Tivoli Access Manager JACC provider configuration

 

+

Search Tips   |   Advanced Search

 

The Tivoli Access Manager (TAM) JACC provider can be configured to deliver authentication and authorization protection for your applications or authentication only. Most deployments using the TAM JACC provider will configure TAM to provide both authentication and authorization functionality.

To have TAM provide authentication but leave authorization as part of WebSphere Application Server's native security, edit...

profiles/profile/cells/cell/amwas.amjacc.template.properties

...and add the following property...

com.tivoli.pd.as.amwas.DisableAddAuthorizationTableEntry=true

Once this property is set, perform the tasks for setting TAM Security as documented.

TAM JACC provider configuration options:

Tivoli Access Manager JACC configuration files that are common across multiple WAS profiles are created by default under the java/jre directory. The user installing WAS will be given permissions to read and write to the files in this directory. On UNIX platforms, profiles created by users who are different to the user that installed the application will have read-only permissions for this directory. In addition, all users on the iSeries platform will have read-only access to this directory. This is not ideal as configuration of the Tivoli Access Manager JACC provider will fail in these situations.

To avoid this problem read and write permissions can be manually applied to the java/jre directory. For iSeries installations, however, the permissions for this directory cannot be changed. To avoid this situation, edit...

profiles/profile/cells/cell/amwas.amjacc.template.properties file.

...and add the following property...

com.tivoli.pd.as.jacc.CommonFileLocation=new location

Where new location is a fully qualified directory name. This property sets the location of the Tivoli Access Manager JACC provider properties files that are common across profiles.

Note: The wsadmin command is available to reconfigure the Tivoli Access Manager JACC interface:

$AdminTask reconfigureTAM -interactive

This command effectively prompts you through the process of unconfiguring the interface and then reconfiguring it.


 

Related Tasks

Enabling embedded Tivoli Access Manager
Configuring the JACC provider for Tivoli Access Manager using the administrative console
Configuring the JACC provider for Tivoli Access Manager using the wsadmin utility