A session cache allows
a server to store session information from
multiple clients. WebSEAL uses two types of session caches to accommodate
both HTTPS and HTTP session state information between clients and
WebSEAL:
WebSEAL session cache
The WebSEAL session cache stores information about all
sessions established by authenticated and unauthenticated users. The
session key, stored with the client, is a locator index to the associated
session data stored in the WebSEAL session cache.
The WebSEAL
session cache stores, among other data, the credential information
obtained for each client. Credential information is cached to eliminate
repetitive queries to the user registry database during authorization
checks.
SSL session ID cache
The
SSL session cache stores the SSL session ID used to maintain SSL session
state.
SSL session IDs can be used as the session index for
the WebSEAL session cache.
Configuration file entries
for configuring the WebSEAL session
cache and the SSL session ID cache are summarized in the following diagram:
Figure 1. Session cache configuration
file entries