Post on 27-Aug-2019
IBM Tivoli Access Manager for e-business
���� ��
�� 5.1
GA30-2206-00
���
IBM Tivoli Access Manager for e-business
���� ��
�� 5.1
GA30-2206-00
���
�!
� ��� � ��� ���� ��� ���� ��, ��� 63 ���� �� B ������� �����.
��(2003� 11�)
� ���� � ���� ��� ���� �� �, IBM Tivoli Access Manager(�� �� 5724-C08)� �� 5, ��� 1, ��
�� 0 � �� �� ���� ����� �����.
© Copyright International Business Machines Corporation 1999, 2003. All rights reserved.
��
�� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii
� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii
� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viii
�� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viii
��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viii
�� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ix
�� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ix
�� ��� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x
�� �� ���. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
�� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
��� �� ��� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xv
�� ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xv
����� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xv
� �� ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvi
�� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvi
���� �� �� � �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvi
� 1 � � ���� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
CD �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
IBM Tivoli Access Manager� ����� ���� ��� . . . . . . . . . . . . . . . . . . . 4
� 2 � ��� ���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
���� ����� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
IBM Tivoli Directory Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
OS/390� IBM Security Server . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
IBM z/OS Security Server LDAP Server . . . . . . . . . . . . . . . . . . . . . . . 10
Lotus Domino . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Microsoft Active Directory. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Netscape iPlanet � Sun ONE Directory Server . . . . . . . . . . . . . . . . . . . . . 11
Novell eDirectory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
��� �� � ��� ��� . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Tivoli Access Manager �� ��� . . . . . . . . . . . . . . . . . . . . . . . . . 13
Tivoli Access Manager �� ��� . . . . . . . . . . . . . . . . . . . . . . . . 14
���� ���(�� �� ��) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
���� ���� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
� 3 � ��� ��� � ���� �� . . . . . . . . . . . . . . . . . . . . . . . . . 25
�� � ���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Active Directory� �� Windows 2003 ���� �� ���� ���(44369) . . . . . . . . . . . 25
�� ���� LDAP ��� Plug-in for Web Server� � SSL �� ���� � (44336) . . . . . 25
�� ���� �� ��� Active Directory ����� ���(44046) . . . . . . . . . . . . . . 25
Tivoli Access Manager� ��� AIX®� ��� JRE �� 1.3.1.5 ��� ���� ��� �(41082) 26
© Copyright IBM Corp. 1999, 2003 iii
�� ���� ��� � JDK 1.3.1� Red Hat Enterprise Linux 3�� ���(40973, 43956) . . . . . 26
Tivoli Access Manager Java Runtime Environment javadocs� ���� Access Manager Runtime ��
�� ���� ��� �(43895) . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Web Portal Manager� ���� IBM Java Runtime Environment 1.3.1� ��(44178) . . . . . . 26
WebSphere Application Server ���� �� ��� ��(44432). . . . . . . . . . . . . . . 26
�� WebSEAL ��� ������ libcdmf.* ��� ��� � � (44079). . . . . . . . . . . 27
�� � ���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
�� ���� zSeries®� Red Hat Enterprise Linux 3.0�� ���(42163) . . . . . . . . . . . . 27
Windows 2000� ��� � Java Runtime Environment� �� � � (43948) . . . . . . . . . . 28
�� ��� �� �� �� � Policy Server �� ��(43906) . . . . . . . . . . . . . . . 28
2��� ��� �� ���� �� ��� ��� ���� ���� � (37601, 39896, 43907) . . . . 28
�� ���� ��� Windows� Web Portal Manager� ��� � �� ��� ��(44045) . . . . 28
�� �� ibmjcaprovider.jar �� �(44323) . . . . . . . . . . . . . . . . . . . . . . 28
Microsoft Active Directory �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Active Directory �� �� � �� �� . . . . . . . . . . . . . . . . . . . . . . 29
Active Directory� ��� � ″�� � ��� ��″ �� . . . . . . . . . . . . . . . . . . 29
Policy Server �� � Windows 2003 Active Directory� ����� ��� � �� �� ��� �
�� ��� � � (43908) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Windows 2000 ����� �� ����� �� ����� ��� � ���� � (36389) . . . . . . 29
iPlanet Directory Server �� Sun ONE Directory Server �� . . . . . . . . . . . . . . . . . 30
iPlanet ����� � �� ��(14785) . . . . . . . . . . . . . . . . . . . . . . . . 30
iPlanet �� �� �� � ��� �� . . . . . . . . . . . . . . . . . . . . . . . . 31
ONE Directory Server 5.2��� pdunconfig� ��� ��� � � (40621) . . . . . . . . . . . 31
Web Portal Manager �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
AIX 5.1�� Web Portal Manager GUI ��� . . . . . . . . . . . . . . . . . . . . . 32
�� ���� � ��� Policy Proxy Server� ���� � (30100 � 30128) . . . . . . . . . 32
ACL ��� ��� ��� ��(29961) . . . . . . . . . . . . . . . . . . . . . . . 33
Web Portal Manager� �� ������ ��� � � (43847) . . . . . . . . . . . . . . . 33
WebSEAL ��. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Active Directory(AD_LDAP)�� �� �� WebSEAL� �� � � (43684). . . . . . . . . 33
��� �� ID ���� � � ���� � (IY30623, IY21308) . . . . . . . . . . . . . . 33
Solaris�� WebSEAL� SSL �� �� �(43387) . . . . . . . . . . . . . . . . . . . 34
�� ���� ��� Red Hat Linux 3.0�� WebSEAL� �� . . . . . . . . . . . . . . 34
Linux ����� WebSEAL� �� � �� ���� ��(44078). . . . . . . . . . . . . . 34
�� ���� ″� ��� �� ��″��� ���� � (44086) . . . . . . . . . . . . . . . 35
�� ��� �� �� ��� ���� � � � (44083) . . . . . . . . . . . . . . . . 35
�� � �� �� ��� �� �� ���� � (44084) . . . . . . . . . . . . . . . . . 35
��� ��� ���� ����� ��(44088) . . . . . . . . . . . . . . . . . . . . 35
�� ���� �� BASE HREF ��� ���� � (44090) . . . . . . . . . . . . . . . 35
WebSEAL ��� ���� ���(44095) . . . . . . . . . . . . . . . . . . . . . . . 36
��� ����� wsadmin ������ �� WebSEAL �� ���� �(44100) . . . . . . . . 36
AMWebARS � �� ����� �� �� �� � � �� �� ��� ��(44134) . . . . . . 36
Active Directory� �� ���� �� � ��� WebSEAL� �� � � (44386) . . . . . . 37
WebSEAL� ��� ���(44082) . . . . . . . . . . . . . . . . . . . . . . . . . . 37
��� ���� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
�� ���� URL� Explorer �� ��� ���� � (37028) . . . . . . . . . . . . . . . 37
iv IBM Tivoli Access Manager for e-business: ���� ��
��� ��� ��� � ��� �� ��� ��� ���� �� (39896) . . . . . . . . . . 37
���� ��� �� ��� FSSO(Forms Single Sign-On)� � ���� � (39924) . . . . . . . 38
Windows ��� ������ ����� �� �� � � �� ID� ��� Service Unavailable
��� ���(42351) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
SPNEGO ��� Active Directory ���� �� ���� ������ �� �(41078) . . . . . . . 38
Microsoft IIS Plug-in�� ������� �� pdwebpi.conf �� ��(44361) . . . . . . . . . . . 38
�� �� ���� �� URL� ��� � (44209) . . . . . . . . . . . . . . . . . . 39
Apache Web Server �� � �� ��� ���� � ���� � � (44273, 44286) . . . . . . 39
IBM Tivoli Directory Server �� . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
zSeries� Linux� IBM Tivoli Directory Server �� 5.2 ��(44406) . . . . . . . . . . . . . 39
pdadmin� � �� � Directory Server� �� ��� Tivoli Access Manager ��� ���� �
(43951) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Tivoli Access Manager �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
SSL� ��� �� �� LDAP Server � ���� ��� �(18832) . . . . . . . . . . . . 40
pdadmin object delete � � ����� ��� � � (27173) . . . . . . . . . . . . . . . 40
��� � �� � � �� ��� ��� � � (24411) . . . . . . . . . . . . . . . . . 41
LDAP��� ���� �� ���� ��� Policy Server �����(28114) . . . . . . . . . 41
��� ��� ��� � Windows�� Policy Server � Authorization Server� ���� � (IY34142) . . 41
Tivoli Access Manager �� 5.1� �� ���� ��� Java ������ ��� ��(24996) . . . 42
Solaris��� Policy Director ������ �� ��� � . . . . . . . . . . . . . . . . 42
AIX�� ���� ����� �� �� . . . . . . . . . . . . . . . . . . . . . . . . 42
��� ��� �� IBM HTTP Server ��� ����(19559) . . . . . . . . . . . . . . . 43
HTTP �� ���� ��� ��� � �(20633, 20631, 20735). . . . . . . . . . . . . . 43
WebSphere Application Server� Tivoli Access Manager� �� ��� HP-UX�� ���� �
(28015) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
� �� ���� BEA WebLogic Server� �� � � . . . . . . . . . . . . . . . . . . 44
Microsoft �� �� �� � Policy Server ��� ��� � � (43306) . . . . . . . . . . . . 45
Microsoft Internet Explorer� �� ��� � ��� � � � � �� � ���(43398) . . . . . 45
Authorization Server(pdacld)� �� �� ��� ��(43511) . . . . . . . . . . . . . . . . . 45
Windows ���� � �� �� ��� ��� WebSphere Application Server� Tivoli Access
Manager� �� �� � � ���� ��� ���� � (43612) . . . . . . . . . . . . . 46
�� �� �� �� � � �� ��� �� ��� Tivoli Access Manager Java Runtime
Environment� ��� ��(43896) . . . . . . . . . . . . . . . . . . . . . . . . . 46
Tivoli Access Manager Runtime Environment �� � � � �� �� ���� �(43904) . . . 46
Tivoli Access Manager� �� �� � �� ���� ���� �� � � (43933) . . . . . . . . 46
SvrSslCfg ��� � � � �� �� ���� ��(43701) . . . . . . . . . . . . . . . 47
SuSE Linux Enterprise Server 8� Tivoli Access Manager� ��� � Policy Server(pdmgrd) �
Authorization Server(pdacld)� ��� ���(36687, 37558) . . . . . . . . . . . . . . . . . 48
Tivoli Access Manager for WebSphere Application Server ����� ��� ����� �����
� ��� � � (28418) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
WebSphere Application Server��� ����� �� ��(21935) . . . . . . . . . . . . . . 48
�� ���� � Tivoli Access Manager ���� ��� �� ����� ��� ���(43748) . . . 49
����� ��� ACL� ������ ��� �� ���(44245) . . . . . . . . . . . . . . 49
����� ��� policy� ������ ��� ���(44410) . . . . . . . . . . . . . . . 50
UNIX �� ����� pdbackup � � ��� � �� ���� �� (44285) . . . . . . . . . . 50
pdwascfg �� � jlog.properties ��� ���� � (44410) . . . . . . . . . . . . . . . . 50
�� v
zSeries� Linux� WebSphere Application Server ��� ���(44540) . . . . . . . . . . . . . 50
Tivoli Access Manager� �� ��� � ��� Java ������ �� � NoSuchMethodErrors�
�� � � . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
� 4 � ��� �� ���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
�� �� � ��� � . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
Red Hat Linux 7.1� �� �� �� ��� �� �� ���� . . . . . . . . . . . . . . 53
Active Directory� ���� DBCS ����� �� �� �� � � (44415, 44312) . . . . . . . 53
Linux ������ ��� ��� � �� ��� �� . . . . . . . . . . . . . . . . . . 53
Linux ����� �� ���� ��� �� ����. . . . . . . . . . . . . . . . . . . . 54
�� ���� �� ���� � � ���� � (28420, 28422) . . . . . . . . . . . . . . . 55
�� ��� ��� ��� ���� ���� ��(28453). . . . . . . . . . . . . . . . . . 55
Windows� ��� LANG ��� ���� ��� ��� �� . . . . . . . . . . . . . . . . 55
� ��� Windows ���� ��� �� ���� ��� ��(26899) . . . . . . . . . . . 55
�� ��� ASCII ��� � �� ��(26985) . . . . . . . . . . . . . . . . . . . . 55
Web Portal Manager� ���� �� ���� �� ��� �(IY32306) . . . . . . . . . . . 56
Java� �� � � ���� � �� ��(IY31894) . . . . . . . . . . . . . . . . . . 56
Policy Server� AIX �� � ��� ���(12584) . . . . . . . . . . . . . . . . . . . . 56
2��� ��� �� ���� �� ��� ��� ���� ���� � (37601, 39896, 43907) . . . . 56
��� ��� ��� � ��� �� ��� ��� ���� �� (39896) . . . . . . . . . . 56
��� Windows ����� Plug-in for Web Server� �� ���� ���(44565) . . . . . . . . . 56
����� � �� ���� ��� � ������� � � ���� � (44080). . . . . . . . . 57
BEA WebLogic ��� ��� � �� ���� ��� ���� ��(44219, 44398) . . . . . . . . 57
SuSE Linux Enterprise Server 8� Tivoli Access Manager� ��� � Policy Server(pdmgrd) � ACL
��(pdacld)� ��� ���(36687, 37558) . . . . . . . . . . . . . . . . . . . . . . . 57
� 5 � ��� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
IBM Tivoli Access Manager Upgrade Guide . . . . . . . . . . . . . . . . . . . . . . . 59
IBM Tivoli Access Manager Base Administration Guide . . . . . . . . . . . . . . . . . . . 59
IBM Tivoli Access Manager for e-business Authorization C API Developer Reference . . . . . . . . 59
IBM Tivoli Access Manager for e-business Administration C API Developer Reference . . . . . . . . 60
�� A. Linux�� Tivoli Access Manager ������ ��� ��� � . . . . . . . . . . . . . 61
�� B. ���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
�� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
vi IBM Tivoli Access Manager for e-business: ���� ��
��
IBM® Tivoli® Access Manager for e-business ���� ��� �� � � ��
���. � ���� IBM Tivoli Access Manager for e-business, �� 5.1�� �
� ��� �� ��� �����.
Tivoli Access Manager� IBM Tivoli Access Manager ���� ������
��� � �� �� ��������. � ��� IBM Tivoli Access Manager
������ ��� ��� �� � � �� ��� �����. �� ��
�� ���� �� ��� e-business ������ �� ���� � �����
�� policy� �� ����� ���� ��� �� �� ��� �����.
�: IBM Tivoli Access Manager� �� Tivoli SecureWay® Policy Director� �
�� ����. Tivoli SecureWay Policy Director ����� � ���� �
�� �� ��� ���� Policy Server�� ����.
IBM Tivoli Access Manager� ��� , �����/��, MQSeries® � ���
�� ������ �� ��� �� �����. Tivoli Access Manager �
�� ��� ��� �� � �� �� �� ���� ���� ��� � ��
���. �� ��� �� ������ �� Tivoli Access Manager� ��� �
�� ���� ��� � �� ���� �� ������ �����.
�� ����� �� � ��� �� ��� �� �� ��� ���� ��
��� ��� � ���.
��: ���� �� ��� ��� ��� ���� ����. � ��� �� �
� ��� �� �� ��, ���� � ��� �� ��� TechNotes �
��� ������.
� �� ���
� �� Tivoli Access Manager� ��, �� � ��� ���� ��� ���
���� ���.
��� � � � � �� ��� ���.
v UNIX® � ��
v HTTP, TCP/IP, FTP, Telnet, SSL� ��� ��� ���
v �� ��
v ��
© Copyright IBM Corp. 1999, 2003 vii
v ��
v IBM Tivoli Access Manager ��
v LDAP(Lightweight Directory Access Protocol) � ��� ���
� �� ��
� �� � � �� ���� ����.
v 1 ���� � 1 � �� ���� �� ���
v 7 ���� � 2 � ���� ����
v 25 ���� � 3 � ��� �� � ��� ��
v 53 ���� � 4 � ��� �� �����
v 59 ���� � 5 � ��� �� ���
�� ��
�� �� ��� ��� ���� Tivoli Access Manager �����, �� ��
� � � � �� �� ��� ����. �� �� ��� � ��� �� ��
�� �� ����� ������.
