IBM Tivoli Access Manager for...

Post on 27-Aug-2019

223 views 0 download

transcript

IBM Tivoli Access Manager for e-business

���� ��

�� 5.1

GA30-2206-00

���

IBM Tivoli Access Manager for e-business

���� ��

�� 5.1

GA30-2206-00

���

�!

� ��� � ��� ���� ��� ���� ��, ��� 63 ���� �� B ������� �����.

��(2003� 11�)

� ���� � ���� ��� ���� �� �, IBM Tivoli Access Manager(�� �� 5724-C08)� �� 5, ��� 1, ��

�� 0 � �� �� ���� ����� �����.

© Copyright International Business Machines Corporation 1999, 2003. All rights reserved.

��

�� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii

� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii

� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viii

�� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viii

��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viii

�� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ix

�� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ix

�� ��� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x

�� �� ���. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi

�� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi

��� �� ��� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xv

�� ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xv

����� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xv

� �� ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvi

�� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvi

���� �� �� � �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvi

� 1 � � ���� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1

CD �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

IBM Tivoli Access Manager� ����� ���� ��� . . . . . . . . . . . . . . . . . . . 4

� 2 � ��� ���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

���� ����� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

IBM Tivoli Directory Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

OS/390� IBM Security Server . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

IBM z/OS Security Server LDAP Server . . . . . . . . . . . . . . . . . . . . . . . 10

Lotus Domino . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Microsoft Active Directory. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Netscape iPlanet � Sun ONE Directory Server . . . . . . . . . . . . . . . . . . . . . 11

Novell eDirectory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

��� �� � ��� ��� . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

Tivoli Access Manager �� ��� . . . . . . . . . . . . . . . . . . . . . . . . . 13

Tivoli Access Manager �� ��� . . . . . . . . . . . . . . . . . . . . . . . . 14

���� ���(�� �� ��) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

���� ���� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

� 3 � ��� ��� � ���� �� . . . . . . . . . . . . . . . . . . . . . . . . . 25

�� � ���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

Active Directory� �� Windows 2003 ���� �� ���� ���(44369) . . . . . . . . . . . 25

�� ���� LDAP ��� Plug-in for Web Server� � SSL �� ���� � (44336) . . . . . 25

�� ���� �� ��� Active Directory ����� ���(44046) . . . . . . . . . . . . . . 25

Tivoli Access Manager� ��� AIX®� ��� JRE �� 1.3.1.5 ��� ���� ��� �(41082) 26

© Copyright IBM Corp. 1999, 2003 iii

�� ���� ��� � JDK 1.3.1� Red Hat Enterprise Linux 3�� ���(40973, 43956) . . . . . 26

Tivoli Access Manager Java Runtime Environment javadocs� ���� Access Manager Runtime ��

�� ���� ��� �(43895) . . . . . . . . . . . . . . . . . . . . . . . . . . 26

Web Portal Manager� ���� IBM Java Runtime Environment 1.3.1� ��(44178) . . . . . . 26

WebSphere Application Server ���� �� ��� ��(44432). . . . . . . . . . . . . . . 26

�� WebSEAL ��� ������ libcdmf.* ��� ��� � � (44079). . . . . . . . . . . 27

�� � ���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

�� ���� zSeries®� Red Hat Enterprise Linux 3.0�� ���(42163) . . . . . . . . . . . . 27

Windows 2000� ��� � Java Runtime Environment� �� � � (43948) . . . . . . . . . . 28

�� ��� �� �� �� � Policy Server �� ��(43906) . . . . . . . . . . . . . . . 28

2��� ��� �� ���� �� ��� ��� ���� ���� � (37601, 39896, 43907) . . . . 28

�� ���� ��� Windows� Web Portal Manager� ��� � �� ��� ��(44045) . . . . 28

�� �� ibmjcaprovider.jar �� �(44323) . . . . . . . . . . . . . . . . . . . . . . 28

Microsoft Active Directory �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

Active Directory �� �� � �� �� . . . . . . . . . . . . . . . . . . . . . . 29

Active Directory� ��� � ″�� � ��� ��″ �� . . . . . . . . . . . . . . . . . . 29

Policy Server �� � Windows 2003 Active Directory� ����� ��� � �� �� ��� �

�� ��� � � (43908) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

Windows 2000 ����� �� ����� �� ����� ��� � ���� � (36389) . . . . . . 29

iPlanet Directory Server �� Sun ONE Directory Server �� . . . . . . . . . . . . . . . . . 30

iPlanet ����� � �� ��(14785) . . . . . . . . . . . . . . . . . . . . . . . . 30

iPlanet �� �� �� � ��� �� . . . . . . . . . . . . . . . . . . . . . . . . 31

ONE Directory Server 5.2��� pdunconfig� ��� ��� � � (40621) . . . . . . . . . . . 31

Web Portal Manager �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

AIX 5.1�� Web Portal Manager GUI ��� . . . . . . . . . . . . . . . . . . . . . 32

�� ���� � ��� Policy Proxy Server� ���� � (30100 � 30128) . . . . . . . . . 32

ACL ��� ��� ��� ��(29961) . . . . . . . . . . . . . . . . . . . . . . . 33

Web Portal Manager� �� ������ ��� � � (43847) . . . . . . . . . . . . . . . 33

WebSEAL ��. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

Active Directory(AD_LDAP)�� �� �� WebSEAL� �� � � (43684). . . . . . . . . 33

��� �� ID ���� � � ���� � (IY30623, IY21308) . . . . . . . . . . . . . . 33

Solaris�� WebSEAL� SSL �� �� �(43387) . . . . . . . . . . . . . . . . . . . 34

�� ���� ��� Red Hat Linux 3.0�� WebSEAL� �� . . . . . . . . . . . . . . 34

Linux ����� WebSEAL� �� � �� ���� ��(44078). . . . . . . . . . . . . . 34

�� ���� ″� ��� �� ��″��� ���� � (44086) . . . . . . . . . . . . . . . 35

�� ��� �� �� ��� ���� � � � (44083) . . . . . . . . . . . . . . . . 35

�� � �� �� ��� �� �� ���� � (44084) . . . . . . . . . . . . . . . . . 35

��� ��� ���� ����� ��(44088) . . . . . . . . . . . . . . . . . . . . 35

�� ���� �� BASE HREF ��� ���� � (44090) . . . . . . . . . . . . . . . 35

WebSEAL ��� ���� ���(44095) . . . . . . . . . . . . . . . . . . . . . . . 36

��� ����� wsadmin ������ �� WebSEAL �� ���� �(44100) . . . . . . . . 36

AMWebARS � �� ����� �� �� �� � � �� �� ��� ��(44134) . . . . . . 36

Active Directory� �� ���� �� � ��� WebSEAL� �� � � (44386) . . . . . . 37

WebSEAL� ��� ���(44082) . . . . . . . . . . . . . . . . . . . . . . . . . . 37

��� ���� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

�� ���� URL� Explorer �� ��� ���� � (37028) . . . . . . . . . . . . . . . 37

iv IBM Tivoli Access Manager for e-business: ���� ��

��� ��� ��� � ��� �� ��� ��� ���� �� (39896) . . . . . . . . . . 37

���� ��� �� ��� FSSO(Forms Single Sign-On)� � ���� � (39924) . . . . . . . 38

Windows ��� ������ ����� �� �� � � �� ID� ��� Service Unavailable

��� ���(42351) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

SPNEGO ��� Active Directory ���� �� ���� ������ �� �(41078) . . . . . . . 38

Microsoft IIS Plug-in�� ������� �� pdwebpi.conf �� ��(44361) . . . . . . . . . . . 38

�� �� ���� �� URL� ��� � (44209) . . . . . . . . . . . . . . . . . . 39

Apache Web Server �� � �� ��� ���� � ���� � � (44273, 44286) . . . . . . 39

IBM Tivoli Directory Server �� . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

zSeries� Linux� IBM Tivoli Directory Server �� 5.2 ��(44406) . . . . . . . . . . . . . 39

pdadmin� � �� � Directory Server� �� ��� Tivoli Access Manager ��� ���� �

(43951) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

Tivoli Access Manager �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

SSL� ��� �� �� LDAP Server � ���� ��� �(18832) . . . . . . . . . . . . 40

pdadmin object delete � � ����� ��� � � (27173) . . . . . . . . . . . . . . . 40

��� � �� � � �� ��� ��� � � (24411) . . . . . . . . . . . . . . . . . 41

LDAP��� ���� �� ���� ��� Policy Server �����(28114) . . . . . . . . . 41

��� ��� ��� � Windows�� Policy Server � Authorization Server� ���� � (IY34142) . . 41

Tivoli Access Manager �� 5.1� �� ���� ��� Java ������ ��� ��(24996) . . . 42

Solaris��� Policy Director ������ �� ��� � . . . . . . . . . . . . . . . . 42

AIX�� ���� ����� �� �� . . . . . . . . . . . . . . . . . . . . . . . . 42

��� ��� �� IBM HTTP Server ��� ����(19559) . . . . . . . . . . . . . . . 43

HTTP �� ���� ��� ��� � �(20633, 20631, 20735). . . . . . . . . . . . . . 43

WebSphere Application Server� Tivoli Access Manager� �� ��� HP-UX�� ���� �

(28015) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44

� �� ���� BEA WebLogic Server� �� � � . . . . . . . . . . . . . . . . . . 44

Microsoft �� �� �� � Policy Server ��� ��� � � (43306) . . . . . . . . . . . . 45

Microsoft Internet Explorer� �� ��� � ��� � � � � �� � ���(43398) . . . . . 45

Authorization Server(pdacld)� �� �� ��� ��(43511) . . . . . . . . . . . . . . . . . 45

Windows ���� � �� �� ��� ��� WebSphere Application Server� Tivoli Access

Manager� �� �� � � ���� ��� ���� � (43612) . . . . . . . . . . . . . 46

�� �� �� �� � � �� ��� �� ��� Tivoli Access Manager Java Runtime

Environment� ��� ��(43896) . . . . . . . . . . . . . . . . . . . . . . . . . 46

Tivoli Access Manager Runtime Environment �� � � � �� �� ���� �(43904) . . . 46

Tivoli Access Manager� �� �� � �� ���� ���� �� � � (43933) . . . . . . . . 46

SvrSslCfg ��� � � � �� �� ���� ��(43701) . . . . . . . . . . . . . . . 47

SuSE Linux Enterprise Server 8� Tivoli Access Manager� ��� � Policy Server(pdmgrd) �

Authorization Server(pdacld)� ��� ���(36687, 37558) . . . . . . . . . . . . . . . . . 48

Tivoli Access Manager for WebSphere Application Server ����� ��� ����� �����

� ��� � � (28418) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48

WebSphere Application Server��� ����� �� ��(21935) . . . . . . . . . . . . . . 48

�� ���� � Tivoli Access Manager ���� ��� �� ����� ��� ���(43748) . . . 49

����� ��� ACL� ������ ��� �� ���(44245) . . . . . . . . . . . . . . 49

����� ��� policy� ������ ��� ���(44410) . . . . . . . . . . . . . . . 50

UNIX �� ����� pdbackup � � ��� � �� ���� �� (44285) . . . . . . . . . . 50

pdwascfg �� � jlog.properties ��� ���� � (44410) . . . . . . . . . . . . . . . . 50

�� v

zSeries� Linux� WebSphere Application Server ��� ���(44540) . . . . . . . . . . . . . 50

Tivoli Access Manager� �� ��� � ��� Java ������ �� � NoSuchMethodErrors�

�� � � . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

� 4 � ��� �� ���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

�� �� � ��� � . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

Red Hat Linux 7.1� �� �� �� ��� �� �� ���� . . . . . . . . . . . . . . 53

Active Directory� ���� DBCS ����� �� �� �� � � (44415, 44312) . . . . . . . 53

Linux ������ ��� ��� � �� ��� �� . . . . . . . . . . . . . . . . . . 53

Linux ����� �� ���� ��� �� ����. . . . . . . . . . . . . . . . . . . . 54

�� ���� �� ���� � � ���� � (28420, 28422) . . . . . . . . . . . . . . . 55

�� ��� ��� ��� ���� ���� ��(28453). . . . . . . . . . . . . . . . . . 55

Windows� ��� LANG ��� ���� ��� ��� �� . . . . . . . . . . . . . . . . 55

� ��� Windows ���� ��� �� ���� ��� ��(26899) . . . . . . . . . . . 55

�� ��� ASCII ��� � �� ��(26985) . . . . . . . . . . . . . . . . . . . . 55

Web Portal Manager� ���� �� ���� �� ��� �(IY32306) . . . . . . . . . . . 56

Java� �� � � ���� � �� ��(IY31894) . . . . . . . . . . . . . . . . . . 56

Policy Server� AIX �� � ��� ���(12584) . . . . . . . . . . . . . . . . . . . . 56

2��� ��� �� ���� �� ��� ��� ���� ���� � (37601, 39896, 43907) . . . . 56

��� ��� ��� � ��� �� ��� ��� ���� �� (39896) . . . . . . . . . . 56

��� Windows ����� Plug-in for Web Server� �� ���� ���(44565) . . . . . . . . . 56

����� � �� ���� ��� � ������� � � ���� � (44080). . . . . . . . . 57

BEA WebLogic ��� ��� � �� ���� ��� ���� ��(44219, 44398) . . . . . . . . 57

SuSE Linux Enterprise Server 8� Tivoli Access Manager� ��� � Policy Server(pdmgrd) � ACL

��(pdacld)� ��� ���(36687, 37558) . . . . . . . . . . . . . . . . . . . . . . . 57

� 5 � ��� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

IBM Tivoli Access Manager Upgrade Guide . . . . . . . . . . . . . . . . . . . . . . . 59

IBM Tivoli Access Manager Base Administration Guide . . . . . . . . . . . . . . . . . . . 59

IBM Tivoli Access Manager for e-business Authorization C API Developer Reference . . . . . . . . 59

IBM Tivoli Access Manager for e-business Administration C API Developer Reference . . . . . . . . 60

�� A. Linux�� Tivoli Access Manager ������ ��� ��� � . . . . . . . . . . . . . 61

�� B. ���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

�� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

vi IBM Tivoli Access Manager for e-business: ���� ��

��

IBM® Tivoli® Access Manager for e-business ���� ��� �� � � ��

���. � ���� IBM Tivoli Access Manager for e-business, �� 5.1�� �

� ��� �� ��� �����.

Tivoli Access Manager� IBM Tivoli Access Manager ���� ������

��� � �� �� ��������. � ��� IBM Tivoli Access Manager

������ ��� ��� �� � � �� ��� �����. �� ��

�� ���� �� ��� e-business ������ �� ���� � �����

�� policy� �� ����� ���� ��� �� �� ��� �����.

�: IBM Tivoli Access Manager� �� Tivoli SecureWay® Policy Director� �

�� ����. Tivoli SecureWay Policy Director ����� � ���� �

�� �� ��� ���� Policy Server�� ����.

IBM Tivoli Access Manager� ��� , �����/��, MQSeries® � ���

�� ������ �� ��� �� �����. Tivoli Access Manager �

�� ��� ��� �� � �� �� �� ���� ���� ��� � ��

���. �� ��� �� ������ �� Tivoli Access Manager� ��� �

�� ���� ��� � �� ���� �� ������ �����.

�� ����� �� � ��� �� ��� �� �� ��� ���� ��

��� ��� � ���.

��: ���� �� ��� ��� ��� ���� ����. � ��� �� �

� ��� �� �� ��, ���� � ��� �� ��� TechNotes �

��� ������.

� �� ���

� �� Tivoli Access Manager� ��, �� � ��� ���� ��� ���

���� ���.

��� � � � � �� ��� ���.

v UNIX® � ��

v HTTP, TCP/IP, FTP, Telnet, SSL� ��� ��� ���

v �� ��

v ��

© Copyright IBM Corp. 1999, 2003 vii

v ��

v IBM Tivoli Access Manager ��

v LDAP(Lightweight Directory Access Protocol) � ��� ���

� �� ��

� �� � � �� ���� ����.

v 1 ���� � 1 � �� ���� �� ���

v 7 ���� � 2 � ���� ����

v 25 ���� � 3 � ��� �� � ��� ��

v 53 ���� � 4 � ��� �� �����

v 59 ���� � 5 � ��� �� ���

�� ��

�� �� ��� ��� ���� Tivoli Access Manager �����, �� ��

� � � � �� �� ��� ����. �� �� ��� � ��� �� ��

�� �� ����� ������.

