli Access Manager for WebLogic D53O#Z AIX 53O,BEA WebLogic Server 8.1 *s IBM Java Runtime Environment V1.4 20Z+w\ Tivoli Access Manager for WebLogic D53O#Tivoli Access Manager for WebLogic 9C b)`,f>d Java Runtime Environment# Tivoli Access Manager Java KP1 4T Tivoli Access Manager Base D Tivoli Access Manager Java KP1 V5.1 73X kz+w\ Tivoli Access Manager for WebLogic D53O20"dC# Tivoli Access Manager Java runtime environment a)kyz Java DO$MZ($_# b) Java `)9KI BEA WebLogic Server 9CD Java runtime environment# Z+w\ Tivoli Access Manager for WebLogic D53OdC Tivoli Access Manager Java runtime environment 0Xk(" Tivoli Access Manager 2+r# Tivoli Access Manager Java runtime environment f?v\'vyw53d IBM Tivoli Access Manager Base CD V"#XZ208>E",kND6IBM Tivoli Access Manager Base 208O7# 9C20r<20 "b vtz BEA WebLogic Server V7.0 D1!20;C,K20r<EG\'VD# g{}z9c BEA WebLogic Server V8.1,kq-Z 14 3D:9C>z5CL r20;pd8>e"# install_amwls 20r<(}TJ13r20MdCTBi~r/K Tivoli Access Manager for WebLogic Server 53D20# v Access Manager Java Runtime Environment v Access Manager for WebLogic Server *9C install_amwls r<20mdc Tivoli Access Manager for WebLogic Server 5 3,kq-TBb)=h: 1. 7#zQ-ZrP20K Tivoli Access Manager registry server"policy server M authorization server# Z 2 B 208>E" 11

26 2. 7#Q20yPX*DYw539!Lr#PXE",kNDZ 9 3D:\'V =(;# 3. *9C}"o(1!oT)TbDoTi44,M{",XkZKP20r<. 020oT'Vm~ # 4. 7#ZKzwOQ20"dCK BEA WebLogic Server,RQ4(K BEA WebLogic Server r# 5. Z Windows 53O,SyPKPPDLrKv# 6. t/ BEA WebLogic Server: UNIX /WLS_install_dir/user_projects/domain_name/startWebLogic.sh Windows C:\WLS_install_dir\user_projects\domain_name/startWebLogic.cmd 7. (}S BEA WebLogic Server WebLogic_install_dir/server/bin?<4PTB E>,4hC CLASSPATH M PATH d?,"+ WebLogic.jars ms= CLASSPATH T0 bin M lib?<: UNIX.setWLSEnv.sh Windows setwlsenv.cmd ZKP20r<0,7#f BEA WebLogic Server a)d java I4PD~Z53 76P&Zn0f# 8. KP install_amwls Lr,CLr;Z AIX"HP-UX(vTZ BEA WebLogic Server 7.0)"Solaris M Windows =(D Tivoli Access Manager Web Security CD Dy?<P#g{;Z1!;C20 BEA WebLogic Server,+h*9CTB n 4KP20r<: install_amwls -is:javahome path dp path *CZ9C20r<4P20D jre D;C# ": 1. install_amwls.options.template D~ICZ2,20r;GCZ2G1!2 05#r%`-KD~T (ypxhd5# v *2G1!5,r9CK n: v install_amwls -options install_amwls.options.template *4P2,20,r9C: install_amwls -silent -options install_amwls.options.template 2. 19Cf BEA WebLogic Server a)d JDK 1,G"o=(OD20r<I \az6-a;ot>;,add>#kt>jb;0l5jdm~20#g {#{^}KJb,k20 IBM JDK "9C 4KP install_amwls# 20r<(}a>zdkZ 13 3D:install_amwls!n;PhvDdCE"*< KP#vZ Windows 53P,7#zS\K Tivoli Access Manager for WebLogic D1!20?<# ":Zza)KE"(rS\1!5).s,i~Z^hx;=I$DivBj I20MdC# 12 IBM Tivoli Access Manager for e-business: BEA WebLogic Server /I8O

