WAS v8.5 > Secure applications > Authenticate users > Implement single sign-on to minimize web user authentications > Create a single sign-on for HTTP requests using the SPNEGO TAI (deprecated) > Configure WAS and enabling the SPNEGO TAI (deprecated)

Display SPNEGO TAI properties using the wsadmin utility (deprecated)

Use wsadmin utility to display the properties in the configuration of the Simple and Protected GSS-API Negotiation Mechanism (SPNEGO) trust association interceptor (TAI) for WebSphere Application Server. Deprecated feature:

In WAS v6.1, a TAI that uses the Simple and Protected GSS-API Negotiation Mechanism (SPNEGO) to securely negotiate and authenticate HTTP requests for secured resources was introduced. In WAS 7.0, this function is now deprecated. SPNEGO web authentication has taken its place to provide dynamic reload of the SPNEGO filters and to enable fallback to the application login method. depfeat Use wsadmin utility to configure the SPNEGO TAI for WAS:

  1. Start WAS.
  2. Start the command-line utility by running wsadmin from the app_server_root/bin directory.
  3. At the wsadmin prompt, enter the following command:

      $AdminTask showSpnegoTAIProperties
    You can use the following parameters with this command:
    Option Description
    <spnId> This is an optional parameter. It is the service principal name (SPN) identifier for the group of custom properties that are to be displayed with this command. If we do not specify this parameter, all SPNEGO TAI custom properties are displayed.


Results

SPNEGO TAI properties are displayed for this WAS.


Example

Example 1

The following example displays all SPNEGO TAI properties. 
wsadmin>$AdminTask showSpnegoTAIProperties
com.ibm.ws.security.spnego.SPN1.filter=request-url!=noSPNEGO;request-url%=snoop
com.ibm.ws.security.spnego.SPN1.hostName=central01.austin.ibm.com
com.ibm.ws.security.spnego.SPN2.hostName=wssecpd.austin.ibm.com
wsadmin>

Example 2

The following example displays SPNEGO TAI properties for SPN1 and host, central01.austin.ibm.com. 
wsadmin>$AdminTask showSpnegoTAIProperties -interactive
Show SPNEGO TAI configuration properties.

Display SPNEGO TAI configuration properties.

Service Principal Name identifier (spnId): 1

Show SPNEGO TAI configuration properties.

F (Finish)
C (Cancel)

Select [F, C]: [F]
WASX7278I: Generated command line: $AdminTask showSpnegoTAIProperties {-spnId 1}

com.ibm.ws.security.spnego.SPN1.filter=request-url!=noSPNEGO;request-url%=snoop
com.ibm.ws.security.spnego.SPN1.hostName=central01.austin.ibm.com
com.ibm.ws.security.spnego.SPN1.trimUserName=true
wsadmin>


Related


Configure WAS and enabling the SPNEGO TAI (deprecated)


Reference:

SPNEGO TAI custom properties configuration (deprecated)


+

Search Tips   |   Advanced Search