CA eTrust SiteMinder Developer's Guide for Java

More documents

Recommendations

Info

Agent API Class HierarchyThe Agent API lets you create a custom agent that can authenticate andauthorize users in a variety of context-specific ways. For example, you couldcreate an agent for FTP transfers that does the following:■■Implements certificate-based authentication instead of basic name andpassword credentials.Allows uploads and downloads based on an individual user’s authorizationlevel.Custom agents can participate in a single sign-on environment with standardSiteMinder Web Agents.Agent API Class HierarchyThe primary point of access to the Java Agent API is the AgentAPI class.Several other classes are provided to hold data required by the AgentAPIclass:■■■■■■■■■■■■AttributeAttributeListBinaryBufferInitDefManagementContextDefRealmDefResourceContextDefServerDefSessionDefTokenDescriptorTunnelServiceRequestUserCredentials32 Developer's Guide for Java
Implement the JNI Java Agent APIImplement the JNI Java Agent APIApplications that are built using the JNI Java AgentAPI either directly orindirectly (through another agent) are insulated from underlyingimplementation details, including:■■■User namespaces, such as LDAP directories, SQL databases, or NTdomainsAuthentication methods as simple as username/password or as complex asPKI systemsAuthorizations based on group membership or individual profile dataAdditional benefits provided by the Java Agent API include full sessionmanagement support, automatic encryption key rollover, and real-time policyupdates.To implement the JNI Java Agent API1. Review the required software as listed in the accompanying release notes.2. Review the sample code.3. Write source code for your client application.4. Ensure that your system can find the JNI support library when the JavaVirtual Machine (JVM) is invoked, as follows:■On Windows: Change PATH to include the following, so thatsmjavaagentapi.dll can be found:\sdk\bin■On Solaris: Change LD_LIBRARY_PATH to include the following, so thatlibsmjavaagentapi.so can be found:/sdk/bin■On AIX: Change LIBPATH to include the following, so thatlibsmjavaagentapi.so can be found:/sdk/bin■On Linux: Change LD_LIBRARY_PATH to include the following, so thatlibsmjavaagentapi.so can be found:/sdk/binNote: Java agents on Linux require Java SDK v 1.3.1.■On HP-UX 11: Change SHLIB_PATH to include the following, so thatlibsmjavaagentapi.sl can be found:/sdk/binNote: The Java Agent API is not available for HP10.Chapter 3: Agent API 33
Page 2 and 3: This documentation and any related
Page 5 and 6: ContentsChapter 1: Java API Overvie
Page 7 and 8: Make Policy Management API Requests
Page 9: Set Search Parameters When You Crea
Page 12 and 13: Code SamplesCode SamplesThe SiteMin
Page 14 and 15: Policy Management APIThe SiteMinder
Page 16 and 17: How Java Components Fit TogetherHow
Page 18 and 19: Java API FlowThere are two types of
Page 20 and 21: Java API FlowIf you do not already
Page 22 and 23: Java API FlowYou might already have
Page 24 and 25: Javadoc ReferenceJavadoc ReferenceT
Page 26 and 27: Connection ClassConnection ClassYou
Page 28 and 29: Result ClassInterpret a Result Obje
Page 30 and 31: Property ClassThe core methods of t
Page 34 and 35: Implement the Pure Java Agent API5.
Page 36 and 37: Connection to a Policy Server■■
Page 38 and 39: User Access to Resources5. Audit ca
Page 40 and 41: Java Agent API ServicesJava Agent A
Page 42 and 43: Authorization ServicesSession Termi
Page 44 and 45: Tunnel ServicesTunnel ServicesTunne
Page 46 and 47: Single Sign-on4. Custom agent creat
Page 48 and 49: Server ClustersAdvantages of Sessio
Page 50 and 51: Server ClustersCluster failover occ
Page 52 and 53: Agent TypeAgent TypeThe Agent Type
Page 54 and 55: About Policy ManagementAbout Policy
Page 56 and 57: Policy Store Objects■■■■■
Page 58 and 59: Write a Policy Management Applicati
Page 60 and 61: Agent Configuration Object MethodsA
Page 62 and 63: General Object MethodsMethoddeleteD
Page 64 and 65: ODBC Query Scheme MethodsODBC Query
Page 66 and 67: Realm MethodsMethoddoImport()Descri
Page 68 and 69: Self-Registration MethodsSelf-Regis
Page 70 and 71: Utility MethodsMethodgetUserPolicie
Page 72 and 73: Retrieve Objects from the Policy St
Page 74 and 75: Authentication Scheme Configuration
Page 81: individuals might increase their in
Page 84 and 85:
Authentication Scheme Configuration
Page 86 and 87:
Page 88 and 89:
Page 90 and 91:
Page 92 and 93:
Page 94 and 95:
Page 96 and 97:
Page 98 and 99:
Page 100 and 101:
Page 102 and 103:
Page 104 and 105:
Page 106 and 107:
Page 108 and 109:
Page 110 and 111:
Page 113 and 114:
Chapter 5: Authentication andAuthor
Page 115 and 116:
Shared InformationShared Informatio
Page 117 and 118:
Create a Custom Authentication Sche
Page 119 and 120:
Page 121 and 122:
Page 123 and 124:
Page 125 and 126:
Page 127 and 128:
Use the Authorization API8. After t
Page 129 and 130:
Use the Authorization APIInterpret
Page 131 and 132:
Use the Authorization APIOther Clas
Page 133 and 134:
Use the Authorization APIActive Rul
Page 135 and 136:
Use the Authorization APITo modify
Page 137:
Use the Authorization API■■To e
Page 140 and 141:
The Required JAR File■■Adding a
Page 142 and 143:
Attribute-based DelegationAttribute
Page 144 and 145:
Implementation Class■SiteMinder a
Page 146 and 147:
Search ClassThe objects correspondi
Page 148 and 149:
Write a Directory Management Applic
Page 150 and 151:
Page 152 and 153:
Page 154 and 155:
Page 156 and 157:
Page 158 and 159:
SearchesSet Search Parameters When
Page 160 and 161:
SearchesSet the Search FilterThe se
Page 162 and 163:
SearchesSearch an OrganizationIn th
Page 164 and 165:
User Password StateThe following co
Page 166 and 167:
Restricted Methods■■SmDmsUser.a
Page 168 and 169:
Restricted MethodsMethodsearchForwa
Page 170 and 171:
Authentication Scheme Dialog • 11
Page 172 and 173:
getDmsContext() • 144, 166getDmsD
Page 174 and 175:
organizations in flat directories
Page 176 and 177:
SmApiResult class • 27SmApiSessio
show all

CA eTrust SiteMinder Developer's Guide for Java

Create successful ePaper yourself

Delete template?

Save as template?