IBM Tivoli Access Manager for e-business �� �� �� � ��� � �
� �� � ����.
http://www.ibm.com/software/tivoli/products/access-mgr-e-bus/
Tivoli Access Manager ������ � � �� ���� ����.
v ���� ���
v ix ���� ��� ���
v ix ���� � �� ���
v x ���� ��� ����
v xi ���� ��� �� ����
��� ��
v IBM Tivoli Access Manager for e-business Read This First(GA30-2205-00)
Tivoli Access Manager �� � ����� �� ��� �����.
v IBM Tivoli Access Manager for e-business ���� ��(GA30-2206-00)
����� ����, �� � �� �� � �� ����� �� �� ��� �
����.
viii IBM Tivoli Access Manager for e-business: ���� ��
�� ��
v IBM Tivoli Access Manager �� �� ���(SA30-2207-00)
Web Portal Manager ������ ��� Tivoli Access Manager �� ���
��� �� � �� �� � �����. � �� IBM Tivoli Access Manager
for e-business Web Security �� ���� ������, IBM Tivoli Access
Manager for Business Integration � IBM Tivoli Access Manager for Operating
Systems� �� � Tivoli Access Manager ��� �� ���� �� ���
�.
v IBM Tivoli Access Manager Base Administration Guide(SC32-1360-00)
Tivoli Access Manager ��� ��� �� �� � ��� � �����.
pdadmin � � ��� Web Portal Manager ������� ���� ��
� ��� �����.
� �� ��
v IBM Tivoli Access Manager for e-business Web Security �� ���
(SA30-2208-00)
Tivoli Access Manager �� ����� � �� ���� �� ��, ��
� � ����� �����. � �� IBM Tivoli Access Manager �� ��
���� �������.
v IBM Tivoli Access Manager Upgrade Guide(SC32-1369-00)
Tivoli SecureWay Policy Director �� 3.8 �� Tivoli Access Manager� �
� ��� Tivoli Access Manager �� 5.1� ������� �� � ���
��.
v IBM Tivoli Access Manager for e-business WebSEAL Administration
Guide(SC32-1359-00)
WebSEAL� ��� �� ���� �� ���� ��� �� �����
, �� �� � �� �� ��� �����.
v IBM Tivoli Access Manager for e-business IBM WebSphere® Application Server
�� ���(SA30-2209-00)
Tivoli Access Manager� IBM WebSphere® Application Server� ���� �
�� ��, � � �� ����� �����.
v IBM Tivoli Access Manager for e-business IBM WebSphere Edge Server ��
���(SA30-2211-00)
Tivoli Access Manager� IBM WebSphere Edge Server ������ ���
� � �� ��, � � �� ����� �����.
v IBM Tivoli Access Manager for e-business Plug-in for Web Servers Integration
Guide(SC32-1365-00)
�� ix
��� ����� ��� ��� ��� �� ��, �� �� � �� �
� ��� �����.
v IBM Tivoli Access Manager for e-business BEA WebLogic Server �� ���
(SA30-2210-00)
Tivoli Access Manager� BEA WebLogic Server� ��� �� ��, � �
�� ����� �����.
v IBM Tivoli Access Manager for e-business IBM Tivoli Identity Manager
Provisioning Fast Start Guide(SC32-1364-00)
Tivoli Access Manager � Tivoli Identity Manager� ��� ��� ���� �
� ���� Provisioning Fast Start ��� ��� �� �� � ���
��.
��� ���
v IBM Tivoli Access Manager for e-business Authorization C API Developer
Reference(SC32-1355-00)
Tivoli Access Manager �� C API � Tivoli Access Manager ��� ����
������ ��� Tivoli Access Manager ��� ������ ���
�� � ���� �� � �����.
v IBM Tivoli Access Manager for e-business Authorization Java™ Classes Developer
Reference(SC32-1350-00)
��� API� Java™ �� ��� ��� ������ Tivoli Access Manager
��� ���� �� �� �� �� ��� �����.
v IBM Tivoli Access Manager for e-business Administration C API Developer
Reference(SC32-1357-00)
�� API� ��� ������ Tivoli Access Manager �� ���� �
�� �� � �� ��� �����. � ����� �� API� C ��� �
�����.
v IBM Tivoli Access Manager for e-business Administration Java Classes Developer
Reference(SC32-1356-00)
��� API� Java �� ��� ��� ������ Tivoli Access Manager
�� ���� ���� �� �� �� �� ��� �����.
v IBM Tivoli Access Manager for e-business Web Security Developer
Reference(SC32-1358-00)
CDAS(Cross-Domain Authentication Service), CDMF(Cross-Domain Mapping
Framework) � Password Strength ��� �� �� � ����� ��� ��
���.
x IBM Tivoli Access Manager for e-business: ���� ��
�� �� ���
v IBM Tivoli Access Manager for e-business Command Reference(SC32-1354-00)
Tivoli Access Manager� �� ���� � ��� � ����� �� �
�� �����.
v IBM Tivoli Access Manager Error Message Reference(SC32-1353-00)
Tivoli Access Manager�� ���� ���� ��� �� ��� �����.
v IBM Tivoli Access Manager for e-business Problem Determination
Guide(SC32-1352-00)
Tivoli Access Manager� �� �� �� ��� �����.
v IBM Tivoli Access Manager for e-business Performance Tuning
Guide(SC32-1351-00)
IBM Tivoli Directory Server� �� ������ Tivoli Access Manager� �
�� ��� �� �� �� ��� �����.
�� ��
� ���� Tivoli Access Manager ������ ��� ��� �����.
Tivoli Software Library��� white papers, datasheets, demonstrations, redbooks
� announcement letters� �� ��� Tivoli ��� �����. � ����
� Tivoli Software Library� ��� � ����.
http://www.ibm.com/software/tivoli/library/
Tivoli Software Glossary�� Tivoli ������ ��� �� �� ��� ���
� ����. Tivoli Software Glossary� Tivoli Software Library ���
(http://www.ibm.com/software/tivoli/library/)� ��� �� Glossary ���� �
�� �� �����.
IBM Global Security KitTivoli Access Manager� IBM Global Security Kit(GSKit) �� 7.0� �� ��
� �� ��� �����. GSKit� �� ���� �� IBM Tivoli Access
Manager Base CD� IBM Tivoli Access Manager Web Security CD, IBM Tivoli
Access Manager Web Administration Interfaces CD � IBM Tivoli Access Manager
Directory Server CD� ���� ����.
GSKit ���� � ��� ��, ��-��� � � �� �� ���� � �
��� iKeyman � �� ��� gsk7ikm� �����. � ��� Tivoli
Information Center ���� �� IBM Tivoli Access Manager �� ��� �
� ��� � � ����.
�� xi
v IBM Global Security Kit Secure Sockets Layer and iKeyman User’s
Guide(SC32-1363-00)
Tivoli Access Manager ���� SSL ��� ����� ��� ���� ��
��� �� ��� �� ��� �����.
IBM Tivoli Directory ServerIBM Tivoli Directory Server, �� 5.2� ���� � ��� IBM Tivoli Access
ManagerDirectory Server CD� ���� ����.
�: IBM Tivoli Directory Server� ��� � � ��� ������ ����
�� ��� ����.
v IBM Directory Server(�� 4.1 � �� 5.1)
v IBM SecureWay Directory Server(�� 3.2.2)
IBM Directory Server �� 4.1, IBM Directory Server �� 5.1 � IBM Tivoli
Directory Server �� 5.2� � IBM Tivoli Access Manager �� 5.1� � �
����.
IBM Tivoli Directory Server� �� � ��� � �� �� � ����.
http://www.ibm.com/software/network/directory/library/
IBM DB2 Universal Database™
IBM DB2® Universal Database Enterprise Server Edition, �� 8.1� IBM Tivoli
Access Manager Directory Server CD� ���� IBM Tivoli Directory Server �
����� �� �����. IBM Tivoli Directory Server, z/OS® �� OS/390®
LDAP ��� Tivoli Access Manager� �� ������ ��� �� DB2� �
� �����.
DB2� �� � ��� � �� �� � ����.
http://www.ibm.com/software/data/db2/
IBM WebSphere Application ServerIBM WebSphere Application Server, Advanced Single Server Edition 5.0� ��
�� � ��� IBM Tivoli Access Manager Web Administration Interfaces CD
� ���� ����. WebSphere Application Server� Tivoli Access Manager�
���� � ���� Web Portal Manager ������ IBM Tivoli Directory Server
� ���� � ���� �� �� � � ��� � ��� ���. Tivoli Access
Manager�� IBM WebSphere Application Server �� 2� ��� �� IBM
Tivoli Access Manager WebSphere Fix Pack CD� �����.
xii IBM Tivoli Access Manager for e-business: ���� ��
IBM WebSphere Application Server� �� � ��� � �� �� � ���
�.
http://www.ibm.com/software/webservers/appserv/infocenter.html
IBM Tivoli Access Manager for Business IntegrationIBM Tivoli Access Manager for Business Integration� ��� ��� � �� �
���, IBM MQSeries® �� 5.2� �� �� ��� IBM WebSphere® MQ �
� 5.3 ���� �����. IBM Tivoli Access Manager for Business Integration
� ��� ������ ��� �� ��� WebSphere MQSeries �����
� ������ ��� ��� ���� ��� � ��� ���. WebSEAL �
IBM Tivoli Access Manager for Operating Systems, IBM Tivoli Access Manager
for Business Integration��, IBM Tivoli Access Manager� ���� ����
� �� � �����.
IBM Tivoli Access Manager for Business Integration� �� � ��� � �
� �� � ����.
http://www.ibm.com/software/tivoli/products/access-mgr-bus-integration/
IBM Tivoli Access Manager for Business Integration �� 5.1� �� �� ��
� Tivoli Information Center ���� ����.
v IBM Tivoli Access Manager for Business Integration �� ���(SA30-1825-01)
v IBM Tivoli Access Manager for Business Integration �� �� ���
(GA30-2064-00)
v IBM Tivoli Access Manager for Business Integration ���� ��(GA30-1827-01)
v IBM Tivoli Access Manager for Business Integration Read This
First(GA30-2063-00)
IBM Tivoli Access Manager for WebSphere Business
Integration BrokersIBM Tivoli Access Manager for Business Integration� ��� ��� � �� IBM
Tivoli Access Manager for WebSphere Business Integration Broker� WebSphere
Business Integration Message Broker, �� 5.0 � WebSphere Business Integration
Event Broker, �� 5.0� �� �� ��� �����. IBM Tivoli Access
Manager for WebSphere Business Integration Broker� Tivoli Access Manager�
��� � � �� �� �� ��, ��� ��� �� � �� ���� ���
�� JMS ��/�� ������ �����.
IBM Tivoli Access Manager for WebSphere Integration Brokers� �� � �
�� � �� �� � ����.
�� xiii
http://www.ibm.com/software/tivoli/products/access-mgr-bus-integration/
IBM Tivoli Access Manager for WebSphere Integration Brokers, ��� �� �
�� ��� Tivoli Information Center ����� ��� � ����.
v IBM Tivoli Access Manager for WebSphere Business Integration Brokers
Administration Guide(SC32-1347-00)
v IBM Tivoli Access Manager for WebSphere Business Integration Brokers ��
�� ��(GA30-2194-00)
v IBM Tivoli Access Manager for Business Integration Read This
First(GA30-2063-00)
IBM Tivoli Access Manager for Operating SystemsIBM Tivoli Access Manager for Operating Systems� ��� ��� � �� ��
��, �� � ���� ���� � �� UNIX ����� ��� policy �
� � �����. IBM Tivoli Access Manager for Operating Systems�
WebSEAL � IBM Tivoli Access Manager for Business Integration�� IBM Tivoli
Access Manager� ���� ���� � �� � �����.
IBM Tivoli Access Manager for Operating Systems� �� � ��� � ��
�� � ����.
http://www.ibm.com/software/tivoli/products/access-mgr-operating-sys/
IBM Tivoli Access Manager for Operating Systems �� 5.1� � ��� Tivoli
Information Center ���� ����.
v IBM Tivoli Access Manager for Operating Systems �� ���(SA30-1841-01)
v IBM Tivoli Access Manager for Operating Systems �� ���(SA30-1840-01)
v IBM Tivoli Access Manager for Operating Systems �� �� ���
(SA30-1842-01)
v IBM Tivoli Access Manager for Operating Systems ���� ��(GA30-1843-01)
v IBM Tivoli Access Manager for Operating Systems Read Me(GA30-1844-01)
IBM Tivoli Identity ManagerIBM Tivoli Identity Manager �� 4.5� ��� �� ��� ���� �� ���
��(�: �� ID � �)� ���� ���� �����(�, �����,
� �� �� ��� �� ���� �� �� �)� � ����. Tivoli Identity
Manager� Tivoli Access Manager Agent� � Tivoli Access Manager� ��
� � ����. Agent ��� �� �� ��� IBM ���� ������.
IBM Tivoli Identity Manager� �� �� ��� � �� �� � ����.
xiv IBM Tivoli Access Manager for e-business: ���� ��
http://www.ibm.com/software/tivoli/products/identity-mgr/
��� �� ���
�� ����� ��� � Tivoli Softwarw Library� PDF �� HTML ���
� �� ����.
http://www.ibm.com/software/tivoli/library
�� ������ ����� Product manuals ��� ���. Tivoli Software
Information Center ����� �� �� � ���.
�� ��� ���� ��, �� ���, �� ���, �� ��� � �� �
��� �����.
�: PDF ��� ��� ��, Adobe Acrobat �� �� �(�� → ���
��)�� ���� ���� ��� ������.
�� ��� ��
�� ��� ��� �� ��� �� �� � ��� ��� �� ��� �
���� ��� ��� � ��� �����. � ����� �� ��� ���
������ ��� �� ��� � ����. �� ��� �� ���� ���
��� �� ������ �� ��� ��� � ����.
����� �� ��
Tivoli ��� ��� �� ��, IBM Tivoli Software Support� �� � ���
� � ����. � ����� Tivoli support ��� �� IBM Tivoli Software
Support� ������.
http://www.ibm.com/software/support/
��� �� ��, � ����� IBM Software Support Guide� ���
�� ��� ����� ��� ������.
http://techsupport.services.ibm.com/guides/handbook.html
� ��� �� � ���� �� IBM Software Support� ���� � � �
� �� ��� �����.
v �� � ���
v ��� �� ��� ���� � � �� ��
v ��� ��� �� �� � ��
�� xv
� �� ��� ��
� ���� �� ��� ��, � ��� � � ��� � � ��� ����
�.
��� ��
� ���� � � �� �� ��� �����.
�� ��� �� ���� �� � ��� � � , ���, ����, �,
Java ��� � � ����� �� �����.
����
��, �� ��, ���� ��� ��� ����� �����.
������
��� �� ���� ���, ��, ��, � , �� ��, ��� ��
�, ��� �� ��� � �� �� � �� ������� ��
���.
����� �� �� � ��
� ���� ��� �� � �� �� ��� UNIX ��� �����. Windows®
� � ��� ��, �� ��� $variable� %variable%� ��, ��� ���
���(/)� ����(\)� ����. Windows ����� bash �� ��� ��,
UNIX ��� ������.
xvi IBM Tivoli Access Manager for e-business: ���� ��
� 1 � � ���� �� ��
IBM Tivoli Access Manager for e-business(Tivoli Access Manager) �� 5.1� �
�� e-business ��� ��� �� � �� ��� ���� � IBM Tivoli
Access Manager � IBM SecureWay Policy Director� �� �� �� �����.
� ���� ��� � ��� � � ����.
�� �
Tivoli Access Manager� ACL(Access Control List)� �� ��� �� �
�� ���� �� ��� �� � ����.
��� ��
Tivoli Access Manager� � �� ��� Tivoli Access Manager ����
���� � �� �� �� �� �� ���� �� ���� ���� �
�� �����.
Policy Proxy Server
Tivoli Access Manager� � ��� ����� � ���� ���� Tivoli
Access Manager � � �� �� DMZ�� ��� � �� �� Policy
Proxy Server� �����. �����, ��� ��� ���� policy ��
� ��� � � �� ���� ��� �� ���� ���� � ���
�.
Microsoft® Active Directory� �� ��
Tivoli Access Manager� UNIX �� ���� Tivoli Access Manager �
��� Microsoft Active Directory� �� ������ ���� Tivoli
Access Manager ���� ��� � �� ��� �����. Policy Server�
Windows� ��� �� ��� ������.
IBM Tivoli Directory Server � Sun ONE Directory Server� �� �� ��
� �� ��
Tivoli Access Manager� IBM Directory Server � Sun ONE Server� �
��� �� �� ��� ��� � ����.
Windows ���� �� �� �� �� WebSEAL ��
Tivoli Access Manager� WebSEAL ���� �� Windows ����
� �� �(SPNEGO) ��� �����. �� Windows � UNIX �� �
���� � �� �����.
Tivoli Access Manager� Tivoli Identity Manager �� �� ���
Tivoli Access Manager� ��� ���� � ���� �����. �
� ������ Tivoli Identity Manager � Tivoli Access Manager� �
© Copyright IBM Corp. 1999, 2003 1
�� � �� ����� � �� �� �� ��� ��� ���
� � ��� ���� � � ����.
�� � �� �� �� �� ���� ���
Tivoli Access Manager� �� � � �� ��� ���� �� �� ��
�� �����. � PDJLog ��� � � � �� �� �����
PDJLog.properties ��� �� ����� �����.