27 Z20r<DnsvV**A;,CA;T>Q20Di~""TDdCT0 GGqI&#g{20I&+GdC'\,I(}q-Z 17 3DZ 3 B, :dc }L;PD=h4"TV$dC Tivoli Access Manager for WebLogic,qrML xxptb=h# 9. #9 BEA WebLogic Server# 10. li20gqq+d~ AMSSPIProviders.jar 4F= /bea_install_dir/weblogic/server/lib/mbeantypes?<p#g{k?<p;f ZCD~,rS /amwls_install_dir/lib V$4F # 11. (}q-z 18 3D:Z 2?V:* startweblogic hc CLASSPATH;PD8> E"4* startweblogic nhc CLASSPATH# 12. 4("dC Tivoli Access Manager r#px8>e",kndz 22 3D:Z 4? V:dC Tivoli Access Manager r;# 13. 9C WebLogic XF(XBt/ BEA WebLogic Server# 14. g{k*9c Tivoli Access Manager WebSEAL * BEA WebLogic Server a) %cg<~q,kq-z 24 3D:Z 5?V:* BEA WebLogic Server %cg <xpdc;pd8>e"# 15. (}jiz 26 3D:Z 7?V:bTdC;PD=h,bT20MdC,T7# QT Tivoli Access Manager "am}7dck Tivoli Access Manager for WebLogic# install_amwls!n m 1. install_amwls 20r<dC!n# TB*KP install_amwls 1T>D!n# dc!n hv 1!5 6L ACL C' * sec_master \k * Policy Server wz{ * Policy Server KZE * *k authorization server (Ex4(D Tivoli Access Manager we# Tivoli Access Manager \m1\k# policy server D+^(wz{#}g: pdmgr.tivoli.com policy server C4l}ksDKZE# 1!KZE* 7135# 7135 Authorization Server wz{ * Tivoli Access Manager authorization server wz{# Authorization Server KZE * authorization server KZE# hC* true 1,?p AMWLS5.1 XF ()9 true WebLogic r\m1 * BEA WebLogic Server rd\m1#1 4( WebLogic r1,&q("kc '# WebLogic r\m1\k * WebLogic r\m1\k# Access Manager for WebLogic Server 2 Z Windows 53O,Xk9C1! 0?<D76 5# C:\Program Files\Tivoli\pdwls WebLogic Admin Server D URL t3://localhost:7001 Z 2 B 208>E" 13

28 9C>z5CLr20 ktzdyw53,jitbbzpd8>e": v :Z AIX O20; v :Z HP-UX O20; v Z 15 3D:Z Solaris O20; v Z 16 3D:Z Windows O20; ":Z20 Tivoli Access Manager for WebLogic 0,7##9 BEA WebLogic Server, ;sz20jisyxbt/ # Z AIX O20 Tivoli Access Manager for WebLogic 20+D~i!Sm~ dcvk#z AIX O 9C installp 20m~ #;sv$dc Tivoli Access Manager for WebLogic# ":g{q-20"dc Tivoli Access Manager for WebLogic "h*xb20,r XkWHTd!{dC"}% Tivoli Access Manager for WebLogic m~ #kn DZ 38 3D:S AIX }%;# *Z AIX O20 Tivoli Access Manager for WebLogic,kjITB8>E": 1. w* root C'G<# 2. i$gqqzcm~hvu~( (4T Tivoli Access Manager Base DXhi~)# kndz 10 3D:m~Hvu~;# 3. + IBM Tivoli Access Manager Web Security for AIX CD ek CD }/w# 4. Z shell a>bdktb n: installp -acgnxd cd_mount_point/usr/sys/inst.images PDWLS ":li20gqq+d~ AMSSPIProviders.jar 4F= /bea_install_dir/weblogic/server/lib/mbeantypes?<p#g{k?<p; fzcd~,rs /amwls_install_dir/lib V$4F # 5. B;=,dC Tivoli Access Manager for WebLogic#*A:Z 17 3DZ 3 B, :d C}L;# Z HP-UX O20 "b Z HP-UX =(O201,vTZ BEA WebLogic Server 7.0,Tivoli Access Manager for WebLogic EG\'VD# g{q-20"dc Tivoli Access Manager for WebLogic "h*xb20,rxk WHTd!{dC"}% #kndz 38 3D:S HP-UX }%;# *Z HP-UX O20 Tivoli Access Manager for WebLogic,kjITB=h: 1. w*c' root G<# 14 IBM Tivoli Access Manager for e-business: BEA WebLogic Server /I8O

