tivoli secureway policy director plug-in for edge server...

52
Tivoli ® SecureWay ® Policy Director Plug-in for Edge Server zΓU 3.8

Upload: others

Post on 30-Oct-2020

3 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

Tivoli®

SecureWay®

PolicyDirector Plug-in for EdgeServerzΓU

3.8

Page 2: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for
Page 3: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

Tivoli®

SecureWay®

PolicyDirector Plug-in for EdgeServerzΓU

3.8

Page 4: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

Tivoli SecureWay Policy Director Plug-in for Edge Server zΓU

@vn

© Copyright IBM Corporation 2001. All rights reserved. uαuTivoli Systems nΘvXvBuIBM nΘvXvuIBM ßvXvuTivoli úl[XvCX⌠≤í≈bo IBM q\ivºeAúúoH⌠≤í⌠≤ΦkBqlíB≈±íBCΘBBBΓÑsBα½BgBxsbtWα½⌠≤qúyÑCIBM qP Qß¡\ivis@≈i\¬σ≤wΣL QßHABbñAC@≈ú]t IBM q@vnCbo IBM q\iveAúPß⌠≤ΣL@vv¡Cσ≤ú@úºBuHu¼vúAúú⌠≤íOdCbúσ≤OA]AASwiΓMAC

U.S. Government Users Restricted Rights—Use, duplication or disclosure restricted by GSA ADPSchedule Contract with IBM Corporation.

IBMB IBM xBTivol iBTivol i xBAIXBCross -S i teBNetViewBOS/2BPlane tTivoliBRS/6000BTivoli CertifiedBTivoli EnterpriseBTivoli Enterprise ConsoleBTivoli Ready HTME IBM q Tivoli Systems Inc. bⁿΩΣLΩaUC

MicrosoftBWindowsBWindows NT Windows xO Microsoft qbⁿΩM]ΣLΩaC

UNIX O The Open Group bⁿΩΣLΩaUC

Java Java ¼O Sun Microsystems, Inc. bⁿΩM]ΣLΩa

C

N

bXñú Tivoli Systems IBM úBíAúϕªb Tivoli Systems IBMτΩañúúCbúoúBíAúϕuα Tivoli Systems IBM úBíACunúH Tivoli System IBM ÷z]úΣLⁿkO@v¡A⌠≤\αÑúBíAúiNbúúBíAC²PΣLús@⌠PτAúD Tivoli Systems IBM SOⁿwAúMΣd⌠≤Cbσ≤ñiα]t Tivoli Systems IBM ºMQMQCú ezMQº⌠≤vC÷vΦdAHHτH IBM Director of Licensing, IBMCorporation, North Castle Drive, Armonk, New York 10504-1785, U.S.A.

© Copyright International Business Machines Corporation 2001. All rightsreserved.

Page 5: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

²

eÑ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vA∩H. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . v

e . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . v

X. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vi

Plug-in for Edge Server w. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vi

nX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vi

uWsX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vi

qX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vi

ú∩≤XNú . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii

pßΣñ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii

D . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii

rΘD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viii

1 w Plug-in for Edge Server . . . . . . . . . . . . . . . . . . . . . 1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1

Σ¡x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1

wM≤ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

nΘ²Mn≤. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

N Plug-in for Edge Server w AIX . . . . . . . . . . . . . . . . . . . . . . . . . . 4

N Plug-in for Edge Server w Windows. . . . . . . . . . . . . . . . . . . . . . . 7

N Plug-in for Edge Server w Linux . . . . . . . . . . . . . . . . . . . . . . . . . 9

tm Plug-in for Edge Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

2 z Plug-in for Edge Server . . . . . . . . . . . . . . . . . . . . 13Edge Server Proxy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

V Proxy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

eV Proxy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

iiiTivoli SecureWay Policy Director Plug-in for Edge Server zΓU

Page 6: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

Policy Director ½≤í . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Proxy ½≤í . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

ΣL Web °A½≤í . . . . . . . . . . . . . . . . . . . . . . . . . . 20

Mε Plug-in for Edge Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

tm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

≥tm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

½≤íwq . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

∩Mtm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

Θx . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

3 íp Plug-in for Edge Server . . . . . . . . . . . . . . . . . . . . 27]p⌠ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

ete . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

µ@nJ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

tm⌠ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

ΣLtm∩. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

4 ú Plug-in for Edge Server . . . . . . . . . . . . . . . . . . . . 33ú AIX W Plug-in for Edge Server . . . . . . . . . . . . . . . . . . . . . . . . . 33

ú Windows W Plug-in for Edge Server . . . . . . . . . . . . . . . . . . . . . . 35

ú Linux W Plug-in for Edge Server . . . . . . . . . . . . . . . . . . . . . . . . 36

iv 3.8

Page 7: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

Tivoli SecureWay Policy Director Plug-in for Edge Server O IBMWebsphere® Edge Server for Multiplatforms íAiúOMvÑwACThe Tivoli SecureWay Policy DirectorPlug-in for Edge Server zΓUíp≤wBtmMz TivoliSecureWay Policy Director Plug-in for Edge ServerC

A∩H

zΓUA∩H]AG

¶ wz

¶ twPípz

¶ ⌠⌠tz

¶ IT ]p

¶ ío

eσ≤]tUCG

¶ 1 Ayw Plug-in for Edge Serverz

CXwΣ¡xAínΘ÷YCúwΣ

¡xwtmⁿC

¶ 2 Ayz Plug-in for Edge Serverz

íp≤N Plug-in for Edge Server P Edge Server ProxyπXb@CPí Plug-in for Edge Server tmC

¶ 3 Ayíp Plug-in for Edge Serverz

íb Web ⌠ñíp Plug-in for Edge Server dC

¶ 4 Ayú Plug-in for Edge Serverz

vTivoli SecureWay Policy Director Plug-in for Edge Server zΓU

Page 8: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

íp≤qC@Σ@t¡xñú Plug-in for EdgeServer tmNªúC

X

CX Tivoli SecureWay Policy Director Plug-in for Edge ServerwñXAH⌠≤ΣL÷σ≤CP]íp≤u

Ws Tivoli XBp≤q Tivoli XAHp≤ú∩Tivoli XNúC

Plug-in for Edge Server wTivoli SecureWay Policy Director Plug-in for Edge Server wñ]tHUσ≤G