Lotus® Domino® Server ������ �� ��
Tivoli Access Manager� ������ �� Domino Server� �� ��
� �� �� ���� Domino ��� �����. Tivoli Access Manager
� �� � ��� ��� ��� ��� ��� ���� �� �� ���
�� �� Domino Server� ��� � ����. � ��, Tivoli Access
Manager� Tivoli Access Manager ��� ��� �� ���� ����
� ����.
Linux ��
Tivoli Access Manager� Red Hat � SuSE Linux�� Policy Server,
WebSEAL � Plug-in for Web Server� �����. ���� �� ��
� ��� IBM Tivoli Access Manager for e-business Web Security �
� ���� ��� ������.
��� �� ��� ���
� ���� �� � ���� � �� ���, � �� � ��� ��
�� ���� �� ��� ��� ��� ���� ����� ����
���. ����� ���� ��� � Policy Proxy Server� �� ��
� �����.
���� ��� � pdadmin � � � � ����.
v �� ��� ���� ��� � �� � pdadmin -d ��� ���
v �� ���� ��� � �� � padadmin -m ���
v � pdadmin -l(� ���) ���
v � pdadmin context �
v � pdadmin domain �
v � pdadmin authzrule(�� �) �
v � pdadmin config � : config modify � config show
v � pdadmin object � : object access � object exists
v � ��(ACL ��): AuthzRule ��(R) � POP ��(B)
2 IBM Tivoli Access Manager for e-business: ���� ��
CD ��
IBM Tivoli Access Manager(Tivoli Access Manager)� � CD� �����.
Base CD:
v IBM Tivoli Access Manager Base for AIX
v IBM Tivoli Access Manager Base for Solaris
v IBM Tivoli Access Manager Base for HP-UX
v IBM Tivoli Access Manager Base for Linux on xSeries
v IBM Tivoli Access Manager Base for Linux on zSeries
v IBM Tivoli Access Manager Base for Linux on pSeries and iSeries
v IBM Tivoli Access Manager Base for Windows NT, Windows XP, Windows 2000
and Windows 2003
Web Administraion CD:
v IBM Tivoli Access Manager Web Administration Interfaces for AIX
v IBM Tivoli Access Manager Web Administration Interfaces for Solaris
v IBM Tivoli Access Manager Web Administration Interfaces for HP-UX
v IBM Tivoli Access Manager Web Administration Interfaces for Linux on xSeries
v IBM Tivoli Access Manager Web Administration Interfaces for Linux on zSeries
v IBM Tivoli Access Manager Web Administration Interfaces for Linux on pSeries
and iSeries
v IBM Tivoli Access Manager Web Administration Interfaces for Windows 2000
v IBM Tivoli Access Manager Web Administration Interfaces for Windows 2003
Web Security CD:
v IBM Tivoli Access Manager Web Security for AIX
v IBM Tivoli Access Manager Web Security for Solaris
v IBM Tivoli Access Manager Web Security for HP-UX
v IBM Tivoli Access Manager Web Security for Linux on xSeries
v IBM Tivoli Access Manager Web Security for Linux on zSeries
v IBM Tivoli Access Manager Web Security for Windows 2000 and Windows 2003
Directory Server CD:
v IBM Tivoli Access Manager Directory Server for AIX
v IBM Tivoli Access Manager Directory Server 1 of 2 for Solaris
v IBM Tivoli Access Manager Directory Server 2 of 2 for Solaris
� 1 � � ���� �� �� 3
v IBM Tivoli Access Manager Directory Server for HP-UX
v IBM Tivoli Access Manager Directory Server for Linux on xSeries
v IBM Tivoli Access Manager Directory Server for Linux on zSeries
v IBM Tivoli Access Manager Directory Server for Linux on pSeries and iSeries
v IBM Tivoli Access Manager Directory Server for Windows 2000 and Windows
2003
WebSphere Fixpack CD:
v IBM Tivoli Access Manager WebSphere Fix Pack for AIX
v IBM Tivoli Access Manager WebSphere Fix Pack for Solaris
v IBM Tivoli Access Manager WebSphere Fix Pack for HP-UX
v IBM Tivoli Access Manager WebSphere Fix Pack for Linux on xSeries
v IBM Tivoli Access Manager WebSphere Fix Pack for Windows 2000
Attribute Retrieve Service CD:
v IBM Tivoli Access Manager Attribute Retrieval Service for AIX
v IBM Tivoli Access Manager Attribute Retrieval Service for Solaris
v IBM Tivoli Access Manager Attribute Retrieval Service for HP-UX
v IBM Tivoli Access Manager Attribute Retrieval Service for Linux on xSeries
v IBM Tivoli Access Manager Attribute Retrieval Service for Linux on zSeries
v IBM Tivoli Access Manager Attribute Retrieval Service for Windows 2000
v IBM Tivoli Access Manager Attribute Retrieval Service for Windows 2003
Language Support CD:
v IBM Tivoli Access Manager Language Support for AIX
v IBM Tivoli Access Manager Language Support for Solaris
v IBM Tivoli Access Manager Language Support for HP-UX
v IBM Tivoli Access Manager Language Support for Linux on xSeries
v IBM Tivoli Access Manager Language Support for Linux on zSeries
v IBM Tivoli Access Manager Language Support for Linux on pSeries and iSeries
v IBM Tivoli Access Manager Language Support for Windows NT, Windows XP,
Windows 2000, and Windows 2003
IBM Tivoli Access Manager� ����� ���� ���
Tivoli ��� �� �� ������ � ���� ����� � ����.
http://www.tivoli.com/support/downloads/
4 IBM Tivoli Access Manager for e-business: ���� ��
″Software download(for registered users)″ ��� ��� � , ″IBM Tivoli Access
Manager″� ������. ���� ��� �� � � �� ������.
� 1 � � ���� �� �� 5
6 IBM Tivoli Access Manager for e-business: ���� ��
� 2 � ��� ����
� ���� ��� �� �� �� ��� � �����.
� �� ���� ����.
v ����� ������
v 12 ���� ���� �� � ��� ����
v 22 ���� ������
���� �����
� � Tivoli Access Manager� ���� �� �����, ���� � �� �
�� �� �� �� ��������.
IBM Tivoli Directory Server
Tivoli Access Manager��� IBM Tivoli Directory Server, �� 4.1, 5.1 � 5.2
� ��� �����.
�: IBM Tivoli Directory Server, �� 5.2� Tivoli Access Manager, �� 5.1�
�����. � ���� ��� IBM Directory Server ��� ��� � ���
IBM Tivoli Access Manager, �� 5.1� LDAP registry IBM Directory Client
�� 5.2� �����, �� 4.1 �� 5.1� ��� �� ��� ���� IBM
Tivoli Directory Server� ��� ���.
���� ���� � � ����.
v AIX ��:
– AIX 5.1
– AIX 5.2
�: AIX 5.1�� AIX ���� �� 4 ��� ��� ���. AIX 5.2�� AIX
���� �� 1 ��� ��� ���.
v HP-UX ��:
– HP-UX 11
– � ��� ��� HP-UX 11i:
- 2001 12� GOLDBASE11i ��
- 2001 12� GOLDAPPS11i ��
- �� PHSS_26560
© Copyright IBM Corp. 1999, 2003 7
v xSeries ��� Linux:
– ��� 2� UnitedLinux 1.0
– SuSE Linux Enterprise Server 8
– Red Hat Enterprise Linux 3.0
v zSeries ��� Linux:
– SuSE Linux Enterprise Server 8
– Red Hat Enterprise Server 3.0
v pSeries � iSeries ��� Linux
– Red Hat Enterprise Server 3.0
– SuSE Linux Enterprise Server 8
v Solaris ��:
– Solaris Operating Environment Software, �� 8 � 9
– Trusted Solaris, �� 8
v Windows ��:
– Windows 2000
– Windows Server 2003, Standard �� Enterprise
– ��� 6 ��� Windows NT 4.0; �� ���� Windows NT �� �
��(NTFS)� ����.
��:
v Tivoli Access Manager� ��� IBM Directory Server� �� �� ����
��� ���������. ������ �� �� ��� IBM Tivoli Access
Manager Upgrade Guide� ������.
v IBM� � �� ����� LDAP(Lightweight Directory Access Protocol)� �
� ��� ��, IBM Tivoli Directory Server� ���� �� �� �� �
��.
IBM Tivoli Directory Server � �� �
IBM Tivoli Directory Server� IBM Tivoli Directory Server �� �, �� 5.2
� ��� �����. IBM Tivoli Directory Server ����� �� ��� �� �
�� �� � ��� �� ����� �� �� ��� � ����. �� ��
��� ��� � �� LDAP ��� � � ����.
v IBM Tivoli Directory Server, �� 5.2
v IBM Directory Server, �� 5.1
v IBM Directory Server, �� 4.1
v OS/400 V5R3
8 IBM Tivoli Access Manager for e-business: ���� ��
v z/OS™ R4
�: z/OS R4� ��, �� ���� � � �� ��� �����.
– �� TDBM ���
– �� SDBM ���
– ��� TDBM � SDBM ���
� ����� �� �� �����.
v AIX ��:
– AIX 4.3.3
– AIX 5.1
– AIX 5.2
v HP-UX ��:
– HP-UX 11
– HP-UX 11i
v xSeries ��� Linux:
– UnitedLinux 1.0
– SuSE Linux Enterprise Server 7 � 8
– Red Hat Advanced Server 2.1
v zSeries ��� Linux:
– SuSE Linux Enterprise Server 8.0
v pSeries � iSeries ��� Linux :
– UnitedLinux 1.0
– SuSE Linux Enterprise Server 8.0
v Solaris ��:
– Solaris Operating Environment Software, �� 7, 8 � 9
– Trusted Solaris, �� 8
v Windows ��:
– Windows 2000
– Windows XP
– Windows Server 2003, Standard �� Enterprise
– ��� 6 ��� Windows NT 4.0
�� �� ���� � � ����.
v � ����� �� � ��� ����.
– WebSphere Application Server� � �� �� -- Express V5.0 ��
� 2 � ��� ��� 9
– IBM WebSphere Application Server, �� 5.0 ��. IBM WebSphere
Application Server �� 5.0.2� Tivoli Access Manager �� 5.1� ����
�.
v �� �� ��� ���� � ����� ����.(�� �� ��� �
��� �� ���� �� �� � �� ����.)
– AIX ��: Mozilla 1.3 �� 1.4
– HP-UX ��: Mozilla 1.3 �� 1.4
– xSeries ��� Linux: Mozilla 1.3 �� 1.4
– iSeries, pSeries � zSeries ��� Linux: ����� ���� ����. �
�� Linux ����� �� �� ����� �� ���� ��� �
��.
– Solaris ��: Mozilla 1.3 �� 1.4
– Windows ��: Internet Explorer, �� 6.0
OS/390� IBM Security Server
Tivoli Access Manager� OS/390®� IBM Security Server, �� 2, ��� 10�
�����. �� ��� ��� � � �� OS/390 ��� ����� ���
� ������.
http://www.s390.ibm.com/os390/bkserv/
IBM z/OS Security Server LDAP Server
Tivoli Access Manager� IBM z/OS Security Server LDAP Server, �� 1, ��
� 2 ��� ��� �����. �� ��� � � �� z/OS ��� ������
������.
http://www.ibm.com/servers/eserver/zseries/zos/bkserv/
��� CD-ROM(z/OS: ��, SK3T-4269)�� ����� ��� ��� �� �
���.
Lotus Domino
Windows ����� Tivoli Access Manager� �� ������ Lotus® Domino,
�� 5.0.10 � 6.0� ��� �����. Domino Server� Tivoli Access Manager,
�� 5.1�� ���� �� ����� � � ����.
��: Lotus Domino� ������ ��� �� � ��� ������.
v IBM Tivoli Directory Client� ��� ����.
10 IBM Tivoli Access Manager for e-business: ���� ��
v Access Manager Runtime ���� ���� �� Lotus Notes® ������
��� ���. Tivoli Access Manager� Lotus Notes ����� �� 5.0.10
� �� 6.0 ��� �����.
Microsoft Active Directory
Tivoli Access Manager� �� ������ Windows 2000 � Windows 2003�
Active Directory� ��� �����.
Tivoli Access Manager� �� ����� Active Directory ��� Windows 2000
Advanced Server ������ �� �����. �� 5.1�� ��� ��� Active
Directory ��� �� Tivoli Access Manager ���� ���� �� Windows
� UNIX ����� Tivoli Access Manager� �� � ��� ����(Windows
NT� ��).
UNIX ������ IBM Tivoli Directory Client� ��� Active Directory� �
����. � LDAP ������ Policy Server ���� � ��� �� ��
�� �� ���� �����.
Tivoli Access Manager Policy Server� Windows 2000 � 2003 ������ �
����.
Netscape iPlanet � Sun ONE Directory Server
Tivoli Access Manager� �� ������ Netscape iPlanet Directory Server,
�� 5.1 � Sun ONE Directory Server, �� 5.2� ��� �����.
�� ��� iPlanet �� Sun ONE Directory Server� ��� �� ��� ���
���.
��:
v Tivoli Access Manager� ��� ��� iPlanet �� Sun ONE Directory Server
� �� ��� ���� ��� ���������. ����� ����� �
�� � ��� �� Sun ��� ������.
http://docs.sun.com/db/prod/s1dirsrv
v iPlanet � Sun ONE Directory Server�� �� SSL ��� ����. ���
��� ��� ���� Access Manager Runtime ���� ���� ��
GSKit� ��� ���.
Novell eDirectory
Tivoli Access Manager� �� ������ Novell eDirectory 8.6.2 � 8.7� �
�� �����.
� 2 � ��� ��� 11
�� ��� Novell eDirectory ��� ��� �� ��� ������. Novell
eDirectory �� ��� � ����� �� �����.
http://www.novell.com/documentation/a-z.html
� ��� �� �� ��� � ����� �� �����.
http://support.novell.com/filefinder/5069/index.html
��:
v Tivoli Access Manager� ��� Novell eDirectory ��� �� �� ���
���� ��� ���������.
v Novell eDirectory ���� �� SSL ��� ����. ��� ��� ��� �
��� Access Manager Runtime ���� ���� �� GSKit� ���
���.
��� �� � ��� ����
Tivoli Access Manager ��� � ������ ��� ��� ��� �� �
����. � ��� ��� �� ���� ��� ��� ���� ��� ���.
� Tivoli Access Manager ��� �� ���� �� ���� �� ��
�� ��� ��� ����. � Tivoli Access Manager ������ ��� �
��� �� ��� ��� ���� ������.
� ��� � � ��� �����.
v 13 ���� �Tivoli Access Manager �� ����
v 14 ���� �Tivoli Access Manager �� ����
�: ��� ����� Tivoli Access Manager ����� �� ��� �� �
��� ���� �����. ����� ��� ��, � ���(�: � �
� �� �� ��)� ��� ���.
12 IBM Tivoli Access Manager for e-business: ���� ��
Tivoli Access Manager �� ����
� 1. �� ��� -- ��� �� � ��� ���
���� �� ���
��(MB)
�� ���
��(MB)
ACL ���
����
��� ��
(MB)
�� ���
��� ��
��(MB)
�� ��
(MB)
�� ��
(MB)
�� ���
� ��
Access Manager
Application
Development Kit
3 5 -- -- -- -- --
Access Manager
Authorization Server2 4 15 2 5 30 40 --
Access Manager Java
Runtime Environment8 10 -- -- -- -- --
Access Manager
Policy Proxy Server1 2 -- 40 --
Access Manager
Policy Server2 4 5 1, 2 10 1 30 40 5 2
Access Manager
Runtime36 40 -- -- -- -- --
Access Manager Web
Portal Manager1 2 -- -- 35 3 70 4 --
Global Security Kit 18 20 -- -- -- -- --
IBM Tivoli Directory
Client46 50 -- -- 6 6
IBM Tivoli Directory
Server(�� �� ��
��� ��)
145 7 245 7 -- 10 256 5 512 - 1GB 5 --
I B M W e b S p h e r e
Application Server, �
� 5.0.2
552 552 -- -- 256 512 --
�:1 � ��� �� ����� ����. � � ���� ��, � ��� �� ��� ��� �����.
2 10,000�� ����� 10�� ���� ��� �� ���� ��, ����� 10%� 30�� ACL� ���� �� ��
���� �, ACL ��� ��� �� ��� �����. ��� Policy Server� ���� � �� ��� �� ��
� � ��� �� ��� 3����.
3 WPM� �� �� ��� ��� � ����� �� ��� �����.
4 WPM� �� ����� �� ��� ����� � ��.
5 256MB(��) � 512MB - 1GB(��) ���� Tivoli Access Manager ��� ��� ��� ��� �� ����.
��� ��� ��� � �� 512(��) � 1GB - 2GB(��) ���� �����.