29 2. i$gqqzcm~hvu~( (4T Tivoli Access Manager Base DXhi~)# kndz 10 3D:m~Hvu~;# 3. Zs(t/ pfs_mountd,;st/ pfsd(g{ G;ZKPP)#C pfs_mount n20 CD#}g,dkTB n: /usr/sbin/pfs_mount /dev/dsk/c0t0d0 /cd-rom dp /dev/dsk/c0t0d0 G CD h8,/cd-rom G20c# 4. dktb n20 Tivoli Access Manager for WebLogic m~ : # swinstall -s /cd_rom/hp PDWLS T>;u{",8>VvWNQI&#T>m;u{",8>4PWN}Z*<# S CD i!d~"20z2lo#t>;u{",8>4pwnqi&# swinstall 5CLrKv# ":li20gqq+d~ AMSSPIProviders.jar 4F= /bea_install_dir/weblogic/server/lib/mbeantypes?<p#g{k?<p; fzcd~,rs /amwls_install_dir/lib V$4F # 5. B;=,dC Tivoli Access Manager for WebLogic#*A:Z 17 3DZ 3 B, :d C}L;# Z Solaris O20 Tivoli Access Manager for WebLogic 20+D~i!Sm~ dcvk#9c pkgadd IZ Solaris Operating Environment(TBF* Solaris)O20m~ #;sv$dc Tivoli Access Manager for WebLogic# ":g{q-20"dc Tivoli Access Manager for WebLogic "h*xb20,r XkWHTd!{dC"}% #kndz 37 3D:S Solaris }%;# *Z Solaris O20 Tivoli Access Manager for WebLogic,kjITB8>E": 1. w*c' root G<# 2. i$gqqzcm~hvu~( (4T Tivoli Access Manager Base DXhi~)# kndz 10 3D:m~Hvu~;# 3. ek IBM Tivoli Access Manager Web Security for Solaris CD# 4. KPTB n420m~: pkgadd -d /cdrom/cdrom0/solaris -a /cdrom/solaris/pddefault PDWLS dp: -d /cdrom/cdrom0/solaris 8(m~ D;C# -a /cdrom/cdrom0/solaris/pddefault 8(20\mE>D;C# 1?vm~ D20}L<QjI1,T>TB{": m~ D20I&jI# ":li20gqq+d~ AMSSPIProviders.jar 4F= /bea_install_dir/weblogic/server/lib/mbeantypes?<p#g{k?<p; fzcd~,rs /amwls_install_dir/lib V$4F # Z 2 B 208>E" 15

30 5. B;=,dC Tivoli Access Manager for WebLogic#*AZ 17 3DZ 3 B, :d C}L;# Z Windows O20 Tivoli Access Manager for WebLogic 20+D~i!Sm~ dcvk#9c InstallShield setup.exe I20 Tivoli Access Manager for WebLogic D~#1 InstallShield ji1,9cz 17 3DZ 3 B, :dc}l;pd8>e"dc Tivoli Access Manager for WebLogic# ":g{q-20"dc Tivoli Access Manager for WebLogic "h*xb20,r XkWHTd!{dC"}% #kndz 37 3D:S Windows }%;# *Z Windows O20 Tivoli Access Manager for WebLogic,kjITB8>E": 1. T_P Windows \m1x(dc'g<= Windows r# 2. i$gqqzcm~hvu~( (4T Tivoli Access Manager Base DXhi ~)#kndz 10 3D:m~Hvu~;# 3. + IBM Tivoli Access Manager Web Security for Windows CD ek CD }/w# 4. (}+wtbd~kp Tivoli Access Manager for WebLogic InstallShield 20L r,dptb npdl{ E: zm CD }/w: E:\Windows\PolicyDirector\Disk Images\Disk1\PDWLS\Disk Images\Disk1\setup.exe +r*0!q20ot10z# 5.!q`&DoT"%w7(# InstallShield Lrt/"r*06-10Z# 6. %wb;=# +r*0mi$-i10z# 7. DAmI$-i,g{S\b)unMu~,r%wG# +r*0!q?dx;c10z# 8. S\1!5r/@TiRzf;C#%wB;=# r*0*<4fd~10z# 9. 7#T>D20;C}7,;s%wB;=# D~i!=EL#+T>;u{",8>Q20D~# 10. %wjikv20lr# 11. li20gqq+d~ AMSSPIProviders.jar 4F= c:\bea_install_dir\weblogic\server\lib\mbeantypes?<#g{k?<p;fz CD~,rS c:\amwls_install_dir\lib V$4F # 12. B;=,dC Tivoli Access Manager for WebLogic#*AZ 17 3DZ 3 B, :d C}L;# 16 IBM Tivoli Access Manager for e-business: BEA WebLogic Server /I8O