¶ Tivoli SecureWay Policy Director Plug-in for Edge Server zΓUAGC40-0685

nX

pGnvañΩTANπY≥A

ziHqUCyñ≥ooG

¶ Tivoli SecureWay Policy Director Base zΓUAGC40-0631

¶ Tivoli SecureWay Policy Director WebSEAL zΓUAGC40-0635

uWsX

ziHq Tivoli ßΣñ⌠s\h Tivoli XG

http://www.tivoli.com/support/documents/

oX]t PDF HTML µí]ΓúCí≈ú]nσ≤C

qX

ziHbHU⌠qh Tivoli XG

http://www.ibm.com/shop/publications/order

vi 3.8

Page 9: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

]iH qUCΣñ@XqG

¶ ⁿΩaG800-879-2755

¶ [jG800-426-4968

¶ ΣLΩaG÷qXMµA\UC⌠G

http://www.tivoli.com/inside/store/lit_order.html

ú∩≤XNú

µαÑz∩≤ Tivoli úíσ≤oAP]w∩zúXUA@∩iCpGzQ∩

úíσ≤úNúAQUCΣñ@Φk

pG

¶ qll≤e [email protected]

¶ bUC⌠±gßNúdϕG

http://www.tivoli.com/support/survey/

pßΣñpGz∩≤⌠≤ Tivoli úDAiHpuTivoli ßΣñvC\UC⌠ Tivoli Customer Support HandbookG

http://www.tivoli.com/support/handbook/

oΓUú÷≤p≤puTivoli ßΣñvΩT]DY½ wAHUCΩTG

¶ nOPΩµ

¶ °zbΩaACXqXMqll≤

¶ bpΣñºe¼ΩT

D

XDϕSϕⁿJM@B@t÷ⁿO

M⌠AHΣG

viiTivoli SecureWay Policy Director Plug-in for Edge Server zΓU

Page 10: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

rΘD

UCrΘDG

Θ XbσrpgⁿOBVjpgⁿOBⁿ

O∩MXoABHΘr¼π

C

]°íM∩ Dú

H÷ΣWA]OoABHΘr

¼πC

Θ zúMBsⁿJAHjr

ⁿMyoABHΘr¼πC

Ñe XbOrµñⁿOBⁿO∩MXBí

XdBΘXMTºσroABHÑ

er¼πC

M"²WBzΣJrΩ]Xbσr

ñB Java ΦkMOWH HTMLM XML OoABHÑer¼πC

viii 3.8

Page 11: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

w Plug-in for Edge Server

Tivoli SecureWay Policy Director Plug-in for Edge Server O@ííAisWOMv\αh¡x IBMWebSphere Edge ServerC Plug-in for Edge Server ]piH²zNªwwgtm¿]t uEdge Server ProxyvEdge Server tC Plug-in for Edge Server ]p]α²zNªw Tivoli SecureWay Policy Director w⌠ñC

íwΣ¡xBwM≤AH Plug-in for Edge ServernΘDC]]t Plug-in for Edge Server wtmⁿC

Σ¡xTivoli SecureWay Policy Director Plug-in for Edge Server iΣUC¡xG

¶ AIX 4.3.3

¶ Windows 2000 Advanced Server

¶ Red Hat Linux 7.1

1

1Tivoli SecureWay Policy Director Plug-in for Edge Server zΓU

1.w

P

lug

-info

rE

dg

eS

erver

Page 12: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

Plug-in for Edge Server wΘíMOΘDX TivoliSecureWay Policy Director Base ≤ⁿwMOΘDCp÷ΩTA\ Tivoli SecureWay Policy Director Base wΓUC

wM≤Tivoli SecureWay Policy Director Plug-in for Edge Server CD-ROMww∩C@Σ¡xú@wM≤C

¶ Tivoli SecureWay Policy Director Plug-in for Edge Server

M≤]t Plug-in for Edge Server íwBíBtmMϕµ¼nJ HTML dC

Tivoli SecureWay Policy Director Plug-in for Edge Server CD-ROM]]tUCnnΘM≤G

¶ Tivoli SecureWay Policy Director Runtime Environment

¶ IBM SecureWay Directory Client

¶ IBM Global Security Toolkit

nΘ²Mn≤Plug-in for Edge Server ]tUCnΘ²Mn≤G

¶ IBM WebSphere Edge Server for Multiplatforms 2.0

¶ Tivoli SecureWay Policy Director 3.8

bwíeAzwMtm IBM WebSphere EdgeServer for Multiplatforms 2.0 C Edge Server úOnX≤¿Czwtm Edge Server Proxy ≤C

z²¿Wzw@Aαw Tivoli SecureWay PolicyDirector nΘC

2 3.8

Page 13: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

p Edge Server wMtm÷ΩTA\ IBM WebSphereEdge Server for Multiplatforms 2.0 uJ vΓUC

Plug-in for Edge Server w Policy Director w⌠ñABbΣñ⌡µCwn IBM WebSphere Edge Server ProxyºßAz² Policy Director w⌠AMßAw Plug-infor Edge ServerC

Policy Director w⌠Obw Tivoli SecureWay Policy DirectorManagement Server Coz°AObz@tM Tivoli SecureWay Policy Director Base CD-ROM ñC

zb±m Plug-in for Edge Server C@íqúWwtmHUnΘG

¶ Tivoli SecureWay Policy Director Runtime Environment

¶ IBM SecureWay Directory Client

¶ IBM Global Security Toolkit

zb±m Plug-in for Edge Server P@íqúqúWwtmHUnΘG

¶ Tivoli SecureWay Policy Director Management Server

¶ Σ LDAP °AAp IBM SecureWay DirectoryC

]Ab Policy Director w⌠Γ Plug-in for Edge ServeríΩG

1. bP Tivoli SecureWay Policy Director Management Server PqúW

2. bP Tivoli SecureWay Policy Director Management Server úPqúW

3Tivoli SecureWay Policy Director Plug-in for Edge Server zΓU

1.w

P

lug

-info

rE

dg

eS

erver

Page 14: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

b@ΩñA Plug-in for Edge Server ²Mn≤úwgbwMtmz°A¿CHotmíp Plug-in forEdge Server Azunw Plug-in for Edge ServerAúw⌠≤ΣL²Mn≤C

bGΩñAz²Nqútm Policy Director w⌠ñAMßAw Plug-in for Edge ServerCpGnNqútm Policy Director w⌠ñANwMtmHUnΘG

¶ Tivoli SecureWay Policy Director Runtime Environment

¶ IBM SecureWay Directory Client

¶ IBM Global Security Toolkit

tmnHW²Mn≤ºßANiHwMtm Plug-in for EdgeServerC

Tivoli SecureWay Policy Director Plug-in for Edge Server CD-ROM]t²MnΘCo²MnΘP Tivoli SecureWay PolicyDirector Base CD-ROM WtM≤PC Tivoli SecureWayPolicy Director Plug-in for Edge Server CD-ROM i²z¿

