pam-fail-early
pam-fail-early = {true|false}
Description
Enable or disable this entry to control whether blocked requests fail early or late.
Options
True Any blocked requests fail as soon as an issue is detected. False Any blocked requests fail later, allowing additional fields to be added to the audit record.
Usage: Required.
This stanza entry is used to control whether the connection is dropped as soon as an issue is detected. If the connection is dropped early it will have less impact on WebSEAL. However, it also means the audit record will not contain the user name and certain pieces of information derived from the request. For example, browser information.
Default valueTrue
Example: pam-fail-early = true