31 Z 3 B dc}l *dc Tivoli Access Manager for WebLogic,kjITB?;ZPD8>E": v :Z 1?V:dC Tivoli Access Manager Java runtime environment; v Z 18 3D:Z 2?V:* startweblogic hc CLASSPATH; v Z 19 3D:Z 3?V:dC Tivoli Access Manager for WebLogic; v Z 22 3D:Z 4?V:dC Tivoli Access Manager r; v Z 24 3D:Z 5?V:* BEA WebLogic Server %cg<xpdc; v Z 25 3D:Z 6?V:Z BEA WebLogic Server `~qw73( (:/73) PdC Tivoli Access Manager for WebLogic; v Z 26 3D:Z 7?V:bTdC; ":>BPD8>E"Y(zQ20K Tivoli Access Manager for WebLogic 0dX8 m~, ( Tivoli Access Manager y>i~ddc#g{zp420cm~,k q-z 9 3DZ 2 B, :208>E";PD8>E"VZ20# Z 1?V:dC Tivoli Access Manager Java runtime environment Tivoli Access Manager Java runtime environment * Tivoli Access Manager for WebLogic DX8m~#ZdC BEA WebLogic Server r0,xkh}7dc Java KP1i~# 9C Tivoli Access Manager 5CLr pdjrtecfg I BI BEA WebLogic Server 9 CD Java Runtime Environment#mb,g{53,`v Java KP1,k7#I BEA WebLogic Server 9CD Java Runtime Environment ;CZ4PC pdjrtecfg 5CL r# 1. ki$q20k Tivoli Access Manager Base D Java runtime environment# XZ `E",kNDZ 10 3D:m~Hvu~;# 2. (}S BEA WebLogic Server WebLogic_install_dir/server/bin?<4PTBE >,4hC CLASSPATH M PATH d?,"+ WebLogic.jars ms= CLASSPATH T0 bin M lib?<: UNIX.setWLSEnv.sh Windows setwlsenv.cmd ZKP ezinstall 0,7#f BEA WebLogic Server a)d java I4PD~Z53 76P&Zn0f# 3. Tivoli Access Manager Java Runtime Environment h*tf BEA WebLogic Server ;pa)"20d JDK xpdc#*jikyw: a. +?< D* Tivoli Access Manager 2076PD sbin?<#}g: UNIX:/opt/PolicyDirector/sbin Windows:C:\Program Files\Tivoli\Policy Director\sbin b. 4P pdjrtecfg n,gby>: pdjrtecfg -action config -host policy_server_name -java_home java_location Copyright IBM Corp

32 dp java_location * BEA WebLogic Server Java Runtime Environment D?< ;C#b+G: Windows BEA WebLogic Server V7.0 c:\bea\jdk131_ob\jre BEA WebLogic Server V8.1 c:\bea\jdk141\jre Solaris,HP-UX AIX /usr/local/bea/jdk141_03 Z AIX 53O,BEA WebLogic Server 7.0 h* IBM Java Runtime Environment V1.3,BEA WebLogic Server 8.1 h* IBM Java Runtime Environment V1.4#&+ pdjrtecfg npd -java_home!nhc* zd AIX zwod JRE D20;C#BEA WebLogic Server V7.0 /usr/java131 BEA WebLogic Server V8.1 /usr/java14 ": 1. BEA WebLogic Server OD pdjrtecfg 5CLrf;K jre/lib? <PD jsse.jar#1!{dc Tivoli Access Manager Java Runtime 1,V 4KD~# 2. 