IBM WebSphere V5.0 Security - CGISecurity

[8/22/02 7:41:32:036 CDT] 7822e45 WebSealTrustA d WebSeal Login ID = null[8/22/02 7:41:32:045 CDT] 7822e45 WebSealTrustA > addASource[8/22/02 7:41:32:045 CDT] 7822e45 WebSealTrustA d WebTAInterceptor: Addedsource = wsl01:443[8/22/02 7:41:32:045 CDT] 7822e45 WebSealTrustA < Exiting addASource[8/22/02 7:41:32:045 CDT] 7822e45 WebSealTrustA < Exiting initialization:SUCCESS[8/22/02 7:41:32:045 CDT] 7822e45 TrustAssociat A SECJ0122I: Trust AssociationInit Interceptor signature: WebSeal Interceptor Version 1.1[8/22/02 7:41:32:064 CDT] 7822e45 TrustAssociat A SECJ0120I: Trust AssociationInit loaded 1 interceptor(s)[8/22/02 7:41:32:076 CDT] 7822e45 TrustAssociat < initializeHere we see TAI being initialized. We need to look at the Trust Properties line inthe trace to verify that the property values being used are the ones we think weset. If we see an error here with one of the properties, then we need to go back toour property definition, either in the properties file, or our custom property entriesin TAI, and provide the correct values. If the property values are correct, and wesee, as above, that the WebSealTrustAssociation is being initialized properly,then we know that we have properly configured TAI. In this case, we now need toaccess our WebSEAL junction from a browser, and login to WebSEAL. The nextexample shows what should appear in the trace file if all is well.Example 12-4 Trace file http header from WebSEAL[8/22/02 7:42:44:163 CDT] 277a2e5c EJSWebCollabo d Http Header names andvalues:authorization=[Basic d2Vic2VhbHM6cGFzc3dvcmQx]iv-groups=["managergrp"]via=[HTTP/1.1 wsl01:443]user-agent=[Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)]host=[seccli.itso.ral.ibm.ibm.com:9443]accept=[image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*]connection=[close]accept-language=[en-us]iv-user=[manager]iv-creds=[Version=1,BAKs3DCCA-YMADCCA-AwggPsAgIDkDBsMCkwHgIE48b7FgIDAKe5AgIR1gICAKUCASQEBgBAqsIqTAw...0YTFCUlowRkJRVUU5BAA=]referer=[https://wsl01.itso.ral.ibm.com/tai/itsobank/]accept-encoding=[gzip, deflate]cookie=[msp=2; IV_JCT=/tai][8/22/02 7:42:44:163 CDT] 277a2e5c EJSWebCollabo d VirtualHost is :default_host[8/22/02 7:42:44:163 CDT] 277a2e5c WebSecurityCo > WebAccessContext[8/22/02 7:42:44:163 CDT] 277a2e5c WebSecurityCo < WebAccessContextChapter 12. Tivoli Access Manager 403