Administration Reference

Introduction and Roadmap

Scope

Documentation Audience

Prerequisites for this Document

Guide to this Document

Related Information

Administrative Utilities

bootloader

Usage

Options

Example

policyloader

Usage

Options

Example

load_adminpolicy

Usage

Example

policyIX

Usage

Options

Example

export_policy_oracle

Usage

Options

Example

export_policy_sybase

Usage

Options

Example

install_schema_oracle

Usage

Options

Example

install_schema_sybase

Usage

Options

Example

asipassword

Usage

Options

Example

asisignal

Usage

Options

Example

policy2XACML

Usage

Options

Example

lockdown

Usage

Example

enrolltool

Usage

Options

Menu Options

Example

enroll

Usage

Options

Example

unenroll

Usage

Options

Example

Provider Extensions

What is a Provider Extension?

asi_classes JAR Required for Provider Extensions

Authorization and Role Mapping Extensions

Using Java-Based Plug-ins

Using the Java-based Plug-in Interfaces

Resource Converter

Configuring a Custom Resource Converter

Attribute Retriever

Configuring a Custom Attribute Retriever

Attribute Converter

Configuring a Custom Attribute Converter

Using Language Extensions

Building an Extension

Deploying the Extension

Using the Extension

Custom Audit Plug-ins

Using the Custom Audit Plug-in

Audit Plug-in Renderer Class

Database Authentication Plug-in

Audit Events

What is an AuditEvent?

What Events are Audited?

Custom Audit Context Extensions

Adding Application Context from the BLM API

Audit Event Interfaces and Audit Events

AuditAtnEvent

AuditAtzEvent

AuditCredentialMappingEvent

AuditMgmtEvent

AuditPolicyEvent

AuditRoleDeploymentEvent

AuditRoleEvent

Admin Policy Audit Events

Additional Audit Event Interfaces

Authentication - AuditAtnEvent

Policy Deployment - AuditPolicyDeployEvent

Policy Undeployment - AuditPolicyUndeployEvent

Policy Events - AuditPolicyEvent

Role Mapping - AuditRoleEvent

Role Deployment - AuditRoleDeployEvent

Role Undeployment - AuditRoleUndeployEvent

Predicate Events - AuditPredicateEvent

ContextHandler Object

PolicyAdministrationEvent

Using Custom Audit Providers

Policy Language Custom Extension Library API Reference

Plug-In Extension Function Pointers

*CredFunc() - Custom Credential Function Pointer

Description

Syntax

Parameters

Returns

Example

See Also

*EvalFunc() - Custom Evaluation Function Pointer

Syntax

Parameters

Returns

Example

See Also

*ShutdownFunc () - Custom Shutdown Function Pointer

Syntax

Parameters

Returns

Example

See Also

*PluginInitFunc() - Plug-in Initialization Function Pointer

Syntax

Parameters

Returns

Example

registerCustomCredentialFunction() - Register Credential Function

Syntax

Parameters

Returns

Example

See Also

registerCustomEvaluationFunction() - Register Evaluation Function

Syntax

Parameters

Returns

Example

See Also

registerShutdownFunction() - Register Shutdown Function

Syntax

Parameters

Returns

Example

See Also

Session Class

Session::SetAttribute() - Append AttributeValue Object

Syntax

Parameters

Returns

Example

See Also

Session::getAttribute() - Get AttributeValue Object from Attribute

Syntax

Parameters

Returns

Example

See Also

Session::getEvalResult() - Get Evaluation Result

Syntax

Parameters

Returns

Example

See Also

Session::appendReturnData() - Return Evaluation Results

Syntax

Parameters

Returns

Example

See Also

Session::getDomainName() - Get Domain Name for the Session

Syntax

Parameters

Returns

Example

See Also

Session::getLocationName() - Get Location Name for Session

Syntax

Parameters

Returns

Example

See Also

Session::getApplicationName() - Get Application Name for Session

Syntax

Parameters

Returns

Example

See Also

Session::getUserID() - Get User Name for Session

Syntax

Parameters

Returns

Example

See Also

AttributeValue Class

Single Value

Lists of Values

Methods Common to Both Types

Internal Methods

AttributeValue::addValue() - Add and Set a String List Attribute Value

Syntax

Parameters

Returns

Example

See Also

AttributeValue::AttributeValue() - Constructor

Syntax

Parameters

Returns

Example

See Also

AttributeValue::entries() - Count Number of List Elements

Syntax

Parameters

Returns

Example

See Also

AttributeValue::getValue() - Get Single Attribute Value

Syntax

Parameters

Returns

Example

See Also

AttributeValue::has() - Check If Value is Already Present in a List

Syntax

Parameters

Returns

Example

See Also

AttributeValue::IsList() - Is Attribute Value an Indexed List?

Syntax

Parameters

Returns

Example

See Also

AttributeValue::IsSingle() - Is Attribute Value a Single Value?

Syntax

Parameters

Returns

Example

See Also

AttributeValue::isUndefined() - Is Attribute Value an undefined object?

Syntax

Parameters

Returns

Example

See Also

AttributeValue::setValue() - Set Single Attribute Value

Syntax

Parameters

Returns

Example

See Also

AttributeValue::removeAt() - Remove Indexed List Attribute Value

Syntax

Parameters

Returns

Example

See Also

AttributeValue::removeValue() - Remove Named List Attribute Value

Syntax

Parameters

Returns

Example

See Also

AttributeValue::size() - Count Number of List Elements

Syntax

Parameters

Returns

Example

See Also

AttributeValue [ ] Operator - Returns the Value of an Indexed String List Element

BLM Configuration API Security Providers Reference

ActiveDirectoryAuthenticator

ALESIdentityAsserter

ALESIdentityCredentialMapper

AsiAdjudicator

AsiAuthorizationProvider

ASIAuthorizer

ASIRoleMapperProvider

DatabaseAuthenticator

DatabaseCredentialMapper

DefaultAuthenticator

DefaultAuthorizer

DefaultCredentialMapper

DefaultRoleMapper

IPlanetAuthenticator

LDAPAuthenticator

Log4jAuditor

NovellAuthenticator

NTAuthenticator

OpenLDAPAuthenticator

PerfDBAuditor

ResourceDeploymentAuditor

SAMLCredentialMapper

SAMLIdentityAsserter

SinglePassNegotiateIdentityAsserter

X509IdentityAsserter

XACMLAuthorizer