Plug-in for Edge Server wAú Tivoli SecureWayPolicy Director Base CD-ROMC

N Plug-in for Edge Server w AIXPlug-in for Edge Server wNúYMM≤tm C SMIT NnΘM≤w AIX WCMß TivoliSecureWay Policy Director Plug-in for Edge Server tmíwslconfig tm Plug-in for Edge ServerC

: pGzwgwMtmn Plug-in for Edge ServerAßSn½swªAN²ú Plug-in for Edge Server M≤tmNªúC

4 3.8

Page 15: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

pGnN Plug-in for Edge Server w AIX WA¿UCⁿG

1. H root ¡≈nJC

2. N Tivoli SecureWay Policy Director Plug-in for Edge ServerCD íJ≈ñC

3. PqúOwgtmF Tivoli SecureWay Policy DirectorRuntime EnvironmentCpGwgN Tivoli SecureWay PolicyDirector Management Server woíqúWAqúwg[J Policy Director w⌠ñANϕwgtm⌡µ⌠C

4. pGqúwgtmF⌡µ⌠AñLoBJC⌡BJ 5C

pGqútm⌡µ⌠A¿UCⁿ Plug-infor Edge Server wtmnΘ²Mn≤G

a. b Shell úñΘJUCⁿOG

# smit

o SMIT íC

b. CXi≤wM≤AMß∩UC"G

¶ IBM Global Security Toolkit

wM≤O gskitC\αϕíO AIX SSL≥⌡µ ACME uπcC

¶ IBM SecureWay Directory Client

wM≤O ldap.client

¶ Tivoli SecureWay Policy Director Runtime Environment

wM≤O PD.RTE

c. ϕ SMIT \αϕwC∩M≤C

d. SMIT \αϕtm Tivoli SecureWay Policy DirectorRuntime EnvironmentC

5Tivoli SecureWay Policy Director Plug-in for Edge Server zΓU

1.w

P

lug

-info

rE

dg

eS

erver

Page 16: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

÷nΘ²Mn≤i@BwPtmⁿA\ TivoliSecureWay Policy Director Base wΓUC

5. b Shell úñΘJUCⁿOG

# smit

o SMIT íC

6. ∩nΘw@C∩w≤snΘC∩qsi

nΘw≤snΘC

7. XnDΘJmúAΘJⁿ CD mC

8. ÷@UMµ÷sonwnΘC

ouh½∩Mµv°íπ Tivoli SecureWay PolicyDirector nΘM≤MµC

9. ∩ Policy Director Plug-in for Edge Server M≤C÷@UTwC

10. oXqsinΘw≤snΘ∩ C

11. τw]OXbwnΘµñC

12. zw]w÷ΣLµCbjí ípUAziHⁿw]C÷@UTwC

13. oX@TºΦ AzOTwwoM≤C÷@UTwC

owM≤CPπXh¼ATºCb¿

úYAXß¼ATºAⁿXQ¿C

14. ÷@U¿C÷@U°⌠ SMITC

15. UAtm Plug-in for Edge ServerC⌡10ytm Plug-in for Edge ServerzC

6 3.8

Page 17: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

N Plug-in for Edge Server w WindowsPlug-in for Edge Server wNúYMM≤tm C InstallShield setup.exe w Plug-in for Edge Server CUA Tivoli SecureWay Policy Director tmí wslconfig tm Plug-in for Edge ServerC

: pGzwgwtmn Plug-in for Edge ServerAºßSn½swªAN²ú Plug-in for Edge Server M≤tmNªúC

pGnN Plug-in for Edge Server w Windows WA¿UCⁿG

1. Hπ Windows zMv¡≈nJ Windows ⌠C

2. N Tivoli SecureWay Policy Director Plug-in for Edge ServerCD íJ≈ñC

3. PqúOwgtmF Tivoli SecureWay Policy DirectorRuntime EnvironmentCpGwgN Tivoli SecureWay PolicyDirector Management Server woíqúWAqúºewg[J Policy Director w⌠ñANtm⌡µ⌠C

4. pGqúwgtmF⌡µ⌠AñLoBJC⌡BJ 5C

pGqútm⌡µ⌠A¿UCⁿ

Plug-in for Edge Server wtmnΘ²Mn≤G

a. ⌡µ IBM Global Security Toolkit wíG]UCⁿOñr# E: Nϕ≈G

E: \Windows\gskit\setup.exe

b. ⌡µ IBM SecureWay Directory Client wíG

E:\Windows\Directory\setup.exe

7Tivoli SecureWay Policy Director Plug-in for Edge Server zΓU

1.w

P

lug

-info

rE

dg

eS

erver

Page 18: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

c. ⌡µ Tivoli SecureWay Policy Director Runtime EnvironmentwíG

E:\Windows\PolicyDirector\Disk Images\Disk1\Pdrte\Disk Images\Disk1\setup.exe

d. Tivoli SecureWay Policy Director tmítm⌡µ⌠C∩l > í > Policy Director> tmC

÷p≤tm⌡µ⌠πⁿA\ TivoliSecureWay Policy Director Base wΓUC

5. ⌡µ Plug-in for Edge Server wíG]UCⁿOñr#E: Nϕ≈G

E:\Windows\PolicyDirector\Disk Images\Disk1\Disk1\setup.exe

oX∩wyÑ∩ C

6. ∩AϕyÑAMß÷@UTwC

InstallShield íABX Policy Director Plug-infor Edge Server Setup ∩ C

7. ÷@UU@BC

oXw¼∩ C

8. w¼úwPC÷@UU@BC

Plug-in for Edge Server úYñCoX@hTºAⁿXM≤wgwªC

9. ÷@U¿⌠ InstallShield wíC

10. N Windows t½s≈C

11. ⌡10ytm Plug-in for Edge ServerzC

8 3.8

Page 19: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

N Plug-in for Edge Server w LinuxPlug-in for Edge Server w@NOqM≤tmúYC rpm NnΘM≤w Linux WCMß Plug-infor Edge Server tmí wslconfig tm Plug-in for EdgeServerC

: pGzwgwtmn Plug-in for Edge ServerAºßSn½swªAN²ú Plug-in for Edge Server M≤tmNªúC

pGnN Plug-in for Edge Server w Linux WA¿UCⁿG

1. H root ¡≈nJC

2. ⁿ Tivoli SecureWay Policy Director Plug-in for Edge ServerCDC

3. N"²≤ /<mount-point>/linuxC

4. PqúOwgtmF Tivoli SecureWay Policy DirectorRuntime EnvironmentCpGwgN Tivoli SecureWay PolicyDirector Management Server woíqúWAqúºewg[J Policy Director w⌠ñANtm⌡µ⌠C

