Set WAS and enabling the SPNEGO TAI (deprecated)


Performing this task helps you, as Web administrator, to ensure that WAS is properly configured to enable the operation of the Simple and Protected GSS-API Negotiation (SPNEGO) TAI. we need to know how to use the WAS admin console to manage the security configuration and have the proper authority to modify the security configuration of the appserver.

Deprecated feature:

In WAS V6.1, a TAI that uses the SPNEGO to securely negotiate and authenticate HTTP requests for secured resources was introduced. In WAS 7.0, this function is now deprecated. SPNEGO Web authentication has taken its place to provide dynamic reload of the SPNEGO filters and to enable fallback to the application login method. depfeat

Complete the following steps to enable the operation of the SPNEGO TAI.

 

  1. Log on to the WAS admin console.

  2. Click...

      Security | Global security

  3. Expand Web security and click Trust association.

  4. Under the General Properties heading, select the Enable trust association check box, then click Interceptors.

  5. Select the SPNEGO TAI in the list of interceptors.

  6. Then click Custom properties.

  7. Click New and then fill in the Name and Value fields. Click OK. Repeat this step for each custom property to apply to the SPNEGO TAI. See SPNEGO TAI custom properties configuration (deprecated) for a complete list of SPNEGO TAI custom properties.

    It is recommended that you use the wsadmin utility to manage the SPNEGO TAI properties. We can add, modify, and delete SPNEGO TAI properties as well as display them using wsadmin. See Add SPNEGO TAI properties using the wsadmin utility (deprecated) to add, Modify SPNEGO TAI properties using the wsadmin utility (deprecated) to modify, and Delete SPNEGO TAI properties using the wsadmin utility (deprecated) to delete SPNEGO TAI properties.

  8. After you finish defining the custom properties, click Save to store the updated SPNEGO TAI configuration.

 

Results

Your SPNEGO TAI configuration is now configured for WAS.


Add SPNEGO TAI properties using the wsadmin utility (deprecated)
Modify SPNEGO TAI properties using the wsadmin utility (deprecated)
Delete SPNEGO TAI properties using the wsadmin utility (deprecated)
Displaying SPNEGO TAI properties using the wsadmin utility (deprecated)
SPNEGO TAI custom properties configuration (deprecated)
SPNEGO TAI configuration requirements (deprecated)

 

Related concepts


Single sign-on for HTTP requests using SPNEGO TAI (deprecated)

 

Related tasks


Set the client browser to use SPNEGO TAI (deprecated)
Set JVM custom properties, filtering HTTP requests, and enabling SPNEGO TAI in WAS (deprecated)
Create a single sign-on for HTTP requests using the SPNEGO TAI (deprecated)

 

Related


The Kerberos configuration file