IBM Tivoli Access Manager for e-business �� �� �� � ��� � �

� �� � ����.

http://www.ibm.com/software/tivoli/products/access-mgr-e-bus/

Tivoli Access Manager ������ � � �� ���� ����.

v ���� ���

v ix ���� ��� ���

v ix ���� � �� ���

v x ���� ��� ����

v xi ���� ��� �� ����

��� ��

v IBM Tivoli Access Manager for e-business Read This First(GA30-2205-00)

Tivoli Access Manager �� � ����� �� ��� �����.

v IBM Tivoli Access Manager for e-business ���� ��(GA30-2206-00)

����� ����, �� � �� �� � �� ����� �� �� ��� �

����.

viii IBM Tivoli Access Manager for e-business: ���� ��

�� ��

v IBM Tivoli Access Manager �� �� ���(SA30-2207-00)

Web Portal Manager ������ ��� Tivoli Access Manager �� ���

��� �� � �� �� � �����. � �� IBM Tivoli Access Manager

for e-business Web Security �� ���� ������, IBM Tivoli Access

Manager for Business Integration � IBM Tivoli Access Manager for Operating

Systems� �� � Tivoli Access Manager ��� �� ���� �� ���

�.

v IBM Tivoli Access Manager Base Administration Guide(SC32-1360-00)

Tivoli Access Manager ��� ��� �� �� � ��� � �����.

pdadmin � � ��� Web Portal Manager ������� ���� ��

� ��� �����.

� �� ��

v IBM Tivoli Access Manager for e-business Web Security �� ���

(SA30-2208-00)

Tivoli Access Manager �� ����� � �� ���� �� ��, ��

� � ����� �����. � �� IBM Tivoli Access Manager �� ��

���� �������.

v IBM Tivoli Access Manager Upgrade Guide(SC32-1369-00)

Tivoli SecureWay Policy Director �� 3.8 �� Tivoli Access Manager� �

� ��� Tivoli Access Manager �� 5.1� ������� �� � ���

��.

v IBM Tivoli Access Manager for e-business WebSEAL Administration

Guide(SC32-1359-00)

WebSEAL� ��� �� ���� �� ���� ��� �� �����

, �� �� � �� �� ��� �����.

v IBM Tivoli Access Manager for e-business IBM WebSphere® Application Server

�� ���(SA30-2209-00)

Tivoli Access Manager� IBM WebSphere® Application Server� ���� �

�� ��, � � �� ����� �����.

v IBM Tivoli Access Manager for e-business IBM WebSphere Edge Server ��

���(SA30-2211-00)

Tivoli Access Manager� IBM WebSphere Edge Server ������ ���

� � �� ��, � � �� ����� �����.

v IBM Tivoli Access Manager for e-business Plug-in for Web Servers Integration

Guide(SC32-1365-00)

�� ix

��� ����� ��� ��� ��� �� ��, �� �� � �� �

� ��� �����.

v IBM Tivoli Access Manager for e-business BEA WebLogic Server �� ���

(SA30-2210-00)

Tivoli Access Manager� BEA WebLogic Server� ��� �� ��, � �

�� ����� �����.

v IBM Tivoli Access Manager for e-business IBM Tivoli Identity Manager

Provisioning Fast Start Guide(SC32-1364-00)

Tivoli Access Manager � Tivoli Identity Manager� ��� ��� ���� �

� ���� Provisioning Fast Start ��� ��� �� �� � ���

��.

��� ���

v IBM Tivoli Access Manager for e-business Authorization C API Developer

Reference(SC32-1355-00)

Tivoli Access Manager �� C API � Tivoli Access Manager ��� ����

������ ��� Tivoli Access Manager ��� ������ ���

�� � ���� �� � �����.

v IBM Tivoli Access Manager for e-business Authorization Java™ Classes Developer

Reference(SC32-1350-00)

��� API� Java™ �� ��� ��� ������ Tivoli Access Manager

��� ���� �� �� �� �� ��� �����.

v IBM Tivoli Access Manager for e-business Administration C API Developer

Reference(SC32-1357-00)

�� API� ��� ������ Tivoli Access Manager �� ���� �

�� �� � �� ��� �����. � ����� �� API� C ��� �

�����.

v IBM Tivoli Access Manager for e-business Administration Java Classes Developer

Reference(SC32-1356-00)

��� API� Java �� ��� ��� ������ Tivoli Access Manager

�� ���� ���� �� �� �� �� ��� �����.

v IBM Tivoli Access Manager for e-business Web Security Developer

Reference(SC32-1358-00)

CDAS(Cross-Domain Authentication Service), CDMF(Cross-Domain Mapping

Framework) � Password Strength ��� �� �� � ����� ��� ��

���.

x IBM Tivoli Access Manager for e-business: ���� ��

�� �� ���

v IBM Tivoli Access Manager for e-business Command Reference(SC32-1354-00)

Tivoli Access Manager� �� ���� � ��� � ����� �� �

�� �����.

v IBM Tivoli Access Manager Error Message Reference(SC32-1353-00)

Tivoli Access Manager�� ���� ���� ��� �� ��� �����.

v IBM Tivoli Access Manager for e-business Problem Determination

Guide(SC32-1352-00)

Tivoli Access Manager� �� �� �� ��� �����.

v IBM Tivoli Access Manager for e-business Performance Tuning

Guide(SC32-1351-00)

IBM Tivoli Directory Server� �� ������ Tivoli Access Manager� �

�� ��� �� �� �� ��� �����.

�� ��

� ���� Tivoli Access Manager ������ ��� ��� �����.

Tivoli Software Library��� white papers, datasheets, demonstrations, redbooks

� announcement letters� �� ��� Tivoli ��� �����. � ����

� Tivoli Software Library� ��� � ����.

http://www.ibm.com/software/tivoli/library/

Tivoli Software Glossary�� Tivoli ������ ��� �� �� ��� ���

� ����. Tivoli Software Glossary� Tivoli Software Library ���

(http://www.ibm.com/software/tivoli/library/)� ��� �� Glossary ���� �

�� �� �����.

IBM Global Security KitTivoli Access Manager� IBM Global Security Kit(GSKit) �� 7.0� �� ��

� �� ��� �����. GSKit� �� ���� �� IBM Tivoli Access

Manager Base CD� IBM Tivoli Access Manager Web Security CD, IBM Tivoli

Access Manager Web Administration Interfaces CD � IBM Tivoli Access Manager

Directory Server CD� ���� ����.

GSKit ���� � ��� ��, ��-��� � � �� �� ���� � �

��� iKeyman � �� ��� gsk7ikm� �����. � ��� Tivoli

Information Center ���� �� IBM Tivoli Access Manager �� ��� �

� ��� � � ����.

�� xi

v IBM Global Security Kit Secure Sockets Layer and iKeyman User’s

Guide(SC32-1363-00)

Tivoli Access Manager ���� SSL ��� ����� ��� ���� ��

��� �� ��� �� ��� �����.

IBM Tivoli Directory ServerIBM Tivoli Directory Server, �� 5.2� ���� � ��� IBM Tivoli Access

ManagerDirectory Server CD� ���� ����.

�: IBM Tivoli Directory Server� ��� � � ��� ������ ����

�� ��� ����.

v IBM Directory Server(�� 4.1 � �� 5.1)

v IBM SecureWay Directory Server(�� 3.2.2)

IBM Directory Server �� 4.1, IBM Directory Server �� 5.1 � IBM Tivoli

Directory Server �� 5.2� � IBM Tivoli Access Manager �� 5.1� � �

����.

IBM Tivoli Directory Server� �� � ��� � �� �� � ����.

http://www.ibm.com/software/network/directory/library/

IBM DB2 Universal Database™

IBM DB2® Universal Database Enterprise Server Edition, �� 8.1� IBM Tivoli

Access Manager Directory Server CD� ���� IBM Tivoli Directory Server �

����� �� �����. IBM Tivoli Directory Server, z/OS® �� OS/390®

LDAP ��� Tivoli Access Manager� �� ������ ��� �� DB2� �

� �����.

DB2� �� � ��� � �� �� � ����.

http://www.ibm.com/software/data/db2/

IBM WebSphere Application ServerIBM WebSphere Application Server, Advanced Single Server Edition 5.0� ��

�� � ��� IBM Tivoli Access Manager Web Administration Interfaces CD

� ���� ����. WebSphere Application Server� Tivoli Access Manager�

���� � ���� Web Portal Manager ������ IBM Tivoli Directory Server

� ���� � ���� �� �� � � ��� � ��� ���. Tivoli Access

Manager�� IBM WebSphere Application Server �� 2� ��� �� IBM

Tivoli Access Manager WebSphere Fix Pack CD� �����.

xii IBM Tivoli Access Manager for e-business: ���� ��

IBM WebSphere Application Server� �� � ��� � �� �� � ���

�.

http://www.ibm.com/software/webservers/appserv/infocenter.html

IBM Tivoli Access Manager for Business IntegrationIBM Tivoli Access Manager for Business Integration� ��� ��� � �� �

���, IBM MQSeries® �� 5.2� �� �� ��� IBM WebSphere® MQ �

� 5.3 ���� �����. IBM Tivoli Access Manager for Business Integration

� ��� ������ ��� �� ��� WebSphere MQSeries �����

� ������ ��� ��� ���� ��� � ��� ���. WebSEAL �

IBM Tivoli Access Manager for Operating Systems, IBM Tivoli Access Manager

for Business Integration��, IBM Tivoli Access Manager� ���� ����

� �� � �����.

IBM Tivoli Access Manager for Business Integration� �� � ��� � �

� �� � ����.

http://www.ibm.com/software/tivoli/products/access-mgr-bus-integration/

IBM Tivoli Access Manager for Business Integration �� 5.1� �� �� ��

� Tivoli Information Center ���� ����.

v IBM Tivoli Access Manager for Business Integration �� ���(SA30-1825-01)

v IBM Tivoli Access Manager for Business Integration �� �� ���

(GA30-2064-00)

v IBM Tivoli Access Manager for Business Integration ���� ��(GA30-1827-01)

v IBM Tivoli Access Manager for Business Integration Read This

First(GA30-2063-00)

IBM Tivoli Access Manager for WebSphere Business

Integration BrokersIBM Tivoli Access Manager for Business Integration� ��� ��� � �� IBM

Tivoli Access Manager for WebSphere Business Integration Broker� WebSphere

Business Integration Message Broker, �� 5.0 � WebSphere Business Integration

Event Broker, �� 5.0� �� �� ��� �����. IBM Tivoli Access

Manager for WebSphere Business Integration Broker� Tivoli Access Manager�

��� � � �� �� �� ��, ��� ��� �� � �� ���� ���

�� JMS ��/�� ������ �����.

IBM Tivoli Access Manager for WebSphere Integration Brokers� �� � �

�� � �� �� � ����.

�� xiii

http://www.ibm.com/software/tivoli/products/access-mgr-bus-integration/

IBM Tivoli Access Manager for WebSphere Integration Brokers, ��� �� �

�� ��� Tivoli Information Center ����� ��� � ����.

v IBM Tivoli Access Manager for WebSphere Business Integration Brokers

Administration Guide(SC32-1347-00)

v IBM Tivoli Access Manager for WebSphere Business Integration Brokers ��

�� ��(GA30-2194-00)

v IBM Tivoli Access Manager for Business Integration Read This

First(GA30-2063-00)

IBM Tivoli Access Manager for Operating SystemsIBM Tivoli Access Manager for Operating Systems� ��� ��� � �� ��

��, �� � ���� ���� � �� UNIX ����� ��� policy �

� � �����. IBM Tivoli Access Manager for Operating Systems�

WebSEAL � IBM Tivoli Access Manager for Business Integration�� IBM Tivoli

Access Manager� ���� ���� � �� � �����.

IBM Tivoli Access Manager for Operating Systems� �� � ��� � ��

�� � ����.

http://www.ibm.com/software/tivoli/products/access-mgr-operating-sys/

IBM Tivoli Access Manager for Operating Systems �� 5.1� � ��� Tivoli

Information Center ���� ����.

v IBM Tivoli Access Manager for Operating Systems �� ���(SA30-1841-01)

v IBM Tivoli Access Manager for Operating Systems �� ���(SA30-1840-01)

v IBM Tivoli Access Manager for Operating Systems �� �� ���

(SA30-1842-01)

v IBM Tivoli Access Manager for Operating Systems ���� ��(GA30-1843-01)

v IBM Tivoli Access Manager for Operating Systems Read Me(GA30-1844-01)

IBM Tivoli Identity ManagerIBM Tivoli Identity Manager �� 4.5� ��� �� ��� ���� �� ���

��(�: �� ID � �)� ���� ���� �����(�, �����,

� �� �� ��� �� ���� �� �� �)� � ����. Tivoli Identity

Manager� Tivoli Access Manager Agent� � Tivoli Access Manager� ��

� � ����. Agent ��� �� �� ��� IBM ���� ������.

IBM Tivoli Identity Manager� �� �� ��� � �� �� � ����.

xiv IBM Tivoli Access Manager for e-business: ���� ��

http://www.ibm.com/software/tivoli/products/identity-mgr/

��� �� ���

�� ����� ��� � Tivoli Softwarw Library� PDF �� HTML ���

� �� ����.

http://www.ibm.com/software/tivoli/library

�� ������ ����� Product manuals ��� ���. Tivoli Software

Information Center ����� �� �� � ���.

�� ��� ���� ��, �� ���, �� ���, �� ��� � �� �

��� �����.

�: PDF ��� ��� ��, Adobe Acrobat �� �� �(�� → ���

��)�� ���� ���� ��� ������.

�� ��� ��

�� ��� ��� �� ��� �� �� � ��� ��� �� ��� �

���� ��� ��� � ��� �����. � ����� �� ��� ���

������ ��� �� ��� � ����. �� ��� �� ���� ���

��� �� ������ �� ��� ��� � ����.

����� �� ��

Tivoli ��� ��� �� ��, IBM Tivoli Software Support� �� � ���

� � ����. � ����� Tivoli support ��� �� IBM Tivoli Software

Support� ������.

http://www.ibm.com/software/support/

��� �� ��, � ����� IBM Software Support Guide� ���

�� ��� ����� ��� ������.

http://techsupport.services.ibm.com/guides/handbook.html

� ��� �� � ���� �� IBM Software Support� ���� � � �

� �� ��� �����.

v �� � ���

v ��� �� ��� ���� � � �� ��

v ��� ��� �� �� � ��

�� xv

� �� ��� ��

� ���� �� ��� ��, � ��� � � ��� � � ��� ����

�.

��� ��

� ���� � � �� �� ��� �����.

�� ��� �� ���� �� � ��� � � , ���, ����, �,

Java ��� � � ����� �� �����.

����

��, �� ��, ���� ��� ��� ����� �����.

������

��� �� ���� ���, ��, ��, � , �� ��, ��� ��

�, ��� �� ��� � �� �� � �� ������� ��

���.

����� �� �� � ��

� ���� ��� �� � �� �� ��� UNIX ��� �����. Windows®

� � ��� ��, �� ��� $variable� %variable%� ��, ��� ���

���(/)� ����(\)� ����. Windows ����� bash �� ��� ��,

UNIX ��� ������.

xvi IBM Tivoli Access Manager for e-business: ���� ��

� 1 � � ���� �� ��

IBM Tivoli Access Manager for e-business(Tivoli Access Manager) �� 5.1� �

�� e-business ��� ��� �� � �� ��� ���� � IBM Tivoli

Access Manager � IBM SecureWay Policy Director� �� �� �� �����.

� ���� ��� � ��� � � ����.

�� �

Tivoli Access Manager� ACL(Access Control List)� �� ��� �� �

�� ���� �� ��� �� � ����.

��� ��

Tivoli Access Manager� � �� ��� Tivoli Access Manager ����

���� � �� �� �� �� �� ���� �� ���� ���� �

�� �����.

Policy Proxy Server

Tivoli Access Manager� � ��� ����� � ���� ���� Tivoli

Access Manager � � �� �� DMZ�� ��� � �� �� Policy

Proxy Server� �����. �����, ��� ��� ���� policy ��

� ��� � � �� ���� ��� �� ���� ���� � ���

�.

Microsoft® Active Directory� �� ��

Tivoli Access Manager� UNIX �� ���� Tivoli Access Manager �

��� Microsoft Active Directory� �� ������ ���� Tivoli

Access Manager ���� ��� � �� ��� �����. Policy Server�

Windows� ��� �� ��� ������.

IBM Tivoli Directory Server � Sun ONE Directory Server� �� �� ��

� �� ��

Tivoli Access Manager� IBM Directory Server � Sun ONE Server� �

��� �� �� ��� ��� � ����.

Windows ���� �� �� �� �� WebSEAL ��

Tivoli Access Manager� WebSEAL ���� �� Windows ����

� �� �(SPNEGO) ��� �����. �� Windows � UNIX �� �

���� � �� �����.

Tivoli Access Manager� Tivoli Identity Manager �� �� ���

Tivoli Access Manager� ��� ���� � ���� �����. �

� ������ Tivoli Identity Manager � Tivoli Access Manager� �

© Copyright IBM Corp. 1999, 2003 1

�� � �� ����� � �� �� �� ��� ��� ���

� � ��� ���� � � ����.

