Delete SPNEGO TAI properties using the wsadmin utility (deprecated)
Use wsadmin utility to delete properties in the configuration of the SPNEGO trust association interceptor (TAI) for WebSphere Application Server.
Deprecated feature:
In WAS v6.1, a trust association interceptor (TAI) that uses the SPNEGO to securely negotiate and authenticate HTTP requests for secured resources was introduced. In WebSphere Application Server 7.0, this function is now deprecated. SPNEGO web authentication has taken its place to provide dynamic reload of the SPNEGO filters and to enable fallback to the application login method. depfeat
Verify that end-user desktop browsers are configured to support SPNEGO authentication, that the SPNEGO TAI is enabled, that the JVM property is set and, that WebSphere Application Server is configured to enable the operation of the SPNEGO TAI. Use wsadmin utility to configure the SPNEGO TAI for WebSphere Application Server:
- Start WebSphere Application Server.
- (dist)(zos) Start the command-line utility by running the wsadmin command from the app_server_root/bin directory.
- (iseries) Start the command-line utility by running the wsadmin command from the app_server_root/bin directory from the Qshell command line.
- At the wsadmin prompt, enter the following command:
- $AdminTask deleteSpnegoTAIProperties
We can use the following parameters with this command:
Option Description <spnId> This is an optional parameter. It is the SPN identifier for the group of custom properties that are to be deleted with this command. If we do not specify this parameter, all SPNEGO TAI custom properties are deleted.
Results
SPNEGO TAI properties are deleted for this WebSphere Application Server.Example
- Example 1
- The following example deletes all the SPNEGO TAI properties for SPN2
- wsadmin>$AdminTask deleteSpnegoTAIProperties {-spnId 2}
- Example 2
- The following example deletes all SPNEGO TAI properties
wsadmin>$AdminTask deleteSpnegoTAIProperties com.ibm.ws.security.spnego.SPN1.filter=request-url!=noSPNEGO;request-url%=snoop com.ibm.ws.security.spnego.SPN1.hostName=central01.austin.ibm.com com.ibm.ws.security.spnego.SPN2.hostName=wssecpd.austin.ibm.com wsadmin>
Related tasks