5. pGqúwgtmF⌡µ⌠AñLoBJC⌡U@BJC

pGqútm⌡µ⌠A¿UCⁿw

tmn²MnΘG

a. ΘJUCⁿOw IBM Global Security ToolkitG

# rpm -i gsk4bas*.rpm

b. ΘJUCⁿOw IBM SecureWay Directory ClientG

# rpm -i ldap-clientd*.rpm

9Tivoli SecureWay Policy Director Plug-in for Edge Server zΓU

1.w

P

lug

-info

rE

dg

eS

erver

Page 20: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

c. ΘJUCⁿOw Tivoli SecureWay Policy DirectorRuntime EnvironmentG

# rpm -i PDRTE*.rpm

d. ΘJUCⁿOtm Tivoli SecureWay Policy DirectorRuntime EnvironmentG

# pdconfig

÷WzC@M≤i@BwPtmⁿA\

Tivoli SecureWay Policy Director Base wΓUC

6. ΘJUCⁿOw Plug-in for Edge Server M≤G

# rpm -i PDPluginForES*.rpm --nodeps

q CD-ROM úYABwwWCMß rpm í⌠C

7. UAtm Plug-in for Edge ServerC⌡U@GytmPlug-in for Edge ServerzC

tm Plug-in for Edge ServerPolicy Director Plug- in for Edge Server ú@swsclconfig.sh]b UNIX tñ wslconfig.exe]bWindows tñtmíCoí¿UC@G

¶ Plug-in for Edge Server í@ Policy Director¡≈C

¶ Plug-in for Edge Server @ Policy Director O@½≤íC

¶ b Windows ¡xWAªtmuEdge Server ProxyvAHKbí ⁿJ Plug-in for Edge ServerC

bw Plug-in for Edge Server ºßAqⁿOµ⌡µtmí]ú[W⌠≤Cb UNIX tñAΘJG

10 3.8

Page 21: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

# wslconfig.sh

b Windows tñAΘJG

MSDOS> wslconfig.exe

1. búAΘJUCΩTG

¶ LDAP °AD≈W

¶ LDAP zOW

pA[cn=root]

¶ LDAP zKX

¶ Edge Server Proxy ≡

w]≡O 80C

2. úA Plug-in for Edge Server H LDAP °Aºí SSL qHC

3. pGzn SSL qHAΣJ yAMß÷U Enter ΣCpGzún SSL qHAΣJ nAMß÷U Enter ΣC

4. pGzF SSL qHA⌡U@BCpGzF SSLqHAbúúHUG

¶ LDAP SSL q≈m

¶ SSL q]∩

qqOúnCoubN LDAP °Atm¿nDqnCqALDAP °Aun°ACpGz LDAP °AúnqAziHboúñ÷U Enter ΣC

¶ SSL q≈KX

¶ LDAP °A SSL ≡Cw]≡ 636C

5. ΘJ Policy Director z¡≈C

o¡≈NO sec_masterC

11Tivoli SecureWay Policy Director Plug-in for Edge Server zΓU

1.w

P

lug

-info

rE

dg

eS

erver

Page 22: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

6. ΘJ sec_master KXC

7. tmí¿UC@G

¶ °An²½≤C

¶ N°AsWuwvs ivacld-servers ñC

¶ SSL C

¶ q Policy Director z°Ao SSL C

¶ tmuEdge Server ProxyvA]wuEdge Server Proxyvtm ibmproxy.conf ñ JíA Plug-in for Edge ServerC

¶ ε½suEdge Server ProxyvBzibmproxyC

8. tmí Plug-in for Edge Server ½≤ízí wesosmCoí≤s Policy Director ½≤íA Plug-in for Edge Server @s½≤ítmC

9. o wesosm í⌠A wslconfig í⌠C

Policy Director Plug-in for Edge Server tmwg¿C

uEdge Server ProxyvbwgⁿJ Plug-in for EdgeServerAB&b⌡µC

12 3.8

Page 23: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

z Plug-in for Edge Server

Tivoli SecureWay Policy Director Plug-in for Edge Server i EdgeServer Proxy °A\αsW Policy Director OMvεCFz Plug-in for Edge ServerAznA Policy Director ¼AH⌡µw hC

Policy Director ¼O≥≤∩M⌠⌠⌠ñBíMΩ hACFw⌠APolicy DirectornzwqUCΩΘG

¶ nO@½≤

¶ #\∩C@½≤⌡µ@

¶ #\⌡µ@

Policy Director UCΦízoΩΘG

¶ ½≤bÑhíⁿO@½≤Wí½≤íñwq

CXC

¶ @]p¬MgJúOwq¿\ivCz

]iHwq qíSw@C

¶ MsúO Policy Director S LDAP !Ab LDAP n²ñwqC

2

13Tivoli SecureWay Policy Director Plug-in for Edge Server zΓU

2.z

Plu

g-in

for

Ed

ge

Server

Page 24: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

Policy Director NWzºXA¿usεMµv(ACLAo≈MµOSwsXAH\iv]@Mµ@P¿CziNo ACL s½≤íñ½≤C

pAziHN ACL [ Web °AÑhítAε∩ Web °AesCz]iH∩bCÑhM≤Yµ ACLC≤Yµ ACL m½[Ñh ACLC Plug-in for Edge Server nD@AdCnD½≤¬]rB∩]m⌡µ]x\ivA⌡µsεC

Policy Director w¼IuAΣ\húPtmCPlug-in for Edge Server eA²⌠x Policy Director \αC÷ Policy Director HtmΩTA\ TivoliSecureWay Policy Director Base zΓUC Tivoli SecureWayPolicy Director Base CD-ROM ñ]]tσC

Edge Server ProxyPolicy Director Plug-in for Edge Server iM IBM Websphere EdgeServer for Multiplatforms @CEdge Server q≤°⌠⌠ΣtAoO⌠ ⌡≡íqúXsn

DaΦC

Edge Server úΓDn\αG

¶ hß°AínDú¡Ωyq

¶ ∩ ß°A#⌡µ\αAHKbBzjqq

nDα

Edge Server \αOu ProxyvúC Policy DirectorPlug-in for Edge Server iúsε\αA²u ProxyvC

14 3.8

Page 25: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

qAϕqs²∩⌠oXnDAs²ú URLñe½≤∩ Web °Añ½≤C Plug-in for EdgeServer iτQe\∩ Web °AñnD½≤⌡µ@AúsεCu ProxyvoΩTe\nD@Cϕw h\iAuEdge Server ProxyvnD½≤AαC

