Use junctions to ID servers on Tivoli Access Manager for e-business

Learn how WebSEAL processes URLs from the back-end server and the client

IBM Tivoli Access Manager for e-business uses junctions to identify web servers. The client's browser uses one set of URL links and the back-end web server uses another. In this white paper, learn how WebSEAL processes URLs from the back-end server and the client.

developerWorks security editors, Staff, IBM

Security icon imageThis article is brought to you by the editors of the developerWorks Security site.



30 September 2013

IBM expert Ori Pomerantz has been securing computer networks (and showing others how to do it too) since 1995. Pomerantz joined IBM in 2003 and since then, he has written classes on several IBM security products, including IBM Security zSecure™. He is also a co-author of the IBM Press publication Mainframe Basics for Security Professionals: Getting Started with RACF, 2007. In this whitepaper, "IBM Security Key Lifecycle Manager for z/OS 1.1: Operator Commands", Pomerantz helps you learn how to implement operator commands to control IBM Security Key Lifecycle Manager (ISKLM) for z/OS from the console of a mainframe. This task requires two prerequisites that you will discover:

The steps you'll learn

Pomerantz covers the following instructions in this paper:

  • How WebSEAL, a proxy web server that is located between the Internet and the internal back-end servers, uses URLs, links, and junctions to enforce security policy. He defines relative, server-relative, and absolute link types.
  • How WebSEAL can modify outbound links so they will work with the back-end servers.
  • How WebSEAL handles absolute links and canonical names by converting the host name to an IP address and then back to a name.
  • How to make WebSEAL peek in a script to modify absolute links.
  • How WebSEAL uses junction cookies, the HTTP header referer, a junction mapping table, and transparent path junctions to identify the junction of inbound server-relative links.
  • How WebSEAL uses virtual host junctions to identify the junction of inbound absolute links.

Download

DescriptionNameSize
Whitepaperjunctions_and_links.pdf328KB

Resources

Learn

Get products and technologies

  • Evaluate IBM products in the way that suits you best: Download a product trial, try a product online, or use a product in a cloud environment.

Discuss

  • Get involved in the developerWorks Community. Connect with other developerWorks users while exploring the developer-driven blogs, forums, groups, and wikis.

Comments

developerWorks: Sign in

Required fields are indicated with an asterisk (*).


Need an IBM ID?
Forgot your IBM ID?


Forgot your password?
Change your password

By clicking Submit, you agree to the developerWorks terms of use.

 


The first time you sign into developerWorks, a profile is created for you. Information in your profile (your name, country/region, and company name) is displayed to the public and will accompany any content you post, unless you opt to hide your company name. You may update your IBM account at any time.

All information submitted is secure.

Choose your display name



The first time you sign in to developerWorks, a profile is created for you, so you need to choose a display name. Your display name accompanies the content you post on developerWorks.

Please choose a display name between 3-31 characters. Your display name must be unique in the developerWorks community and should not be your email address for privacy reasons.

Required fields are indicated with an asterisk (*).

(Must be between 3 – 31 characters.)

By clicking Submit, you agree to the developerWorks terms of use.

 


All information submitted is secure.

Dig deeper into Security on developerWorks


  • Bluemix Developers Community

    Get samples, articles, product docs, and community resources to help build, deploy, and manage your cloud apps.

  • Security

    Pragmatic, intelligent, risk-based IT Security practices.

  • DevOps Services

    Software development in the cloud. Register today to create a project.

  • IBM evaluation software

    Evaluate IBM software and solutions, and transform challenges into opportunities.

static.content.url=http://www.ibm.com/developerworks/js/artrating/
SITE_ID=1
Zone=Security
ArticleID=946934
ArticleTitle=Use junctions to ID servers on Tivoli Access Manager for e-business
publish-date=09302013