1dC Sun v1.4 JRE 1,;*T;%==KP pdjrtecfg r9c pdconfig 5CLr4dC JRE,r*dC+'\# XZ9C pdjrtecfg D `E",kND6IBM Tivoli Access Manager Base 2 08O7PPXDN<3# Z 2?V:* startweblogic hc CLASSPATH ":Z4Pb)dC=h0,7#Q4(K WebLogic r# startweblogic nczt/ WebLogic Server#h*^D CLASSPATH 73d?T9 startweblogic \;CJ"0k}7D Java `# kjitb8>e": 1. g{ WebLogic Server }ZKP,VZk+d#9# 2. +TBD~{mS= startweblogic nd CLASSPATH d?: UNIX /opt/pdwls/lib/amsspicore.jar /opt/pdwls/lib/rbpf.jar Windows C:\amwls_install_directory\lib\AMSSPICore.jar C:\amwls_install_directory\lib\rbpf.jar 18 IBM Tivoli Access Manager for e-business: BEA WebLogic Server /I8O

33 startweblogic n;z BEA WebLogic Server DQ20rD?<P#Zj<2 0P,K;CG: UNIX /WebLogic_install_directory/user_projects/domain_name Windows C:\WebLogic_install_directory\user_projects\domain_name d? domain_name GZ4( BEA WebLogic Server r1z!qd{f# 3. g{}z9c1!ot("o),rx}k=h# g{z}z9cot T'V1!oT("o).bDoT,rXk+TB76m S=Z startweblogic E>P(eD CLASSPATH P: UNIX /opt/pdwls/nls/java/com/tivoli/amwls/sspi/nls Windows C:\Progra~1\Tivoli\pdwls\nls\java\com\tivoli\amwls\sspi\nls " : m S K? < + 9 o T 20 \ ; C J 2 0 Z /opt/pdwls/nls/java/com/tivoli/amwls/sspi/nls/ PDJ4x# Z 3?V:dC Tivoli Access Manager for WebLogic IS npr9c Tivoli Access Manager XF()9 Web &CLr4dC Tivoli Access Manager for WebLogic#b=V!qDj8E"<,ZTBwZP# &Z4Pb)8>E"04( BEA WebLogic Server r# ZdC Tivoli Access Manager for WebLogic "4(r1dkD}]f"ZtTD~P# b)ttd~icz D Tivoli Access Manager for WebLogic DP*#PX `E", kndz 41 3D=< A, :ttd~n<;# 9CXF()9 Web &CLrdC Tivoli Access Manager for WebLogic 1. t/ BEA WebLogic Server: UNIX /WLS_install_dir/user_projects/domain_name/startWebLogic.sh Windows C:\WLS_install_dir\user_projects\domain_name\startWebLogic.cmd 2. r* Web /@w",s=w\ BEA WebLogic DzwOD BEA WebLogic XF (#4: *1! BEA WebLogic Server KZE#K5GIdCD# 3. T> BEA WebLogic Server G<A;#T_P\m1X(D BEA WebLogic Server C'm]G<# 4. ZdC Tivoli Access Manager for WebLogic server "4( Tivoli Access Manager r0,z+h*?p Tivoli Access Manager XF()9 Web &CLr,C&CL ra)=dcnqd Web gf#*?pk Web &CLr: Z 3 B dc}l 19

34 a. S BEA WebLogic Server w3,zrdc8z,!q Web &CLr# b.!qdcb Web &CLr4S# c.!q(}/@wox 4S# d. /@TiR&CLr amwls_install_dir\lib\amwlsconsoleextension.war#% wox# e. * AMWLSConsoleExtension.war %w!q4s# f.!q?p?j;s%wdc"t># *ligqqi&?pxf()9 Web &CLr,9*s`A;0qPD?p D~P#9* Web &CLrD~P,AMWLSConsoleExtensions &T>ZKPm P#Kb,?pXF( Web &CLr)9+QZXF(0Zs_T>D BEA WebLogic Server <=0qPmS;v Tivoli Access Manager <j# 5. *dc Tivoli Access Manager r,%w BEA WebLogic Server <=0qPD Access Manager <j# 6. T>dCA;#dkyPXhDE"MNNI!DN}#PX*dkDE"D8 <,kndbm# ICZ config YwD!nZBmPPv#Z;vm,XhD!n#Z~vm, I!D!n# Xh!nD{F domain_admin domain_admin_pwd remote_acl_user sec_master_pass pdmgrd_host pdacld_host