Administration Reference

Introduction and Roadmap

Scope

Documentation Audience

Prerequisites for this Document

Guide to this Document

Related Information

Administrative Utilities

policyloader

Usage

Options

Example

load_adminpolicy

Usage

Example

policyIX

Exporting Policy

Exporting Configuration Data

Usage

Options

Examples

policyexporter

Usage

Options

Example

install_ales_schema

Usage

Options

Example

asipassword

Usage

Options

Example

asisignal

Usage

Options

Example

policy2XACML

Usage

Options

Example

enrolltool

Usage

Options

Menu Options

Example

enroll

Usage

Options

Example

unenroll

Usage

Options

Example

Configuration File Usage

Administration Server Configuration Files

SCM Configuration Files

SSM Common Configuration Files

Web Serivce SSM Configuration Files

WLS SSM Configuration Files

WLESblm.conf Reference

Required Parameters

Miscellaneous Configuration Parameters

Logging Configuration Parameters

Database Configuration Parameters

CPP API Configuration Parameters

Distribution Parameters

Default Timeout Parameters

Override Timeout Parameters

Provider Extensions

What is a Provider Extension?

asi_classes JAR Required for Provider Extensions

Authorization and Role Mapping Extensions

Using Java-Based Plug-ins

Using the Java-based Plug-in Interfaces

Resource Converter

Configuring a Custom Resource Converter

Attribute Retriever

RequestHandle getAttribute Method

Configuring a Custom Attribute Retriever

Attribute Converter

Configuring a Custom Attribute Converter

Using Java Entensions Plug-Ins

Custom Initialization/Shutdown Interface

Custom Evaluation Method Plug-in

RequestHandle appendReturnData Method

Configuring a Custom Entensions Plug-In

Custom Audit Plug-ins

Using the Custom Audit Plug-in

Audit Plug-in Renderer Class

Database Authentication Plug-in

Audit Events

What is an AuditEvent?

What Events are Audited?

Custom Audit Context Extensions

Adding Application Context from the BLM API

Audit Event Interfaces and Audit Events

AuditAtnEvent

AuditAtzEvent

AuditCredentialMappingEvent

AuditMgmtEvent

AuditPolicyEvent

AuditRoleDeploymentEvent

AuditRoleEvent

Admin Policy Audit Events

ProviderAuditRecord

Other Audit Events

AuditApplicationVersionEvent

AuditCertPathBuilderEvent and AuditCertPathValidatorEvent

AuditLifecycleEvent

Additional Audit Event Information

Authentication - AuditAtnEvent

Authorization - AuditAtzEvent

AuditCredentialMappingEvent

Policy Events - AuditPolicyEvent

Policy Deployment - AuditPolicyDeployEvent

Policy Undeployment - AuditPolicyUndeployEvent

Role Mapping - AuditRoleEvent

AuditRoleDeploymentEvent

Role Deployment - AuditRoleDeployEvent

Role Undeployment - AuditRoleUndeployEvent

Role Delete App Event

Role Deployment Start and End Events

Predicate Events - AuditPredicateEvent

ContextHandler Object

ALES Policy Administration Messages

Using Custom Audit Providers

BLM Configuration API Security Providers Reference

ActiveDirectoryAuthenticator

ALESIdentityAsserter

ALESIdentityCredentialMapper

AsiAdjudicator

AsiAuthorizationProvider

ASIAuthorizer

ASIRoleMapperProvider

DatabaseAuthenticator

DatabaseCredentialMapper

DefaultAuthenticator

DefaultAuthorizer

DefaultCredentialMapper

DefaultRoleMapper

IPlanetAuthenticator

LDAPAuthenticator

Log4jAuditor

NovellAuthenticator

NTAuthenticator

OpenLDAPAuthenticator

PerfDBAuditor

ResourceDeploymentAuditor

SAMLCredentialMapper

SAMLIdentityAsserter

SinglePassNegotiateIdentityAsserter

X509IdentityAsserter

XACMLAuthorizer