6 IBM Tivoli Directory Client� �� ��� ��� �� ���� ��� �� ���� �����.
7 IBM Tivoli Directory Server ��� � ��� ��� �����. Tivoli Access Manager ��� 10KB� ��
���.
� 2 � ��� ��� 13
Tivoli Access Manager � �� ����
� 2. �� ��� -- ��� �� � ��� ���
���� �� ���
��(MB)
�� ���
��(MB)
ACL ���
���� �
�� ��
(MB)
�� ���
��� ��
��(MB)
�� ��
(MB)
�� ��
(MB)
�� ����
��
Access Manager
WebSEAL20 25 15 1 200 2 80 250 3 --
Access Manager
WebSEAL
Application
Development Kit
3 5 -- -- -- -- --
Access Manager for
WebLogic Server2 4 -- 5 64 128 --
Access Manager for
WebSphere2 4 -- 5 64 128 --
Access Manager
Plug-in for IBM
HTTP Server
15 25 15 1 10 60 120 --
Access Manager
Plug-in for Apache
Web Server
15 25 15 1 10 60 120 --
Access Manager
Plug-in for Sun
ONE Web Server
15 25 15 1 10 70 140 --
Access Manager
Plug-in for Internet
Information Services
15 25 15 1 10 165 225 --
Access Manager
Attribute Retrieval
Service
6 10 -- -- 10 14 --
Access Manager
Plug-in for Edge
Server
15 25 15 1 10 15 30 --
�:1 10,000�� ����� 10�� ���� ��� �� ���� ��, ����� 10%� 30�� ACL� ���� �� ��
���� �, ACL ��� ��� �� ��� �����. ��� Policy Server� ���� � �� ��� �� ��
� � ��� �� ��� 3����.
2 ��� www( �� ���) ��� �� ��� �����.
3 �� �� �� ��� �� ���� �����. �� ���� ��� �� � �� �����.
14 IBM Tivoli Access Manager for e-business: ���� ��
���� ���(�� �� ��)� 3� ���� � ��� �� �� �� ��� ��� ���� ����.
�: SuSE Linux� ��� UnitedLinux 1.0� ���� �� � �� ��� �� �
�����. �� ��� SCO Group, Turbolinux � Conectiva���. SLES(SuSe
Linux Enterprise Server)� ���� �� ���� UnitedLinux 1.0 ��� �
��� �� � ��� ��� ��� �����. �� ��� � �
UnitedLinux ���� ������.
http://www.unitedlinux.com
� 3. ���� � �� ���� �� ��
�� �� Tivoli Access Manager 5.1 �� ��� �� �� �� ��� �
AIX 4.3.3
v Development(ADK)
v Java Runtime Environment
v Runtime
�� �� � � ��� ����.
v bos.rte.libpthreads(�� 4.3.3.51 �
�)
v xlC.rte(6.0.0.0 C Set ++ Runtime)
v xlC.aix43.rte(6.0.0.3 C Set ++
Runtime)
AIX 5.1
v Attribute Retrieval Service
v Authorization Server
v Development(ADK)
v Java Runtime Environment
v Plug-in for Edge Server, �� 5.1
v Plug-in for IBM HTTP Server, ��
1.3.26
v Plug-in for Sun ONE Web Server, �
� 6.0
v Policy Server
v Policy Proxy Server
v Runtime
v Tivoli Access Manager for WebLogic
v Tivoli Access Manager for WebSphere
v Web Portal Manager
v WebSEAL Server
v WebSEAL Development(ADK)
���� �� 4 �� � � ��� �
���.
v xlC.rte(6.0.0.0 C Set ++ Runtime)
v xlC.aix50.rte(6.0.0.3 �� C Set ++
Runtime)
� 2 � ��� ��� 15
� 3. ���� � �� ���� �� �� (��)
�� �� Tivoli Access Manager 5.1 �� ��� �� �� �� ��� �
AIX 5.2
v Attribute Retrieval Service
v Authorization Server
v Development(ADK)
v Java Runtime Environment
v Plug-in for Edge Server, �� 5.1
v Plug-in for IBM HTTP Server, ��
1.3.26
v Plug-in for Sun ONE Web Server, �
� 6.0
v Policy Server
v Policy Proxy Server
v Runtime
v Tivoli Access Manager for WebSphere
v Web Portal Manager
v WebSEAL Server
v WebSEAL Development(ADK)
���� �� 1 ��
AIX 5200-01 ���� ��� � � �
�� ����.
v xlC.rte(6.0.0.0 C Set ++ Runtime)
v xlC.aix50.rte(6.0.0.3 C Set ++
Runtime)
v 5.2.0.12� bos.rte.libc
HP-UX 11.0
v Attribute Retrieval Service
v Authorization Server
v Development(ADK)
v Java Runtime Environment
v Policy Server
v Policy Proxy Server
v Runtime
v Tivoli Access Manager for
WebLogic(BEA WebLogic Server, �
� 7.0 ��)
v Web Portal Manager
v WebSEAL Server
v WebSEAL Development(ADK)
v XSWGR-1100
v PHKL_25475
v PHSS_26945 ��
v PHSS_25091
v �� �� ��:
– ���: PHSS_26972
– ���: PHSS_26974
– ���: PHSS_26976
– ���: PHSS_24937
16 IBM Tivoli Access Manager for e-business: ���� ��
� 3. ���� � �� ���� �� �� (��)
�� �� Tivoli Access Manager 5.1 �� ��� �� �� �� ��� �
HP-UX 11i
v Attribute Retrieval Service
v Authorization Server
v Development(ADK)
v Java Runtime Environment
v Policy Server
v Policy Proxy Server
v Runtime
v Tivoli Access Manager for
WebLogic(BEA WebLogic Server, �
� 7.0 ��)
v Tivoli Access Manager for WebSphere
v Web Portal Manager
v WebSEAL Server
v WebSEAL Development(ADK)
v PHCO_24400
v PHCO_24402
v PHSS_25092
v PHSS_26946
v �� �� ��:
– ���: PHSS_26971
– ���: PHSS_26973
– ���: PHSS_24975
– ���: PHSS_26977
Red Hat Enterprise Linux 2.1v Plug-in for Edge Server, �� 5.1 GSKit iKeyman ���(gsk7ikm)� ��
� ���� � ��� ����.
pdksh-5.2.14-13.i386.rpm
Red Hat Enterprise Linux 3.0
v Authorization Server
v Development(ADK)
v Java Runtime Environment
v Policy Server
v Policy Proxy Server
v Runtime
v WebSEAL Server
v WebSEAL Development(ADK)
�
� 2 � ��� ��� 17
� 3. ���� � �� ���� �� �� (��)
�� �� Tivoli Access Manager 5.1 �� ��� �� �� �� ��� �
IA32� SuSE SLES8
v Attribute Retrieval Service
v Authorization Server
v Development(ADK)
v Java Runtime Environment
v Plug-in for IBM HTTP Server, ��
1.3.26
v Policy Server
v Policy Proxy Server
v Runtime
v Tivoli Access Manager for WebSphere
v Web Portal Manager
v WebSEAL Server
v WebSEAL Development(ADK)
libstdc++-3.2.2-5
v S/390 � zSeries� SuSE SLES8(31�
� ���)
v zSeries� SuSE SLES8(64�� ���)
v Attribute Retrieval Service
v Authorization Server
v Development(ADK)
v Java Runtime Environment
v mod SSL� plug-in for Apache Web
Server, �� 1.3.26-36(31�� ��)
v Plug-in for IBM HTTP Server, ��
1.3.26
v Policy Server
v Policy Proxy Server
v Runtime
v Tivoli Access Manager for WebSphere
v Web Portal Manager
v WebSEAL Server
v WebSEAL Development(ADK)
���� �� ��:
v 31��: k_deflt-2.4.19-32
v 64�� ��: k_deflt-2.4.19-34
��� 2 ��:
v 31�� ��:
– k_deflt-2.4.19-79
v 64�� ��:
– k_deflt-2.4.19-80
pSeries � iSeries� SuSE SLES8
v Development(ADK)
v Java Runtime Environment
v Runtime
v Web Portal Manager
���� �� ��:
v kernel-iseries64-2.4.19-104
v kernel-ppc64-2.4.19-108
��� 1 ��:
v kernel-iseries64-2.4.19-194
v kernel-ppc64-2.4.19-186
18 IBM Tivoli Access Manager for e-business: ���� ��
� 3. ���� � �� ���� �� �� (��)
�� �� Tivoli Access Manager 5.1 �� ��� �� �� �� ��� �
Solaris � �� 7
v Development(ADK)
v Java Runtime Environment
v Runtime
32�� ���:
v 106327-18
v 106541-24
v 106950-22
v 106980-22
v 107544-03
64�� ���:
v 106300-19
v 106327-18
v 106541-24
v 107544-03
v 106950-22
v 106980-22
Solaris � �� 8
v Attribute Retrieval Service
v Authorization Server
v Development
v Java Runtime Environment
v mod SSL� Plug-in for Apache Web
Server, �� 1.3.27
v Plug-in for Edge Server, �� 5.1
v Plug-in for IBM HTTP Server, ��
1.3.26
v Plug-in for Sun ONE Web Server, �
� 6.0
v Policy Server
v Policy Proxy Server
v Runtime
v Tivoli Access Manager for WebLogic
v Tivoli Access Manager for WebSphere
v Web Portal Manager
v WebSEAL Server
v WebSEAL Development(ADK)
32�� ���:
v 109147-15
v 108434-05
v 108528-24
v 108827-40
v 111327-02
v SUNWuiu8
v SUNWjiu8
64�� ���:
v 109147-15
v 108434-05
v 108435-06
v 108528-24
v 108827-40
v 111327-02
v SUNWuiu8
v SUNWjiu8
� 2 � ��� ��� 19
� 3. ���� � �� ���� �� �� (��)
�� �� Tivoli Access Manager 5.1 �� ��� �� �� �� ��� �
Solaris � �� 9
v Attribute Retrieval Service
v Authorization Server
v Development(ADK)
v Java Runtime Environment
v mod SSL� Plug-in for Apache Web
Server, �� 1.3.27
v Plug-in for Edge Server, �� 5.1
v Plug-in for IBM HTTP Server, ��
1.3.26
v Plug-in for Sun ONE Web Server, �
� 6.0
v Policy Server
v Policy Proxy Server
v Runtime
v Tivoli Access Manager for WebLogic
v Tivoli Access Manager for
WebSphere(�� 5.0.2 ��)
v Web Portal Manager
v WebSEAL Server
v WebSEAL Development(ADK)
11711-06
Windows NT 4.0
v Development(ADK)
v Java Runtime Environment
v Runtime
��� 6a
Windows XP � 2000 Pro
v Development(ADK)
v Java Runtime Environment
v Runtime
�
20 IBM Tivoli Access Manager for e-business: ���� ��
� 3. ���� � �� ���� �� �� (��)
�� �� Tivoli Access Manager 5.1 �� ��� �� �� �� ��� �
Windows 2000 Server � Advanced
Server
v Attribute Retrieval Service
v Authorization Server
v Development(ADK)
v Java Runtime Environment
v Plug-in for Edge Server, �� 5.1
v Plug-in for Internet Information
Services, �� 5.0
v Policy Server
v Policy Proxy Server
v Runtime
v Tivoli Access Manager for WebLogic
v Tivoli Access Manager for WebSphere
v Web Portal Manager
v WebSEAL Server
v WebSEAL Development(ADK)
��� 3
Windows 2003 Standard Server �
Enterprise Server
v Attribute Retrieval Service
v Authorization Server
v Development(ADK)
v Java Runtime Environment
v Plug-in for Internet Information
Services, �� 6.0
v Policy Server
v Policy Proxy Server
v Runtime
v Windows 2003 Enterprise Server�
Tivoli Access Manager for
WebSphere(�� 5.0.2 ��)
v Web Portal Manager
v WebSEAL Server
v WebSEAL Development(ADK)
�
� 2 � ��� ��� 21
����
� Tivoli Access Manager ���� Policy Server �� Authorization Server
�� 5.1� ��� � ����.
v Access Manager Runtime, �� 3.8, 3.9, 4.1 � 5.1
v Access Manager Java Runtime Environment, �� 3.9, 4.1 � 5.1
�:
1. AZN ��� ��� � �� ���� ��� ��� ��� �� �����.
2. �� ���� �� ���� ��� ����� ���.
3. Active Directory �� Lotus Domino� �� ������ ��� ��, ��
Tivoli Access Manager ���� �� 5.1 ����� ���.
Tivoli Access Manager, �� 3.9 � 4.1 ������ � Tivoli Access Manager,
�� 5.1�� ���� ��� ����� � � ����.
v Access Manager Runtime, �� 5.1� �� ���� Tivoli Access Manager, �
� 4.1 � 3.9 ADK� � ��� ������ �����(Solaris� ��).
v Solaris� Access Manager Runtime, �� 5.1� Tivoli Access Manager, �� 4.1
ADK� � ��� ������ �����.
22 IBM Tivoli Access Manager for e-business: ���� ��
���� ������ �� ��
� 4� Tivoli Access Manager WebSEAL, �� 5.1�� ���� �� ���
�� ���� ����� ��� ���� ����.
� 4. ���� ���� �� ��
�� ���� ���� ����� ��
AIX 5.1 v nCipher nForce 300 RSA BSAFE, �� 5.32
v nCipher nForce 300 PKCS#11, �� 5.32
v IBM 4758-023 PKCS#11, �� 2.41
v Eracom Orange PKCS#11, �� 2.11
v IBM 4960 PKCS#11, �� 5.1.0.25
AIX 5.2 v IBM 4758-023 PKCS#11, �� 2.41
v Eracom Orange PKCS#11, �� 2.11
v IBM 4960 PKCS#11, �� 5.1.0.25
HP-UX 11 Rainbow Crypto Swift RSA BSAFE, �� 3.2.0
HP-UX 11i ���� �
Red Hat Enterprise Linux 3.0 v Eracom Orange PKCS#1, �� 2.11
IA32� SuSE SLES8 v Eracom Orange PKCS#11, �� 2.11
zSeries� SuSE SLES8(64�� ���
31�� compat. �� � 31�� ��)
� S/390(31�� ��)
v PCICA - zSeries �� �� 0862
v PCICC - zSeries �� �� 0861, S/390 �� �� 0860
Solaris 8 v Rainbow Crypto Swift RSA BSAFE, �� 3.2.0
v nCipher nForce 300 RSA BSAFE, �� 8.0
v nCipher nForce 300 PKCS#11, �� 8.0
v Eracom Orange PKCS#11, �� 2.11
Solaris 9 v nCipher nForce 300 RSA BSAFE
v nCipher nForce 300 PKCS#11, �� 2.10
Windows 2000 Server � Advanced
Serverv Rainbow Crypto Swift RSA BSAFE, �� 3.2.0
v nCipher nForce 300 RSA BSAFE, �� 8.0
v nCipher nForce 300 PKCS#11, �� 8.0
v IBM 4758-023 PKCS#11, �� 2.41
v Eracom Orange PKCS#11, �� 2.11
Windows 2003 Standard Server �
Enterprise Server
���� �
��� �� ����� �� WebSEAL� � �� ���� ��� ����� �
�� ����� ������. BSAFE ��� ��, WebSEAL� �� � ��
� ��� ����. GSKit� ��� ��� �����. ���� GSKit(�:
WebSEAL)� ���� �� Tivoli Access Manager ���� ����� �
� 2 � ��� ��� 23
����. PKCS11 ��� ��, WebSEAL �� ��� PKCS11 ���� ���
WebSEAL� PKCS11� ����� � ���.
24 IBM Tivoli Access Manager for e-business: ���� ��
� 3 � ��� ��� � ���� ��
� � �� � ����� IBM Tivoli Access Manager(Tivoli Access Manager)
�� �� �� �����. �� �� ��� �� �� ��, �� ���� �
���. �� ���� �� � ��� ���� ����. � �� � Tivoli �
�� IBM Customer Support� ������.
�: � ��� ��� � IBM Tivoli Access Manager for e-business ��� �
� �� 53 ���� � 4 � ��� �� ������ ��� ����.
�� � ����
���� �� � �� �� ����� ������.
Active Directory� �� Windows 2003 ���� �� ���� ���
(44369)
�� ������ Active Directory� ���� Windows 2003 ����� ��
���� �����.
���� ��: �� �� �� ���� ������. �� �� ���� ����
�� �� ���� ���� �� IBM Tivoli Directory Client� ��� ��
�. ������ ���� CD ����:\Windows\Directory� ��� �
setup.exe� �����. �� ����� �����. ��� ��� ����� �
� Client SDK 5.2� ������. ��� �� � �� ���� ������.