�� � �� �� �� �� ���� ���

Tivoli Access Manager� �� � � �� ��� ���� �� �� ��

�� �����. � PDJLog ��� � � � �� �� �����

PDJLog.properties ��� �� ����� �����.

Lotus® Domino® Server ������ �� ��

Tivoli Access Manager� ������ �� Domino Server� �� ��

� �� �� ���� Domino ��� �����. Tivoli Access Manager

� �� � ��� ��� ��� ��� ��� ���� �� �� ���

�� �� Domino Server� ��� � ����. � ��, Tivoli Access

Manager� Tivoli Access Manager ��� ��� �� ���� ����

� ����.

Linux ��

Tivoli Access Manager� Red Hat � SuSE Linux�� Policy Server,

WebSEAL � Plug-in for Web Server� �����. ���� �� ��

� ��� IBM Tivoli Access Manager for e-business Web Security �

� ���� ��� ������.

��� �� ��� ���

� ���� �� � ���� � �� ���, � �� � ��� ��

�� ���� �� ��� ��� ��� ���� ����� ����

���. ����� ���� ��� � Policy Proxy Server� �� ��

� �����.

���� ��� � pdadmin � � � � ����.

v �� ��� ���� ��� � �� � pdadmin -d ��� ���

v �� ���� ��� � �� � padadmin -m ���

v � pdadmin -l(� ���) ���

v � pdadmin context �

v � pdadmin domain �

v � pdadmin authzrule(�� �) �

v � pdadmin config � : config modify � config show

v � pdadmin object � : object access � object exists

v � ��(ACL ��): AuthzRule ��(R) � POP ��(B)

2 IBM Tivoli Access Manager for e-business: ���� ��

CD ��

IBM Tivoli Access Manager(Tivoli Access Manager)� � CD� �����.

Base CD:

v IBM Tivoli Access Manager Base for AIX

v IBM Tivoli Access Manager Base for Solaris

v IBM Tivoli Access Manager Base for HP-UX

v IBM Tivoli Access Manager Base for Linux on xSeries

v IBM Tivoli Access Manager Base for Linux on zSeries

v IBM Tivoli Access Manager Base for Linux on pSeries and iSeries

v IBM Tivoli Access Manager Base for Windows NT, Windows XP, Windows 2000

and Windows 2003

Web Administraion CD:

v IBM Tivoli Access Manager Web Administration Interfaces for AIX

v IBM Tivoli Access Manager Web Administration Interfaces for Solaris

v IBM Tivoli Access Manager Web Administration Interfaces for HP-UX

v IBM Tivoli Access Manager Web Administration Interfaces for Linux on xSeries

v IBM Tivoli Access Manager Web Administration Interfaces for Linux on zSeries

v IBM Tivoli Access Manager Web Administration Interfaces for Linux on pSeries

and iSeries

v IBM Tivoli Access Manager Web Administration Interfaces for Windows 2000

v IBM Tivoli Access Manager Web Administration Interfaces for Windows 2003

Web Security CD:

v IBM Tivoli Access Manager Web Security for AIX

v IBM Tivoli Access Manager Web Security for Solaris

v IBM Tivoli Access Manager Web Security for HP-UX

v IBM Tivoli Access Manager Web Security for Linux on xSeries

v IBM Tivoli Access Manager Web Security for Linux on zSeries

v IBM Tivoli Access Manager Web Security for Windows 2000 and Windows 2003

Directory Server CD:

v IBM Tivoli Access Manager Directory Server for AIX

v IBM Tivoli Access Manager Directory Server 1 of 2 for Solaris

v IBM Tivoli Access Manager Directory Server 2 of 2 for Solaris

� 1 � � ���� �� �� 3

v IBM Tivoli Access Manager Directory Server for HP-UX

v IBM Tivoli Access Manager Directory Server for Linux on xSeries

v IBM Tivoli Access Manager Directory Server for Linux on zSeries

v IBM Tivoli Access Manager Directory Server for Linux on pSeries and iSeries

v IBM Tivoli Access Manager Directory Server for Windows 2000 and Windows

2003

WebSphere Fixpack CD:

v IBM Tivoli Access Manager WebSphere Fix Pack for AIX

v IBM Tivoli Access Manager WebSphere Fix Pack for Solaris

v IBM Tivoli Access Manager WebSphere Fix Pack for HP-UX

v IBM Tivoli Access Manager WebSphere Fix Pack for Linux on xSeries

v IBM Tivoli Access Manager WebSphere Fix Pack for Windows 2000

Attribute Retrieve Service CD:

v IBM Tivoli Access Manager Attribute Retrieval Service for AIX

v IBM Tivoli Access Manager Attribute Retrieval Service for Solaris

v IBM Tivoli Access Manager Attribute Retrieval Service for HP-UX

v IBM Tivoli Access Manager Attribute Retrieval Service for Linux on xSeries

v IBM Tivoli Access Manager Attribute Retrieval Service for Linux on zSeries

v IBM Tivoli Access Manager Attribute Retrieval Service for Windows 2000

v IBM Tivoli Access Manager Attribute Retrieval Service for Windows 2003

Language Support CD:

v IBM Tivoli Access Manager Language Support for AIX

v IBM Tivoli Access Manager Language Support for Solaris

v IBM Tivoli Access Manager Language Support for HP-UX

v IBM Tivoli Access Manager Language Support for Linux on xSeries

v IBM Tivoli Access Manager Language Support for Linux on zSeries

v IBM Tivoli Access Manager Language Support for Linux on pSeries and iSeries

v IBM Tivoli Access Manager Language Support for Windows NT, Windows XP,

Windows 2000, and Windows 2003

IBM Tivoli Access Manager� ����� ���� ���

Tivoli ��� �� �� ������ � ���� ����� � ����.

http://www.tivoli.com/support/downloads/

4 IBM Tivoli Access Manager for e-business: ���� ��

″Software download(for registered users)″ ��� ��� � , ″IBM Tivoli Access

Manager″� ������. ���� ��� �� � � �� ������.

� 1 � � ���� �� �� 5

6 IBM Tivoli Access Manager for e-business: ���� ��

� 2 � ��� ����

� ���� ��� �� �� �� ��� � �����.

� �� ���� ����.

v ����� ������

v 12 ���� ���� �� � ��� ����

v 22 ���� ������

���� �����

� � Tivoli Access Manager� ���� �� �����, ���� � �� �

�� �� �� �� ��������.

IBM Tivoli Directory Server

Tivoli Access Manager��� IBM Tivoli Directory Server, �� 4.1, 5.1 � 5.2

� ��� �����.

�: IBM Tivoli Directory Server, �� 5.2� Tivoli Access Manager, �� 5.1�

�����. � ���� ��� IBM Directory Server ��� ��� � ���

IBM Tivoli Access Manager, �� 5.1� LDAP registry IBM Directory Client

�� 5.2� �����, �� 4.1 �� 5.1� ��� �� ��� ���� IBM

Tivoli Directory Server� ��� ���.

���� ���� � � ����.

v AIX ��:

– AIX 5.1

– AIX 5.2

�: AIX 5.1�� AIX ���� �� 4 ��� ��� ���. AIX 5.2�� AIX

���� �� 1 ��� ��� ���.

v HP-UX ��:

– HP-UX 11

– � ��� ��� HP-UX 11i:

- 2001 12� GOLDBASE11i ��

- 2001 12� GOLDAPPS11i ��

- �� PHSS_26560

© Copyright IBM Corp. 1999, 2003 7

v xSeries ��� Linux:

– ��� 2� UnitedLinux 1.0

– SuSE Linux Enterprise Server 8

– Red Hat Enterprise Linux 3.0

v zSeries ��� Linux:

– SuSE Linux Enterprise Server 8

– Red Hat Enterprise Server 3.0

v pSeries � iSeries ��� Linux

– Red Hat Enterprise Server 3.0

– SuSE Linux Enterprise Server 8

v Solaris ��:

– Solaris Operating Environment Software, �� 8 � 9

– Trusted Solaris, �� 8

v Windows ��:

– Windows 2000

– Windows Server 2003, Standard �� Enterprise

– ��� 6 ��� Windows NT 4.0; �� ���� Windows NT �� �

��(NTFS)� ����.

��:

v Tivoli Access Manager� ��� IBM Directory Server� �� �� ����

��� ���������. ������ �� �� ��� IBM Tivoli Access

Manager Upgrade Guide� ������.

v IBM� � �� ����� LDAP(Lightweight Directory Access Protocol)� �

� ��� ��, IBM Tivoli Directory Server� ���� �� �� �� �

��.

IBM Tivoli Directory Server � �� �

IBM Tivoli Directory Server� IBM Tivoli Directory Server �� �, �� 5.2

� ��� �����. IBM Tivoli Directory Server ����� �� ��� �� �

�� �� � ��� �� ����� �� �� ��� � ����. �� ��

��� ��� � �� LDAP ��� � � ����.

v IBM Tivoli Directory Server, �� 5.2

v IBM Directory Server, �� 5.1

v IBM Directory Server, �� 4.1

v OS/400 V5R3

8 IBM Tivoli Access Manager for e-business: ���� ��

v z/OS™ R4

�: z/OS R4� ��, �� ���� � � �� ��� �����.

– �� TDBM ���

– �� SDBM ���

– ��� TDBM � SDBM ���

� ����� �� �� �����.

v AIX ��:

– AIX 4.3.3

– AIX 5.1

– AIX 5.2

v HP-UX ��:

– HP-UX 11

– HP-UX 11i

v xSeries ��� Linux:

– UnitedLinux 1.0

– SuSE Linux Enterprise Server 7 � 8

– Red Hat Advanced Server 2.1

v zSeries ��� Linux:

– SuSE Linux Enterprise Server 8.0

v pSeries � iSeries ��� Linux :

– UnitedLinux 1.0

– SuSE Linux Enterprise Server 8.0

v Solaris ��:

– Solaris Operating Environment Software, �� 7, 8 � 9

– Trusted Solaris, �� 8

v Windows ��:

– Windows 2000

– Windows XP

– Windows Server 2003, Standard �� Enterprise

– ��� 6 ��� Windows NT 4.0

�� �� ���� � � ����.

v � ����� �� � ��� ����.

– WebSphere Application Server� � �� �� -- Express V5.0 ��

� 2 � ��� ��� 9

– IBM WebSphere Application Server, �� 5.0 ��. IBM WebSphere

Application Server �� 5.0.2� Tivoli Access Manager �� 5.1� ����

�.

v �� �� ��� ���� � ����� ����.(�� �� ��� �

��� �� ���� �� �� � �� ����.)

– AIX ��: Mozilla 1.3 �� 1.4

– HP-UX ��: Mozilla 1.3 �� 1.4

– xSeries ��� Linux: Mozilla 1.3 �� 1.4

– iSeries, pSeries � zSeries ��� Linux: ����� ���� ����. �

�� Linux ����� �� �� ����� �� ���� ��� �

��.

– Solaris ��: Mozilla 1.3 �� 1.4

– Windows ��: Internet Explorer, �� 6.0

OS/390� IBM Security Server

Tivoli Access Manager� OS/390®� IBM Security Server, �� 2, ��� 10�

�����. �� ��� ��� � � �� OS/390 ��� ����� ���

� ������.

http://www.s390.ibm.com/os390/bkserv/

IBM z/OS Security Server LDAP Server

Tivoli Access Manager� IBM z/OS Security Server LDAP Server, �� 1, ��

� 2 ��� ��� �����. �� ��� � � �� z/OS ��� ������

������.

http://www.ibm.com/servers/eserver/zseries/zos/bkserv/

��� CD-ROM(z/OS: ��, SK3T-4269)�� ����� ��� ��� �� �

���.

Lotus Domino

Windows ����� Tivoli Access Manager� �� ������ Lotus® Domino,

�� 5.0.10 � 6.0� ��� �����. Domino Server� Tivoli Access Manager,

�� 5.1�� ���� �� ����� � � ����.

��: Lotus Domino� ������ ��� �� � ��� ������.

v IBM Tivoli Directory Client� ��� ����.

10 IBM Tivoli Access Manager for e-business: ���� ��

v Access Manager Runtime ���� ���� �� Lotus Notes® ������

��� ���. Tivoli Access Manager� Lotus Notes ����� �� 5.0.10

� �� 6.0 ��� �����.

Microsoft Active Directory

Tivoli Access Manager� �� ������ Windows 2000 � Windows 2003�

Active Directory� ��� �����.

Tivoli Access Manager� �� ����� Active Directory ��� Windows 2000

Advanced Server ������ �� �����. �� 5.1�� ��� ��� Active

Directory ��� �� Tivoli Access Manager ���� ���� �� Windows

� UNIX ����� Tivoli Access Manager� �� � ��� ����(Windows

NT� ��).

UNIX ������ IBM Tivoli Directory Client� ��� Active Directory� �

����. � LDAP ������ Policy Server ���� � ��� �� ��

�� �� ���� �����.

Tivoli Access Manager Policy Server� Windows 2000 � 2003 ������ �

����.

Netscape iPlanet � Sun ONE Directory Server

Tivoli Access Manager� �� ������ Netscape iPlanet Directory Server,

�� 5.1 � Sun ONE Directory Server, �� 5.2� ��� �����.

�� ��� iPlanet �� Sun ONE Directory Server� ��� �� ��� ���

���.

��:

v Tivoli Access Manager� ��� ��� iPlanet �� Sun ONE Directory Server

� �� ��� ���� ��� ���������. ����� ����� �

�� � ��� �� Sun ��� ������.

http://docs.sun.com/db/prod/s1dirsrv

v iPlanet � Sun ONE Directory Server�� �� SSL ��� ����. ���

��� ��� ���� Access Manager Runtime ���� ���� ��

GSKit� ��� ���.

Novell eDirectory

Tivoli Access Manager� �� ������ Novell eDirectory 8.6.2 � 8.7� �

�� �����.

� 2 � ��� ��� 11

�� ��� Novell eDirectory ��� ��� �� ��� ������. Novell

eDirectory �� ��� � ����� �� �����.

http://www.novell.com/documentation/a-z.html

� ��� �� �� ��� � ����� �� �����.

http://support.novell.com/filefinder/5069/index.html

��:

v Tivoli Access Manager� ��� Novell eDirectory ��� �� �� ���

���� ��� ���������.

v Novell eDirectory ���� �� SSL ��� ����. ��� ��� ��� �

��� Access Manager Runtime ���� ���� �� GSKit� ���

���.

��� �� � ��� ����

Tivoli Access Manager ��� � ������ ��� ��� ��� �� �

����. � ��� ��� �� ���� ��� ��� ���� ��� ���.

� Tivoli Access Manager ��� �� ���� �� ���� �� ��

�� ��� ��� ����. � Tivoli Access Manager ������ ��� �

��� �� ��� ��� ���� ������.

� ��� � � ��� �����.

v 13 ���� �Tivoli Access Manager �� ����

v 14 ���� �Tivoli Access Manager �� ����

�: ��� ����� Tivoli Access Manager ����� �� ��� �� �

��� ���� �����. ����� ��� ��, � ���(�: � �

� �� �� ��)� ��� ���.

12 IBM Tivoli Access Manager for e-business: ���� ��

Tivoli Access Manager �� ����

� 1. �� ��� -- ��� �� � ��� ���

���� �� ���

��(MB)

�� ���

��(MB)

ACL ���

����

��� ��

(MB)

�� ���

��� ��

��(MB)

�� ��

(MB)

�� ��

(MB)

�� ���

� ��

Access Manager

Application

Development Kit

3 5 -- -- -- -- --

Access Manager

Authorization Server2 4 15 2 5 30 40 --

Access Manager Java

Runtime Environment8 10 -- -- -- -- --

Access Manager

Policy Proxy Server1 2 -- 40 --

Access Manager

Policy Server2 4 5 1, 2 10 1 30 40 5 2

Access Manager

Runtime36 40 -- -- -- -- --

Access Manager Web

Portal Manager1 2 -- -- 35 3 70 4 --

Global Security Kit 18 20 -- -- -- -- --

IBM Tivoli Directory

Client46 50 -- -- 6 6

IBM Tivoli Directory

Server(�� �� ��

��� ��)

145 7 245 7 -- 10 256 5 512 - 1GB 5 --

I B M W e b S p h e r e

Application Server, �

� 5.0.2

552 552 -- -- 256 512 --

�:1 � ��� �� ����� ����. � � ���� ��, � ��� �� ��� ��� �����.

2 10,000�� ����� 10�� ���� ��� �� ���� ��, ����� 10%� 30�� ACL� ���� �� ��

���� �, ACL ��� ��� �� ��� �����. ��� Policy Server� ���� � �� ��� �� ��

� � ��� �� ��� 3����.

3 WPM� �� �� ��� ��� � ����� �� ��� �����.

4 WPM� �� ����� �� ��� ����� � ��.

5 256MB(��) � 512MB - 1GB(��) ���� Tivoli Access Manager ��� ��� ��� ��� �� ����.