Plug-in for Edge Server iHUuEdge Server Proxyv@íúsε\αG

¶ V Proxy

¶ eV Proxy

oºNbHUUñQC

V ProxyϕuEdge Server Proxyv≤⌠⌠⌠qs²H⌡≡ß Web °AºíAiϕ@V Proxy]V ProxyCbß⌠oñΓAu ProxyvI ⌠⌠⌠nDANªαeAϕD≈ Web °AA#ΩAMßNºΩe⌠⌠⌠WqC

≤⌠eiαsb Web °AWAH≥oαMeteA]uEdge Server Proxyvi@ß Web °AV Proxy °ACziHbuEdge Server Proxyv≈Wtm⌠⌠WAMßⁿwq∩ß Web °A⌠]p 1 C

15Tivoli SecureWay Policy Director Plug-in for Edge Server zΓU

2.z

Plu

g-in

for

Ed

ge

Server

Page 26: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

bodñAP l u g - i n f o r E d g e S e r v e r Otm¿∩newbooks.com ½≤úsεCb≥ovßA

Plug-in for Edge Server ¡Ωyq]p Edge ServerNetwork Dispatcher ue¼evNnDe∩ß°ACPlug-in for Edge Server ⌡µ URL ∩MAτYⁿuEdge Server Proxyvtmñ Proxy »zíú\αC

ziH]w Plug-in for Edge Server tm osdef.conf ñAtm Plug-in for Edge Server sεCbo⌠dñAzsWUC"G

[Remote: /ESproxy/reverse/newbooks.com]domains = newbooks.com www.newbooks.comlogin_method = formsform_login_file = http://newbooks.com/pub/login.htmlform_login_errorfile =http://newbooks.com/pub/loginerr.htmlform_logout_file = /pub/logout.htmlroute = https://backend1.com

o"tm Plug-in for Edge ServerAH⌡µUC@G

1. V Proxy tm Plug-in for Edge Server

16 3.8

Page 27: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

¶ ∩ newbooks.com M www.newbooks.com nD

vAΦkOd Policy Director ⁿO@½≤WíñA≤ /ESproxy/reverse/newbooks.com "U½≤[ACLC

¶ ϕµ¼nJ@nJΦk

¶ NC@ URL ∩M Web °A backend1.comC

bodñAz[≤ /pub "²gO ACLC÷gO ACL ΣLΩTA\ Tivoli SecureWayPolicy Director Base zΓUC

NApGeX URL nDP /pub/logout.html AhNnXC

w]APlug-in for Edge Server w∩V Proxy nDd/ESproxy/reverse/<domain name>C\hΣL∩iHso°AwqCpGzSTⁿw∩]wAh∩

]wN osdef.conf tm [Global] q]wC

Plug-in for Edge Server ΣúPnJΦkCúFWztmdπϕµ¼nJA]iHtm Plug-in for Edge ServerUCnJΦkG

¶ ≥O

¶ qO

÷C@nJΦk÷]wΩTA\dtm

osdef.confC

eV ProxyϕuEdge Server Proxyv≤qs²]≤⌡≡ßH⌠⌠⌠ºíAiϕ@&V Proxy]V

ProxyCqs²tm¿NnD J uEdge Server ProxyvC&V Proxy NqnDαe⌠⌠⌠W

17Tivoli SecureWay Policy Director Plug-in for Edge Server zΓU

2.z

Plu

g-in

for

Ed

ge

Server

Page 28: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

eD≈AΩAMßNΩeq

C

Plug-in for Edge Server ioX≡qnDúsε]pWC

w]APlug-in for Edge Server w∩&V Proxy nDd/ESproxy/forward/<domain name>CziHm½ow]]wAΦkOb½≤ítmñ@h°Awq]pU

G

[Remote: /ESproxy/forward/blockedsites]domains = games.com *.games.com *.competitor.comroute = http://backend2.com /pub/browsepolicy.html

bodñAP games.comB*.games.comB

*.competitor.com Ñ⌠Ws²nDAúQ½s Jqs² h⌠G /pub/browsepolicy.html]b Web °A backend2.com WC

tAziHb½≤íomñ[@ Policy DirectorACLCpAo ACL iHQns⌠≤CX⌠C

2. &V Proxy tm Plug-in for Edge Server

18 3.8

Page 29: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

Policy Director ½≤í

Policy Director ⁿO@½≤WíNϕnMsε h½≤CⁿO@½≤íi]t Web °AWΩCN Web Ω[J½≤íµΦkOJ Web °AtAnM Policy Director ACLC

Plug-in for Edge Server úF@su½≤ízívíANΩsW Policy Director ½≤íñCziHwesosm ⁿOIsoíCziH wesosm

uEdge Server ProxyvH Edge Server O@ Web °Aú½≤íC

UCUíp≤N Web ΩsWⁿO@½≤íG

¶ y Proxy ½≤íz

¶ 20yΣL Web °A½≤íz

Proxy ½≤í÷MuEdge Server ProxyvO@ ProxyAϕnDOw∩uEdge Server Proxyv≈Dn⌠WAª]iH@ Web °ACqAMTºúOxsb Proxy Web íC Plug-in for Edge Server i∩uEdge Server Proxyvz½≤⌡µsεC

C@nO@½≤úb Tivoli SecureWay Policy Director½≤íñwqCΓΦkiHsW½≤½≤íC

ziH pdadmin ⁿOAHΓΦíN½≤sW½≤íCpdadmin ⁿO]t\hⁿOµ∩Ais½≤íHsWB∩MRú½≤Cp÷ΩTA\ T i v o l iSecureWay Policy Director Base zΓUC

z]iH query_contents ío Web Ñhñ½≤wsAN@tC Web ΩsW½≤íñCoΦkNbU@ 20yΣL Web °A½≤íz ñQC

19Tivoli SecureWay Policy Director Plug-in for Edge Server zΓU

2.z

Plu

g-in

for

Ed

ge

Server

Page 30: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

tm osdef .conf ñUCd°AwqNϕⁿWbookproxy.com uEdge Server ProxyvG

[Local: /ESproxy/bookproxy.com]domains = bookproxy.comquery_command = http://bookproxy.com/cgi-bin/query_contents?dirlist=/

ϕzbwítm Plug-in for Edge Server A wslconfig uπ⌡µ wesosmAuEdge Server Proxyvúw]½≤íCw]½≤í]tUCtm½≤G