�� ���� LDAP ��� Plug-in for Web Server� �� SSL ���
���� ��(44336)
LDAP ��� SSL ��� ���� �� ���� ��� Plug-in for Web Server
� ���� ����. �� �� ��� ������. Plug-in for Web Server ��
���� LDAP ���� SSL �� �� ���� ����.
�� ���� �� ��� Active Directory ����� ���(44046)
�� ��� Active Directory ����� �� ���� �� � �� ID
sec_master� ��� ��� ��� �� � � �� �� ID ��� �
�� ��� �����.
���� ��: Access Manager �� ID� ��� ��� ��� ������.
© Copyright IBM Corp. 1999, 2003 25
Tivoli Access Manager� ����� AIX®� ��� JRE �� 1.3.1.5��� ���� ��� �(41082)
AIX� JRE 1.3.1.5(Tivoli Access Manager CD� ��) ��� ���� ���
���. �� ��� IBM Tivoli Access Manager for e-business Web Security �
� ���� ������.
�� ���� ��� � JDK 1.3.1� Red Hat Enterprise Linux 3��
���(40973, 43956)
Red Hat Enterprise Linux 3.0�� ���� NPTL(New Threading Library)� Tivoli
Access Manager 5.1� ��� JDK 1.3.1�� ���� ����. �� � ���
�����.
���� ��: �� ����� ��� �� LD_ASSUME_KERNEL �� ��� JDK
1.3.1� �� ��� �� ������. �� �, � � ����.
export LD_ASSUME_KERNEL=2.4.0
��
export LD_ASSUME_KERNEL=2.2.5
��, IBM ���(http://www.ibm.com/developerworks/java/jdk/index.html)�� �
� ��� �� JRE ��� � ��� ��� �� �� ����.
Tivoli Access Manager Java Runtime Environment javadocs� �
���� Access Manager Runtime ����� ���� ��� �
(43895)
Tivoli Access Manager Application Development Kit� ��� Javadoc ��� �
��� Tivoli Access Manager Runtime ���� ���� ��� ���. ��
Access Manager Application Development Kit�� �� �� ������ �
� �� ��� �����.
Web Portal Manager� ����� IBM Java Runtime Environment1.3.1� ���(44178)
Web Portal Manager� IBM Java Runtime Environment 1.3.1� ��� ���
� ����. �� JRE(�: Sun Java Runtime Environment)� ��� Web Portal
Manager ��� ��� � ����.
WebSphere Application Server ���� �� ��� ���(44432)
WebSphere Application Server� ���� � ���� ��� ��� ��� �
� ���� �� ����. ��, ���� ��� �� �� �� ��� ��� �
� ����. �� ��� � � �� ���� �� ��� ������.
26 IBM Tivoli Access Manager for e-business: ���� ��
�� �� �� ���� ��� Web Portal Manager� ��
� �, �� �� 80�� HTTP Server� � ��
���� WebSphere Application Server� �� �
�� ��� ��� ��, �� ���� � HTTP
Server� ��� 81� �����. AIX�� �� �
��� WebSphere Administrative Console� ���
9091� �����. ��� ����� AIX� ��
9090�� � �� ���(wsmserver)� �� ��
���.
�� �� WebSphere� �� ����� � ���� �� �
� ���� � �� �� HTTP Server�� ��
80� ���� �� ���� �� 9090� ����
�. �� ���� � ��� �� �� �� ��
� ����� ���� ��� ������.
�� WebSEAL ��� ������� libcdmf.* �� ��� � ��
(44079)
�� WebSEAL �� �� WebSEAL� �� ��, �� libcdmf.* ��� ���
� ���� �� ��� �� ���. �� ��� � ��� �����. �
WebSEAL ��� ��� � �� ��� �� ��� �����.
�� � ����
�� �� � �� �� ����� ��� � ����.
�� ���� zSeries®� Red Hat Enterprise Linux 3.0�� ���
(42163)
zSeries� Linux� Red Hat Enterprise Linux 3.0 Beta 2�� install_amrte ��
���� ��� Access Manager Runtime ��� ��� ��, � ��� �
�� � ����.
[root@metlnx03 am51-030915]# ./install_amrteInstallShield Wizard
Initializing InstallShield Wizard...
Searching for Java(tm) Virtual Machine..............................................................................No matching JVM was found.
���� ��: � � �� �� ����� �����.
java -cp install_xxx_setup.jar run
� 3 � �� �� � ��� � 27
�� Java ��� Java 1.4.1���.
Windows 2000� ��� � Java Runtime Environment� �� � �
�(43948)
Windows 2000�� �� ��� Java Runtime Environment� ��� �� ��
�� ��� � � � �����.
java -cp install_xxx_setup.jar run
�� ��, �� ���� install_amacld.exe� � � � �����.
java -cp install_amacld_setup.jar run
.jar ��� �� ���� ��� ���� ����.
��� �� �� � � �� �� ��� �����.
�� ��� �� �� �� � Policy Server �� ��(43906)
LDAP Server� ���� �� ���� ��� Windows ���� Policy Server�
��� ��, ���� ��� �� Policy Server ��� �����. �� LDAP
Server� ��� �� ���� �� �����.
���� ��: LDAP Server ���� ��� � Policy Server� ������.
2���� ��� �� ���� �� �� �� ���� ���� ��
(37601, 39896, 43907)
2�� � �� ����� --options-record �� --options-template� �
�� �� ���� � ��� ��� ��, ��� �� ��� ��� ����
�����. � �� � �� ��� �� ����.
�� ���� ���� Windows� Web Portal Manager� ��� �
��� ���(44045)
Windows� Web Portal Manager� ��� � ��� ��� ��� � ���
�� �����.
�� �� ibmjcaprovider.jar � ��(44323)
Tivoli Access Manager Java Runtime Environment ���� ��� �
$JAVA_HOME/lib/ext/ibmjcaprovider.jar ��� �� � �� ����� �
� ����� ���� �����. � ��, ����� � ��� ��� �
� ���. �� �� �� �� ext ���� ������ ��� ��
�. JRE� �� ��� ���� ���� � � ��� ��(� �� ���
����)� �� ��� ���. JRE� �� ���� � ��� � ���
� ��� �����. ���, � ��� �� � ���� ����� ��� � JRE
28 IBM Tivoli Access Manager for e-business: ���� ��
� �� � �� ��� ��� �� ���� � ��� � � ��� ��
�� ��� ���� �� ��� � ����. ��� ibmjcaprovider.jar ���
�� Tivoli Access Manager Java Runtime Environment� ���� ����
�� ��� ���� ���� ���.
Microsoft Active Directory ��
Microsoft Active Directory� ��� � ��� � �� �� � ����� �
� ����.
Active Directory �� �� �� �� ��
�� ������ Microsoft Active Directory� ��� � �� �, �� �
�� �� �(DN)� �� �� ���� ����. �� ��, Active
Directory� DN�� ����(\)� ��� � ����. �� ��� Active Directory
��� ������.
Active Directory� ��� � ″� � � � ″ ��
�� ������ Active Directory� ��� � Microsoft Windows 2000 ��
Windows 2003 �� ��� ������ �� � ��� �� ���� ����
��� ���. � ���� ��� � ��, ���� ��� � �� ����
�����. �� ��� � � ������.
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q260371
Policy Server �� � Windows 2003 Active Directory� �����
��� �� �� �� ���� ���� ��� � ��(43908)
Active Directory� � �� Windows 2003�� Policy Server� ��� ��, �
�� ��� �� ��� ��� ���� ����� ��� � ����. ��
��, ���� Policy Server �� ��� � � ��� �� ���� �����.
HPDRG0100E The operation in the Active Directory registry for User:rspi_create_user : : HRESULT = 0x800708C5 (778: c:\am510\src\uraf\ad\urafuser.cpp)failed with return error 800708c5 RunADURAFToolConfig: uraf_create_domain() returnerror 0x16B48065
���� ��: Policy Server� �� �� � �� �� ���� ���� �
� ��� �� ������.
Windows 2000 ���� � ����� �� ����� ��� � �
��� ��(36389)
Windows 2000�� Active Directory� ��� � �� ����� �� �����
��� ��, ��� ���� �� ��� ���� ��� � ��� � ��� �
� ���.
� 3 � �� �� � ��� � 29
1. ���� � ��� ACL� �����(��� ��). ACL� ��� 2���
������.
a. Active Directory ���� � → ���� → � ��� ��� � Active
Directory ��� � ��� ���.
b. Active Directory �� � �� ���� Tivoli Access Manager� ��
�� �� ���� ���.
c. ���� ��� ��� �� � � �� ��� ���.
d. � ��� ivacld-servers � remote-acl-users� ���� �� ��
� �����.
e. � ��� �����.
2. � � �� Tivoli PD ��� ����� �����.
a. Active Directory ���� � → ���� → � ��� ��� � Active
Directory ��� � ��� ���.
b. Active Directory �� � �� ���� Tivoli Access Manager� ��
�� �� ���� ���.
c. Tivoli PD ��� ����� �����.(� ����� �� �� ��� �
�� �� ���� ��� ���.)
d. ���� ��� ��� ����� ��� ��� �� � � ��
� ������.
e. �� ���� �� ��� � IBM Tivoli Access Manager for e-business
Web Security �� ����� Tivoli Access Manager �� ��� ���
�� Active Directory �� � ��� �� Tivoli Access Manager� �
�����.
iPlanet Directory Server �� Sun ONE Directory Server ��
iPlanet Directory Server �� Sun ONE Directory Server� ��� � ��� �
�� �� � ����� � � ����.
iPlanet ����� �� � ��(14785)
iPlanet Directory Server �� 5 ������ ��� ���� Tivoli Access
Manager� ��� �� ���� “� � �� ��” ��� ��� � ���
�. �� � ���� ���� ������ “�” ���� �� ��� ���
� �� ������ ���� �� �� � ����.
30 IBM Tivoli Access Manager for e-business: ���� ��
iPlanet Directory Server� ��� � ��� ��� ��� ���
LDAP_ADMINLIMIT_EXCEEDED ��� ����, Tivoli Access Manager��� �
� ��� �����. � ��� iPlanet LDAP ��� � �� �� �
�� �� �� �������.
iPlanet Console��, Configuration �� ���� Data ��� �����. �� �
, Database Settings ��� ��� � LDBM ���� �� �� ������.
Look-through Limit ����, � �� �� ���� ��� � �� ��
�� ������. �� � �� � 5000���. ��� ���� � ��� -1
� ������.
���� Directory Manager� ��� ��, ����� � ��� ���� �
��� ��� � �����.
iPlanet �� �� �� � ��� ���
Tivoli Access Manager Plug-in for Web Server� ��� iPlanet �� ��(��
��� �: https-admserv)� ��� � pdwebpi.log ��� � � ��� ��
���� �����.
2002-03-16-07:33:31.901+00:00I----- 0x35F02127 pdwebpi ERRORpic Authorization Server pdwebpi_admin_svc.c 323 0x00000001The administration service could not read the configuration information forvirtual host /PDWebPI/https-admserv: 0x35f02002:The requested data is not currently available (pd / pic)
2002-03-16-07:33:31.902+00:00I----- 0x35F02129 pdwebpi WARNINGpic Authorization Server pdwebpi_admin_svc.c 330 0x00000001The administration service could not initialized for virtual host/PDWebPI/https-admserv. Administration service features will not beavailable for this virtual host
� �� ���� iPlanet �� ��� � �� ��� �� �� �� ���
�� ��� �����. ��� ��� Tivoli Access Manager� � �� ��� �
“�� ��”� ��� ��� �� � ����.
ONE Directory Server 5.2��� pdunconfig� ��� ��� � ��
(40621)
Sun ONE 5.2 ���� IBM Tivoli Access Manager for e-Business Server�� �
� ��� ��� �� �� � �� ��� Object does not exist ��� �
� �����.
���� ��: � ��� �����.
1. ��� �� �����.
2. Sun ONE 5.2 ��� ������.
3. secauthority=default ���� ��� � �� ������.
� 3 � �� �� � ��� � 31
Web Portal Manager ��
Tivoli Access Manager Web Portal Manager GUI� ��� � ��� � �� �
� � ����� � � ����.
AIX 5.1�� Web Portal Manager GUI ���
IBM Tivoli Access Manager �� �� ���� Web Portal Manager� �
����� ����� ���� ����.
v Netscape Navigator 4.78 � 6.2
v Internet Explorer 5.5 � 6.0
� ���� ��� AIX ��� �� � ���� �����. AIX 5.1 ����
Web Portal Manager� ���� ���� � ����� ��� � ����. ��,
��� (�� 4.79)� ���� Netscape ��� ��� � ����. � ����
������ ��� Web Portal Manager ��� ��� �� ���� ����
���� �� � ����.
���� ��: AIX 5.1 ���� Netscape 7.0.3� ������.
�� ��� �� ���� Policy Proxy Server� ���� ��(30100� 30128)
Proxy Server� ���� �� Tivoli Access Manager � IBM Directory Server
�� ��� ��� Proxy Server�� ����� ��� � ����. Proxy Server
� ��� �� ��� ����� ����� ��� ��� ����. � �
�, �� Tivoli Access Manager Runtime �� � ��� ��� � ����.
���� ��: � � �����.
1. /opt/PolicyDirector/etc/pd.conf ���� ssl-io-inactivity-timeout
� 0�� ������.
2. /opt/PolicyDirector/etc/pdmgrproxyd.conf ����
[aznapi-configuration] �� �� � ��� �����.
azn-app-host = proxy_hostname
�� proxy_hostname� Proxy Server ���� ��� ����.
3. pdconfig ���� ��� Policy Proxy Server� �� �����.
4. ���� � �� ���� �� ��� �� �����.
5. Policy Proxy Server� �� ������.
32 IBM Tivoli Access Manager for e-business: ���� ��
ACL ��� ���� ��� ���(29961)
ACL ��� ��� IBM Directory LDAP Server, �� 4.1� �� ��� �
�����.
���� ��: � � �� /etc/slapd32.conf ��� � � �� LDAP
ACL ��� ���� ��� ������.
dn: cn=Front End, cn=Configurationcn: Front Endobjectclass: topobjectclass: ibm-SlapdFrontEndibm-slapdSetEnv: ACLCACHE=NO
Web Portal Manager� �� ������ ��� � ��(43847)
�� ���� � �� ����� Web Portal Manager� ��� � � ��
�� ��� �����. � �� � �� ��� �� ����.
WebSEAL ��
Tivoli Access Manager WebSEAL� ��� �� � �� � ����� ��
� � ����.
Active Directory(AD_LDAP)�� ��� �� WebSEAL� ��� �
��(43684)
Active Directory�� �� �� �� ��� WebSEAL� ��� � �
���. ��� ��� ��� ������. ���� �� ��� ��, �
� �� ����� ���� ������.�� �� ���� �����. �
� � �� UNIX �� ��� � WebSeal ���� Active Directory ���� �
��� � Windows ����� �����. ��� �� � �� �� ���
�� ��� ���� ��� ���� �����. ″� ��� � ��″�� ��
�� �� � � ����.
���� ��: Active Directory � policy �� Tivoli Access Manager � �
policy� ������.
��� �� ID ���� ��� ���� ��(IY30623, IY21308)
��� �� ID� ���� Tivoli Access Manager ��� Microsoft Internet Explorer
�� ���� ����. � �� � CIPHER ��� ��� ��� �� ��� �
����.
���� ��: ��� �� ID� �� � WebSEAL Server� � � ��� �
����.
� 3 � �� �� � ��� � 33
1. webseald.confwebseald.conf �� ��� [ssl-qop] ��� �� ssl-qop-mgmt
����� �� ���� ���� ��� ������.
[ssl-qop]ssl-qop-mgmt = no
2. ���� pdweb_start ����� ��� � � ��
GSK_V3_CIPHER_SPECS �� ��� �� ��� ��� ����� �� �
�� �����.
GSK_V3_CIPHER_SPECS=04050A030609020100
3. ���� ��� ���� �� � WebSEAL� �� ������.
UNIX
# /usr/bin/pdweb_start restart
Windows
WebSEAL� �� ���� ��� ���� ������.
Solaris�� WebSEAL� SSL �� �� ��(43387)
UltraSparc Solaris ����� WebSEAL HTTPS SSL �� ��� ����
webseald.conf ���� use RSA �� ������.
UltraSparc� � Solaris ����� WebSEAL HTTPS SSL ��� ����
use RSA �� ��� ���. ��� ��, WebSEAL HTTPS ��� ��
�� ���� WebSEAL �� ��� ���� ����.
��� ���� ��� Red Hat Linux 3.0�� WebSEAL� ���
� �� � � �� WebSEAL ���(webseald)� ��� ��� �����.
WebSEAL� ���� � �� �� pdweb_start ����� ��� ����.
pdweb_start ����� webseald� ���� �� �� �� �� ��� ����
�. Red Hat Linux 3.0�� ����� LD_ASSUME_KERNEL �� ��� ��
���. � � LD_ASSUME_KERNEL� ���� �� webseald� �� �
�� ���� WebSEAL� �� � ����.