��� ��� ��� � �� 512(��) � 1GB - 2GB(��) ���� �����.

6 IBM Tivoli Directory Client� �� ��� ��� �� ���� ��� �� ���� �����.

7 IBM Tivoli Directory Server ��� � ��� ��� �����. Tivoli Access Manager ��� 10KB� ��

���.

� 2 � ��� ��� 13

Tivoli Access Manager � �� ����

� 2. �� ��� -- ��� �� � ��� ���

���� �� ���

��(MB)

�� ���

��(MB)

ACL ���

���� �

�� ��

(MB)

�� ���

��� ��

��(MB)

�� ��

(MB)

�� ��

(MB)

�� ����

��

Access Manager

WebSEAL20 25 15 1 200 2 80 250 3 --

Access Manager

WebSEAL

Application

Development Kit

3 5 -- -- -- -- --

Access Manager for

WebLogic Server2 4 -- 5 64 128 --

Access Manager for

WebSphere2 4 -- 5 64 128 --

Access Manager

Plug-in for IBM

HTTP Server

15 25 15 1 10 60 120 --

Access Manager

Plug-in for Apache

Web Server

15 25 15 1 10 60 120 --

Access Manager

Plug-in for Sun

ONE Web Server

15 25 15 1 10 70 140 --

Access Manager

Plug-in for Internet

Information Services

15 25 15 1 10 165 225 --

Access Manager

Attribute Retrieval

Service

6 10 -- -- 10 14 --

Access Manager

Plug-in for Edge

Server

15 25 15 1 10 15 30 --

�:1 10,000�� ����� 10�� ���� ��� �� ���� ��, ����� 10%� 30�� ACL� ���� �� ��

���� �, ACL ��� ��� �� ��� �����. ��� Policy Server� ���� � �� ��� �� ��

� � ��� �� ��� 3����.

2 ��� www( �� ���) ��� �� ��� �����.

3 �� �� �� ��� �� ���� �����. �� ���� ��� �� � �� �����.

14 IBM Tivoli Access Manager for e-business: ���� ��

���� ���(�� �� ��)� 3� ���� � ��� �� �� �� ��� ��� ���� ����.

�: SuSE Linux� ��� UnitedLinux 1.0� ���� �� � �� ��� �� �

�����. �� ��� SCO Group, Turbolinux � Conectiva���. SLES(SuSe

Linux Enterprise Server)� ���� �� ���� UnitedLinux 1.0 ��� �

��� �� � ��� ��� ��� �����. �� ��� � �

UnitedLinux ���� ������.

http://www.unitedlinux.com

� 3. ���� � �� ���� �� ��

�� �� Tivoli Access Manager 5.1 �� ��� �� �� �� ��� �

AIX 4.3.3

v Development(ADK)

v Java Runtime Environment

v Runtime

�� �� � � ��� ����.

v bos.rte.libpthreads(�� 4.3.3.51 �

�)

v xlC.rte(6.0.0.0 C Set ++ Runtime)

v xlC.aix43.rte(6.0.0.3 C Set ++

Runtime)

AIX 5.1

v Attribute Retrieval Service

v Authorization Server

v Development(ADK)

v Java Runtime Environment

v Plug-in for Edge Server, �� 5.1

v Plug-in for IBM HTTP Server, ��

1.3.26

v Plug-in for Sun ONE Web Server, �

� 6.0

v Policy Server

v Policy Proxy Server

v Runtime

v Tivoli Access Manager for WebLogic

v Tivoli Access Manager for WebSphere

v Web Portal Manager

v WebSEAL Server

v WebSEAL Development(ADK)

���� �� 4 �� � � ��� �

���.

v xlC.rte(6.0.0.0 C Set ++ Runtime)

v xlC.aix50.rte(6.0.0.3 �� C Set ++

Runtime)

� 2 � ��� ��� 15

� 3. ���� � �� ���� �� �� (��)

�� �� Tivoli Access Manager 5.1 �� ��� �� �� �� ��� �

AIX 5.2

v Attribute Retrieval Service

v Authorization Server

v Development(ADK)

v Java Runtime Environment

v Plug-in for Edge Server, �� 5.1

v Plug-in for IBM HTTP Server, ��

1.3.26

v Plug-in for Sun ONE Web Server, �

� 6.0

v Policy Server

v Policy Proxy Server

v Runtime

v Tivoli Access Manager for WebSphere

v Web Portal Manager

v WebSEAL Server

v WebSEAL Development(ADK)

���� �� 1 ��

AIX 5200-01 ���� ��� � � �

�� ����.

v xlC.rte(6.0.0.0 C Set ++ Runtime)

v xlC.aix50.rte(6.0.0.3 C Set ++

Runtime)

v 5.2.0.12� bos.rte.libc

HP-UX 11.0

v Attribute Retrieval Service

v Authorization Server

v Development(ADK)

v Java Runtime Environment

v Policy Server

v Policy Proxy Server

v Runtime

v Tivoli Access Manager for

WebLogic(BEA WebLogic Server, �

� 7.0 ��)

v Web Portal Manager

v WebSEAL Server

v WebSEAL Development(ADK)

v XSWGR-1100

v PHKL_25475

v PHSS_26945 ��

v PHSS_25091

v �� �� ��:

– ���: PHSS_26972

– ���: PHSS_26974

– ���: PHSS_26976

– ���: PHSS_24937

16 IBM Tivoli Access Manager for e-business: ���� ��

� 3. ���� � �� ���� �� �� (��)

�� �� Tivoli Access Manager 5.1 �� ��� �� �� �� ��� �

HP-UX 11i

v Attribute Retrieval Service

v Authorization Server

v Development(ADK)

v Java Runtime Environment

v Policy Server

v Policy Proxy Server

v Runtime

v Tivoli Access Manager for

WebLogic(BEA WebLogic Server, �

� 7.0 ��)

v Tivoli Access Manager for WebSphere

v Web Portal Manager

v WebSEAL Server

v WebSEAL Development(ADK)

v PHCO_24400

v PHCO_24402

v PHSS_25092

v PHSS_26946

v �� �� ��:

– ���: PHSS_26971

– ���: PHSS_26973

– ���: PHSS_24975

– ���: PHSS_26977

Red Hat Enterprise Linux 2.1v Plug-in for Edge Server, �� 5.1 GSKit iKeyman ���(gsk7ikm)� ��

� ���� � ��� ����.

pdksh-5.2.14-13.i386.rpm

Red Hat Enterprise Linux 3.0

v Authorization Server

v Development(ADK)

v Java Runtime Environment

v Policy Server

v Policy Proxy Server

v Runtime

v WebSEAL Server

v WebSEAL Development(ADK)

� 2 � ��� ��� 17

� 3. ���� � �� ���� �� �� (��)

�� �� Tivoli Access Manager 5.1 �� ��� �� �� �� ��� �

IA32� SuSE SLES8

v Attribute Retrieval Service

v Authorization Server

v Development(ADK)

v Java Runtime Environment

v Plug-in for IBM HTTP Server, ��

1.3.26

v Policy Server

v Policy Proxy Server

v Runtime

v Tivoli Access Manager for WebSphere

v Web Portal Manager

v WebSEAL Server

v WebSEAL Development(ADK)

libstdc++-3.2.2-5

v S/390 � zSeries� SuSE SLES8(31�

� ���)

v zSeries� SuSE SLES8(64�� ���)

v Attribute Retrieval Service

v Authorization Server

v Development(ADK)

v Java Runtime Environment

v mod SSL� plug-in for Apache Web

Server, �� 1.3.26-36(31�� ��)

v Plug-in for IBM HTTP Server, ��

1.3.26

v Policy Server

v Policy Proxy Server

v Runtime

v Tivoli Access Manager for WebSphere

v Web Portal Manager

v WebSEAL Server

v WebSEAL Development(ADK)

���� �� ��:

v 31��: k_deflt-2.4.19-32

v 64�� ��: k_deflt-2.4.19-34

��� 2 ��:

v 31�� ��:

– k_deflt-2.4.19-79

v 64�� ��:

– k_deflt-2.4.19-80

pSeries � iSeries� SuSE SLES8

v Development(ADK)

v Java Runtime Environment

v Runtime

v Web Portal Manager

���� �� ��:

v kernel-iseries64-2.4.19-104

v kernel-ppc64-2.4.19-108

��� 1 ��:

v kernel-iseries64-2.4.19-194

v kernel-ppc64-2.4.19-186

18 IBM Tivoli Access Manager for e-business: ���� ��

� 3. ���� � �� ���� �� �� (��)

�� �� Tivoli Access Manager 5.1 �� ��� �� �� �� ��� �

Solaris � �� 7

v Development(ADK)

v Java Runtime Environment

v Runtime

32�� ���:

v 106327-18

v 106541-24

v 106950-22

v 106980-22

v 107544-03

64�� ���:

v 106300-19

v 106327-18

v 106541-24

v 107544-03

v 106950-22

v 106980-22

Solaris � �� 8

v Attribute Retrieval Service

v Authorization Server

v Development

v Java Runtime Environment

v mod SSL� Plug-in for Apache Web

Server, �� 1.3.27

v Plug-in for Edge Server, �� 5.1

v Plug-in for IBM HTTP Server, ��

1.3.26

v Plug-in for Sun ONE Web Server, �

� 6.0

v Policy Server

v Policy Proxy Server

v Runtime

v Tivoli Access Manager for WebLogic

v Tivoli Access Manager for WebSphere

v Web Portal Manager

v WebSEAL Server

v WebSEAL Development(ADK)

32�� ���:

v 109147-15

v 108434-05

v 108528-24

v 108827-40

v 111327-02

v SUNWuiu8

v SUNWjiu8

64�� ���:

v 109147-15

v 108434-05

v 108435-06

v 108528-24

v 108827-40

v 111327-02

v SUNWuiu8

v SUNWjiu8

� 2 � ��� ��� 19

� 3. ���� � �� ���� �� �� (��)

�� �� Tivoli Access Manager 5.1 �� ��� �� �� �� ��� �

Solaris � �� 9

v Attribute Retrieval Service

v Authorization Server

v Development(ADK)

v Java Runtime Environment

v mod SSL� Plug-in for Apache Web

Server, �� 1.3.27

v Plug-in for Edge Server, �� 5.1

v Plug-in for IBM HTTP Server, ��

1.3.26

v Plug-in for Sun ONE Web Server, �

� 6.0

v Policy Server

v Policy Proxy Server

v Runtime

v Tivoli Access Manager for WebLogic

v Tivoli Access Manager for

WebSphere(�� 5.0.2 ��)

v Web Portal Manager

v WebSEAL Server

v WebSEAL Development(ADK)

11711-06

Windows NT 4.0

v Development(ADK)

v Java Runtime Environment

v Runtime

��� 6a

Windows XP � 2000 Pro

v Development(ADK)

v Java Runtime Environment

v Runtime

20 IBM Tivoli Access Manager for e-business: ���� ��

� 3. ���� � �� ���� �� �� (��)

�� �� Tivoli Access Manager 5.1 �� ��� �� �� �� ��� �

Windows 2000 Server � Advanced

Server

v Attribute Retrieval Service

v Authorization Server

v Development(ADK)

v Java Runtime Environment

v Plug-in for Edge Server, �� 5.1

v Plug-in for Internet Information

Services, �� 5.0

v Policy Server

v Policy Proxy Server

v Runtime

v Tivoli Access Manager for WebLogic

v Tivoli Access Manager for WebSphere

v Web Portal Manager

v WebSEAL Server

v WebSEAL Development(ADK)

��� 3

Windows 2003 Standard Server �

Enterprise Server

v Attribute Retrieval Service

v Authorization Server

v Development(ADK)

v Java Runtime Environment

v Plug-in for Internet Information

Services, �� 6.0

v Policy Server

v Policy Proxy Server

v Runtime

v Windows 2003 Enterprise Server�

Tivoli Access Manager for

WebSphere(�� 5.0.2 ��)

v Web Portal Manager

v WebSEAL Server

v WebSEAL Development(ADK)

� 2 � ��� ��� 21

����

� Tivoli Access Manager ���� Policy Server �� Authorization Server

�� 5.1� ��� � ����.

v Access Manager Runtime, �� 3.8, 3.9, 4.1 � 5.1

v Access Manager Java Runtime Environment, �� 3.9, 4.1 � 5.1

�:

1. AZN ��� ��� � �� ���� ��� ��� ��� �� �����.

2. �� ���� �� ���� ��� ����� ���.

3. Active Directory �� Lotus Domino� �� ������ ��� ��, ��

Tivoli Access Manager ���� �� 5.1 ����� ���.

Tivoli Access Manager, �� 3.9 � 4.1 ������ � Tivoli Access Manager,

�� 5.1�� ���� ��� ����� � � ����.

v Access Manager Runtime, �� 5.1� �� ���� Tivoli Access Manager, �

� 4.1 � 3.9 ADK� � ��� ������ �����(Solaris� ��).

v Solaris� Access Manager Runtime, �� 5.1� Tivoli Access Manager, �� 4.1

ADK� � ��� ������ �����.

22 IBM Tivoli Access Manager for e-business: ���� ��

���� ������ �� ��

� 4� Tivoli Access Manager WebSEAL, �� 5.1�� ���� �� ���

�� ���� ����� ��� ���� ����.

� 4. ���� ���� �� ��

�� ���� ���� ����� ��

AIX 5.1 v nCipher nForce 300 RSA BSAFE, �� 5.32

v nCipher nForce 300 PKCS#11, �� 5.32

v IBM 4758-023 PKCS#11, �� 2.41

v Eracom Orange PKCS#11, �� 2.11

v IBM 4960 PKCS#11, �� 5.1.0.25

AIX 5.2 v IBM 4758-023 PKCS#11, �� 2.41

v Eracom Orange PKCS#11, �� 2.11

v IBM 4960 PKCS#11, �� 5.1.0.25

HP-UX 11 Rainbow Crypto Swift RSA BSAFE, �� 3.2.0

HP-UX 11i ���� �

Red Hat Enterprise Linux 3.0 v Eracom Orange PKCS#1, �� 2.11

IA32� SuSE SLES8 v Eracom Orange PKCS#11, �� 2.11

zSeries� SuSE SLES8(64�� ���

31�� compat. �� � 31�� ��)

� S/390(31�� ��)

v PCICA - zSeries �� �� 0862

v PCICC - zSeries �� �� 0861, S/390 �� �� 0860

Solaris 8 v Rainbow Crypto Swift RSA BSAFE, �� 3.2.0

v nCipher nForce 300 RSA BSAFE, �� 8.0

v nCipher nForce 300 PKCS#11, �� 8.0

v Eracom Orange PKCS#11, �� 2.11

Solaris 9 v nCipher nForce 300 RSA BSAFE

v nCipher nForce 300 PKCS#11, �� 2.10

Windows 2000 Server � Advanced

Serverv Rainbow Crypto Swift RSA BSAFE, �� 3.2.0

v nCipher nForce 300 RSA BSAFE, �� 8.0

v nCipher nForce 300 PKCS#11, �� 8.0

v IBM 4758-023 PKCS#11, �� 2.41

v Eracom Orange PKCS#11, �� 2.11

Windows 2003 Standard Server �

Enterprise Server

���� �

��� �� ����� �� WebSEAL� � �� ���� ��� ����� �

�� ����� ������. BSAFE ��� ��, WebSEAL� �� � ��

� ��� ����. GSKit� ��� ��� �����. ���� GSKit(�:

WebSEAL)� ���� �� Tivoli Access Manager ���� ����� �

� 2 � ��� ��� 23

����. PKCS11 ��� ��, WebSEAL �� ��� PKCS11 ���� ���

WebSEAL� PKCS11� ����� � ���.

24 IBM Tivoli Access Manager for e-business: ���� ��

� 3 � ��� ��� � ���� ��

� � �� � ����� IBM Tivoli Access Manager(Tivoli Access Manager)

�� �� �� �����. �� �� ��� �� �� ��, �� ���� �

���. �� ���� �� � ��� ���� ����. � �� � Tivoli �

�� IBM Customer Support� ������.

�: � ��� ��� � IBM Tivoli Access Manager for e-business ��� �

� �� 53 ���� � 4 � ��� �� ������ ��� ����.

�� � ����

���� �� � �� �� ����� ������.

Active Directory� �� Windows 2003 ���� �� ���� ���

(44369)

�� ������ Active Directory� ���� Windows 2003 ����� ��

���� �����.

���� ��: �� �� �� ���� ������. �� �� ���� ����

�� �� ���� ���� �� IBM Tivoli Directory Client� ��� ��

�. ������ ���� CD ����:\Windows\Directory� ��� �

setup.exe� �����. �� ����� �����. ��� ��� ����� �

� Client SDK 5.2� ������. ��� �� � �� ���� ������.

