1. Specifying attributes to preserve or refresh

Procedure

  1. Stop the WebSEAL server.
  2. Edit the WebSEAL configuration file.
    • Add entries for attributes to preserve. For example:
      [credential-refresh-attributes] 
      my_cred_attribute1 = preserve 
      my_cred_attribute2 = preserve
    • Add entries to refresh:
      [credential-refresh-attributes] 
      my_cred_attribute3 = refresh 
      my_cred_attribute4 = refresh
    • When appropriate, use the order of the entries to handle both specific entries and groups of entries. For example, to preserve the attribute special_cred_attr1, but refresh all other attributes with the naming construct of special_cred_attr*, add the following entries:
      [credential-refresh-attributes] 
      special_cred_attr1 = preserve 
      special_cred_attr* = refresh