���� ��: Red Hat Linux 3.0�� WebSEAL� ���� �� pdweb_start
� ������. pdweb_start� ���� �� ���� webseald� ��� ��
LD_ASSUME_KERNEL� ��� � ��� ���.
export LD_ASSUME_KERNEL= ″2.4.19″
Linux ���� WebSEAL� ��� � �� ���� ���(44078)
Linux ����� WebSEAL� �� � � � �� �� ���� �����.
34 IBM Tivoli Access Manager for e-business: ���� ��
error: cannot remove /var/pdweb/www/log - directory not emptyerror: cannot remove /var/pdweb/www - directory not emptyerror: cannot remove /var/pdweb/log - directory not emptyerror: cannot remove /var/pdweb - directory not empty
���� ��: � �� ���� �����. � ���� ���� �� � �
���.
�� ���� ″�� ��� � ��″�� � �� ��(44086)
″� ��� �� ��″��� �� ���� ″� �� �� ��″� �� ���
����. �� ��,
"�� �� ��� �� ��� �� ��� �������."
�� ����
� � �� ��� ���.
"�� �� ��� �� �� �� ��� �������."
�� ��� ��� �� ��� ���� ��� ��(44083)
WebSEAL� server task remove � � �� ��� ���� � � ����.
�� <server-id>�� �� �� ��� <server-UUID>�� ��� ���. ��
��� ��� IBM Tivoli Access Manager for e-business Command Reference
� ������.
�� �� �� �� ��� �� �� ���� ��(44084)
su-admin� ��� ���� � �� ��� � ��� �� � ��� ��
�� ����. ��� �� � ��� ���� �� � ���� �� ����
���� ����.
��� ��� �� ����� ���(44088)
��� ��� prompt_as_needed� ���� �� � ��� ���� ���
��� ��, ��� POP� ��� �� ����, ��� ″���� ��″��
� �� ���� �� �� ��� ��� ���� �����.
� ��� ���� BASE HREF ��� ���� ��(44090)
WebSEAL �� ��� preserve-base-href� yes� ���� �� � ��� �
����.
HTML ���� BASE HREF="http://server.ibm.com/"� �� BASE ��� �
� �� �� /jct� server.ibm.com� ���� WebSEAL� HREF� /jct/�
���� BASE ��� BASE HREF="https://webseal/jct/"� �����.
� 3 � �� �� � ��� � 35
��� HTML ���� <BASE HREF="http://server.ibm.com">� �� �� �
��� �� BASE ��� �� ��, �� ���� �� ��� �� /jct�
server.ibm.com� ���� WebSEAL� HREF� /jct� ���� jct� ��
��. � ��, BASE ��� <BASE HREF="https://webseal/">� �����.
WebSEAL ��� ���� ����(44095)
help � � �� � ���� ��� ���� �����. help � �� IBM
Tivoli Access Manager for e-business Command Reference� ������.
��� ����� wsadmin ����� �� WebSEAL �� ����
���(44100)
WebSEAL� ��� � wsadmin ������ ��� � �� � �� ���
� ��� �� �����.
Unable to load shared library ’<libname>’
Unable to resolve symbol ’<symbol>’ from shared library ’<libname>’
� �� ���� ��� ����� ��� IBM Tivoli Access Manager for e-business
Problem Determination Guide�� ����� �� ����. ��� �� � ID
�� � ���� ���, wsadmin ������ ����� ��� � �� ��
��. � ������ � ��� ��� ���.
UNIX
/opt/pdweb/lib
Windows
C:\Progra~1\Tivoli\PDWeb\bin
���� ��: � �� � ����, WebSEAL� �� ���� WebSEAL�
���� ��� ��� �� ����� ������ �����. � ���
wsadmin ������� �����. ������ ��� � �� ��� ��� �
�� ��, �� �� �� ������ ��� � � �����.
AMWebARS �� �� ���� �� � �� ��� �� �� ��
� ���(44134)
�� � �� ����� �� AMWebARS ��� �� ����� � webseald
log ��� ���� DynADI �� �� ��� 1005b3b2���. � �� ��� �
� Tivoli Access Manager ��� �� �� �� �� �� � ���� �
��� � ��� � ����.
���� ��: � ��� ��� ��� ��� � ���� �� ���� ��
����.
36 IBM Tivoli Access Manager for e-business: ���� ��
Active Directory� �� ���� ��� � ���� WebSEAL� ��
� � ��(44386)
WebSEAL� � ���� �� � ����.
v UNIX ���� Active Directory� �� ������ ��� �
v Windows ���� Active Directory� �� ������ ��� �� WebSEAL
���� Active Directory ���� ���� � �
IBM Tivoli Directory Server� �� ������ ��� ���� �� � ��
�� ����.
WebSEAL� ��� ���(44082)
webseald.conf ��� accept-client-certs = optional� ���� �� � �
��� ��� ���� � ��� ������ SSL ��� ���� �� ��
� ��� ��� WebSEAL ���� � �� ���� � ���� �� �
�� � � ����. � �� � ������ ���� ����� ��� ��
��� �� ��� �� �(�: ���� � � � )�� �����. ����
�� ���� ���� �� ���� �� � ���� ����.
���� ��: ���� ��� ���, ������� ����� ���� �
� �� �� �� ���� � ����. � � ���� �� ���� ���
� ����. ���� ��� ������ �� ���� ���� ����.
� ��� ���� ��
��� ����� ��� �� � �� �� ����� ��� � ����.
�� ��� URL� Explorer � ��� ���� ��(37028)
BA � ��� �� ���� ��� ��, � ���� �� ��� ���� ��
� �� ��� Internet Explorer 6.0 ����� �� ��� � � �� URL
� �� � ����.
� ��� Internet Explorer 6.0� ���� ����� ��� �� ���� URL
� ��� ��� �� ����.
����� ��� ��� �� �� �� ��� �� ���� ���
(39896)
�� 2�� �� � ���� -options-record �� -options-template� ���
� ��� ��� �� ���� ��� ��� �����. � �� � �� �
�� �� ����.
� 3 � �� �� � ��� � 37
���� ��� � ��� FSSO(Forms Single Sign-On)� �� �
�� ��(39924)
�� ����� FSSO(Forms Single Sign On) ����� <script> ��� �
��� ���� ����. Access Manager ��� ��� �� ��� FSSO� �
�� ���� ����. <forms> �� �� �� HTML�� �����.
Windows ��� ������ ����� �� ���� � ��� ID� ���� Service Unavailable ��� ���(42351)
Windows 2003 ��� ������ Microsoft IIS� IBM Tivoli Access Manager
for e-Business Plug-in� � �� ��, ����� �� ����� �� ID
� ��� ����� IIS� ��� ���. � ID � ��� ���� � ���
, ����� �� ���� ��� �� ���� URI� �� �� �� 503
Service Unavailable ��� �����.
���� ��: Windows 2003 ��� ���� ����� � �� ID � ��
� ����� IIS� ������.
v NETWORK SERVICE
v LOCAL SERVICE
v LOCAL SYSTEM
v <domain>\IWAM_<domain>-<machine>
�� Windows 2003 ��� ���� ����� ����.
SPNEGO ��� Active Directory ���� �� ���� ������
�� �(41078)
��� ���� ����� Internet Explorer ����� ��� ��, SPNEGO�
��� ����� Active Directory ��� �� �� ����� ��� ��� �
���. �� ��, SPNEGO ��� ��� � � � �� �� � ��
�� ��� �� ����� �� ��� ���� ���� ���� ����. �
����� �� ��� �� ����.
Microsoft IIS Plug-in�� ������� �� pdwebpi.conf � ��
(44361)
Tivoli Access Manager Microsoft IIS Plug-in� ������� �� � � ��
pdwebpi.conf ��� ��� ���.
1. pdwebpi.conf ��� ������.
2. iis ��� �����.
3. map-ba-users-to-anonymous ��� �� ������.
38 IBM Tivoli Access Manager for e-business: ���� ��
Microsoft IIS Plug-in� ������ � ��� �� �� ���� � � ���
�.
��� �� � ��� �� URL� ��� ��(44209)
Microsoft IIS 6.0�� Plug-in for Web Server� �� �� ��, ���� ���
��� ��� ���� ���� . �� �� , � ��� ��� ��
pagerror.gif� ���� ����.
<body bgcolor=white><table><tr><td ID=tableProps width=70 valign=top align=center><img ID=pagerrorImg src="pagerror.gif" width=36 height=48>
� �� � ���, �� ��� ���� �� ���� ����� ���
���. �� ��, �� ��� ��� � � ����.
<body bgcolor=white><table><tr><td ID=tableProps width=70 valign=top align=center><img ID=pagerrorImg src="/pagerror.gif" width=36 height=48>
Apache Web Server �� � ��� ��� ���� �� ���� �
��(44273, 44286)
Apache Web Server��, ����� ���� ��� ��� � ���� ��
��� ���� ���� �� �� �����. ��� � �� ��� ��
�� ��� ��� ��� ����. ��� �� ��� ���� ��
� ������ �� �� ����� ��� ���� ��� ����� ��
�� � ����. �� ��� �� ��� � � ��� �� ����� ��
�� �� �� �� ��� ���� �� ���� 403 � �����.
IBM Tivoli Directory Server ��
zSeries� Linux� IBM Tivoli Directory Server �� 5.2 ��(44406)
IBM Tivoli Directory Server �� 5.2� zSeries� Linux� ���� �� ��, Tivoli
Access Manager ����� � � IBM Tivoli Directory Server� ���� �
� �� � ���� ibmslapd.conf ��� ���� ����. ��� IBM Tivoli
Directory Server� ��� ��� ����� ���� �� ��, ibm-slapdSetenv
���� � ����� ���� �� �� � ����. � �� � ����
ibmslapd.conf ��� � � �����.
ibmslapdSetenv: LDAP_MAXCARD=NO
� � ��� ��� ���� �� ibmslapd.conf ��� �����.
� 3 � �� �� � ��� � 39
dn: cn=Front End, cn=Configurationcn: Front Endibm-slapdACLCache: TRUEibm-slapdACLCacheSize: 25000ibm-slapdEntryCacheSize: 25000ibm-slapdFilterCacheBypassLimit: 100ibm-slapdFilterCacheSize: 25000ibm-slapdIdleTimeOut: 300ibm-slapdSetenv: DB2CODEPAGE=1208ibm-slapdSetenv: LDAP_MAXCARD=NOobjectclass: topobjectclass: ibm-slapdConfigEntryobjectclass: ibm-slapdFrontEnd
pdadmin� �� � � Directory Server� �� ���� TivoliAccess Manager ��� ���� ��(43951)
IBM Directory Server 4.1� ��� ��, pdadmin �� �� �� � Directory
Server� �� ��� pdmgrd ����� ���� ����. � �� � IR50309
�� ������(IBM Directory Server 4.1� ��).
���� ��: IBM Tivoli Directory Server� �� �� � ������.
Tivoli Access Manager ��
Tivoli Access Manager� ���� �� ��� � �� �� � ����� �
� ����.
SSL� ��� �� � LDAP Server � ����� ���� �(18832)
Tivoli Access Manager ��� �� ����� �� �� ��� SSL� ���
��, ��� ��� �� � � �� � �� SSL� ��� ���.
���� ��: �� ��� �� � � ���� SSL� ������.
pdadmin object delete � � ���� ��� � ��(27173)
pdadmin object delete � � ��� ����� ��� ����� ��� �
��� ����. ��� ��� ����� ��� �� ��� ��, ����� �
� ����� �� ���� ��� � ����. �� ���� �� ���� ��
� ����� �����.
���� ��: ispolicyattachable �� ��� ����� ������. ���
���� �� ����� ���� pdadmin objectspace delete � � ����
��.
40 IBM Tivoli Access Manager for e-business: ���� ��
��� �� � � � �� �� ��� � ��(24411)
ivmgrd.conf �� ��� [ssl] ���� ssl-auto-refresh ��� yes� �
�� pdmgrd ��� � �� � � �� ��� ���� ����. � �
��� ��� �� ��� ���� �� ���� � �����.
LDAP��� ���� � �� ���� ���� Policy Server ����
�(28114)
IBM Tivoli Access Manager Upgrade Guide� ��� ��� �� ��� ��
��� ���� ��� ��� Policy Server� �� 5.1� ������� �� IBM
Directory Server �� iPlanet Directory Server� �� LDAP �� ������
��� ���� �����. � ��� �� ������ ��� ��, �� ��
� ����� ����� ��� Policy Server� �� 5.1� ���������.
�� ��� ��� � Windows�� Policy Server � AuthorizationServer� ���� ��(IY34142)
��� ��� ��� ��, Microsoft Windows ����� Policy Server �
Authorization Server� ���� ���� � �����. �� ��, ivmgrd.conf
�� ��� � � �� ��� ��,
logaudit = yeslogcfg = audit:pipe path=d: /log_test/pipelog1.exe
Policy Server� ���� � ����, � � ��� �� ���� msg_warning.log
�� ��� PipeLogAgent.cpp� �����.
0x000001e4 ��� ����� ��� � ����.
���� ��: ����� ����� ���� Policy Server � Authorization
Server� ������. � � �� �����.
1. � → �� ���.
2. � �� �� �� ��� � � � ��� Policy Server� �����
�� ����.
pdmgrd -foreground
3. �� �� �����. �� ��� �� , Authorization Server� ����
��� ���� � � � ������.
pdacld -foreground
�: -foreground � -version� �� ����. � �� pdmgrd �� pdacld
� �� Windows ����� �����.
� 3 � �� �� � ��� � 41
Tivoli Access Manager �� 5.1� �� ����� ��� Java ��
���� ��� ���(24996)
Tivoli Access Manager �� 5.1� �� ���� Tivoli SecureWay Policy Director
�� 3.8 ADK� ��� pdperm.jar �� �� Tivoli Access Manager �� 3.9
Java Runtime Environment� ���� Java ������ ��� ��� ���.
� ��� ���� Tivoli ��� IBM Customer Support� ������.
Solaris��� Policy Director ������ �� ��� �
Sun Solaris � ���� Tivoli SecureWay Policy Director �� 3.8 ADK� �
�� ��� ������ Tivoli Access Manager ������ ��� ��
��� ���. �� ���� � ��� �����. � ��� ����
���� �� �� ����� �������.
AIX�� ���� ���� � ��
�� ���� ����� ��� ��� IBM AIX �� 5.1� ��� � ����
�� ���� Policy Server� � �� ��� ���� � �� �� � �
���. ��� � � ���, � ��� � ���� �� ���� �����
Tivoli Access Manager Policy Server� ������ ��� ���� �� � �
���. �� � � � �� �� ���� �� ������ Policy Server ��
� ��� ��� � ����.
��� ����� ��� ����� ��� ����.
� �� � ��� � ��� �� ��� ��� ���� ����. � ��,
� ��� � �� ��� �� ���� � AIX ���� ����.
v � ��� Authorization API Sever � Policy Server
v �� ��� Authorization API Sever � Policy Server
v �� ��� Authorization API Sever � Authorization Server
v pdadmin ��� � Policy Server
v �� API � Policy Server
v Policy Server, �� Authorization API Sever(�: Authorization Server) ��
WebSEAL
v svrsslcfg ��� � Policy Server
���� ��: PD_FIXED_CLIENT_IP �� ��� AIX ����� �� ���
��� IP ��� ������. � 192.168.51.79� �� ��� �� ��� �
�� ���.
route � � ���� ��� �� ��� ���� ��� � �� � ���
� �� ��� �� ��� ���� ���� � � ����. �� ��, ���
42 IBM Tivoli Access Manager for e-business: ���� ��
� � �� ���� �� �� �� ��� ����� �� �� ������
� � ����. � ��� �� ��� �� �� ��� AIX ��� �����
�.
���� ��� �� IBM HTTP Server �� ��� (19559)
IBM HTTP Server mod_dir ��� ��� ���� �� ���� ����
��. ��� �� ���(/)� ����, � ��� ���� ��� ������
redirect(HTTP �� 302)� ���.
���� ��, � ��� ��� ������ �� �� URL(�� ��,
http://server/dirname)� � ���� � mod_dir �� URL
(�: http://server/dirname/)� � ����� ���. ��� ������ �
� ��� �� ����� ���� � ����� ���� � � ���� ��
� ���� ���.
�� IBM HTTP Server mod_dir ��� ���� ������ � ��� ���
� ����. ��� � ��(���� ��� ��� POP � ���� �� ��
�� URL ���)� ������ ����.
��, �� �� ��� �� ����. �� �� ��� ��� �� ����.
HTTP �� ��� �� ��� ��� (20633, 20631, 20735)
��� �� ��� ���� � HTTP ��� ��� �� �� ���� �
� � ����. ″���� ��″ ����� �� ���� Tivoli Access Manager
��� policy� �� � �� � � �����.