hv WebLogic r\m1 WebLogic r\m1\k * authorization server 4(D Tivoli Access Manager we Tivoli Access Manager sec_master \m1\k Tivoli Access Manager policy server wz{# Tivoli Access Manager authorization server wz{# ":;Xdk\k,xGZ4PYw0a>dk\k#bG*@9\k#tZ n z7g<p# Bm, config YwDI!!n#!n{F wls_server_url pdmgrd_port pdacld_port am_domain amwls_home hv 8(>X WebLogic Server D URL#1!5* t3://localhost:7001# Tivoli Access Manager policy server KZE# Tivoli Access Manager authorization server KZE# 8( Tivoli Access Manager rd{f#1!5* Default# 8(= Tivoli Access Manager for WebLogic Server 20?<D76# %w&c# 7. g{dcgi&d,razr`0qpt> Tivoli Access Manager for WebLogic Server N}DPm# VZIdC Tivoli Access Manager r#kndz 22 3D:Z 4?V:dC Tivoli Access Manager r;# 20 IBM Tivoli Access Manager for e-business: BEA WebLogic Server /I8O

35 S npdc Tivoli Access Manager for WebLogic 1. t/ BEA WebLogic Server: UNIX Windows /WLS_install_dir/user_projects/domain_name/startWebLogic.sh C:\WLS_install_dir\user_projects\domain_name\startWebLogic.cmd 2. 4PTB n4dc Tivoli Access Manager for WebLogic# ":g{zd~b9}lp4+ Tivoli Access Manager for WebLogic 20=(i D;C(g0;Byv),r7#+ AMWLSConfigure E>PD AMSSPI_DIR d?hc*5j20?<d;c#`fx,g{4+ WebLogic 20Z1!; C,rZ ALWLSConfigure E>P9C WebLogic.jar D}7;C B WLS_JAR d?# UNIX install-dir/sbin/amwlsconfigure.sh Windows install-dir\sbin\amwlsconfigure.bat dc Tivoli Access Manager for WebLogic D AMWLSConfigure Java &CLr D npo(*: v AMWLSConfigure -action config [options...] dc Tivoli Access Manager for WebLogic# v AMWLSConfigure -help [action] T>+]x AMSSPIConfigure DXhMI!D5# ICZ config YwD!nZBmPPv#Z;vm,XhD!n#Z~vm, I!D!n# Xh!nD{F domain_admin domain_admin_pwd remote_acl_user sec_master_pass pdmgrd_host pdacld_host hv WebLogic r\m1 WebLogic r\m1\k * authorization server 4(D Tivoli Access Manager we Tivoli Access Manager sec_master \m1\k Tivoli Access Manager policy server wz{# Tivoli Access Manager authorization server wz{# ":;Xdk\k,xGZ4PYw0a>dk\k#bG*@9\k#tZ n z7g<p# Bm, config YwDI!!n#!n{F deploy_extension wls_server_url hv 1hC* true 1,?p Tivoli Access Manager for Web Logic Server XF()9#1!5* true# 8(>X WebLogic Server D URL#1!5* t3://localhost:7001# Z 3 B dc}l 21

36 pdmgrd_port pdacld_port am_domain amwls_home verbose Tivoli Access Manager policy server KZE# Tivoli Access Manager authorization server KZE# 8( Tivoli Access Manager rd{f#1!5* Default# 8(= Tivoli Access Manager for WebLogic Server 20?<D76# tcr{cj8dvd<{5#1!5* false# VZh*dC Tivoli Access Manager r# Z 4?V:dC Tivoli Access Manager r 9CXF()9 Web &CLrdC Tivoli Access Manager r ;)dck Tivoli Access Manager for WebLogic Server 4* BEA WebLogic Server a)2+t,zmh*4(;vr4x* Tivoli Access Manager 2+T#*jIKY w: 1. 