/ESproxy/Esproxy/<proxy-host-name>/ESproxy/forward/ESproxy/reverse

½≤ºßAziHN ACL m≤uEdge Server Proxyv½≤íñAϕmCpAbsMΩT

AúnvC

ΣL Web °A½≤íu½≤ízívwesosm ]iHd Web °AtAHKb Policy Director ½≤íñ∩"Cu½≤ízív¬ osdef.conf tmABñC°Awq½≤"C

z@s query_contents Policy Director íN Web °AtJⁿO@½≤íCoí±mb" Web °A cgi-bin "²ñCznⁿwWeb °AlmC\ Tivoli SecureWay PolicyDirector WebSEAL zΓUAHop≤tm query_contentsíΩTC

tmn query_contents ºßAb½≤ítmñsW@"Ai wesosm p≤d Web °AtCpGObe@dñAzNHU"±mtmñG

20 3.8

Page 31: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

[Remote: /ESproxy/reverse/newbooks.com]domains = newbooks.com www.newbooks.com...query_command = http://backend1.com/cgi-bin/query_contents?dirlist=/

N"sWtmºßAUCΦíAq Plug-in for EdgeServer ≈⌡µu½≤ízívG

wesosm -run -infile <location of osdef.conf> -verbose

wesosm ís Web °AdΣtCMßAªs P o l i c y D i r e c t o r °AABb

/ESproxy/reverse/newbooks.com U½≤íñ\h"CpG°AwqS÷ query_contents ⁿOAhu root ΣCb½≤íºßAziHN ACL [AϕmC

z]iH wesosm @½≤íAΦkORh⌠≤°

no≤"CpGnNo≤"q½≤íúA⌡µ

wesosmAP[WUCG

wesosm -run -infile <location of osdef.conf> -clean -verbose

Mε Plug-in for Edge Server wslstartwte íAHΓΦíuEdge Server ProxyvHⁿJ Plug-in for Edge ServerCpAb UNIXtWAΘJUCⁿOG

# wslstartwte

N wslstartwte sW UNIX ScriptAHKbt½s≈A uEdge Server ProxyvM Plug-in for EdgeServerC

pGnε UNIX tWuEdge Server ProxyvAεibmproxy oBzCb Windows tñAε IBM

Proxy AC

21Tivoli SecureWay Policy Director Plug-in for Edge Server zΓU

2.z

Plu

g-in

for

Ed

ge

Server

Page 32: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

tmbwMtm Plug-in for Edge Server AN Plug-in forEdge Server tmABNªm≤tñCbltmºßAziHΓΦí∩oC

b UNIX tñAtmOb /opt/pdweb-lite/etc "²ñAbWindows tñAhOb <install dir>\pdweb-lite\etc "²ñC

UCU OítmG

¶ y≥tmz

¶ 23y½≤íwqz

¶ 25y∩Mtmz

≥tm≥tmWO ibmwesas.confCwMtm Plug-in forEdge Server A wslconfig íl]woCo]t\h"Ail]wM Plug-in for EdgeServerCqblwºßAzún∩oC

ibmwesas.conf ]t\h"Ai]wUCG

¶ O°AñΓ

¶ Policy Director LDAP tm]w

o]A LDAP D≈M≡Cϕ Policy Director P LDAP °AqHOzL SSL A SSL tmN]tboC

¶ Policy Director tmG

v Ωwsí]

v Ωwm

v fm

v ½sπzíj

22 3.8

Page 33: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

v tΩT SSL tmm

¶ LTPA Cookie µ@nJΣ

¶ WebSEAL Cookie µ@nJΣ

¶ ½≤íwq osdef.conf m

¶ ∩M usermap.conf m

½≤íwq½≤íwqWO osdef.confC osdef.conf ⁿwtm]wA² Plug-in for Edge Server ∩qnD⌡µsεC½≤íwqNΣ]w¿UCqG

¶ Global

ⁿwA≤nDABbt@q]Local RemoteSQTm½]wC

¶ Local

A≤∩uEdge Server Proxyv½≤nD]wC

¶ Remote

A≤∩ Web °A½≤nD]wC

¶ µ@nJ

ⁿw Plug-in for Edge Server iNOΩTe Web°Aµ@nJwqM]wC

osdef.conf Global q]tHUtm∩G

¶ zWMKX

¶ /½≤í≤s

¶ ½≤í rootB&V Proxy "HV Proxy "½≤ím

¶ t¼

¶ V DNS d URL R

23Tivoli SecureWay Policy Director Plug-in for Edge Server zΓU

2.z

Plu

g-in

for

Ed

ge

Server

Page 34: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

¶ nJΦk

v L

z Policy Director gO ACLAúnuLv@nJ¼C

v ≥O

v ϕµínJ

v

¶ ϕµínJ]w

]twϕµnJnϕµmBmBKX

BzHw¼C

¶ xswOΩTjpMO

¶ Policy Director ≥ LDAP OW

NAo]wA≤b LDAP ñ∩uOWv(DN) iµdC

¶ OⁿTº]w

osdef.conf Local q]tHUtm∩G

¶ ⌠W

¶ nJΦk

¶ dⁿO]w

oO¼uEdge Server Proxyv½≤íΩTC

osdef.conf Remote q Plug-in for Edge Server O@C@°A]t@wqCo@°A]wú]tU

C"G

¶ ⌠W

¶ nJΦkΣ

24 3.8

Page 35: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

¶ q°A⌠

¶ dⁿO

¶ SSL sD

¶ µ@nJ∩

¶ e∩

osdef.conf Single Sign-on q]tµ@nJtmwqM]wCpGwgqLOA Plug-in for Edge Server iHñLOBJCPlug-in for Edge Server iH HTTP Y CookieíANµ@nJΩTe Web °AC

HUOw²wqnµ@nJ¼G

¶ IBM Websphere LTPA Cookie

¶ Policy Director WebSEAL Cookie

Plug-in for Edge Server úFw²wq¿A²zs@µ@nJΩTµíC÷o¿ΩTAHµíµ

@nJΩTdA\ osdef.conf ñdC

Plug-in for Edge Server Σ\húPtmΩC]A\htm∩úiHπC osdef.conf tmOⁿFC@∩ABC@∩ú@w]MdC

ϕz∩ Plug-in for Edge Server F≥AºßANiH÷ qMtm Plug-in for Edge ServerAHKbz⌠ñCw]APlug-in for Edge Server ]iH&B@C]Azú]wC@∩ANαoºªαCzun]w÷

∩C

∩Mtmusermap.conf ONµ@nJM∩MPolicy Director ÷∩MΣLΩTA\dtmñíσ≤C

25Tivoli SecureWay Policy Director Plug-in for Edge Server zΓU

2.z

Plu

g-in

for

Ed

ge

Server

Page 36: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

ΘxPlug-in for Edge Server N≤O²uEdge Server Proxyv≤ΘxñCziHdoΘxA° Plug-infor Edge Server @C

b UNIX tñAΘxOG

/opt/ibm/edge/cp/server_root/logs/en_US/event.<date>

b Windows 2000 tñAΘxOG

C:\Program Files\IBM\edge\cp\server_root\Logs\en_US\event.<date>

°ztyÑ]wwAd⌠Wñ en_US "²iαMzt"²úPC

26 3.8

Page 37: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

íp Plug-in for Edge Server

ííp Tivoli SecureWay Policy Director Plug-in for EdgeServer dCoíp@íεXs⌠dCUCU OídG

