IBM WebSphere V5.0 Security - CGISecurity

[8/22/02 7:41:32:036 CDT] 7822e45 WebSealTrustA d WebSeal Login ID = null
[8/22/02 7:41:32:045 CDT] 7822e45 WebSealTrustA > addASource
[8/22/02 7:41:32:045 CDT] 7822e45 WebSealTrustA d WebTAInterceptor: Added
source = wsl01:443
[8/22/02 7:41:32:045 CDT] 7822e45 WebSealTrustA < Exiting addASource
[8/22/02 7:41:32:045 CDT] 7822e45 WebSealTrustA < Exiting initialization:
SUCCESS
[8/22/02 7:41:32:045 CDT] 7822e45 TrustAssociat A SECJ0122I: Trust Association
Init Interceptor signature: WebSeal Interceptor Version 1.1
[8/22/02 7:41:32:064 CDT] 7822e45 TrustAssociat A SECJ0120I: Trust Association
Init loaded 1 interceptor(s)
[8/22/02 7:41:32:076 CDT] 7822e45 TrustAssociat < initialize
Here we see TAI being initialized. We need to look at the Trust Properties line in
the trace to verify that the property values being used are the ones we think we
set. If we see an error here with one of the properties, then we need to go back to
our property definition, either in the properties file, or our custom property entries
in TAI, and provide the correct values. If the property values are correct, and we
see, as above, that the WebSealTrustAssociation is being initialized properly,
then we know that we have properly configured TAI. In this case, we now need to
access our WebSEAL junction from a browser, and login to WebSEAL. The next
example shows what should appear in the trace file if all is well.
Example 12-4 Trace file http header from WebSEAL
[8/22/02 7:42:44:163 CDT] 277a2e5c EJSWebCollabo d Http Header names and
values:
authorization=[Basic d2Vic2VhbHM6cGFzc3dvcmQx]
iv-groups=["managergrp"]
via=[HTTP/1.1 wsl01:443]
user-agent=[Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)]
host=[seccli.itso.ral.ibm.ibm.com:9443]
accept=[image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*]
connection=[close]
accept-language=[en-us]
iv-user=[manager]
iv-creds=[Version=1,
BAKs3DCCA-YMADCCA-AwggPsAgIDkDBsMCkwHgIE48b7FgIDAKe5AgIR1gICAKUCASQEBgBAqsIqTAw
...
0YTFCUlowRkJRVUU5BAA=]
referer=[https://wsl01.itso.ral.ibm.com/tai/itsobank/]
accept-encoding=[gzip, deflate]
cookie=[msp=2; IV_JCT=/tai]
[8/22/02 7:42:44:163 CDT] 277a2e5c EJSWebCollabo d VirtualHost is :
default_host
[8/22/02 7:42:44:163 CDT] 277a2e5c WebSecurityCo > WebAccessContext
[8/22/02 7:42:44:163 CDT] 277a2e5c WebSecurityCo < WebAccessContext
Chapter 12. Tivoli Access Manager 403