�� ���� LDAP ��� Plug-in for Web Server� �� SSL ���

���� ��(44336)

LDAP ��� SSL ��� ���� �� ���� ��� Plug-in for Web Server

� ���� ����. �� �� ��� ������. Plug-in for Web Server ��

���� LDAP ���� SSL �� �� ���� ����.

�� ���� �� ��� Active Directory ����� ���(44046)

�� ��� Active Directory ����� �� ���� �� � �� ID

sec_master� ��� ��� ��� �� � � �� �� ID ��� �

�� ��� �����.

���� ��: Access Manager �� ID� ��� ��� ��� ������.

© Copyright IBM Corp. 1999, 2003 25

Tivoli Access Manager� ����� AIX®� ��� JRE �� 1.3.1.5��� ���� ��� �(41082)

AIX� JRE 1.3.1.5(Tivoli Access Manager CD� ��) ��� ���� ���

���. �� ��� IBM Tivoli Access Manager for e-business Web Security �

� ���� ������.

�� ���� ��� � JDK 1.3.1� Red Hat Enterprise Linux 3��

���(40973, 43956)

Red Hat Enterprise Linux 3.0�� ���� NPTL(New Threading Library)� Tivoli

Access Manager 5.1� ��� JDK 1.3.1�� ���� ����. �� � ���

�����.

���� ��: �� ����� ��� �� LD_ASSUME_KERNEL �� ��� JDK

1.3.1� �� ��� �� ������. �� �, � � ����.

export LD_ASSUME_KERNEL=2.4.0

��

export LD_ASSUME_KERNEL=2.2.5

��, IBM ���(http://www.ibm.com/developerworks/java/jdk/index.html)�� �

� ��� �� JRE ��� � ��� ��� �� �� ����.

Tivoli Access Manager Java Runtime Environment javadocs� �

���� Access Manager Runtime ����� ���� ��� �

(43895)

Tivoli Access Manager Application Development Kit� ��� Javadoc ��� �

��� Tivoli Access Manager Runtime ���� ���� ��� ���. ��

Access Manager Application Development Kit�� �� �� ������ �

� �� ��� �����.

Web Portal Manager� ����� IBM Java Runtime Environment1.3.1� ���(44178)

Web Portal Manager� IBM Java Runtime Environment 1.3.1� ��� ���

� ����. �� JRE(�: Sun Java Runtime Environment)� ��� Web Portal

Manager ��� ��� � ����.

WebSphere Application Server ���� �� ��� ���(44432)

WebSphere Application Server� ���� � ���� ��� ��� ��� �

� ���� �� ����. ��, ���� ��� �� �� �� ��� ��� �

� ����. �� ��� � � �� ���� �� ��� ������.

26 IBM Tivoli Access Manager for e-business: ���� ��

�� �� �� ���� ��� Web Portal Manager� ��

� �, �� �� 80�� HTTP Server� � ��

���� WebSphere Application Server� �� �

�� ��� ��� ��, �� ���� � HTTP

Server� ��� 81� �����. AIX�� �� �

��� WebSphere Administrative Console� ���

9091� �����. ��� ����� AIX� ��

9090�� � �� ���(wsmserver)� �� ��

���.

�� �� WebSphere� �� ����� � ���� �� �

� ���� � �� �� HTTP Server�� ��

80� ���� �� ���� �� 9090� ����

�. �� ���� � ��� �� �� �� ��

� ����� ���� ��� ������.

�� WebSEAL ��� ������� libcdmf.* �� ��� � ��

(44079)

�� WebSEAL �� �� WebSEAL� �� ��, �� libcdmf.* ��� ���

� ���� �� ��� �� ���. �� ��� � ��� �����. �

WebSEAL ��� ��� � �� ��� �� ��� �����.

�� � ����

�� �� � �� �� ����� ��� � ����.

�� ���� zSeries®� Red Hat Enterprise Linux 3.0�� ���

(42163)

zSeries� Linux� Red Hat Enterprise Linux 3.0 Beta 2�� install_amrte ��

���� ��� Access Manager Runtime ��� ��� ��, � ��� �

�� � ����.

[root@metlnx03 am51-030915]# ./install_amrteInstallShield Wizard

Initializing InstallShield Wizard...

Searching for Java(tm) Virtual Machine..............................................................................No matching JVM was found.

���� ��: � � �� �� ����� �����.

java -cp install_xxx_setup.jar run

� 3 � �� �� � ��� � 27

�� Java ��� Java 1.4.1���.

Windows 2000� ��� � Java Runtime Environment� �� � �

�(43948)

Windows 2000�� �� ��� Java Runtime Environment� ��� �� ��

�� ��� � � � �����.

java -cp install_xxx_setup.jar run

�� ��, �� ���� install_amacld.exe� � � � �����.

java -cp install_amacld_setup.jar run

.jar ��� �� ���� ��� ���� ����.

��� �� �� � � �� �� ��� �����.

�� ��� �� �� �� � Policy Server �� ��(43906)

LDAP Server� ���� �� ���� ��� Windows ���� Policy Server�

��� ��, ���� ��� �� Policy Server ��� �����. �� LDAP

Server� ��� �� ���� �� �����.

���� ��: LDAP Server ���� ��� � Policy Server� ������.

2���� ��� �� ���� �� �� �� ���� ���� ��

(37601, 39896, 43907)

2�� � �� ����� --options-record �� --options-template� �

�� �� ���� � ��� ��� ��, ��� �� ��� ��� ����

�����. � �� � �� ��� �� ����.

�� ���� ���� Windows� Web Portal Manager� ��� �

��� ���(44045)

Windows� Web Portal Manager� ��� � ��� ��� ��� � ���

�� �����.

�� �� ibmjcaprovider.jar � ��(44323)

Tivoli Access Manager Java Runtime Environment ���� ��� �

$JAVA_HOME/lib/ext/ibmjcaprovider.jar ��� �� � �� ����� �

� ����� ���� �����. � ��, ����� � ��� ��� �

� ���. �� �� �� �� ext ���� ������ ��� ��

�. JRE� �� ��� ���� ���� � � ��� ��(� �� ���

����)� �� ��� ���. JRE� �� ���� � ��� � ���

� ��� �����. ���, � ��� �� � ���� ����� ��� � JRE

28 IBM Tivoli Access Manager for e-business: ���� ��

� �� � �� ��� ��� �� ���� � ��� � � ��� ��

�� ��� ���� �� ��� � ����. ��� ibmjcaprovider.jar ���

�� Tivoli Access Manager Java Runtime Environment� ���� ����

�� ��� ���� ���� ���.

Microsoft Active Directory ��

Microsoft Active Directory� ��� � ��� � �� �� � ����� �

� ����.

Active Directory �� �� �� �� ��

�� ������ Microsoft Active Directory� ��� � �� �, �� �

�� �� �(DN)� �� �� ���� ����. �� ��, Active

Directory� DN�� ����(\)� ��� � ����. �� ��� Active Directory

��� ������.

Active Directory� ��� � ″� � � � ″ ��

�� ������ Active Directory� ��� � Microsoft Windows 2000 ��

Windows 2003 �� ��� ������ �� � ��� �� ���� ����

��� ���. � ���� ��� � ��, ���� ��� � �� ����

�����. �� ��� � � ������.

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q260371

Policy Server �� � Windows 2003 Active Directory� �����

��� �� �� �� ���� ���� ��� � ��(43908)

Active Directory� � �� Windows 2003�� Policy Server� ��� ��, �

�� ��� �� ��� ��� ���� ����� ��� � ����. ��

��, ���� Policy Server �� ��� � � ��� �� ���� �����.

HPDRG0100E The operation in the Active Directory registry for User:rspi_create_user : : HRESULT = 0x800708C5 (778: c:\am510\src\uraf\ad\urafuser.cpp)failed with return error 800708c5 RunADURAFToolConfig: uraf_create_domain() returnerror 0x16B48065

���� ��: Policy Server� �� �� � �� �� ���� ���� �

� ��� �� ������.

Windows 2000 ���� � ����� �� ����� ��� � �

��� ��(36389)

Windows 2000�� Active Directory� ��� � �� ����� �� �����

��� ��, ��� ���� �� ��� ���� ��� � ��� � ��� �

� ���.

� 3 � �� �� � ��� � 29

1. ���� � ��� ACL� �����(��� ��). ACL� ��� 2���

������.

a. Active Directory ���� � → ���� → � ��� ��� � Active

Directory ��� � ��� ���.

b. Active Directory �� � �� ���� Tivoli Access Manager� ��

�� �� ���� ���.

c. ���� ��� ��� �� � � �� ��� ���.

d. � ��� ivacld-servers � remote-acl-users� ���� �� ��

� �����.

e. � ��� �����.

2. � � �� Tivoli PD ��� ����� �����.

a. Active Directory ���� � → ���� → � ��� ��� � Active

Directory ��� � ��� ���.

b. Active Directory �� � �� ���� Tivoli Access Manager� ��

�� �� ���� ���.

c. Tivoli PD ��� ����� �����.(� ����� �� �� ��� �

�� �� ���� ��� ���.)

d. ���� ��� ��� ����� ��� ��� �� � � ��

� ������.

e. �� ���� �� ��� � IBM Tivoli Access Manager for e-business

Web Security �� ����� Tivoli Access Manager �� ��� ���

�� Active Directory �� � ��� �� Tivoli Access Manager� �

�����.

iPlanet Directory Server �� Sun ONE Directory Server ��

iPlanet Directory Server �� Sun ONE Directory Server� ��� � ��� �

�� �� � ����� � � ����.

iPlanet ����� �� � ��(14785)

iPlanet Directory Server �� 5 ������ ��� ���� Tivoli Access

Manager� ��� �� ���� “� � �� ��” ��� ��� � ���

�. �� � ���� ���� ������ “�” ���� �� ��� ���

� �� ������ ���� �� �� � ����.

30 IBM Tivoli Access Manager for e-business: ���� ��

iPlanet Directory Server� ��� � ��� ��� ��� ���

LDAP_ADMINLIMIT_EXCEEDED ��� ����, Tivoli Access Manager��� �

� ��� �����. � ��� iPlanet LDAP ��� � �� �� �

�� �� �� �������.

iPlanet Console��, Configuration �� ���� Data ��� �����. �� �

, Database Settings ��� ��� � LDBM ���� �� �� ������.

Look-through Limit ����, � �� �� ���� ��� � �� ��

�� ������. �� � �� � 5000���. ��� ���� � ��� -1

� ������.

���� Directory Manager� ��� ��, ����� � ��� ���� �

��� ��� � �����.

iPlanet �� �� �� � ��� ���

Tivoli Access Manager Plug-in for Web Server� ��� iPlanet �� ��(��

��� �: https-admserv)� ��� � pdwebpi.log ��� � � ��� ��

���� �����.

2002-03-16-07:33:31.901+00:00I----- 0x35F02127 pdwebpi ERRORpic Authorization Server pdwebpi_admin_svc.c 323 0x00000001The administration service could not read the configuration information forvirtual host /PDWebPI/https-admserv: 0x35f02002:The requested data is not currently available (pd / pic)

2002-03-16-07:33:31.902+00:00I----- 0x35F02129 pdwebpi WARNINGpic Authorization Server pdwebpi_admin_svc.c 330 0x00000001The administration service could not initialized for virtual host/PDWebPI/https-admserv. Administration service features will not beavailable for this virtual host

� �� ���� iPlanet �� ��� � �� ��� �� �� �� ���

�� ��� �����. ��� ��� Tivoli Access Manager� � �� ��� �

“�� ��”� ��� ��� �� � ����.

ONE Directory Server 5.2��� pdunconfig� ��� ��� � ��

(40621)

Sun ONE 5.2 ���� IBM Tivoli Access Manager for e-Business Server�� �

� ��� ��� �� �� � �� ��� Object does not exist ��� �

� �����.

���� ��: � ��� �����.

1. ��� �� �����.

2. Sun ONE 5.2 ��� ������.

3. secauthority=default ���� ��� � �� ������.

� 3 � �� �� � ��� � 31

Web Portal Manager ��

Tivoli Access Manager Web Portal Manager GUI� ��� � ��� � �� �

� � ����� � � ����.

AIX 5.1�� Web Portal Manager GUI ���

IBM Tivoli Access Manager �� �� ���� Web Portal Manager� �

����� ����� ���� ����.

v Netscape Navigator 4.78 � 6.2

v Internet Explorer 5.5 � 6.0

� ���� ��� AIX ��� �� � ���� �����. AIX 5.1 ����

Web Portal Manager� ���� ���� � ����� ��� � ����. ��,

��� (�� 4.79)� ���� Netscape ��� ��� � ����. � ����

������ ��� Web Portal Manager ��� ��� �� ���� ����

���� �� � ����.

���� ��: AIX 5.1 ���� Netscape 7.0.3� ������.

�� ��� �� ���� Policy Proxy Server� ���� ��(30100� 30128)

Proxy Server� ���� �� Tivoli Access Manager � IBM Directory Server

�� ��� ��� Proxy Server�� ����� ��� � ����. Proxy Server

� ��� �� ��� ����� ����� ��� ��� ����. � �

�, �� Tivoli Access Manager Runtime �� � ��� ��� � ����.

���� ��: � � �����.

1. /opt/PolicyDirector/etc/pd.conf ���� ssl-io-inactivity-timeout

� 0�� ������.

2. /opt/PolicyDirector/etc/pdmgrproxyd.conf ����

[aznapi-configuration] �� �� � ��� �����.

azn-app-host = proxy_hostname

�� proxy_hostname� Proxy Server ���� ��� ����.

3. pdconfig ���� ��� Policy Proxy Server� �� �����.

4. ���� � �� ���� �� ��� �� �����.

5. Policy Proxy Server� �� ������.

32 IBM Tivoli Access Manager for e-business: ���� ��

ACL ��� ���� ��� ���(29961)

ACL ��� ��� IBM Directory LDAP Server, �� 4.1� �� ��� �

�����.

���� ��: � � �� /etc/slapd32.conf ��� � � �� LDAP

ACL ��� ���� ��� ������.

dn: cn=Front End, cn=Configurationcn: Front Endobjectclass: topobjectclass: ibm-SlapdFrontEndibm-slapdSetEnv: ACLCACHE=NO

Web Portal Manager� �� ������ ��� � ��(43847)

�� ���� � �� ����� Web Portal Manager� ��� � � ��

�� ��� �����. � �� � �� ��� �� ����.

WebSEAL ��

Tivoli Access Manager WebSEAL� ��� �� � �� � ����� ��

� � ����.

Active Directory(AD_LDAP)�� ��� �� WebSEAL� ��� �

��(43684)

Active Directory�� �� �� �� ��� WebSEAL� ��� � �

���. ��� ��� ��� ������. ���� �� ��� ��, �

� �� ����� ���� ������.�� �� ���� �����. �

� � �� UNIX �� ��� � WebSeal ���� Active Directory ���� �

��� � Windows ����� �����. ��� �� � �� �� ���

�� ��� ���� ��� ���� �����. ″� ��� � ��″�� ��

�� �� � � ����.

���� ��: Active Directory � policy �� Tivoli Access Manager � �

policy� ������.

��� �� ID ���� ��� ���� ��(IY30623, IY21308)

��� �� ID� ���� Tivoli Access Manager ��� Microsoft Internet Explorer

�� ���� ����. � �� � CIPHER ��� ��� ��� �� ��� �

����.

���� ��: ��� �� ID� �� � WebSEAL Server� � � ��� �

����.

� 3 � �� �� � ��� � 33

1. webseald.confwebseald.conf �� ��� [ssl-qop] ��� �� ssl-qop-mgmt

����� �� ���� ���� ��� ������.

[ssl-qop]ssl-qop-mgmt = no

2. ���� pdweb_start ����� ��� � � ��

GSK_V3_CIPHER_SPECS �� ��� �� ��� ��� ����� �� �

�� �����.

GSK_V3_CIPHER_SPECS=04050A030609020100

3. ���� ��� ���� �� � WebSEAL� �� ������.

UNIX

# /usr/bin/pdweb_start restart

Windows

WebSEAL� �� ���� ��� ���� ������.

Solaris�� WebSEAL� SSL �� �� ��(43387)

UltraSparc Solaris ����� WebSEAL HTTPS SSL �� ��� ����

webseald.conf ���� use RSA �� ������.

UltraSparc� � Solaris ����� WebSEAL HTTPS SSL ��� ����

use RSA �� ��� ���. ��� ��, WebSEAL HTTPS ��� ��

�� ���� WebSEAL �� ��� ���� ����.

��� ���� ��� Red Hat Linux 3.0�� WebSEAL� ���

� �� � � �� WebSEAL ���(webseald)� ��� ��� �����.

WebSEAL� ���� � �� �� pdweb_start ����� ��� ����.

pdweb_start ����� webseald� ���� �� �� �� �� ��� ����

�. Red Hat Linux 3.0�� ����� LD_ASSUME_KERNEL �� ��� ��

���. � � LD_ASSUME_KERNEL� ���� �� webseald� �� �

�� ���� WebSEAL� �� � ����.