9*s`A;0qPD Access Manager <j,;s%wr<j# 2. T>4(rA;#dkyPXhDd?#%w0&C1# 3. *dc BEA WebLogic Server COf4(D Tivoli Access Manager r: a. Z BEA WebLogic Server <=0qP!qkzDr`XD<j# b. T>rdCA;#!q2+T!n(# c. S#f!n(,9C1!rB-Pm,4!qZOfD=hP4(Dr#%w &C# *dc BEA WebLogic Server COf4(D Tivoli Access Manager r, 9C BEA WebLogic Server XF(OD02+T1!n(4hC1!r# 4. XBt/ BEA WebLogic Server# 5. *btb Access manager rgq}#$w,r`a;0qp Access Manager D~ PZDC'Mi<j&,4T Tivoli Access Manager C'"amDu?# ":g{8(k;vq-fzd SSO C',4*KVPC'dkK;}7D\k,r 4(rYw+aI&,+ SSO +;{C#ZKivB,I(} B Tivoli Access Manager for WebLogic rbpf.properties D~P`&Du?4\]WXtC SSO# PX rbpf.properties Dj8E",kNDZ 41 3D=< A, :ttd~n<;# S npdc Tivoli Access Manager r 1. 4PTB n44( Tivoli Access Manager for WebLogic r# ":g{zd~b9}lp4+ Tivoli Access Manager for WebLogic 20=(i D;C(g0;Byv),r7#+ AMWLSConfigure E>PD AMSSPI_DIR d?hc*5j20?<d;c#`fx,g{4+ WebLogic 20Z1!; Cr} Z9C WebLogic V8.1, rz ALWLSConfigure E>P9C WebLogic.jar D}7;C4 B WLS_JAR d?# UNIX install-dir/sbin/amwlsconfigure.sh Windows install-dir\sbin\amwlsconfigure.bat 22 IBM Tivoli Access Manager for e-business: BEA WebLogic Server /I8O

37 dc Tivoli Access Manager for WebLogic D AMWLSConfigure Java &CLr D npo(*: v AMWLSConfigure -action create_realm [options...] 4( Tivoli Access Manager for WebLogic r# v AMWLSConfigure -help [action] T>+]x AMSSPIConfigure DXhMI!D5# ICZ create_realm YwD!nZBmPv#Z;vm,XhD!n#Z~vm,I!D!n# Xh!nD{F realm_name domain_admin_pwd user_dn_suffix hv 8(}Z4(D WLS rd{f# 8( WebLogic r\m1\k# 8(Z(}XF()9 Web &CLr4(C'1*9CD(P{ F(DN)s:# group_dn_suffix 8(Z(}XF()9 Web &CLr4(i1*9CD(P{F (DN)s:# admin_group 8(CZZ?dC?DD Tivoli Access Manager i# ":;Xdk\k,xGZ4PYw0a>dk\k#bG*@9\k#tZ n z7g<p# Bm, create_realm YwDI!!n#!n{F user_dn_prefix group_dn_prefix sso_enabled sso_user sso_pwd verbose hv 8(Z(}XF()9 Web &CLr4(C'1*9CD(P{F (DN)0:# 8(Z(}XF()9 Web &CLr4(i1*9CD(P{F (DN)0:# 1hC* true 1,tC%cG<'V#1!5* false# 8(CZ4(k Tivoli Access ManagerD%cG<ENX*DC'# *%cg<c'8(\k# tcr{cj8dvd<{5#1!5* false 2. *dc BEA WebLogic Server COf4(D Tivoli Access Manager r: a. r* Web /@w",s=w\ BEA WebLogic DzwOD BEA WebLogic X F(#4: *1! BEA WebLogic Server KZE,K5GIdCD# b. T> BEA WebLogic Server G<A;#T_P\m1X(DC'm]G<# c. Z BEA WebLogic Server <=0qP!qkzDr`XD<j# d. T>rdCA;#!q2+T!n(# e. S#f!n(,9C1!rB-Pm,4!qZOfD=hP4(Dr#%w &C# Z 3 B dc}l 23

