|
| |
| Sun Java System Access Manager 6 2005Q1 Administration Guide | |
Chapter 40
Platform Service AttributesThe Platform Service attributes are global attributes. The values applied to them are carried across the Sun Java System Acceess Manager configuration and inherited by every configured organization. (They can not be applied directly to roles or organizations as the goal of global attributes is to customize the Access Manager application.) The Platform Attributes are:
Server List
The naming service reads this attribute at initialization time. This list contains the Access Manager session servers in a single Access Manager configuration. For example, if two Access Managers are installed and should work as one, they must both be included in this list. If the host specified in a request for a service URL is not in this list, the naming service will reject the request. The first value in the list specifies the host name and port of the server specified during installation. At the end of the list, there is a two-byte value that uniquely identifies the server. Each server that is participating in load balancing or failover needs to have a unique identifier. This is also used to shorten the cookie length by mapping the server URL to the server ID. For example:
protocol://server_domain:port|01
Additional servers can be added using the format protocol://server_domain: port |01|instance_name
Only the naming service protocol should be used in this attribute.
Platform Locale
The platform locale value is the default language subtype that Access Manager was installed with. The authentication, logging and administration services are administered in the language of this value. The default is en_US. See Table 21-1 on page 301 for a listing of all supported language subtypes.
Cookie Domains
This is the list of domains that will be returned in the cookie header when setting a cookie to the user’s browser during authentication. If empty, no cookie domain will be set. In other words, the Access Manager session cookie will only be forwarded to the Access Manager itself and to no other servers in the domain. If SSO is required with other servers in the domain, this attribute must be set with the cookie domain. If you had two interfaces in different domains on one Access Manager then you would need to set both cookie domains in this attribute. If a load balancer is used, the cookie domain must be that of the load balancer’s domain, not the servers behind the load balancer. The default value for this field is the domain of the installed Access Manager.
Note
Make sure that the correct cookie domain is entered. If the cookie domain is incorrect, you will not be able to login to Access Manager.
Login Service URL
This field specifies the URL of the login page. The default value for this attribute is /Service_DEPLOY_URI/UI/Login.
Logout Service URL
This field specifies the URL of the logout page. The default value for this attribute is /Service_DEPLOY_URI/UI/Logout.
Available Locales
This attribute stores all available locales configured for the platform. Consider an application that lets the user choose the user’s locale. This application would get this attribute from the platform profile and present the list of locales to the user. The user would choose a locale and the application would set this in the user entry preferredLocale.
Client Char Sets
This attribute specifies the character set for different clients at the platform level. It contains a list of client types and the corresponding character sets. The format is as follows:
clientType|charset
clientType2|charset
For example:
genericHTML|UTF-8