���� ��: Red Hat Linux 3.0�� WebSEAL� ���� �� pdweb_start

� ������. pdweb_start� ���� �� ���� webseald� ��� ��

LD_ASSUME_KERNEL� ��� � ��� ���.

export LD_ASSUME_KERNEL= ″2.4.19″

Linux ���� WebSEAL� ��� � �� ���� ���(44078)

Linux ����� WebSEAL� �� � � � �� �� ���� �����.

34 IBM Tivoli Access Manager for e-business: ���� ��

error: cannot remove /var/pdweb/www/log - directory not emptyerror: cannot remove /var/pdweb/www - directory not emptyerror: cannot remove /var/pdweb/log - directory not emptyerror: cannot remove /var/pdweb - directory not empty

���� ��: � �� ���� �����. � ���� ���� �� � �

���.

�� ���� ″�� ��� � ��″�� � �� ��(44086)

″� ��� �� ��″��� �� ���� ″� �� �� ��″� �� ���

����. �� ��,

"�� �� ��� �� ��� �� ��� �������."

�� ����

� � �� ��� ���.

"�� �� ��� �� �� �� ��� �������."

�� ��� ��� �� ��� ���� ��� ��(44083)

WebSEAL� server task remove � � �� ��� ���� � � ����.

�� <server-id>�� �� �� ��� <server-UUID>�� ��� ���. ��

��� ��� IBM Tivoli Access Manager for e-business Command Reference

� ������.

�� �� �� �� ��� �� �� ���� ��(44084)

su-admin� ��� ���� � �� ��� � ��� �� � ��� ��

�� ����. ��� �� � ��� ���� �� � ���� �� ����

���� ����.

��� ��� �� ����� ���(44088)

��� ��� prompt_as_needed� ���� �� � ��� ���� ���

��� ��, ��� POP� ��� �� ����, ��� ″���� ��″��

� �� ���� �� �� ��� ��� ���� �����.

� ��� ���� BASE HREF ��� ���� ��(44090)

WebSEAL �� ��� preserve-base-href� yes� ���� �� � ��� �

����.

HTML ���� BASE HREF="http://server.ibm.com/"� �� BASE ��� �

� �� �� /jct� server.ibm.com� ���� WebSEAL� HREF� /jct/�

���� BASE ��� BASE HREF="https://webseal/jct/"� �����.

� 3 � �� �� � ��� � 35

��� HTML ���� <BASE HREF="http://server.ibm.com">� �� �� �

��� �� BASE ��� �� ��, �� ���� �� ��� �� /jct�

server.ibm.com� ���� WebSEAL� HREF� /jct� ���� jct� ��

��. � ��, BASE ��� <BASE HREF="https://webseal/">� �����.

WebSEAL ��� ���� ����(44095)

help � � �� � ���� ��� ���� �����. help � �� IBM

Tivoli Access Manager for e-business Command Reference� ������.

��� ����� wsadmin ����� �� WebSEAL �� ����

���(44100)

WebSEAL� ��� � wsadmin ������ ��� � �� � �� ���

� ��� �� �����.

Unable to load shared library ’<libname>’

Unable to resolve symbol ’<symbol>’ from shared library ’<libname>’

� �� ���� ��� ����� ��� IBM Tivoli Access Manager for e-business

Problem Determination Guide�� ����� �� ����. ��� �� � ID

�� � ���� ���, wsadmin ������ ����� ��� � �� ��

��. � ������ � ��� ��� ���.

UNIX

/opt/pdweb/lib

Windows

C:\Progra~1\Tivoli\PDWeb\bin

���� ��: � �� � ����, WebSEAL� �� ���� WebSEAL�

���� ��� ��� �� ����� ������ �����. � ���

wsadmin ������� �����. ������ ��� � �� ��� ��� �

�� ��, �� �� �� ������ ��� � � �����.

AMWebARS �� �� ���� �� � �� ��� �� �� ��

� ���(44134)

�� � �� ����� �� AMWebARS ��� �� ����� � webseald

log ��� ���� DynADI �� �� ��� 1005b3b2���. � �� ��� �

� Tivoli Access Manager ��� �� �� �� �� �� � ���� �

��� � ��� � ����.

���� ��: � ��� ��� ��� ��� � ���� �� ���� ��

����.

36 IBM Tivoli Access Manager for e-business: ���� ��

Active Directory� �� ���� ��� � ���� WebSEAL� ��

� � ��(44386)

WebSEAL� � ���� �� � ����.

v UNIX ���� Active Directory� �� ������ ��� �

v Windows ���� Active Directory� �� ������ ��� �� WebSEAL

���� Active Directory ���� ���� � �

IBM Tivoli Directory Server� �� ������ ��� ���� �� � ��

�� ����.

WebSEAL� ��� ���(44082)

webseald.conf ��� accept-client-certs = optional� ���� �� � �

��� ��� ���� � ��� ������ SSL ��� ���� �� ��

� ��� ��� WebSEAL ���� � �� ���� � ���� �� �

�� � � ����. � �� � ������ ���� ����� ��� ��

��� �� ��� �� �(�: ���� � � � )�� �����. ����

�� ���� ���� �� ���� �� � ���� ����.

���� ��: ���� ��� ���, ������� ����� ���� �

� �� �� �� ���� � ����. � � ���� �� ���� ���

� ����. ���� ��� ������ �� ���� ���� ����.

� ��� ���� ��

��� ����� ��� �� � �� �� ����� ��� � ����.

�� ��� URL� Explorer � ��� ���� ��(37028)

BA � ��� �� ���� ��� ��, � ���� �� ��� ���� ��

� �� ��� Internet Explorer 6.0 ����� �� ��� � � �� URL

� �� � ����.

� ��� Internet Explorer 6.0� ���� ����� ��� �� ���� URL

� ��� ��� �� ����.

����� ��� ��� �� �� �� ��� �� ���� ���

(39896)

�� 2�� �� � ���� -options-record �� -options-template� ���

� ��� ��� �� ���� ��� ��� �����. � �� � �� �

�� �� ����.

� 3 � �� �� � ��� � 37

���� ��� � ��� FSSO(Forms Single Sign-On)� �� �

�� ��(39924)

�� ����� FSSO(Forms Single Sign On) ����� <script> ��� �

��� ���� ����. Access Manager ��� ��� �� ��� FSSO� �

�� ���� ����. <forms> �� �� �� HTML�� �����.

Windows ��� ������ ����� �� ���� � ��� ID� ���� Service Unavailable ��� ���(42351)

Windows 2003 ��� ������ Microsoft IIS� IBM Tivoli Access Manager

for e-Business Plug-in� � �� ��, ����� �� ����� �� ID

� ��� ����� IIS� ��� ���. � ID � ��� ���� � ���

, ����� �� ���� ��� �� ���� URI� �� �� �� 503

Service Unavailable ��� �����.

���� ��: Windows 2003 ��� ���� ����� � �� ID � ��

� ����� IIS� ������.

v NETWORK SERVICE

v LOCAL SERVICE

v LOCAL SYSTEM

v <domain>\IWAM_<domain>-<machine>

�� Windows 2003 ��� ���� ����� ����.

SPNEGO ��� Active Directory ���� �� ���� ������

�� �(41078)

��� ���� ����� Internet Explorer ����� ��� ��, SPNEGO�

��� ����� Active Directory ��� �� �� ����� ��� ��� �

���. �� ��, SPNEGO ��� ��� � � � �� �� � ��

�� ��� �� ����� �� ��� ���� ���� ���� ����. �

����� �� ��� �� ����.

Microsoft IIS Plug-in�� ������� �� pdwebpi.conf � ��

(44361)

Tivoli Access Manager Microsoft IIS Plug-in� ������� �� � � ��

pdwebpi.conf ��� ��� ���.

1. pdwebpi.conf ��� ������.

2. iis ��� �����.

3. map-ba-users-to-anonymous ��� �� ������.

38 IBM Tivoli Access Manager for e-business: ���� ��

Microsoft IIS Plug-in� ������ � ��� �� �� ���� � � ���

�.

��� �� � ��� �� URL� ��� ��(44209)

Microsoft IIS 6.0�� Plug-in for Web Server� �� �� ��, ���� ���

��� ��� ���� ���� . �� �� , � ��� ��� ��

pagerror.gif� ���� ����.

<body bgcolor=white><table><tr><td ID=tableProps width=70 valign=top align=center><img ID=pagerrorImg src="pagerror.gif" width=36 height=48>

� �� � ���, �� ��� ���� �� ���� ����� ���

���. �� ��, �� ��� ��� � � ����.

<body bgcolor=white><table><tr><td ID=tableProps width=70 valign=top align=center><img ID=pagerrorImg src="/pagerror.gif" width=36 height=48>

Apache Web Server �� � ��� ��� ���� �� ���� �

��(44273, 44286)

Apache Web Server��, ����� ���� ��� ��� � ���� ��

��� ���� ���� �� �� �����. ��� � �� ��� ��

�� ��� ��� ��� ����. ��� �� ��� ���� ��

� ������ �� �� ����� ��� ���� ��� ����� ��

�� � ����. �� ��� �� ��� � � ��� �� ����� ��

�� �� �� �� ��� ���� �� ���� 403 � �����.

IBM Tivoli Directory Server ��

zSeries� Linux� IBM Tivoli Directory Server �� 5.2 ��(44406)

IBM Tivoli Directory Server �� 5.2� zSeries� Linux� ���� �� ��, Tivoli

Access Manager ����� � � IBM Tivoli Directory Server� ���� �

� �� � ���� ibmslapd.conf ��� ���� ����. ��� IBM Tivoli

Directory Server� ��� ��� ����� ���� �� ��, ibm-slapdSetenv

���� � ����� ���� �� �� � ����. � �� � ����

ibmslapd.conf ��� � � �����.

ibmslapdSetenv: LDAP_MAXCARD=NO

� � ��� ��� ���� �� ibmslapd.conf ��� �����.

� 3 � �� �� � ��� � 39

dn: cn=Front End, cn=Configurationcn: Front Endibm-slapdACLCache: TRUEibm-slapdACLCacheSize: 25000ibm-slapdEntryCacheSize: 25000ibm-slapdFilterCacheBypassLimit: 100ibm-slapdFilterCacheSize: 25000ibm-slapdIdleTimeOut: 300ibm-slapdSetenv: DB2CODEPAGE=1208ibm-slapdSetenv: LDAP_MAXCARD=NOobjectclass: topobjectclass: ibm-slapdConfigEntryobjectclass: ibm-slapdFrontEnd

pdadmin� �� � � Directory Server� �� ���� TivoliAccess Manager ��� ���� ��(43951)

IBM Directory Server 4.1� ��� ��, pdadmin �� �� �� � Directory

Server� �� ��� pdmgrd ����� ���� ����. � �� � IR50309

�� ������(IBM Directory Server 4.1� ��).

���� ��: IBM Tivoli Directory Server� �� �� � ������.

Tivoli Access Manager ��

Tivoli Access Manager� ���� �� ��� � �� �� � ����� �

� ����.

SSL� ��� �� � LDAP Server � ����� ���� �(18832)

Tivoli Access Manager ��� �� ����� �� �� ��� SSL� ���

��, ��� ��� �� � � �� � �� SSL� ��� ���.

���� ��: �� ��� �� � � ���� SSL� ������.

pdadmin object delete � � ���� ��� � ��(27173)

pdadmin object delete � � ��� ����� ��� ����� ��� �

��� ����. ��� ��� ����� ��� �� ��� ��, ����� �

� ����� �� ���� ��� � ����. �� ���� �� ���� ��

� ����� �����.

���� ��: ispolicyattachable �� ��� ����� ������. ���

���� �� ����� ���� pdadmin objectspace delete � � ����

��.

40 IBM Tivoli Access Manager for e-business: ���� ��

��� �� � � � �� �� ��� � ��(24411)

ivmgrd.conf �� ��� [ssl] ���� ssl-auto-refresh ��� yes� �

�� pdmgrd ��� � �� � � �� ��� ���� ����. � �

��� ��� �� ��� ���� �� ���� � �����.

LDAP��� ���� � �� ���� ���� Policy Server ����

�(28114)

IBM Tivoli Access Manager Upgrade Guide� ��� ��� �� ��� ��

��� ���� ��� ��� Policy Server� �� 5.1� ������� �� IBM

Directory Server �� iPlanet Directory Server� �� LDAP �� ������

��� ���� �����. � ��� �� ������ ��� ��, �� ��

� ����� ����� ��� Policy Server� �� 5.1� ���������.

�� ��� ��� � Windows�� Policy Server � AuthorizationServer� ���� ��(IY34142)

��� ��� ��� ��, Microsoft Windows ����� Policy Server �

Authorization Server� ���� ���� � �����. �� ��, ivmgrd.conf

�� ��� � � �� ��� ��,

logaudit = yeslogcfg = audit:pipe path=d: /log_test/pipelog1.exe

Policy Server� ���� � ����, � � ��� �� ���� msg_warning.log

�� ��� PipeLogAgent.cpp� �����.

0x000001e4 ��� ����� ��� � ����.

���� ��: ����� ����� ���� Policy Server � Authorization

Server� ������. � � �� �����.

1. � → �� ���.

2. � �� �� �� ��� � � � ��� Policy Server� �����

�� ����.

pdmgrd -foreground

3. �� �� �����. �� ��� �� , Authorization Server� ����

��� ���� � � � ������.

pdacld -foreground

�: -foreground � -version� �� ����. � �� pdmgrd �� pdacld

� �� Windows ����� �����.

� 3 � �� �� � ��� � 41

Tivoli Access Manager �� 5.1� �� ����� ��� Java ��

���� ��� ���(24996)

Tivoli Access Manager �� 5.1� �� ���� Tivoli SecureWay Policy Director

�� 3.8 ADK� ��� pdperm.jar �� �� Tivoli Access Manager �� 3.9

Java Runtime Environment� ���� Java ������ ��� ��� ���.

� ��� ���� Tivoli ��� IBM Customer Support� ������.

Solaris��� Policy Director ������ �� ��� �

Sun Solaris � ���� Tivoli SecureWay Policy Director �� 3.8 ADK� �

�� ��� ������ Tivoli Access Manager ������ ��� ��

��� ���. �� ���� � ��� �����. � ��� ����

���� �� �� ����� �������.

AIX�� ���� ���� � ��

�� ���� ����� ��� ��� IBM AIX �� 5.1� ��� � ����

�� ���� Policy Server� � �� ��� ���� � �� �� � �

���. ��� � � ���, � ��� � ���� �� ���� �����

Tivoli Access Manager Policy Server� ������ ��� ���� �� � �

���. �� � � � �� �� ���� �� ������ Policy Server ��

� ��� ��� � ����.

��� ����� ��� ����� ��� ����.

� �� � ��� � ��� �� ��� ��� ���� ����. � ��,

� ��� � �� ��� �� ���� � AIX ���� ����.

v � ��� Authorization API Sever � Policy Server

v �� ��� Authorization API Sever � Policy Server

v �� ��� Authorization API Sever � Authorization Server

v pdadmin ��� � Policy Server

v �� API � Policy Server

v Policy Server, �� Authorization API Sever(�: Authorization Server) ��

WebSEAL

v svrsslcfg ��� � Policy Server

���� ��: PD_FIXED_CLIENT_IP �� ��� AIX ����� �� ���

��� IP ��� ������. � 192.168.51.79� �� ��� �� ��� �

�� ���.

route � � ���� ��� �� ��� ���� ��� � �� � ���

� �� ��� �� ��� ���� ���� � � ����. �� ��, ���

42 IBM Tivoli Access Manager for e-business: ���� ��

� � �� ���� �� �� �� ��� ����� �� �� ������

� � ����. � ��� �� ��� �� �� ��� AIX ��� �����

�.

���� ��� �� IBM HTTP Server �� ��� (19559)

IBM HTTP Server mod_dir ��� ��� ���� �� ���� ����

��. ��� �� ���(/)� ����, � ��� ���� ��� ������

redirect(HTTP �� 302)� ���.

���� ��, � ��� ��� ������ �� �� URL(�� ��,

http://server/dirname)� � ���� � mod_dir �� URL

(�: http://server/dirname/)� � ����� ���. ��� ������ �

� ��� �� ����� ���� � ����� ���� � � ���� ��

� ���� ���.

�� IBM HTTP Server mod_dir ��� ���� ������ � ��� ���

� ����. ��� � ��(���� ��� ��� POP � ���� �� ��

�� URL ���)� ������ ����.

��, �� �� ��� �� ����. �� �� ��� ��� �� ����.

HTTP �� ��� �� ��� ��� (20633, 20631, 20735)

��� �� ��� ���� � HTTP ��� ��� �� �� ���� �

� � ����. ″���� ��″ ����� �� ���� Tivoli Access Manager

��� policy� �� � �� � � �����.

