IBM eserver i5 Handbook page 603

Draft Document for Review October 18, 2004
Lightweight Directory Access Protocol (LDAP) used to store configuration
information and user authentication information
A Domino plug-in to allow the HTTP server to access documents stored in
Notes
Integrated with OS/400 security, enabling exploitation of the Internet for
marketing and merchandising
Multiple HTTP servers are supported to balance content and workload. A
Web browser can be used to administer and configure these servers.
Tracking world-wide Web (WWW) activity through the server to identify the
audiences accessing the customer server
Client Authentication supports Secure Sockets Layer (SSL) V3 and Transport
Layer Security (TLS) V1, including client and server authentication
You can associate client certificates with iSeries user profiles or validation
lists, allowing users seamless access to your Web server's resources without
having to sign on.
Expanded CGI support includes RPG, REXX, C, C++, Cobol, Perl, and
Control Language
You can bypass the server on output using no-parsed header CGIs. You can
also fully configure any codepage conversions the server performs on your
Web application's input or output. Multithreaded CGI programs are supported.
Automatic Browser Detection for different documents for different clients,
allowing your Web site to seamlessly exploit the unique capabilities of
whatever browser your customers use
Support for SSL provided by the cryptographic product IBM Cryptographic
Access Provider 128-bit for iSeries (5722-AC3)
Digital ID authentication requires SSL client authentication for HTTP server
client certificates. This offers resource protection with:
– Valid client certificates
– Client certificates with certain distinguished names values
– Client certificates associated with iSeries user profiles
– Client certificates associated with iSeries validation lists
The administration of certificates centralized in the DCM product
The HTTP server is a certificate "customer".
Authentication using LDAP, iSeries user profiles, validation lists, and Kerberos
Caching of Web pages in server's local memory cache for better static page
serving performance
Socks and SSL tunneling
i5/OS (5722-SS1): Operating system licensed products
5486LPOpS.fm
569