A Caching Proxy plug-in is provided with Tivoli Access Manager (formerly Tivoli Policy Director) that enables Caching Proxy to use Access Manager for authentication and authorization. This plug-in makes it possible for an enterprise that uses Access Manager for Web access control to add Edge technology without having to duplicate work by setting up separate authorization schemes for the proxy server.
For additional information about Tivoli Access Manager, view the product Web site at http://www.ibm.com/software/tivoli/products/. For information about software and hardware requirements and about installing the Access Manager plug-in, refer to the documentation provided with Tivoli Access Manager.
A setup script for Caching Proxy is provided with the Access Manager plug-in.
Before running the script, do the following:
The set up script is named wslconfig.sh and it is provided in the /opt/pdweb-lite/bin/ directory. Enter the Access Manager administrator ID and the LDAP administrator name when prompted.
The configuration script automatically performs the following steps:
ServerInit /opt/pdweb-lite/lib/wesauth.so:WTESeal_Init
/opt/pdweb-lite/etc/ibmwesas.conf
PreExit /opt/pdweb-lite/lib/wesauth.so:WTESeal_PreExit
Authorization * /opt/pdweb-lite/lib/wesauth.so:WTESeal_Authorize
ServerTerm /opt/pdweb-lite/lib/wesauth.so:WTESeal_Term
Creates a Protect statement and Protection setup that forwards all requests to the Access Manager authentication process, as follows:
Protection PROXY-PROT {
ServerId WebSEAL-Lite
Mask All@(*)
AuthType Basic
}
Protect * PROXY-PROT
After configuring the proxy server and the Access Manager plug-in, use the command wslstartwte instead of ibmproxy start to start the proxy server. The wslstartwte command automatically loads environment variables that the Access Manager plug-in requires in order to initialize. If you do not use wslstartwte when starting the proxy server, error messages are displayed about the Access Manager plug-in. The corresponding stop command, ibmproxy stop, is still valid when the plug-in is used.