�� ���� ���� ��� policy� ���� ����� �� �� ����

� � ���� ����. ������ ��� ����� �� ��� ��, �

��� ����. ��� �� �� ����� � �� ���� �����.

��� �� ��� POP� ��� ���� ��� http://servername/

directory� ����� ����.

� � � � � � � � � � � � � � � � � � . � � � � � � � � �

http://servername/directory/index.html� �� ������(�� ��� ��

http://servername/directory/� �� ���).

������ � URL�� GET� �� �� ���� ����. ��� POP�

���� ����� �� ��� ���� � ���� ����. ��� ����

�� ��� ����� ���� �� �� ����� � � ��� �� ��

� � ����.

� 3 � �� �� � ��� � 43

��� ��� �(�� ����� �� � � �� � �� ��� ���

��)�� �� ���� ��� �� ����.

�� ��� �� ������ �� �� ����� ��� � �� ���� �

����. � ����� �� ���� �� ��� ��� �� ������.

� ��, �� �� ���� ���� �� ��� � � ��� �� � ��

���� �� � ����.

WebSphere Application Server� Tivoli Access Manager� � �

��� HP-UX�� ���� ��(28015)

WebSphere Application Server 4.0�� WebSphere ��� ��� �� WebSphere

������ ���� �� � ���� ��� ���� ����. IBM Tivoli

Access Manager for e-business IBM WebSphere Application Server �� ���

��� Tivoli Access Manager� ��� �� ��� �� ������ ��

� �� ���� � �� �����. ��� ���, WebSphere Application

Server ��� HP-UX ����� WebSphere ������ ���� �� � �

���. �� ��, �� ������ ��� �� ��� �� ��� Tivoli

Access Manager for WebSphere Application Server� ��� � ����.

���� ��: �� � ���� WebSphere ��� �� � ����. ���

� � �� ��� ��� IBM Tivoli Access Manager for e-business IBM

WebSphere Application Server �� ���� ������.

� � ��� BEA WebLogic Server� ��� � ��

java.lang.OutofMemoryError ��� �����.

� �� Tivoli Access Manager for WebLogic Server �� �� � BEA

WebLogic Server� � �� ���� � � ����.

���� ��: startWebLogic ������ JVM(Java Virtual Machine)� �� �

�� �� �����. �� ��, � � ����.

%JAVA_HOME%\bin \java -ms64m -mx128m

��� ����� � �� ��� �� ���� � � ����� ��� ���

� � ���� � ��� ��� BEA �� ��� ������. �� ��� �

�� � ��� ���� ������ ���� ���. ��� � � � ��

� �� �� �� ����� � URL� ������.

http://edocs.bea.com/wls/docs61/perform/index.html

44 IBM Tivoli Access Manager for e-business: ���� ��

Microsoft �� �� �� � Policy Server ��� ��� � ��

(43306)

�� Active Directory �� ���� Microsoft �� �� ��� ��� � Active

Directory ���� �� URAF ���� ��� � �� ��� Tivoli Access

Manager Policy Server ��� ��� � ����. �� ��� � �� ����

�� ��� �����. � ��� ����� ��� �� Microsoft �� ��

��� MS03-026(KB823980) � MS03-039(KB824146)���.

���� ��: � �� � ��� ��, �� � ��� ��� ��� Microsoft

�� ��� �� �����. �� � , Policy Server� ���� Microsoft ��

��� �� ������.

�� ��� �� �� �� Active Directory� �� ��� ���.

Microsoft Internet Explorer� �� �� � ��� ��� ��� �

� �� ���(43398)

Internet Explorer� �� ��� ��� ���� �� ��� �� �� ���� �

� �� �����.

�� ��, https://web.server.com:444/� � https://web.server.com/� �

� ����� �� �� �� Internet Explorer� �� � �

web.server.com:444� ��� � � � � �� �����.

���� ��: ��� IP ��� �� �� ��� �� ��� � ��

��� ��� �� �� ������.

Authorization Server(pdacld)� �� �� ��� ��(43511)

���� ����, Java �� API� �� �� � � ��� ���� Authorization

Server(pdacld)� �����. ��, �� �� �� AZN ������ �� ��

� �� ��� �����. �� �� �� Authorization Server� ��� �

�� policy� ��� ��, � ��� ��� Authorization Server� ���

���. �����, Authorization Server� ������ �� ��� policy ��

��� ��� � ����. ��� policy� � � ����, �� �� pdadmin

� � ��� Authorization Server� securitygroup� �� ���. �� �

�, � � ����.

pdadmin> group modify securitygroup add ivacld/<machine_name>

�� �� ivacld.conf ��� ����.

�� ���� �� ��, Authorization Server� ��� policy(�: ��� ��� �

� ��)� ����� �����. ��� ��� � �� �, Authorization Server

� 3 � �� �� � ��� � 45

� ���� ��� ���� � ����. pdadmin �� � ����� ����

��� �� ��� ��� ���� Authorization Server� �����.

�� ��� Authorization Server �� ��� � ��� � ��� ���� �

��� �� ��� � ���.

Windows ��� � �� �� ��� ���� WebSphereApplication Server� Tivoli Access Manager� �� ��� � � �

���� ���� ���� ��(43612)

Microsoft Windows ���� � �� �� ��� ��� IBM Tivoli Access

Manager for WebSphere Application Server� �� ��,

c:\Program Files\Tivoli\amwas ���� �� ��� ��� ��� �

� ���� ����.

���� ��: IBM Tivoli Access Manager for WebSphere Application Server�

�� �� � ���� c:\Program Files\Tivoli\amwas ���� �����

�.

�� �� �� �� ��� �� ��� �� ���� Tivoli AccessManager Java Runtime Environment� ��� ���(43896)

Tivoli Access Manager Java Runtime Environment(PDJRTE)� �� �� ���

� �� � � �� ��� �� ��� ��, ��� ��� ����� ��

��.

���� ��: PD.properties ��� ��� � � �� ��� �� ��

�� Tivoli Access Manager Java Runtime Environment� �� �� � ��

������.

Tivoli Access Manager Runtime Environment �� �� � �� ��

�� ���� ���(43904)

Tivoli Access Manager Runtime Environment �� � � �� �� ��� ���

��� ��, rpm � � �� ���� � ��� �� � ��� �� ���

� �����.

���� ��: ��� ��� ����. ��� ��� �� �� � �����

��� � ��� ��� ��� � ���� �� ����.

Tivoli Access Manager� �� �� � �� ��� ���� � �

��(43933)

�� ������ LDAP� ��� ��, Tivoli Access Manager� LDAP Server

� ��� �� ��� LDAP ��� ��� �����. �� � , Tivoli Access

46 IBM Tivoli Access Manager for e-business: ���� ��

Manager� � ��� ��� ��� �� � �� ��� ����. � ���

���� ���� �� �� � Tivoli Access Manager� �� � �� ���

��� ��� ����. Tivoli Access Manager� ��� �� � ���� �

� ��, ��� ���� ��� ACL(Access Control List)� �� Tivoli

Access Manager�� � ���� ��� � �� ��� ��� � � ���. �

� ��� ��� IBM Tivoli Access Manager �� �� ���� ���� ��

��. ACL� �� � Tivoli Access Manager� � ��� �� �� � ���

��� � ����.

�� �� ��� ���, Tivoli Access Manager� �� ��� �� ���(�

� � LDAP��� ��� ���) �� �� � ��� ���� ���� ��

��. � ��� �� �� �� ��� ���� ��, Tivoli Access Manager

� ��� �� ���� �� � � ���� � ��� ��� ��� ����.

���, �� �� ��� � ��� �� ������ �� ��� �� ��� �

�� Tivoli Access Manager� �� ���� ��� �� ����. �� ��, �

� �� �� ��� ��� ����.

c=nodc=DnB,dc=no

� � �� � ���� ��

dc=postbanken,dc=no

� ��� �� ��� ��� � ��� ��� ACL� ��� ��� � ���

�� ���� Tivoli Access Manager� �� ��� ��� �� ����� ��

��� � ����. �� ��, Access Manager� �� ��� �� �� ���

�� �� � ����. �� ��� ��� ��� �� ���� Tivoli Access

Manager� �� ��� ���.

SvrSslCfg ��� �� ��� �� �� ���� ���(43701)

� � �� �� ��� Java SvrSslCfg ���� ��� �� � � �� �

�� �����.

HPDJA0809E ��� �� �� ���� ��� ��� � ����.

�� � � �� ������. �� ���� � � �����.

HPDJA... ��� �� �� ���� ��� ���� � ����.

� �� � �� ��� �� ����.

� 3 � �� �� � ��� � 47

SuSE Linux Enterprise Server 8� Tivoli Access Manager� ���

� Policy Server(pdmgrd) � Authorization Server(pdacld)� ���

���(36687, 37558)

SuSE Linux Enterprise Server 8� Tivoli Access Manager� ��� � Policy Server

� ACL ��� ���� � ��� � ����.

���� ��: Tivoli Access Manager� ���� �� ivmgr ��(�� �� �

�)�� LDAP SSL � �� � � � ��� ���� � � �� ��� ��

� � ����.

Tivoli Access Manager for WebSphere Application Server ���

��� ��� ����� ������� ��� � ��(28418)

Tivoli Access Manager for WebSphere Application Server ����� ���

� migrateEAR�� � ��� �� ��� �� �(DN) ��� ���

�. DN� ��� �� ��� ���� �� ��, UNIX � � ���� � �

��� �� �� � migrateEAR ���� �����. �� ��, � ��

�� �� ��(o=)�� ��� �����. o=Sales Division,c=us

migrateEAR � � Java � ��� ���� � ����. Java � � �

� ��� � DN ���� ����� �� DN� � �� �� �� � �� �

����. �� ��, WebSphere Application Server� /opt/WebSphere/AppServer

���� ���� ��� ��� ��, � � DN� �� ��� ″o=Sales

Division,c=us″� � � ��� � ���.

��� Java � � IBM Tivoli Access Manager for e-business IBM WebSphere

Application Server �� ��� �� A� migrateEAR �� ���� ���� �

���.

WebSphere Application Server��� ������ �� ��(21935)

����� ���� migrateEAR�� � ��� ��� � ����.

"��� �� ID� ���� ����."

/opt/WebSphere/AppServer/java/jre/bin/java \-Dpdwas.lang=/opt/WebSphere/AppServer/lib:/opt/pdwas/nls/java \-cp /opt/WebSphere/AppServer/lib/xerces.jar:/opt/pdwas/lib/migrate.jar:/opt/pdwas/nls/java \com.tivoli.pdwas.migrate.Migrate -j /opt/WebSphere/AppServer/config/your_application.ear \-a sec_master -p sec_master_password -w wsadmin -d "o=Sales Division,c=us" \-c file:/opt/WebSphere/AppServer/java/jre/PDPerm.properties

�� 1. migrateEAR ��� ��� �� �� Java �

48 IBM Tivoli Access Manager for e-business: ���� ��

WebSphere Application Server�� ����� ��� ������ �� ����

� ������ ��� ��� �� ��� ��� � ����. � �� ���

migrateEAR ���� � Tivoli Access Manager �� ��� ������

��.

��� WebSphere ��� ��� LDAP �� ������ �� WebSphere

�� ��� ������ ����. �� ������ ��� ��(EAR)� �

�� ��� � ����. � ��� ��� �� � �� �� �(DN)� ��

��. ����� ���� EAR ��� � ��� ��� �����.

����� ���� �� ��� ���� XML ��� �����. �� � �

�� ���� ″�″ �� ��� ���� ���� � ��� ������.

XML ��� �� � � ����.

ibm-application-bnd.xmi

�� ��, �� ��� � � �� ��

.....<groups xml:id="Group_1" name="customer, o=ibm, c=gb"accessId="group:server1.uk.ibm.com:3899/cn=customer, o=ibm, c=gb"/>.....

� � �� ��� ��� ������.

.....<groups xml:id="Group_1" name="customer"accessId="group:server1.uk.ibm.com:3899/cn=customer, o=ibm, c=gb"/>.....

�� ���� � Tivoli Access Manager ���� ��� �� ���

��� ��� ���(43748)

AMWAS� � AM ����� AM ���� �� �� �� �� � �����

��� � � ������� �� migrateEAR4 � migrateEAR5 ���

� -b �� ����.

���� ��: WAS ����� �� ��� AM ���� ��� �� ��

� ������� migrateEAR ���� ��� � -b �� ������.

������ ��� ACL� ������� ��� � � �(44245)

� ��� ���� ��� ACL� ��� ��, ACL� ��� � �� ���

����� ��� ��� � ����. ��� ����� ��� �� � ��

�� ����. � �� � ����, ������ ����� ACL� ��

�� ��� �� �� ���� ����.

� 3 � �� �� � ��� � 49

������ ��� policy� ������� ��� � �(44410)

����� ��� ″����� �″�� ���� ��� �� policy� ��

����� ��� � ����. ������ �� �� policy� ������

��� ���� pdwas_migrate.log ��� ����. �� ��� ��� �

����� ��� ���� � � �����. ��� �� ���� � �

����� ��� ������. �� � ��� ����� ��� �� �

����.

UNIX � ���� pdbackup � � ��� � � ���� ���

(44285)

UNIX �� ����� pdbackup � � �� � � ���� �� � ��

��.

sh[2]: ./var/PolicyDirector/log/msg__pdmgrd_utf8.log:0403-006 Execute permission denied.sh[3]: ./var/PolicyDirector/log/msg__pdmgrd_utf8.log:0403-006 Execute permission denied.

� ���� �� � ����. msg__pdbackup.log ��� ��� � � �

�� � � ������ � � ����. pdbackup � � � ��� �

��� � �� �� ��, ��� ��� ����.

pdwascfg �� � jlog.properties �� ���� ��(44410)

-action_type local �� �� pdwascfg � � ��� WebSphere Application

Server� ��� jlog.properties ��� ���� �� � ����. ��� �

��� ����, jlog.properties.template ��� WebSphere Application Server

� ���� �� etc ���(PDWAS_HOME ������ �)�

jlog.properties� �����.

zSeries� Linux� WebSphere Application Server ��� ���

(44540)

zSeries� Linux� WebSphere Application Server� �� Tivoli Access Manager

� ��� �, � � WebSphere Application Server 5.02 ���� ��� � ��

� ��� ��� � ��� SystemOut.log� � � ��� ��� �����.

org.xml.sax.SAXParseException: Element type "properties" must be followed byeither attribute specifications, ">" or "/>".at org.apache.xerces.parsers.AbstractSAXParser.parse(AbstractSAXParser.j

� ��� /opt/WebSphere/AppServer/config/cells/hostname/security.xml �

�� �� ���(>)� ��� ��� � ����.

50 IBM Tivoli Access Manager for e-business: ���� ��

��� ���� � � �� � �� � �� ‘>’� �����. �� ‘>’

� ��� �� �������. (��: � � ���� ��� � �� ����

�.)

<properties xmi:id="Property_1067638223188"name="com.ibm.security.useFIPS"value="false"/><properties xmi:id="Property_222"name="com.ibm.websphere.security.authorizationTable"value="com.tivoli.pdwas.websphere.PDWASAuthzManager"/></security:Security>

Tivoli Access Manager� �� ��� �� �� Java �����

� ��� � NoSuchMethodErrors� ��� � ��

��� �� ��� �� Tivoli Access Manager Java Runtime� � ����

� ���� ���� Java ������ Tivoli Access Manager �� 5.1 Java

Runtime� � � � Java NoSuchMethodError� ������.

public static void createPop(PDContext context,String id,String description,com.tivoli.mts.PDAttrs attributes,PDMessages messages)

public static void createAcl(PDContext context,String id,String description,HashMap aclEntriesUser,HashMap aclEntriesGroup,PDAclEntryAnyOther aclEntryAnyOther,PDAclEntryUnAuth aclEntryUnAuth,com.tivoli.mts.PDAttrs attributes,PDMessages messages)

public static void createProtObject(PDContext context,String id,String description,boolean isPolicyAttachable,String aclId,com.tivoli.mts.PDAttrs attributes,PDMessages messages)

� �� � �� ��� �� �� ���� � ���� ��� ��� �

����� �� ���� ����. ���� ��� datatype com.tivoli.

mts.PDAttrs ��� datatype com.tivoli.pd.jutil.PDAttrs ��� ���.

��� �� �� Tivoli Access Manager �� 5.1 Java Runtime� �� ����

��� �� ���� ���� Java ������ ��� ��� ���. �

��� ���� Tivoli ��� IBM Customer Support� ������.

� 3 � �� �� � ��� � 51

52 IBM Tivoli Access Manager for e-business: ���� ��

� 4 � ��� �� ����

� ���� IBM Tivoli Access Manager(Tivoli Access Manager) ��� � �

�� ��� ��� ���� ��� �� ��� �����.