�� ���� ���� ��� policy� ���� ����� �� �� ����
� � ���� ����. ������ ��� ����� �� ��� ��, �
��� ����. ��� �� �� ����� � �� ���� �����.
��� �� ��� POP� ��� ���� ��� http://servername/
directory� ����� ����.
� � � � � � � � � � � � � � � � � � . � � � � � � � � �
http://servername/directory/index.html� �� ������(�� ��� ��
http://servername/directory/� �� ���).
������ � URL�� GET� �� �� ���� ����. ��� POP�
���� ����� �� ��� ���� � ���� ����. ��� ����
�� ��� ����� ���� �� �� ����� � � ��� �� ��
� � ����.
� 3 � �� �� � ��� � 43
��� ��� �(�� ����� �� � � �� � �� ��� ���
��)�� �� ���� ��� �� ����.
�� ��� �� ������ �� �� ����� ��� � �� ���� �
����. � ����� �� ���� �� ��� ��� �� ������.
� ��, �� �� ���� ���� �� ��� � � ��� �� � ��
���� �� � ����.
WebSphere Application Server� Tivoli Access Manager� � �
��� HP-UX�� ���� ��(28015)
WebSphere Application Server 4.0�� WebSphere ��� ��� �� WebSphere
������ ���� �� � ���� ��� ���� ����. IBM Tivoli
Access Manager for e-business IBM WebSphere Application Server �� ���
��� Tivoli Access Manager� ��� �� ��� �� ������ ��
� �� ���� � �� �����. ��� ���, WebSphere Application
Server ��� HP-UX ����� WebSphere ������ ���� �� � �
���. �� ��, �� ������ ��� �� ��� �� ��� Tivoli
Access Manager for WebSphere Application Server� ��� � ����.
���� ��: �� � ���� WebSphere ��� �� � ����. ���
� � �� ��� ��� IBM Tivoli Access Manager for e-business IBM
WebSphere Application Server �� ���� ������.
� � ��� BEA WebLogic Server� ��� � ��
java.lang.OutofMemoryError ��� �����.
� �� Tivoli Access Manager for WebLogic Server �� �� � BEA
WebLogic Server� � �� ���� � � ����.
���� ��: startWebLogic ������ JVM(Java Virtual Machine)� �� �
�� �� �����. �� ��, � � ����.
%JAVA_HOME%\bin \java -ms64m -mx128m
��� ����� � �� ��� �� ���� � � ����� ��� ���
� � ���� � ��� ��� BEA �� ��� ������. �� ��� �
�� � ��� ���� ������ ���� ���. ��� � � � ��
� �� �� �� ����� � URL� ������.
http://edocs.bea.com/wls/docs61/perform/index.html
44 IBM Tivoli Access Manager for e-business: ���� ��
Microsoft �� �� �� � Policy Server ��� ��� � ��
(43306)
�� Active Directory �� ���� Microsoft �� �� ��� ��� � Active
Directory ���� �� URAF ���� ��� � �� ��� Tivoli Access
Manager Policy Server ��� ��� � ����. �� ��� � �� ����
�� ��� �����. � ��� ����� ��� �� Microsoft �� ��
��� MS03-026(KB823980) � MS03-039(KB824146)���.
���� ��: � �� � ��� ��, �� � ��� ��� ��� Microsoft
�� ��� �� �����. �� � , Policy Server� ���� Microsoft ��
��� �� ������.
�� ��� �� �� �� Active Directory� �� ��� ���.
Microsoft Internet Explorer� �� �� � ��� ��� ��� �
� �� ���(43398)
Internet Explorer� �� ��� ��� ���� �� ��� �� �� ���� �
� �� �����.
�� ��, https://web.server.com:444/� � https://web.server.com/� �
� ����� �� �� �� Internet Explorer� �� � �
web.server.com:444� ��� � � � � �� �����.
���� ��: ��� IP ��� �� �� ��� �� ��� � ��
��� ��� �� �� ������.
Authorization Server(pdacld)� �� �� ��� ��(43511)
���� ����, Java �� API� �� �� � � ��� ���� Authorization
Server(pdacld)� �����. ��, �� �� �� AZN ������ �� ��
� �� ��� �����. �� �� �� Authorization Server� ��� �
�� policy� ��� ��, � ��� ��� Authorization Server� ���
���. �����, Authorization Server� ������ �� ��� policy ��
��� ��� � ����. ��� policy� � � ����, �� �� pdadmin
� � ��� Authorization Server� securitygroup� �� ���. �� �
�, � � ����.
pdadmin> group modify securitygroup add ivacld/<machine_name>
�� �� ivacld.conf ��� ����.
�� ���� �� ��, Authorization Server� ��� policy(�: ��� ��� �
� ��)� ����� �����. ��� ��� � �� �, Authorization Server
� 3 � �� �� � ��� � 45
� ���� ��� ���� � ����. pdadmin �� � ����� ����
��� �� ��� ��� ���� Authorization Server� �����.
�� ��� Authorization Server �� ��� � ��� � ��� ���� �
��� �� ��� � ���.
Windows ��� � �� �� ��� ���� WebSphereApplication Server� Tivoli Access Manager� �� ��� � � �
���� ���� ���� ��(43612)
Microsoft Windows ���� � �� �� ��� ��� IBM Tivoli Access
Manager for WebSphere Application Server� �� ��,
c:\Program Files\Tivoli\amwas ���� �� ��� ��� ��� �
� ���� ����.
���� ��: IBM Tivoli Access Manager for WebSphere Application Server�
�� �� � ���� c:\Program Files\Tivoli\amwas ���� �����
�.
�� �� �� �� ��� �� ��� �� ���� Tivoli AccessManager Java Runtime Environment� ��� ���(43896)
Tivoli Access Manager Java Runtime Environment(PDJRTE)� �� �� ���
� �� � � �� ��� �� ��� ��, ��� ��� ����� ��
��.
���� ��: PD.properties ��� ��� � � �� ��� �� ��
�� Tivoli Access Manager Java Runtime Environment� �� �� � ��
������.
Tivoli Access Manager Runtime Environment �� �� � �� ��
�� ���� ���(43904)
Tivoli Access Manager Runtime Environment �� � � �� �� ��� ���
��� ��, rpm � � �� ���� � ��� �� � ��� �� ���
� �����.
���� ��: ��� ��� ����. ��� ��� �� �� � �����
��� � ��� ��� ��� � ���� �� ����.
Tivoli Access Manager� �� �� � �� ��� ���� � �
��(43933)
�� ������ LDAP� ��� ��, Tivoli Access Manager� LDAP Server
� ��� �� ��� LDAP ��� ��� �����. �� � , Tivoli Access
46 IBM Tivoli Access Manager for e-business: ���� ��
Manager� � ��� ��� ��� �� � �� ��� ����. � ���
���� ���� �� �� � Tivoli Access Manager� �� � �� ���
��� ��� ����. Tivoli Access Manager� ��� �� � ���� �
� ��, ��� ���� ��� ACL(Access Control List)� �� Tivoli
Access Manager�� � ���� ��� � �� ��� ��� � � ���. �
� ��� ��� IBM Tivoli Access Manager �� �� ���� ���� ��
��. ACL� �� � Tivoli Access Manager� � ��� �� �� � ���
��� � ����.
�� �� ��� ���, Tivoli Access Manager� �� ��� �� ���(�
� � LDAP��� ��� ���) �� �� � ��� ���� ���� ��
��. � ��� �� �� �� ��� ���� ��, Tivoli Access Manager
� ��� �� ���� �� � � ���� � ��� ��� ��� ����.
���, �� �� ��� � ��� �� ������ �� ��� �� ��� �
�� Tivoli Access Manager� �� ���� ��� �� ����. �� ��, �
� �� �� ��� ��� ����.
c=nodc=DnB,dc=no
� � �� � ���� ��
dc=postbanken,dc=no
� ��� �� ��� ��� � ��� ��� ACL� ��� ��� � ���
�� ���� Tivoli Access Manager� �� ��� ��� �� ����� ��
��� � ����. �� ��, Access Manager� �� ��� �� �� ���
�� �� � ����. �� ��� ��� ��� �� ���� Tivoli Access
Manager� �� ��� ���.
SvrSslCfg ��� �� ��� �� �� ���� ���(43701)
� � �� �� ��� Java SvrSslCfg ���� ��� �� � � �� �
�� �����.
HPDJA0809E ��� �� �� ���� ��� ��� � ����.
�� � � �� ������. �� ���� � � �����.
HPDJA... ��� �� �� ���� ��� ���� � ����.
� �� � �� ��� �� ����.
� 3 � �� �� � ��� � 47
SuSE Linux Enterprise Server 8� Tivoli Access Manager� ���
� Policy Server(pdmgrd) � Authorization Server(pdacld)� ���
���(36687, 37558)
SuSE Linux Enterprise Server 8� Tivoli Access Manager� ��� � Policy Server
� ACL ��� ���� � ��� � ����.
���� ��: Tivoli Access Manager� ���� �� ivmgr ��(�� �� �
�)�� LDAP SSL � �� � � � ��� ���� � � �� ��� ��
� � ����.
Tivoli Access Manager for WebSphere Application Server ���
��� ��� ����� ������� ��� � ��(28418)
Tivoli Access Manager for WebSphere Application Server ����� ���
� migrateEAR�� � ��� �� ��� �� �(DN) ��� ���
�. DN� ��� �� ��� ���� �� ��, UNIX � � ���� � �
��� �� �� � migrateEAR ���� �����. �� ��, � ��
�� �� ��(o=)�� ��� �����. o=Sales Division,c=us
migrateEAR � � Java � ��� ���� � ����. Java � � �
� ��� � DN ���� ����� �� DN� � �� �� �� � �� �
����. �� ��, WebSphere Application Server� /opt/WebSphere/AppServer
���� ���� ��� ��� ��, � � DN� �� ��� ″o=Sales
Division,c=us″� � � ��� � ���.
��� Java � � IBM Tivoli Access Manager for e-business IBM WebSphere
Application Server �� ��� �� A� migrateEAR �� ���� ���� �
���.
WebSphere Application Server��� ������ �� ��(21935)
����� ���� migrateEAR�� � ��� ��� � ����.
"��� �� ID� ���� ����."
/opt/WebSphere/AppServer/java/jre/bin/java \-Dpdwas.lang=/opt/WebSphere/AppServer/lib:/opt/pdwas/nls/java \-cp /opt/WebSphere/AppServer/lib/xerces.jar:/opt/pdwas/lib/migrate.jar:/opt/pdwas/nls/java \com.tivoli.pdwas.migrate.Migrate -j /opt/WebSphere/AppServer/config/your_application.ear \-a sec_master -p sec_master_password -w wsadmin -d "o=Sales Division,c=us" \-c file:/opt/WebSphere/AppServer/java/jre/PDPerm.properties
�� 1. migrateEAR ��� ��� �� �� Java �
48 IBM Tivoli Access Manager for e-business: ���� ��
WebSphere Application Server�� ����� ��� ������ �� ����
� ������ ��� ��� �� ��� ��� � ����. � �� ���
migrateEAR ���� � Tivoli Access Manager �� ��� ������
��.
��� WebSphere ��� ��� LDAP �� ������ �� WebSphere
�� ��� ������ ����. �� ������ ��� ��(EAR)� �
�� ��� � ����. � ��� ��� �� � �� �� �(DN)� ��
��. ����� ���� EAR ��� � ��� ��� �����.
����� ���� �� ��� ���� XML ��� �����. �� � �
�� ���� ″�″ �� ��� ���� ���� � ��� ������.
XML ��� �� � � ����.
ibm-application-bnd.xmi
�� ��, �� ��� � � �� ��
.....<groups xml:id="Group_1" name="customer, o=ibm, c=gb"accessId="group:server1.uk.ibm.com:3899/cn=customer, o=ibm, c=gb"/>.....
� � �� ��� ��� ������.
.....<groups xml:id="Group_1" name="customer"accessId="group:server1.uk.ibm.com:3899/cn=customer, o=ibm, c=gb"/>.....
�� ���� � Tivoli Access Manager ���� ��� �� ���
��� ��� ���(43748)
AMWAS� � AM ����� AM ���� �� �� �� �� � �����
��� � � ������� �� migrateEAR4 � migrateEAR5 ���
� -b �� ����.
���� ��: WAS ����� �� ��� AM ���� ��� �� ��
� ������� migrateEAR ���� ��� � -b �� ������.
������ ��� ACL� ������� ��� � � �(44245)
� ��� ���� ��� ACL� ��� ��, ACL� ��� � �� ���
����� ��� ��� � ����. ��� ����� ��� �� � ��
�� ����. � �� � ����, ������ ����� ACL� ��
�� ��� �� �� ���� ����.
� 3 � �� �� � ��� � 49
������ ��� policy� ������� ��� � �(44410)
����� ��� ″����� �″�� ���� ��� �� policy� ��
����� ��� � ����. ������ �� �� policy� ������
��� ���� pdwas_migrate.log ��� ����. �� ��� ��� �
����� ��� ���� � � �����. ��� �� ���� � �
����� ��� ������. �� � ��� ����� ��� �� �
����.
UNIX � ���� pdbackup � � ��� � � ���� ���
(44285)
UNIX �� ����� pdbackup � � �� � � ���� �� � ��
��.
sh[2]: ./var/PolicyDirector/log/msg__pdmgrd_utf8.log:0403-006 Execute permission denied.sh[3]: ./var/PolicyDirector/log/msg__pdmgrd_utf8.log:0403-006 Execute permission denied.
� ���� �� � ����. msg__pdbackup.log ��� ��� � � �
�� � � ������ � � ����. pdbackup � � � ��� �
��� � �� �� ��, ��� ��� ����.
pdwascfg �� � jlog.properties �� ���� ��(44410)
-action_type local �� �� pdwascfg � � ��� WebSphere Application
Server� ��� jlog.properties ��� ���� �� � ����. ��� �
��� ����, jlog.properties.template ��� WebSphere Application Server
� ���� �� etc ���(PDWAS_HOME ������ �)�
jlog.properties� �����.
zSeries� Linux� WebSphere Application Server ��� ���
(44540)
zSeries� Linux� WebSphere Application Server� �� Tivoli Access Manager
� ��� �, � � WebSphere Application Server 5.02 ���� ��� � ��
� ��� ��� � ��� SystemOut.log� � � ��� ��� �����.
org.xml.sax.SAXParseException: Element type "properties" must be followed byeither attribute specifications, ">" or "/>".at org.apache.xerces.parsers.AbstractSAXParser.parse(AbstractSAXParser.j
� ��� /opt/WebSphere/AppServer/config/cells/hostname/security.xml �
�� �� ���(>)� ��� ��� � ����.
50 IBM Tivoli Access Manager for e-business: ���� ��
��� ���� � � �� � �� � �� ‘>’� �����. �� ‘>’
� ��� �� �������. (��: � � ���� ��� � �� ����
�.)
<properties xmi:id="Property_1067638223188"name="com.ibm.security.useFIPS"value="false"/><properties xmi:id="Property_222"name="com.ibm.websphere.security.authorizationTable"value="com.tivoli.pdwas.websphere.PDWASAuthzManager"/></security:Security>
Tivoli Access Manager� �� ��� �� �� Java �����
� ��� � NoSuchMethodErrors� ��� � ��
��� �� ��� �� Tivoli Access Manager Java Runtime� � ����
� ���� ���� Java ������ Tivoli Access Manager �� 5.1 Java
Runtime� � � � Java NoSuchMethodError� ������.
public static void createPop(PDContext context,String id,String description,com.tivoli.mts.PDAttrs attributes,PDMessages messages)
public static void createAcl(PDContext context,String id,String description,HashMap aclEntriesUser,HashMap aclEntriesGroup,PDAclEntryAnyOther aclEntryAnyOther,PDAclEntryUnAuth aclEntryUnAuth,com.tivoli.mts.PDAttrs attributes,PDMessages messages)
public static void createProtObject(PDContext context,String id,String description,boolean isPolicyAttachable,String aclId,com.tivoli.mts.PDAttrs attributes,PDMessages messages)
� �� � �� ��� �� �� ���� � ���� ��� ��� �
����� �� ���� ����. ���� ��� datatype com.tivoli.
mts.PDAttrs ��� datatype com.tivoli.pd.jutil.PDAttrs ��� ���.
��� �� �� Tivoli Access Manager �� 5.1 Java Runtime� �� ����
��� �� ���� ���� Java ������ ��� ��� ���. �
��� ���� Tivoli ��� IBM Customer Support� ������.
� 3 � �� �� � ��� � 51
52 IBM Tivoli Access Manager for e-business: ���� ��
� 4 � ��� �� ����
� ���� IBM Tivoli Access Manager(Tivoli Access Manager) ��� � �
�� ��� ��� ���� ��� �� ��� �����.