38 *dc BEA WebLogic Server COf4(D Tivoli Access Manager r (realm),9c BEA WebLogic Server XF(OD02+T1!n(4hC1! r(domain)# 3. XBt/ BEA WebLogic Server# 4. *btb Access manager rgq}#$w,s`a;0qp Access Manager D~ PZDC'Mi<j&,4T Tivoli Access manager C'"amDu?# Z 5?V:* BEA WebLogic Server %cg<xpdc >Z8<zjI9C WebSEAL r Tivoli Access Manager Plug-in for Web Servers r BEA WebLogic Server dc%cg<d}l#g{;#{5v%cg<&\,ivtk Z# WebSEAL M Tivoli Access Manager Plug-in for Web Servers T;,D==5V2+ TM%cG<,R9C;,D53e5a9#PX20 WebSEAL M plug-in for Web servers DE",kND6IBM Tivoli Access Manager for e-business Web Security 20 8O7#PXdC WebSEAL D30E"Mj8E",kND6IBM Tivoli Access Manager for e-business WebSEAL \m8o7#pxe~dywmdce",knd IBM Tivoli Access Manager Plug-in for Web Servers Integration Guide# y]zk*5vde5a9,tbwza)=sd WebSEAL Me~dCE",b)E "TZr BEA WebLogic Server dc%cg<gxhd: v :9C WebSEAL acdc%cg<; v Z 25 3D:9C Tivoli Access Manager Plug-in for Web Servers dc%cg<; 9C WebSEAL acdc%cg< *9C WebSEAL * BEA WebLogic Server a)%cg<\&,kzw\ WebSeal ~ qwd53ojitb=h: 1. r* WebSEAL dcd~ webseald.conf# 2. hctbdcn: basicauth-dummy-passwd = sso_pwd K\kXkkZ4(rYwPtCD sso_pwd VND\k`%d# 3. #9"XBt/ WebSEAL,T9dC Dz'# 4. 9C pdadmin ni4( WebSEAL ac# ":IZ Tivoli Access Manager 2+rPDNNzwO4PK=h#;XZ WebSEAL 53O4P#}g,ITZ Tivoli Access Manager policy server 5 3O4P# qx9c -b!na)ac?j URL#TZ%cG<,bGXhD# }g,w*;v,xd npdktb n: pdadmin> server task webseald_server_name create -t tcp -p WebLogic_Server_listen_port -h WebLogic_Server -b supply junction_target 24 IBM Tivoli Access Manager for e-business: BEA WebLogic Server /I8O

39 Bm(eKOv pdadmin npdd?: m 2. pdadmin nd!n!n hv webseald_server_name WebSEAL ~qwd{f#c{fi=?vii: webseald-webseal_server_instance#t WebSEAL_server_instance 9 C 5 3 D w z { # } g, g { w z { * cruz, r webseald_server_name +G:webseald-cruz k"b:g{z,; (~qwo20k`v WebSEAL 5},z9h*8(~qw5 }#PX4(k`v~qw5}DacD8>E",kND 6IBM Tivoli Access Manager for e-business WebSEAL \m8 O7# WebLogic_Server BEA WebLogic Server Dwz{# WebLogic_Server_listen_port BEA WebLogic Server }ZdOl}DKZ#1!5* 7001# -b supply TZ%cG<GXhD#7# WebSEAL +]1\k# junction_target acd URL?j XZ4(M9C WebSEAL acdj{e",knd6ibm Tivoli Access Manager for e-business WebSEAL \m8o7# 9C Tivoli Access Manager Plug-in for Web Servers dc% cg< *9%cG<}#$w,h*dC Tivoli Access Manager Plug-in for Web Servers 4 +y>o$7pd}7e"+]x IBM Tivoli Access Manager for WebLogic Server# *o=k?d,y>o$h*w*e~dcd~pdz(s#idc# `-;Z plug-in_install_dir/etc?<pd pdwebpi.conf dcd~,"+tb5m S= [common-modules] Z: [common-modules] post-authzn = BA ;siz [BA} ZP+ add-hdr M supply-password N}VphC* BA M sso_user D\k#4: [BA] add-hdr = supply supply-password = sso_pwd PXdC Tivoli Access Manager Plug-in for Web Servers D `E",kND IBM Tivoli Plug-in for Web Servers Integration Guide# Z 6?V:Z BEA WebLogic Server `~qw73( (:/73)P dc Tivoli Access Manager for WebLogic >ZkT BEA WebLogic Server 20Z`~qw73r:/73PDe5a9#*Z BEA WebLogic Server `~qw73( (:/73)PdC Tivoli Access Manager for WebLogic: Z 3 B dc}l 25