Administrative Reference

Introduction and Roadmap

Scope

Guide to this Document

Related Information

Administrative Utilities

install_ales_schema

asipassword

asisignal

policy2XACML

enroll

unenroll

Import/Export Utilities

PolicyIX

SSL Requirements

Requirements and Limitations

Export an SSM Configuration

Export Policies

Import Policies

PolicyIX Configuration File

XML Policy Data Files

Modify Policy Propagation Servlet

Policyexporter

Requirements and Limitations

Performing a Policy Export

Running Policyexporter

Policyloader

Requirements and Limitations

Performing a Policy Import

Policyloader Configuration File

Sample Configuration File

Running Policyloader

Check for Errors

Recover Mode

Load_Adminpolicy

Configuration Files

Administration Server Configuration Files

SCM Configuration Files

SSM Common Configuration Files

Web Serivce SSM Configuration Files

WLS SSM Configuration Files

WLESblm.conf Reference

Required Parameters

Miscellaneous Configuration Parameters

Logging Configuration Parameters

Database Configuration Parameters

CPP API Configuration Parameters

Distribution Parameters

Default Timeout Parameters

Override Timeout Parameters

Out-of-Box Attribute Retrievers

Overview

Setting Up OOTB Attribute Retrievers

RDBMS Attribute Retrievers

LDAP Attribute Retrievers

Service Data Objects (SDO) Attribute Retrievers

ALES Identity Attribute Retrievers

Provider Extensions

What is a Provider Extension?

JAR Required for Provider Extensions

Authorization and Role Mapping Extensions

Plug-in Types

Attribute Retrievers

Custom Attribute Retrievers

RequestHandle.getAttribute() Method

Configuring a Custom Attribute Retriever

Configuring Caching for Custom Attributes

Evaluation Functions

Custom Initialization/Shutdown Interface

RequestHandle.appendReturnData() Method

RequestHandle.getAttribute() Method

Configuring a Custom Evaluation Function

Resource Converters

Configuring a Custom Resource Converter

Attribute Converters

Configuring a Custom Attribute Converter

Custom Audit Plug-ins

Using the Custom Audit Plug-in

Audit Plug-in Renderer Class

Database Authentication Plug-in

Audit Events

What is an AuditEvent?

What Events are Audited?

Custom Audit Context Extensions

Adding Application Context from the BLM API

Audit Event Interfaces and Audit Events

AuditAtnEvent

AuditAtzEvent

AuditCredentialMappingEvent

AuditMgmtEvent

AuditPolicyEvent

AuditRoleDeploymentEvent

AuditRoleEvent

BLM Management Events

ProviderAuditRecord

Other Audit Events

AuditApplicationVersionEvent

AuditCertPathBuilderEvent and AuditCertPathValidatorEvent

AuditLifecycleEvent

Additional Audit Event Information

Authentication - AuditAtnEvent

Authorization - AuditAtzEvent

AuditCredentialMappingEvent

Policy Events - AuditPolicyEvent

Policy Deployment - AuditPolicyDeployEvent

Policy Undeployment - AuditPolicyUndeployEvent

Role Mapping - AuditRoleEvent

AuditRoleDeploymentEvent

Role Deployment - AuditRoleDeployEvent

Role Undeployment - AuditRoleUndeployEvent

Role Delete App Event

Role Deployment Start and End Events

Predicate Events - AuditPredicateEvent

ContextHandler Object

Policy Administration Messages

Using Custom Audit Providers

BLM Configuration API Security Providers Reference

ActiveDirectoryAuthenticator

ALESIdentityAsserter

ALESIdentityCredentialMapper

AsiAdjudicator

AsiAuthorizationProvider

ASIAuthorizer

ASIRoleMapperProvider

DatabaseAuthenticator

DatabaseCredentialMapper

DefaultAuthenticator

DefaultAuthorizer

DefaultCredentialMapper

DefaultRoleMapper

IPlanetAuthenticator

LDAPAuthenticator

Log4jAuditor

NovellAuthenticator

NTAuthenticator

OpenLDAPAuthenticator

PerfDBAuditor

ResourceDeploymentAuditor

SAMLCredentialMapper

SAMLIdentityAsserter

SinglePassNegotiateIdentityAsserter

X509IdentityAsserter

XACMLAuthorizer