CA eTrust SiteMinder Developer's Guide for Java

More documents

Recommendations

Info

Java API FlowYou might already have a session specification for a user that has beenauthenticated. For example, you have written a custom agent and obtained asession specification using the Java Agent API. To make DMS API calls as auser, you can use that session specification. You need not obtain a newsession specification.To use an existing session, create an SmApiSession object and associate thesession specification with that object.Log in as a SiteMinder AdministratorTo authenticate a SiteMinder administrator, use the login() method in theSmApiSession class of the Utilities package. This method uses theadministrator’s login credentials (username and password) to authenticate theadministrator. Calling this login() method obtains a session specification andreturns an SmApiResult object.The syntax of the login() method is as follows:result=mySession.login (username,password,IPaddress,challengeReason);Provide a value for the challengeReason parameter as follows:■■On the administrator’s initial login, set challengeReason to 0 (no reason).If the initial login fails, use challengeReason in the next login() call tospecify the results of the previous authentication attempt.To retrieve the reason value to assign to challengeReason, callgetReason() in the SmApiResult object.To obtain a new session specification for a user, use the Java Agent API toobtain a session specification. Then, create an SmApiSession object andassociate the session specification with that object.22 Developer's Guide for Java
Log Trace InformationMake API Requests and Handle ResultsAfter establishing a session, you can call the methods in your clientapplication.A result is a response from the Policy Server to a Java API request. Results arereturned in an SmApiResult object.Exceptions are thrown from an unexpected client-side error. An exceptioncontains a result with additional information, such as the origin and severity ofthe result. To create a result object to store the results of API requests, usethe constructor of the SmApiResult class in the Utilities package—for example:SmApiResult result = new SmApiResult();You can check whether a request was successful by calling the methodisSuccess() on the result object. The method returns true if the request wassuccessful, or false if it was not successful.You can compare the current result object to a specified result object bycalling the equals() method.You can use the equals() method to compare the current result object withSmApiResult constants that represent different kinds of results. For example,in the following code, the result represented by the unique constantSERVER_INVALID_PASSWORD is compared against the current result object:InetAddress address = InetAddress.getLocalHost();SmApiResult result = apiSession.login(usr,pwd,address,0);boolean resultStatus =result.equals(SmApiResult.SERVER_INVALID_PASSWORD);Log Trace InformationTo log tracing information on the client side, use the -D option of the java tooland set the system property SMJAVASDK_LOG_INFO to true. SiteMinder logsthe information to the standard output.For example, if your Java Development Kit is on Windows and you want totrace the Policy Management API sample application, the command line wouldbe:java -DSMJAVASDK_LOG_INFO=true -classpath .;..\..\java\smjavasdk2.jar;..\..\java\smjavaagentapi.jar PolicyApiSampleChapter 1: Java API Overview 23
Page 2 and 3: This documentation and any related
Page 5 and 6: ContentsChapter 1: Java API Overvie
Page 7 and 8: Make Policy Management API Requests
Page 9: Set Search Parameters When You Crea
Page 12 and 13: Code SamplesCode SamplesThe SiteMin
Page 14 and 15: Policy Management APIThe SiteMinder
Page 16 and 17: How Java Components Fit TogetherHow
Page 18 and 19: Java API FlowThere are two types of
Page 20 and 21: Java API FlowIf you do not already
Page 24 and 25: Javadoc ReferenceJavadoc ReferenceT
Page 26 and 27: Connection ClassConnection ClassYou
Page 28 and 29: Result ClassInterpret a Result Obje
Page 30 and 31: Property ClassThe core methods of t
Page 32 and 33: Agent API Class HierarchyThe Agent
Page 34 and 35: Implement the Pure Java Agent API5.
Page 36 and 37: Connection to a Policy Server■■
Page 38 and 39: User Access to Resources5. Audit ca
Page 40 and 41: Java Agent API ServicesJava Agent A
Page 42 and 43: Authorization ServicesSession Termi
Page 44 and 45: Tunnel ServicesTunnel ServicesTunne
Page 46 and 47: Single Sign-on4. Custom agent creat
Page 48 and 49: Server ClustersAdvantages of Sessio
Page 50 and 51: Server ClustersCluster failover occ
Page 52 and 53: Agent TypeAgent TypeThe Agent Type
Page 54 and 55: About Policy ManagementAbout Policy
Page 56 and 57: Policy Store Objects■■■■■
Page 58 and 59: Write a Policy Management Applicati
Page 60 and 61: Agent Configuration Object MethodsA
Page 62 and 63: General Object MethodsMethoddeleteD
Page 64 and 65: ODBC Query Scheme MethodsODBC Query
Page 66 and 67: Realm MethodsMethoddoImport()Descri
Page 68 and 69: Self-Registration MethodsSelf-Regis
Page 70 and 71: Utility MethodsMethodgetUserPolicie
Page 72 and 73:
Retrieve Objects from the Policy St
Page 74 and 75:
Authentication Scheme Configuration
Page 76 and 77:
Page 79 and 80:
Page 81:
individuals might increase their in
Page 84 and 85:
Page 86 and 87:
Page 88 and 89:
Page 90 and 91:
Page 92 and 93:
Page 94 and 95:
Page 96 and 97:
Page 98 and 99:
Page 100 and 101:
Page 102 and 103:
Page 104 and 105:
Page 106 and 107:
Page 108 and 109:
Page 110 and 111:
Page 113 and 114:
Chapter 5: Authentication andAuthor
Page 115 and 116:
Shared InformationShared Informatio
Page 117 and 118:
Create a Custom Authentication Sche
Page 119 and 120:
Page 121 and 122:
Page 123 and 124:
Page 125 and 126:
Page 127 and 128:
Use the Authorization API8. After t
Page 129 and 130:
Use the Authorization APIInterpret
Page 131 and 132:
Use the Authorization APIOther Clas
Page 133 and 134:
Use the Authorization APIActive Rul
Page 135 and 136:
Use the Authorization APITo modify
Page 137:
Use the Authorization API■■To e
Page 140 and 141:
The Required JAR File■■Adding a
Page 142 and 143:
Attribute-based DelegationAttribute
Page 144 and 145:
Implementation Class■SiteMinder a
Page 146 and 147:
Search ClassThe objects correspondi
Page 148 and 149:
Write a Directory Management Applic
Page 150 and 151:
Page 152 and 153:
Page 154 and 155:
Page 156 and 157:
Page 158 and 159:
SearchesSet Search Parameters When
Page 160 and 161:
SearchesSet the Search FilterThe se
Page 162 and 163:
SearchesSearch an OrganizationIn th
Page 164 and 165:
User Password StateThe following co
Page 166 and 167:
Restricted Methods■■SmDmsUser.a
Page 168 and 169:
Restricted MethodsMethodsearchForwa
Page 170 and 171:
Authentication Scheme Dialog • 11
Page 172 and 173:
getDmsContext() • 144, 166getDmsD
Page 174 and 175:
organizations in flat directories
Page 176 and 177:
SmApiResult class • 27SmApiSessio
show all

CA eTrust SiteMinder Developer's Guide for Java

Create successful ePaper yourself

Delete template?

Save as template?