rsrccred create

Creates a single sign-on credential.

Requires authentication (administrator ID and password) to use this command.

Syntax

rsrccred create resource_name rsrcuser resource_userid rsrcpwd resource_password rsrctype {web|group} user user_name

Description

A resource credential is a credential that is used to identify the authentication information of a user. WebSEAL uses the authentication information when it accesses a back-end web resource or resource group through a GSO-enabled junction. WebSEAL accesses these resources on behalf of that user.

For example, a user dlucas might require the authentication identity 4807ws01 and password pwd4lucas when accessing the engwebs01 web resource that is junctioned through WebSEAL.

A resource credential can be created with this authentication information. Then, WebSEAL automatically uses this information to access the engwebs01 server whenever the user dlucas accesses that resource.

Options

resource_name: Specifies the name that is given to the resource or resource group when the resource or resource group was created. The resource or resource group must exist to create the resource credential. If the resource or resource group does not exist or is not specified, an error message is displayed.
Examples of resource names are engwebs01 and "Mary Jones Printer".
rsrcpwd resource_password: Specifies the password for a user at the web server.
rsrctype {web|group}: Specifies whether the resource type named is web (resource) or group (resource group).
rsrcuser resource_userid: Specifies the unique user identification (user ID) for the user at the web server.
Examples of user identifications are 4807ws01 and userD4D.
user user_name: Specifies the name of the user for whom the resource credential information applies. If the user does not exist or is not specified, an error message is displayed.
Examples of user names are dlucas, sec_master, and "Mary Jones".

Return codes

0: The command completed successfully.
1: The command failed. When a command fails, the pdadmin command provides a description of the error and an error status code in hexadecimal format (for example, 0x14c012f2). See "Error messages" in the IBM Knowledge Center. This reference provides a list of the Verify Identity Access error messages by decimal or hexadecimal codes.

Examples

The following example creates the web resource credential named engwebs01 for the resource user ID 4807ws01 and password pwd4lucas given to user dlucas:
```
pdadmin sec_master> rsrccred create engwebs01 rsrcuser 4807ws01
rsrcpwd pwd4lucas rsrctype web user dlucas
```
The following example creates the group resource credential named printerusers for the resource user ID userD4D and password pwd4mjones given to user "Mary Jones":
```
pdadmin sec_master> rsrccred create printerusers rsrcuser userD4D rsrcpwd
pwd4mjones rsrctype group user "Mary Jones"
```