��� ��� � ���� ��

� � �� � ����� � ��� Tivoli Access Manager ���� �� �

� �����. �� �� ��� �� �� ��, ��� ���� ����.

�� ���� �� � ��� ���� ����. � �� � Tivoli ��� IBM

Customer Support� ������.

�� ��� Tivoli Access Manager� ��� �� �� � 25 ���� � 3 �

��� �� � ��� ���� �� � ����.

Red Hat Linux 7.1� � ��� �� ��� ��� �� ���

� ��� � ���� � �� Red Hat Linux 7.1 ���� Tivoli Access

Manager� ���� �� ��� ��� ���.

v ���(eucjp, ja_JP.eucjp)

v ���(zh_TW)

/etc/ld.so.conf ��� ���� � � �����.

/usr/lib/gconv

��� ��� iconv � �� �� ������ ���� � ��� �� �

�����.

Active Directory� ���� DBCS ����� �� �� �� � ��

(44415, 44312)

pdadmin group list � user show-groups � � ��� ��� Active Directory�

�� ������ ���, DBCS ������ ���� �� �� �� � �

���.

Linux ������ �� �� � �� ��� ���

Red Hat Linux ����� ���� � ���� ��� � �� ��� ja_JP.eucjp

���. �� ��, � � ����.

LANG=ja_JP.eucjpLC_ALL=ja_JP.eucjp

© Copyright IBM Corp. 1999, 2003 53

�: ja_JP.eucjp� ��� ��� ���� ���� ������. �� ��,

ja_JP.eucJP�� ���� ���� �� ��� �� ���, ���� �

���.

��� SJIS� ���� ����.

Linux ����� �� ��� ��� �� ��

� ���� �� �� ���� ��� Red Hat Linux ����� Tivoli Access

Manager� ���� �� � �����. �� ��� EUC� ���(BIG5)�

����. ��� SJIS� ���� ����.

1. XWindows ���� ��� ��� � ���� Red Hat Linux� �����

�. X� ��� �, X� �����.

2. Tivoli Access Manager Runtime ���(PDRTE)� ������.

3. � �� ��� �� � ������.

# ./pd_lp

4. �� ���� ���� Policy Server� � Tivoli Access Manager Runtime

� ������.

��� EUC:

1. � � � �����.

# export LC_ALL=ja_JP.eucjp# export LANG=ja_JP.eucjp# rxvt -km eucj &

2. rxvt �����, pdconfig � � ��� �� ��� ���� ���

�� ����.

���:

�� ��� ���� �� � ���� ����. ��� ��� Red Hat

Linux� ���� �� ����.

1. � � � �����.

# rpm -i cxterm-5.1p1-2.i386.rpm# export LANG=zh_TW# export LC_ALL=zh_TW# cxterm -big5

2. cxterm�� pdconfig � � �� � �� ��� ���� �����

������.

cxterm ���� � ���� ����� � ����.

http://www.rpmfind.net/linux/RPM/contrib/libc6/i386/cxterm-5.1p1-2.

i386.html

54 IBM Tivoli Access Manager for e-business: ���� ��

�� ���� � ���� ��� ���� ��(28420, 28422)

�� ��� ��� �� ���� � � ���� ����. � � �� ���

����.

v Policy Server SSL �� �� ��� ���� ���� ���� � � �

��� �����.

v ���� ��� ��� ��� � ���� ���� �����.

�� ��� ��� ��� ���� ���� ��(28453)

�� ��� ��� ���� � �� ��� �� ���� ���� �� � �

���. �� � ����, ���� ��� �� ��� �� ��� ������.

� ��� �� ��� �� �� ���� �����.

Windows� ��� LANG ��� ��� �� ��� ���

Windows ���� LANG ��� ���� ��, ��� �� �� ��� ���

��� �����.

� �� Windows ���� � � �� ��� ���� ���

(26899)

Microsoft Windows ����� ��� � (�: svrsslcfg, bassslcfg, mgrsslcfg �

pdjrtecfg)� ��� ��� �� ���� ��� �����. � ��� 1�� �

� ���� ���� �����.

��� �� ���� ��� ����� �� � � �����.

1. �� � � �� ���.

2. � � � ������.

chcp 1252

3. � ���� �� � �� �� ���.

4. Lucida Console �� True Type ��� ��� � ��� ���. � �

���� �� �� ���� �� �� ������.

�� � �� ��� � � ��� �� ���� ��� �����.

�� ��� ASCII �� �� �� ��(26985)

�� �� ASCII ��� �� ���� ����. Tivoli Access Manager� �

���� ���� ��� �����. � ���� Policy Server� ���� �

� ������ UTF-8(Universal Character Set Transformation Format-8)�� �

����. �� 5.1� ��, ���� azn-api ������ � ��� �����

�. WebSEAL� ��, �� �� ���� �� ��� � ����.

� 4 � �� �� ���� 55

Web Portal Manager� ���� �� ���� �� ���� �

(IY32306)

Web Portal Manager ���� �� �� � �� ��� ��, ��� ���

� �� �� ���� �� ��� ���.

Java� ��� ��� ���� ��� ��(IY31894)

��� � ��� ���� �� �� ���� ���� ����. ���, �� �

� Java�� �� � � ���� � ��� ��� � � ����. ��

��, ��� ���� ��� �� JRE� ��� ���� X11.fnt.ucs.ttf ��� �

���. �� �� ��� �� �� � ��, JRE �� � �� ���� ��

����.

Policy Server� AIX �� � ��� ���(12584)

� ��� ��� ���� �����, Tivoli Access Manager Policy Server�

pdmgrd� ��� � ��� ���� � ��� �� ����. Policy Server

� ��� ���� �� ��, pd_start ���� ��� ���� �����

�.

pd_start start

2���� ��� �� ���� �� �� �� ���� ���� ��

(37601, 39896, 43907)

2�� � �� ����� -options-record �� -options-template� ��

� �� ���� � ��� ��� ��, ��� �� ��� ��� ���� �

����. �� �� ��� �� ����.

����� ��� ��� �� �� �� ��� �� ���� ���

(39896)

�� 2�� �� � ���� -options-record �� -options-template� ���

� ��� ��� �� ���� ��� ��� �����. �� �� ���

�� ����.

�� Windows ����� Plug-in for Web Server� �� ����

���(44565)

��� Windows ����� Plug-in for Web Server ��� �����.

���� ��: � ��� �� �� ���� ������.

c:\program files\tivoli\pdwebrtec:\program files\tivoli\pdwebpi

56 IBM Tivoli Access Manager for e-business: ���� ��

���� � �� ���� ��� � ������� ��� ���� �

�(44080)

����� � �� ���� ��� � �� ������� ������ �����.

BEA WebLogic ��� ��� � �� ���� � � ���� ���

(44219, 44398)

BEA WebLogic ��� ���� �� � ��� �� ��� �� ���� �

�, �� �� ��� ���� �����. BEA WebLogic ��� ���� �

� JDK �� JRE� ��� ��, �� � �����. � �� � �� �����

���� � ��� ����. ��� � �� � ���� IBM JDK �� JRE

1.3.1� ��� � �� ��� install_amwls� �����.

SuSE Linux Enterprise Server 8� Tivoli Access Manager� ���

� Policy Server(pdmgrd) � ACL ��(pdacld)� ��� ���

(36687, 37558)

SuSE Linux Enterprise Server 8� Tivoli Access Manager� ��� � Policy Server

� ACL ��� ��� ��� � ����.

���� ��: Tivoli Access Manager� ���� ��, ivmgr ��(�� �� �

�)�� SSL � �� � � � ��� ���� � � �� ��� ��� �

����.

� 4 � �� �� ���� 57

58 IBM Tivoli Access Manager for e-business: ���� ��

� 5 � ��� �� ��

� ���� IBM Tivoli Access Manager for e-business ������ �� ��

� �� ��� � �����.

IBM Tivoli Access Manager Upgrade GuideIBM Tivoli Access Manager Upgrade Guide� �� Tivoli ����� ����

�� http://www.ibm.com/software/tivoli/library/� White Papers ��� ���.

IBM Tivoli Access Manager Base Administration Guide(44534) ″Chapter 18. XML output for logging and auditing logs″�� 187 ��

�� � 8� �� <source> ... </source>� �� ��� � � ����. ��

� � � �� ��� ���.

Output Field Name Description

<source>...</source>

The source event can be one of the following:

cred Applies to any Tivoli Access Manager

component.

app Applies only to an authorization (azn)

component.

ruleADI

Applies only to the authorization (azn)

component when evaluating a Boolean

rule. The rule ADI value describes

Boolean rule access decision information

that may have been retrieved from the

credential, application, authorization, or

through an attribute retrieval service.

�: In product audit logs, if the dynADI value

is listed, it should be interpreted as ruleADI

instead.

IBM Tivoli Access Manager for e-business Authorization C APIDeveloper Reference

7 ���� ″Chapter 1. Authorization API overview″�� ��� ���� ��

�� � � �� ��� ���.

© Copyright IBM Corp. 1999, 2003 59

IBM has tested the use of the IBM Tivoli Access Manager Application Developer

Kit (ADK) component with the compilers listed in the table below. Previous

versions of the compilers are not supported. Compilers on other supported platforms,

such as IBM AIX 5.1 or HP-UX 11i, have not been tested.

Operating system platform tested Tested compiler

IBM AIX 4.3.3 IBM Visual Age C/C++ 5.0.2

Sun Solaris Operating Environment 5.7 Forte 6.1 with patches 109505-11, 109508-09,

109510-06, 109513-11

Hewlett-Packard HP-UX 11.0-11.01.07 AnsiC/3.30 aC++

Red Hat Enterprise Linux for xSeries® GNU GCC 3.2.2

SuSE Linux Enterprise Server 8 for xSeries GNU GCC 3.2.2

SuSE Linux Enterprise Server 8 for S/390® and

zSeries

GNU GCC 3.2

SuSE Linux Enterprise Server 8 for pSeries® GNU GCC 3.2-32

Microsoft Windows 2000 Advanced Server Microsoft Visual C/C++ 6.0.5

IBM Tivoli Access Manager for e-business Administration C APIDeveloper Reference

4 ���� ″Chapter 1. Introducing the administration API overview″�� ���

���� �� �� � � �� ��� ���.

IBM has tested the use of the IBM Tivoli Access Manager Application Developer

Kit (ADK) component with the compilers listed in the table below. Previous

versions of the compilers are not supported. Compilers on other supported platforms,

such as IBM AIX 5.1 or HP-UX 11i, have not been tested.

Operating system platform tested Tested compiler

IBM AIX 4.3.3 IBM Visual Age C/C++ 5.0.2

Sun Solaris Operating Environment 5.7 Forte 6.1 with patches 109505-11, 109508-09,

109510-06, 109513-11

Hewlett-Packard HP-UX 11.0-11.01.07 AnsiC/3.30 aC++

Red Hat Enterprise Linux for xSeries GNU GCC 3.2.2

SuSE Linux Enterprise Server 8 for xSeries GNU GCC 3.2.2

SuSE Linux Enterprise Server 8 for S/390 and

zSeries

GNU GCC 3.2

SuSE Linux Enterprise Server 8 for pSeries GNU GCC 3.2-32

Microsoft Windows 2000 Advanced Server Microsoft Visual C/C++ 6.0.5

60 IBM Tivoli Access Manager for e-business: ���� ��

�� A. Linux�� Tivoli Access Manager ������ ���

��� �

� ��� Intel™ ����� Red Hat Linux� ���� zSeries�� SuSE Linux

Enterprise Server� ��� IBM Tivoli Access Manager(Tivoli Access Manager)

������ ��� � �����.

v �� -lpthread� ��� ��

Tivoli Access Manager ������ ������ ������ ����� �

�� � �� ������. Linux �� ������ libpthread.so� libc

�� ����� ���� �� ��(�: fork())� �����. ��� ����

���� ������ ���� �� ��, �� ���� ����� -lpthread

� ���� � ��� ��� ��� ��� � �� ��� ��� � ���

�.

v ������� ��� ��

������ ���� ���� ��� ��, ��� ��� ��� ��� � �

���. �� Linux ���� ���� �� �� ��� 2MB���. � �� �

�� ����� ��� �� �����. �� ��, RAM� 256MB� ����

� ��� �� 128� ����� ���.

��� �� � ��� � � ��� �����.

– �� ��� �� ��� ��, pthread_create()� ��� � �� �� �

�� ������.

– �� ��� �� ���� �� �� � Tivoli Access Manager ����

� � �� ��, �� ���� �� ���� ���� ��� �� �

� ��� ��� ��� pthreads ������ �� ������.

© Copyright IBM Corp. 1999, 2003 61

62 IBM Tivoli Access Manager for e-business: ���� ��

�� B. ����

� ��� ���� ���� �� � ������ ��� ����.

IBM� �� ����� � � ��� ��, ��� �� ��� ���� �� �

� ����. �� ��� � �� �� � ���� �� ��� �� IBM ���

� ������. � ��� IBM ��, ���� �� ���� ���� �� �

IBM ��, ���� �� ����� ��� � ��� �� ����� ����. IBM

� �� ���� �� �� �, ����� ��� ��, ���� �� ����

�� ��� � ����. ��� �IBM ��, ���� �� ���� ��� ��

�� � �� ��� �����.

IBM� � ��� ��� �� �� ��� � ��� ���� �� �� ��

�� �� � ����. � �� ����� � ��� �� ������ � ��

�� ���. ����� �� ����� � �� ������.

135-270

����� � � ��� 467-12, �������

�� �.�.� ����

������

����: 080-023-8080

2��(DBCS) ��� �� ���� ��� �� IBM ������� ����

� ��� � ����� ���

IBM World Trade Asia Corporation

Licensing

2-31 Roppongi 3-chome, Minato-ku

Tokyo 106-0032, Japan

�� �� ��� ���� ��� �� ����� ���� ����. IBM�

�� �� �, ��� � �� ���� ���� �� ��� ��� ���

(�, �� ��� � ) ����� ����� �� ��� ���� � �� ���

���� �����. �� ����� �� ��� ��� �� ��� ��� �

��� ���� ����, � ��� ���� �� �� ����.

� ���� ����� ���� ���� ���� ��� �� � ����. � �

�� ����� ����, ��� ��� ���� �����. IBM� � ��� �

�� �� �(��) ����� �� ���� ���� �� �(��) ��� � ��

��.

© Copyright IBM Corp. 1999, 2003 63

� ���� ���� �IBM� ���� �� ��� ��� ���, �� ��

�� �� ���� ���� �� �� ���. � ���� � �

IBM �� � ��� ��� � ��� ���� �� ��� �� ��

� ��� ���.

IBM� ��� ��� �� �� �� ��� ����� ���� ��� ��

� ��� ��� ���� ��� � ����.

(i) ����� ��� ����� � ����(� ���� ��) �� �� �� �

(ii) ��� ��� �� ��� ���� � ����� �� ��� �� �� �

��� ��� � ��� ������.

135-270

����� � � ��� 467-12, �������

�� �.�.� ����

������

��� ��� � ��(�� ��, �� � �)� �� ��� � ����.

� ��� ��� ����� � � ���� � �� ��� �� ����� ��

� IBM� IBM �� ��, IBM ���� ���� ��(IPLA) �� �� ��

� ��� �� ��� ����.

�IBM ��� �� ��� � ��� ����, �� �� �� � �� �

���� �� ����. IBM��� ��� �IBM ��� ����� �����, �

� ��� ��� ��� ���, ��� �� � ��� ��� ��� � ���

�. �IBM ��� ��� �� ����� � ��� ����� ������.

IBM� ���� �� ��� �� �� ��� ��� ���� �� � �

���.

� ���� ��� ���� ��� ���� � ���� �� ��� ��

����. � ���� ��� ���� ��� ���� � ��, ��, �� � �

�� �� �� � ����. �� �� � ��� ��� �� ��� �

� ��� ��� �� �� ���� �����.

� ��� ������ �� ���� �� � �� ���� �� �� ���

�.

� ��� �� �� � ���� ���� IBM Corporation� �� �� ��

�����.

64 IBM Tivoli Access Manager for e-business: ���� ��

AIX

DB2

DB2 Universal Database

Domino

IBM

IBM ��

Lotus

MQSeries

OS/390

pSeries

S/390SecureWayTivoli

Tivoli ��

Universal Database

WebSphere

z/OS

zSeries

Microsoft � Windows� �� �� � ���� ���� Microsoft Corporation

� �����.

Intel� �� �� � ���� ���� Intel Corporation� �����.

Java � �� Java �� �� ��� ��� �� �� � ���� ���� Sun

Microsystems,Inc� �� �� �� �����.

UNIX� �� �� � ���� ���� Open Group� �������.

� ��, �� � ��� �� �� �� �� �������.

�� B. ���� 65

���

Printed in Denmark by IBM Danmark A/S

GA30-2206-00