Filter

Filter

This type is a class for model objects.

Configuration setting for the SPNEGO filter class.
Package: security

Classifier ID:  -1
Instance class name:  * Unspecified *
Instance class:  * Unspecified *

Collection attributes having this type:
  SPNEGO.filters

Attributes Summary

hostName : EString Specifies the host name in the SPN used by the SPNEGO to establish a Kerberos secure context. The host name is the long form of host name.

krb5Realm : EString Specifies the Kerberos realm Name which will be part of the Kerberos Service Principal name.

filterClass : EString Specifies the name of the Java class used by the SPNEGO to select which HTTP requests are subject to SPNEGO authentication.

filterCriteria : EString Defines the filtering criteria used by the specified filter class. It defines arbitrary criteria that is meaningful to the implementation class used. The com.ibm.ws.security.spnego.HTTPHeaderFilter is the default .

enabledGssCredDelegate : EBoolean Wherether to enabled the GSS delegation credential option. This enables the capability for an application to retrieve the stored credentials and propagate them to other applications downstream for Kerberos authentication

spnegoNotSupportedPage : EString Specifies the Web address of a resource that contains the content that the SPNEGO includes in the HTTP response that the (browser) client application displays if it does not support SPNEGO authentication

ntlmTokenReceivedPage : EString Specifies the Web address of a resource that contains the content that the SPNEGO includes in the HTTP response that the (browser) client application displays when the SPNEGO token is received by the interceptor when the challenge-response handshake contains a NT LAN Manager (NTLM) token instead of the expected SPNEGO token.

trimUserName : EBoolean Specifies whether the SPNEGO is to remove the suffix of the Kerberos principal user name, starting from the "@" that precedes the Kerberos realm name.

Attribute Details

hostName  -  Specifies the host name in the SPN used by the SPNEGO to establish a Kerberos secure context. The host name is the long form of host name.
    Data Type: EString
    Default value:  unspecified
    Required:  false
    Changeable:  true
    Unsettable:  false
    Many:  false
    Ordered:  true
    Lower bound:  0
    Upper bound:  1
    Unique:  true
    Derived:  false
    Transient:  false
    Volatile:  false

krb5Realm  -  Specifies the Kerberos realm Name which will be part of the Kerberos Service Principal name.
    Data Type: EString
    Default value:  unspecified
    Required:  false
    Changeable:  true
    Unsettable:  false
    Many:  false
    Ordered:  true
    Lower bound:  0
    Upper bound:  1
    Unique:  true
    Derived:  false
    Transient:  false
    Volatile:  false

filterClass  -  Specifies the name of the Java class used by the SPNEGO to select which HTTP requests are subject to SPNEGO authentication.
    Data Type: EString
    Default value:  unspecified
    Required:  false
    Changeable:  true
    Unsettable:  false
    Many:  false
    Ordered:  true
    Lower bound:  0
    Upper bound:  1
    Unique:  true
    Derived:  false
    Transient:  false
    Volatile:  false

filterCriteria  -  Defines the filtering criteria used by the specified filter class. It defines arbitrary criteria that is meaningful to the implementation class used. The com.ibm.ws.security.spnego.HTTPHeaderFilter is the default .
    Data Type: EString
    Default value:  unspecified
    Required:  false
    Changeable:  true
    Unsettable:  false
    Many:  false
    Ordered:  true
    Lower bound:  0
    Upper bound:  1
    Unique:  true
    Derived:  false
    Transient:  false
    Volatile:  false

enabledGssCredDelegate  -  Wherether to enabled the GSS delegation credential option. This enables the capability for an application to retrieve the stored credentials and propagate them to other applications downstream for Kerberos authentication
    Data Type: EBoolean
    Default value:  unspecified
    Required:  false
    Changeable:  true
    Unsettable:  true
    Many:  false
    Ordered:  true
    Lower bound:  0
    Upper bound:  1
    Unique:  true
    Derived:  false
    Transient:  false
    Volatile:  false

spnegoNotSupportedPage  -  Specifies the Web address of a resource that contains the content that the SPNEGO includes in the HTTP response that the (browser) client application displays if it does not support SPNEGO authentication
    Data Type: EString
    Default value:  unspecified
    Required:  false
    Changeable:  true
    Unsettable:  false
    Many:  false
    Ordered:  true
    Lower bound:  0
    Upper bound:  1
    Unique:  true
    Derived:  false
    Transient:  false
    Volatile:  false

ntlmTokenReceivedPage  -  Specifies the Web address of a resource that contains the content that the SPNEGO includes in the HTTP response that the (browser) client application displays when the SPNEGO token is received by the interceptor when the challenge-response handshake contains a NT LAN Manager (NTLM) token instead of the expected SPNEGO token.
    Data Type: EString
    Default value:  unspecified
    Required:  false
    Changeable:  true
    Unsettable:  false
    Many:  false
    Ordered:  true
    Lower bound:  0
    Upper bound:  1
    Unique:  true
    Derived:  false
    Transient:  false
    Volatile:  false

trimUserName  -  Specifies whether the SPNEGO is to remove the suffix of the Kerberos principal user name, starting from the "@" that precedes the Kerberos realm name.
    Data Type: EBoolean
    Default value:  unspecified
    Required:  false
    Changeable:  true
    Unsettable:  true
    Many:  false
    Ordered:  true
    Lower bound:  0
    Upper bound:  1
    Unique:  true
    Derived:  false
    Transient:  false
    Volatile:  false

(C) COPYRIGHT International Business Machines Corp. 1996-2006

Attributes Summary
hostName : EString	Specifies the host name in the SPN used by the SPNEGO to establish a Kerberos secure context. The host name is the long form of host name.
krb5Realm : EString	Specifies the Kerberos realm Name which will be part of the Kerberos Service Principal name.
filterClass : EString	Specifies the name of the Java class used by the SPNEGO to select which HTTP requests are subject to SPNEGO authentication.
filterCriteria : EString	Defines the filtering criteria used by the specified filter class. It defines arbitrary criteria that is meaningful to the implementation class used. The com.ibm.ws.security.spnego.HTTPHeaderFilter is the default .
enabledGssCredDelegate : EBoolean	Wherether to enabled the GSS delegation credential option. This enables the capability for an application to retrieve the stored credentials and propagate them to other applications downstream for Kerberos authentication
spnegoNotSupportedPage : EString	Specifies the Web address of a resource that contains the content that the SPNEGO includes in the HTTP response that the (browser) client application displays if it does not support SPNEGO authentication
ntlmTokenReceivedPage : EString	Specifies the Web address of a resource that contains the content that the SPNEGO includes in the HTTP response that the (browser) client application displays when the SPNEGO token is received by the interceptor when the challenge-response handshake contains a NT LAN Manager (NTLM) token instead of the expected SPNEGO token.
trimUserName : EBoolean	Specifies whether the SPNEGO is to remove the suffix of the Kerberos principal user name, starting from the "@" that precedes the Kerberos realm name.