Authentication with a BA header

Use the -B-U "username"-W "password" option to enable WebSEAL authentication using basic authentication.

-B -U "username" -W "password" 

The conditions for this scenario include:

• The back-end server is set up to require verification of WebSEAL's identity with a BA header.
• Do not configure the junction with any -b option. (Internally, however, the -B option uses -b filter.)

• WebSEAL is configured to pass its identity information in a BA header to authenticate to the back-end server.
• For greater security, additionally configure the junction for DN matching (-D).

We must surround the user name and password arguments with double quotation marks. For example:

-U "WS1" -W "abCde"

Parent topic: Mutually authenticated SSL junctions