WAS v8.5 > Reference > Sets
Tivoli Access Manager JACC provider configuration
We can configure the Java Authorization Contract for Containers (JACC) provider for Tivoli Access Manager to deliver authentication and authorization protection for the applications or for authentication only. Most deployments that use the JACC provider for Tivoli Access Manager to configure Tivoli Access Manager provide both authentication and authorization functionality.
If we want Tivoli Access Manager to provide authentication, but leave authorization as part of WebSphere Application Server's native security, add the com.tivoli.pd.as.amwas.DisableAddAuthorizationTableEntry=true property to the amwas.amjacc.template.properties file. The file is located in the profile_root/config/cells/cell_name directory.
After this property is set, perform the tasks for setting Tivoli Access Manager Security, as documented.
We can configure the JACC provider for Tivoli Access Manager using either the dmgr console or wsadmin-line utility.
- For details on configuring the JACC provider for Tivoli Access Manager using the dmgr console, refer to Configure the JACC provider for Tivoli Access Manager .
- For details on configuring the Tivoli Access Manager JACC provider using wsadmin line utility, refer to Configure the JACC provider for Tivoli Access Manager using the wsadmin utility.
The JACC configuration files for Tivoli Access Manager that are common across multiple WAS profiles are created by default under the java/jre directory. When you install WAS, you are given permissions to read and write to the files in this directory.
Profiles
created by users who are different to the user that installed the application have read-only permissions for this directory.
This situation is not ideal because configuration of the JACC provider for Tivoli Access Manager fails in these situations. To avoid this situation, we can add the following property to the profile_root/config/cells/cell_name/amwas.amjacc.template.properties file: com.tivoli.pd.as.jacc.CommonFileLocation=new location where new location is a fully qualified directory name.
This property applies read and write permissions to the java/jre directory.
The wsadmin command is available to reconfigure the Java Authorization Contract for Containers (JACC) Tivoli Access Manager interface:
$AdminTask reconfigureTAM -interactive This command effectively prompts you through the process of unconfiguring the interface and then reconfiguring it.
Related
Configure the JACC provider for Tivoli Access Manager
Enable embedded Tivoli Access Manager
Configure the JACC provider for Tivoli Access Manager using the wsadmin utility