¶ y]p⌠z

¶ 29ytm⌠z

¶ 32yΣLtm∩z

]p⌠

bñAN newbooks.com ]pπ Plug-in for EdgeServer tmdCo⌠NiH²s²MRyCodNí Plug-in for Edge Server \hDn\αC⌠]pi UCX≤G

¶ yetez

¶ 28yµ@nJz

ete

bo]píñAúNπ⌠exsb Web °AWAO e Web °AWC Web ei ¿UCUí G

¶ newbooks.com

¶ catalog.newbooks.com

3

27Tivoli SecureWay Policy Director Plug-in for Edge Server zΓU

3.íp

Plu

g-in

for

Ed

ge

Server

Page 38: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

¶ account.newbooks.com

¶ payment.newbooks.com

newbooks.com ⌠]tw∩H⌠ΣLí sC

catalog.newbooks.com l⌠]t⌠cΓy

xswC⌠oí únsεA]SO@C

account.newbooks.com "²]tzbß HTMLM Java íXCpayment.newbooks.com "²]]t¼

RyI HTML M Java íXC⌠oí jhOO@Cb account.newbooks.com U@"²On²sCo"²SO@C

µ@nJbo]pñAb±m account.newbooks.com l⌠ Web°Añ⌡µín[K LTPA CookieAαOwgLOCb±m payment.newbooks.com l⌠

Web °AW⌡µt@íAΣñ IDHTTP Y “App-User”Cª]n Plug-in for Edge Server ≥OAH@ⁿwOH⌠≥ªC Plug-in for EdgeServer “plugin” ID HKX “bookworm” ∩í⌡µ OC

bdñAwgMt@t newnovels.com @÷YAHKzL Plug-in for Edge Server NwgOαnewbooks.com ⁿO@C≤ newnovels.com hDt ID “novelgateway” HKX “bookworm” vYA∩ Plug-in for Edge Server iµ OChDNwgO ID m≤ Cookie “Novel-User” ñApU 3 C

28 3.8

Page 39: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

tm⌠

F newbooks.com úsεAztm Plug-in forEdge ServerCltmA Plug-in for Edge Server wqs]wAΦípUG

[Global]# ⌡µ wesosm z ID MKXupdate_admin_userid = sec_masterupdate_admin_password = secret5# ⁿXn SSL Tºrequire_ssl_errorfile =/opt/pdweb-lite/samples/require_ssl.htmls

# ϕµnJnXΩTlogin_method = formsform_login_file = http://newbooks.com/pub/login.htmlform_login_errorfile =http://newbooks.com/pub/loginerr.htmlform_logout_file = /pub/logout.html# ≤KXΩTform_chgpasswd_file =http://newbooks.com/pub/chgpasswd.htmlform_chgpasswd_submit_url = /pub/chgpasswdform_chgpasswd_response_url =

3. newbooks.com ⌠]p

29Tivoli SecureWay Policy Director Plug-in for Edge Server zΓU

3.íp

Plu

g-in

for

Ed

ge

Server

Page 40: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

https://newbooks.com/pub/passwdchanged.html

# ndµ@nJaccept_sso = NovelSSO

tmñ [Global] wqⁿwnM Plug-in for Edge ServerBzC@nD]wCbWztmñA@úz

ID MKXAo wesosm íiHM≤s

½≤íCPApGnDnwsuA²OSSúw

suANNⁿwC²OApGiα

As² ½s JwxC

otm]NnJΦkⁿwϕµABCXnJϕµCnJ

ϕµiHq Web °A]H ’http’ YAqtCpGϕµvAhϕµñ÷≤ov

U R L s]tvπ U R L]p“http://newbooks.com/pub/gifs/banner.gif”CϕnD URL ⌠PⁿwnX⌠PAN²nXCPAt

mAϕKXLA]e≤KXϕµwg

OC

µ@nJq≤ newnovels.com hDⁿAB NovelSSO µ@nJwqCoµ@nJwqbtmñwqC

tmñ [Local] wqⁿwnMuEdge Server Proxyvzt½≤]wCtmñuαΣñ@wqCtmuπwgno°AwqAΣeⁿU

CdG

[Local: /ESproxy/bookproxy.com]domains = bookproxy.comquery_command = http://bookproxy.com/cgi-bin/query_contents?dirlist=/

login_method = basic

30 3.8

Page 41: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

bdñAbookproxy.com O⌡µuEdge Server Proxyv≈Dn⌠WCOW newbooks.com hOⁿwP@í≈t@⌠W]HΣ÷ IP CPlug-in for EdgeServer O∩uEdge Server Proxyv½≤nDAH≤ newbooks.com ½≤AΦkONnD⌠WMtmñ°Awq[H±Cdomains ⁿX°AwqM⌠C

tmñ [Remote] wqⁿwnMí Web °A]wCzi°Awq"S¡εCbUCdñAH

UOA≤ newbooks.com wqG

[Remote: /ESproxy/reverse/newbooks.com]domains = newbooks.com www.newbooks.com

# ½≤ídⁿwquery_command = http://backend1.newbooks.com/cgi-bin/query_contents?dirlist=/home# nMgnD°Aroute = http://backend1.newbooks.com/home

UCl⌠wqOw∩⌠ΣLí wqG

[Remote: /ESproxy/reverse/catalog.newbooks.com]domains = catalog.newbooks.comquery_command = http://backend1.newbooks.com/cgi-bin/query_contents?dirlist=/catalog

[Remote: /ESproxy/reverse/account.newbooks.com]domains = account.newbooks.comquery_command = http://backend2.newbooks.com/cgi-bin/query_contents?dirlist=/require_ssl = yessubmit_sso = LTPA-COOKIEroute = https://backend2.newbooks.com

[Remote: /ESproxy/reverse/payment.newbooks.com]domains = payment.newbooks.comquery_command = http://backend3.newbooks.com/cgi-bin/query_contents?dirlist=/require_ssl = yessubmit_sso = PayAppSSO PayAppAuthroute = https://backend3.newbooks.com