��� ��� � ���� ��
� � �� � ����� � ��� Tivoli Access Manager ���� �� �
� �����. �� �� ��� �� �� ��, ��� ���� ����.
�� ���� �� � ��� ���� ����. � �� � Tivoli ��� IBM
Customer Support� ������.
�� ��� Tivoli Access Manager� ��� �� �� � 25 ���� � 3 �
��� �� � ��� ���� �� � ����.
Red Hat Linux 7.1� � ��� �� ��� ��� �� ���
� ��� � ���� � �� Red Hat Linux 7.1 ���� Tivoli Access
Manager� ���� �� ��� ��� ���.
v ���(eucjp, ja_JP.eucjp)
v ���(zh_TW)
/etc/ld.so.conf ��� ���� � � �����.
/usr/lib/gconv
��� ��� iconv � �� �� ������ ���� � ��� �� �
�����.
Active Directory� ���� DBCS ����� �� �� �� � ��
(44415, 44312)
pdadmin group list � user show-groups � � ��� ��� Active Directory�
�� ������ ���, DBCS ������ ���� �� �� �� � �
���.
Linux ������ �� �� � �� ��� ���
Red Hat Linux ����� ���� � ���� ��� � �� ��� ja_JP.eucjp
���. �� ��, � � ����.
LANG=ja_JP.eucjpLC_ALL=ja_JP.eucjp
© Copyright IBM Corp. 1999, 2003 53
�: ja_JP.eucjp� ��� ��� ���� ���� ������. �� ��,
ja_JP.eucJP�� ���� ���� �� ��� �� ���, ���� �
���.
��� SJIS� ���� ����.
Linux ����� �� ��� ��� �� ��
� ���� �� �� ���� ��� Red Hat Linux ����� Tivoli Access
Manager� ���� �� � �����. �� ��� EUC� ���(BIG5)�
����. ��� SJIS� ���� ����.
1. XWindows ���� ��� ��� � ���� Red Hat Linux� �����
�. X� ��� �, X� �����.
2. Tivoli Access Manager Runtime ���(PDRTE)� ������.
3. � �� ��� �� � ������.
# ./pd_lp
4. �� ���� ���� Policy Server� � Tivoli Access Manager Runtime
� ������.
��� EUC:
1. � � � �����.
# export LC_ALL=ja_JP.eucjp# export LANG=ja_JP.eucjp# rxvt -km eucj &
2. rxvt �����, pdconfig � � ��� �� ��� ���� ���
�� ����.
���:
�� ��� ���� �� � ���� ����. ��� ��� Red Hat
Linux� ���� �� ����.
1. � � � �����.
# rpm -i cxterm-5.1p1-2.i386.rpm# export LANG=zh_TW# export LC_ALL=zh_TW# cxterm -big5
2. cxterm�� pdconfig � � �� � �� ��� ���� �����
������.
cxterm ���� � ���� ����� � ����.
http://www.rpmfind.net/linux/RPM/contrib/libc6/i386/cxterm-5.1p1-2.
i386.html
54 IBM Tivoli Access Manager for e-business: ���� ��
�� ���� � ���� ��� ���� ��(28420, 28422)
�� ��� ��� �� ���� � � ���� ����. � � �� ���
����.
v Policy Server SSL �� �� ��� ���� ���� ���� � � �
��� �����.
v ���� ��� ��� ��� � ���� ���� �����.
�� ��� ��� ��� ���� ���� ��(28453)
�� ��� ��� ���� � �� ��� �� ���� ���� �� � �
���. �� � ����, ���� ��� �� ��� �� ��� ������.
� ��� �� ��� �� �� ���� �����.
Windows� ��� LANG ��� ��� �� ��� ���
Windows ���� LANG ��� ���� ��, ��� �� �� ��� ���
��� �����.
� �� Windows ���� � � �� ��� ���� ���
(26899)
Microsoft Windows ����� ��� � (�: svrsslcfg, bassslcfg, mgrsslcfg �
pdjrtecfg)� ��� ��� �� ���� ��� �����. � ��� 1�� �
� ���� ���� �����.
��� �� ���� ��� ����� �� � � �����.
1. �� � � �� ���.
2. � � � ������.
chcp 1252
3. � ���� �� � �� �� ���.
4. Lucida Console �� True Type ��� ��� � ��� ���. � �
���� �� �� ���� �� �� ������.
�� � �� ��� � � ��� �� ���� ��� �����.
�� ��� ASCII �� �� �� ��(26985)
�� �� ASCII ��� �� ���� ����. Tivoli Access Manager� �
���� ���� ��� �����. � ���� Policy Server� ���� �
� ������ UTF-8(Universal Character Set Transformation Format-8)�� �
����. �� 5.1� ��, ���� azn-api ������ � ��� �����
�. WebSEAL� ��, �� �� ���� �� ��� � ����.
� 4 � �� �� ���� 55
Web Portal Manager� ���� �� ���� �� ���� �
(IY32306)
Web Portal Manager ���� �� �� � �� ��� ��, ��� ���
� �� �� ���� �� ��� ���.
Java� ��� ��� ���� ��� ��(IY31894)
��� � ��� ���� �� �� ���� ���� ����. ���, �� �
� Java�� �� � � ���� � ��� ��� � � ����. ��
��, ��� ���� ��� �� JRE� ��� ���� X11.fnt.ucs.ttf ��� �
���. �� �� ��� �� �� � ��, JRE �� � �� ���� ��
����.
Policy Server� AIX �� � ��� ���(12584)
� ��� ��� ���� �����, Tivoli Access Manager Policy Server�
pdmgrd� ��� � ��� ���� � ��� �� ����. Policy Server
� ��� ���� �� ��, pd_start ���� ��� ���� �����
�.
pd_start start
2���� ��� �� ���� �� �� �� ���� ���� ��
(37601, 39896, 43907)
2�� � �� ����� -options-record �� -options-template� ��
� �� ���� � ��� ��� ��, ��� �� ��� ��� ���� �
����. �� �� ��� �� ����.
����� ��� ��� �� �� �� ��� �� ���� ���
(39896)
�� 2�� �� � ���� -options-record �� -options-template� ���
� ��� ��� �� ���� ��� ��� �����. �� �� ���
�� ����.
�� Windows ����� Plug-in for Web Server� �� ����
���(44565)
��� Windows ����� Plug-in for Web Server ��� �����.
���� ��: � ��� �� �� ���� ������.
c:\program files\tivoli\pdwebrtec:\program files\tivoli\pdwebpi
56 IBM Tivoli Access Manager for e-business: ���� ��
���� � �� ���� ��� � ������� ��� ���� �
�(44080)
����� � �� ���� ��� � �� ������� ������ �����.
BEA WebLogic ��� ��� � �� ���� � � ���� ���
(44219, 44398)
BEA WebLogic ��� ���� �� � ��� �� ��� �� ���� �
�, �� �� ��� ���� �����. BEA WebLogic ��� ���� �
� JDK �� JRE� ��� ��, �� � �����. � �� � �� �����
���� � ��� ����. ��� � �� � ���� IBM JDK �� JRE
1.3.1� ��� � �� ��� install_amwls� �����.
SuSE Linux Enterprise Server 8� Tivoli Access Manager� ���
� Policy Server(pdmgrd) � ACL ��(pdacld)� ��� ���
(36687, 37558)
SuSE Linux Enterprise Server 8� Tivoli Access Manager� ��� � Policy Server
� ACL ��� ��� ��� � ����.
���� ��: Tivoli Access Manager� ���� ��, ivmgr ��(�� �� �
�)�� SSL � �� � � � ��� ���� � � �� ��� ��� �
����.
� 4 � �� �� ���� 57
58 IBM Tivoli Access Manager for e-business: ���� ��
� 5 � ��� �� ��
� ���� IBM Tivoli Access Manager for e-business ������ �� ��
� �� ��� � �����.
IBM Tivoli Access Manager Upgrade GuideIBM Tivoli Access Manager Upgrade Guide� �� Tivoli ����� ����
�� http://www.ibm.com/software/tivoli/library/� White Papers ��� ���.
IBM Tivoli Access Manager Base Administration Guide(44534) ″Chapter 18. XML output for logging and auditing logs″�� 187 ��
�� � 8� �� <source> ... </source>� �� ��� � � ����. ��
� � � �� ��� ���.
Output Field Name Description
<source>...</source>
The source event can be one of the following:
cred Applies to any Tivoli Access Manager
component.
app Applies only to an authorization (azn)
component.
ruleADI
Applies only to the authorization (azn)
component when evaluating a Boolean
rule. The rule ADI value describes
Boolean rule access decision information
that may have been retrieved from the
credential, application, authorization, or
through an attribute retrieval service.
�: In product audit logs, if the dynADI value
is listed, it should be interpreted as ruleADI
instead.
IBM Tivoli Access Manager for e-business Authorization C APIDeveloper Reference
7 ���� ″Chapter 1. Authorization API overview″�� ��� ���� ��
�� � � �� ��� ���.
© Copyright IBM Corp. 1999, 2003 59
IBM has tested the use of the IBM Tivoli Access Manager Application Developer
Kit (ADK) component with the compilers listed in the table below. Previous
versions of the compilers are not supported. Compilers on other supported platforms,
such as IBM AIX 5.1 or HP-UX 11i, have not been tested.
Operating system platform tested Tested compiler
IBM AIX 4.3.3 IBM Visual Age C/C++ 5.0.2
Sun Solaris Operating Environment 5.7 Forte 6.1 with patches 109505-11, 109508-09,
109510-06, 109513-11
Hewlett-Packard HP-UX 11.0-11.01.07 AnsiC/3.30 aC++
Red Hat Enterprise Linux for xSeries® GNU GCC 3.2.2
SuSE Linux Enterprise Server 8 for xSeries GNU GCC 3.2.2
SuSE Linux Enterprise Server 8 for S/390® and
zSeries
GNU GCC 3.2
SuSE Linux Enterprise Server 8 for pSeries® GNU GCC 3.2-32
Microsoft Windows 2000 Advanced Server Microsoft Visual C/C++ 6.0.5
IBM Tivoli Access Manager for e-business Administration C APIDeveloper Reference
4 ���� ″Chapter 1. Introducing the administration API overview″�� ���
���� �� �� � � �� ��� ���.
IBM has tested the use of the IBM Tivoli Access Manager Application Developer
Kit (ADK) component with the compilers listed in the table below. Previous
versions of the compilers are not supported. Compilers on other supported platforms,
such as IBM AIX 5.1 or HP-UX 11i, have not been tested.
Operating system platform tested Tested compiler
IBM AIX 4.3.3 IBM Visual Age C/C++ 5.0.2
Sun Solaris Operating Environment 5.7 Forte 6.1 with patches 109505-11, 109508-09,
109510-06, 109513-11
Hewlett-Packard HP-UX 11.0-11.01.07 AnsiC/3.30 aC++
Red Hat Enterprise Linux for xSeries GNU GCC 3.2.2
SuSE Linux Enterprise Server 8 for xSeries GNU GCC 3.2.2
SuSE Linux Enterprise Server 8 for S/390 and
zSeries
GNU GCC 3.2
SuSE Linux Enterprise Server 8 for pSeries GNU GCC 3.2-32
Microsoft Windows 2000 Advanced Server Microsoft Visual C/C++ 6.0.5
60 IBM Tivoli Access Manager for e-business: ���� ��
�� A. Linux�� Tivoli Access Manager ������ ���
��� �
� ��� Intel™ ����� Red Hat Linux� ���� zSeries�� SuSE Linux
Enterprise Server� ��� IBM Tivoli Access Manager(Tivoli Access Manager)
������ ��� � �����.
v �� -lpthread� ��� ��
Tivoli Access Manager ������ ������ ������ ����� �
�� � �� ������. Linux �� ������ libpthread.so� libc
�� ����� ���� �� ��(�: fork())� �����. ��� ����
���� ������ ���� �� ��, �� ���� ����� -lpthread
� ���� � ��� ��� ��� ��� � �� ��� ��� � ���
�.
v ������� ��� ��
������ ���� ���� ��� ��, ��� ��� ��� ��� � �
���. �� Linux ���� ���� �� �� ��� 2MB���. � �� �
�� ����� ��� �� �����. �� ��, RAM� 256MB� ����
� ��� �� 128� ����� ���.
��� �� � ��� � � ��� �����.
– �� ��� �� ��� ��, pthread_create()� ��� � �� �� �
�� ������.
– �� ��� �� ���� �� �� � Tivoli Access Manager ����
� � �� ��, �� ���� �� ���� ���� ��� �� �
� ��� ��� ��� pthreads ������ �� ������.
© Copyright IBM Corp. 1999, 2003 61
62 IBM Tivoli Access Manager for e-business: ���� ��
�� B. ����
� ��� ���� ���� �� � ������ ��� ����.
IBM� �� ����� � � ��� ��, ��� �� ��� ���� �� �
� ����. �� ��� � �� �� � ���� �� ��� �� IBM ���
� ������. � ��� IBM ��, ���� �� ���� ���� �� �
IBM ��, ���� �� ����� ��� � ��� �� ����� ����. IBM
� �� ���� �� �� �, ����� ��� ��, ���� �� ����
�� ��� � ����. ��� �IBM ��, ���� �� ���� ��� ��
�� � �� ��� �����.
IBM� � ��� ��� �� �� ��� � ��� ���� �� �� ��
�� �� � ����. � �� ����� � ��� �� ������ � ��
�� ���. ����� �� ����� � �� ������.
135-270
����� � � ��� 467-12, �������
�� �.�.� ����
������
����: 080-023-8080
2��(DBCS) ��� �� ���� ��� �� IBM ������� ����
� ��� � ����� ���
IBM World Trade Asia Corporation
Licensing
2-31 Roppongi 3-chome, Minato-ku
Tokyo 106-0032, Japan
�� �� ��� ���� ��� �� ����� ���� ����. IBM�
�� �� �, ��� � �� ���� ���� �� ��� ��� ���
(�, �� ��� � ) ����� ����� �� ��� ���� � �� ���
���� �����. �� ����� �� ��� ��� �� ��� ��� �
��� ���� ����, � ��� ���� �� �� ����.
� ���� ����� ���� ���� ���� ��� �� � ����. � �
�� ����� ����, ��� ��� ���� �����. IBM� � ��� �
�� �� �(��) ����� �� ���� ���� �� �(��) ��� � ��
��.
© Copyright IBM Corp. 1999, 2003 63
� ���� ���� �IBM� ���� �� ��� ��� ���, �� ��
�� �� ���� ���� �� �� ���. � ���� � �
IBM �� � ��� ��� � ��� ���� �� ��� �� ��
� ��� ���.
IBM� ��� ��� �� �� �� ��� ����� ���� ��� ��
� ��� ��� ���� ��� � ����.
(i) ����� ��� ����� � ����(� ���� ��) �� �� �� �
(ii) ��� ��� �� ��� ���� � ����� �� ��� �� �� �
��� ��� � ��� ������.
135-270
����� � � ��� 467-12, �������
�� �.�.� ����
������
��� ��� � ��(�� ��, �� � �)� �� ��� � ����.
� ��� ��� ����� � � ���� � �� ��� �� ����� ��
� IBM� IBM �� ��, IBM ���� ���� ��(IPLA) �� �� ��
� ��� �� ��� ����.
�IBM ��� �� ��� � ��� ����, �� �� �� � �� �
���� �� ����. IBM��� ��� �IBM ��� ����� �����, �
� ��� ��� ��� ���, ��� �� � ��� ��� ��� � ���
�. �IBM ��� ��� �� ����� � ��� ����� ������.
IBM� ���� �� ��� �� �� ��� ��� ���� �� � �
���.
� ���� ��� ���� ��� ���� � ���� �� ��� ��
����. � ���� ��� ���� ��� ���� � ��, ��, �� � �
�� �� �� � ����. �� �� � ��� ��� �� ��� �
� ��� ��� �� �� ���� �����.
� ��� ������ �� ���� �� � �� ���� �� �� ���
�.
�
� ��� �� �� � ���� ���� IBM Corporation� �� �� ��
�����.
64 IBM Tivoli Access Manager for e-business: ���� ��
AIX
DB2
DB2 Universal Database
Domino
IBM
IBM ��
Lotus
MQSeries
OS/390
pSeries
S/390SecureWayTivoli
Tivoli ��
Universal Database
WebSphere
z/OS
zSeries
Microsoft � Windows� �� �� � ���� ���� Microsoft Corporation
� �����.
Intel� �� �� � ���� ���� Intel Corporation� �����.
Java � �� Java �� �� ��� ��� �� �� � ���� ���� Sun
Microsystems,Inc� �� �� �� �����.
UNIX� �� �� � ���� ���� Open Group� �������.
� ��, �� � ��� �� �� �� �� �������.
�� B. ���� 65
���
Printed in Denmark by IBM Danmark A/S
GA30-2206-00