31Tivoli SecureWay Policy Director Plug-in for Edge Server zΓU

3.íp

Plu

g-in

for

Ed

ge

Server

Page 42: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

o°AwqⁿwneXC@nDO Web °Aµ@nJOCowq]i Plug-in for Edge ServerANURL Mg]tnDe∩°ACpGnt@íe≈N Plug-in for Edge Server URL MgAunqtmñRú∩ route ÷ΣrYiC

tmñ [SSO] wqwqiαQⁿeXµ@nJOAΦípUG

[SSO: PayAppSSO]type = headername = App-Userformat = “<userid>”

[SSO: PayAppAuth]type = auth_headerformat = plugin:bookworm[SSO: NovelSSO]type = cookiename = Novel-Userformat = “<userid>”trust_basis = basic_authtrust_list = novelgateway:bookworm

boµ@nJwqßAiHNªHíú

accept_sso M submit_sso÷ΣrCpotmAµ@nJDúwgF¿C

ΣLtm∩

Plug-in for Edge Server iαΣLFΦtmC]Adtm osdef.conf OⁿFC@∩ABC@∩úw]MdC

32 3.8

Page 43: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

ú Plug-in for Edge Server

íp≤ú Plug-in for Edge Server tmHp≤NªúC

Plug-in for Edge Server α Tivoli SecureWay Policy DirectorRuntime EnvironmentCíp≤ú⌡µ⌠CpGnú⌡µ⌠Aϕ Tivoli SecureWay Policy DirectorBase wΓUñⁿC

pGnú Plug-in for Edge Server tmNªúA¿UCΣñ@ⁿG

¶ yú AIX W Plug-in for Edge Serverz

¶ 35yú Windows W Plug-in for Edge Serverz

¶ 36yú Linux W Plug-in for Edge Serverz

ú AIX W Plug-in for Edge Serverq AIX ú Plug-in for Edge Server oAΓBzC²A wslconfig ú Plug-in for Edge Server tmCUA SMIT ú Plug-in for Edge Server C

pGnú Plug-in for Edge Server tmNªú¿UCBJG

1. H root ¡≈nJC

4

33Tivoli SecureWay Policy Director Plug-in for Edge Server zΓU

4.

úP

lug

-info

rE

dg

eS

erver

Page 44: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

2. ΘJUCⁿOú Plug-in for Edge Server tmG

# wslconfig.sh -u

3. ΘJ Policy Director z IDCzi÷U EnterΣⁿw] sec_masterC

oXúAnDΘJ Tivoli SecureWay Policy DirectorzKXC

4. ΘJ sec_master KXC

oX@tC¼ATºCPlug-in for Edge Server O² Policy Director Management Server ñA≤s PolicyDirector O@½≤WíC

útm¿Awslconfig ⌠C

5. SMITC

6. ∩nΘ@íC

7. ∩úwnΘC

8. ÷@UnΘWΣMµ÷sC

Xuh½∩Mµv°íCπUCM≤WG

¶ PDPluginForEdgeServer.plugin

pGzwwΣLíM≤Ap Tivoli SecureWayPolicy Director Runtime EnvironmentAhMµ]]toM≤"C

9. ∩ PDPluginForEdgeServer.plugin M≤C

oXúwnΘ∩ C

10. Nw²µ≤C

11. bΣLµñAⁿw]C÷@UTwC

12. oXzTwHTº°íC÷@UTwC

oX@h¼ATºAⁿX&bwnΘCMßt@

h¼ATºACXwQúM≤C

34 3.8

Page 45: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

13. ÷@U¿C

oXúwnΘ∩ C

14. ÷@U°C÷@U⌠⌠ SMITC

Plug-in for Edge Server b AIX Wú@wg¿C

pGnú Tivoli SecureWay Policy Director RuntimeEnvironmentAϕ Tivoli SecureWay Policy Director Base wΓUñⁿC

ú Windows W Plug-in for Edge ServerpGnú Windows ñ Plug-in for Edge ServerA¿UCⁿG

1. HπzMv¡≈nJC

2. bⁿOúUAΘJUCⁿOú Plug-in for Edge ServertmG

> wslconfig.exe -u

3. ΘJ Policy Director z IDCzi÷U EnterΣⁿw] sec_masterC

oXúAnDΘJ Tivoli SecureWay Policy DirectorzKXC

4. ΘJ sec_master KXC

oX@tC¼ATºCPlug-in for Edge Server O² Policy Director Management Server ñA≤s PolicyDirector O@½≤WíC

útm¿Awslconfig ⌠C

5. ÷@UsW/úíC

6. ∩ Policy Director Plug-in for Edge ServerC

7. ÷@U≤/úC

35Tivoli SecureWay Policy Director Plug-in for Edge Server zΓU

4.

úP

lug

-info

rE

dg

eS

erver

Page 46: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

oX∩wyÑ∩ C

8. ∩@yÑAMß÷@UTwC

9. ∩úΩsC÷@UU@BC

10. oXTRú∩ C÷@UTwC

Plug-in for Edge Server wgúC

11. ∩ΩsN Windows t½s≈C÷@U¿C

úí⌠ABN Windows t½s≈C

b Windows ñ Plug-in for Edge Server ú@wg¿C

ú Linux W Plug-in for Edge Serverq Linux ú Plug-in for Edge Server oAΓBzC wslconfig uπú Plug-in for Edge Server M≤tmCMß rpm úC@M≤ Plug-in for Edge Server C

1. H root ¡≈nJC

2. ΘJUCⁿOú Plug-in for Edge Server tmG

# wslconfig.sh -u

3. ΘJ Policy Director z IDCzi÷U EnterΣⁿw] sec_masterC

oXúAnDΘJ Tivoli SecureWay Policy DirectorzKXC

4. ΘJ sec_master KXC

oX@tC¼ATºCPlug-in for Edge Server O² Policy Director Management Server ñA≤s PolicyDirector O@½≤WíC

útm¿Awslconfig ⌠C

5. ΘJUCⁿOú Plug-in for Edge Server G

# rpm -e PDPluginForES

36 3.8

Page 47: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

wgúCMß rpm í⌠C

b Linux ñ Plug-in for Edge Server ú@wg¿C

pGnú Tivoli SecureWay Policy Director RuntimeEnvironmentAϕ Tivoli SecureWay Policy Director Base wΓUñⁿC

37Tivoli SecureWay Policy Director Plug-in for Edge Server zΓU

4.

úP

lug

-info

rE

dg

eS

erver

Page 48: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

38 3.8

Page 49: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for
Page 50: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for
Page 51: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for
Page 52: Tivoli SecureWay Policy Director Plug-in for Edge Server ...publib.boulder.ibm.com/tividd/td/SW_30/GC32-0739... · πXb@ CP í Plug-in for Edge Server tm C ¶ 3 Ayíp Plug-in for

Printed in Australia

GC40-0685-00