Table Of Contents - Novell ACCESS MANAGER 3.1 SP1 - GATEWAY GUIDE Manual

Contents
About This Guide
1 Configuring the Access Gateway to Protect Web Resources
1.1 Creating a Reverse Proxy and Proxy Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
1.2 Configuring a Proxy Service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
1.3 Configuring the Web Servers of a Proxy Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
1.4 Configuring Protected Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
1.4.1 Setting Up a Protected Resource . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
1.4.2 Understanding URL Path Matching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
1.4.3 Using a Query String in the URL Path . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
1.4.4 Modifying Authentication Procedures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
1.4.5 Assigning an Authorization Policy to a Protected Resource . . . . . . . . . . . . . . . . . . . 25
1.4.6 Assigning an Identity Injection Policy to a Protected Resource . . . . . . . . . . . . . . . . . 26
1.4.7 Assigning a Form Fill Policy to a Protected Resource . . . . . . . . . . . . . . . . . . . . . . . . 27
1.4.8 Assigning a Policy to Multiple Protected Resources . . . . . . . . . . . . . . . . . . . . . . . . . 29
1.5 Configuring Protected Resources for Specific Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
1.5.1 Configuring Protected Resource for a SharePoint Server . . . . . . . . . . . . . . . . . . . . 30
1.5.2 Configuring a Protected Resource for a SharePoint Server with an ADFS Server . . 31
1.5.3 Configuring a Protected Resource for Outlook Web Access . . . . . . . . . . . . . . . . . . . 34
1.5.4 Configuring a Protected Resource for a Novell Teaming 2.0 Server . . . . . . . . . . . . . 36
1.6 Configuring HTML Rewriting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
1.6.1 Understanding the Rewriting Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
1.6.2 Specifying the DNS Names to Rewrite . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
1.6.3 Defining the Requirements for the Rewriter Profile . . . . . . . . . . . . . . . . . . . . . . . . . . 46
1.6.4 Configuring the HTML Rewriter and Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
1.6.5 Disabling the Rewriter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
1.7 Configuring Connection and Session Limits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
1.7.1 Configuring TCP Listen Options for Clients . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
1.7.2 Configuring TCP Connect Options for Web Servers . . . . . . . . . . . . . . . . . . . . . . . . . 60
1.7.3 Configuring Connection and Session Persistence. . . . . . . . . . . . . . . . . . . . . . . . . . . 62
1.7.4 Configuring the Session Timeout. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
2 Configuring the Access Gateway for SSL
2.1 Using SSL on the Access Gateway Communication Channels . . . . . . . . . . . . . . . . . . . . . . . . 63
2.2 Prerequisites for SSL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
2.2.1 Prerequisite for SSL Communication between the Identity Server and the Access
Gateway. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
2.2.2 Prerequisites for SSL Communication between the Access Gateway and the Web
Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
2.3 Configuring SSL Communication with the Browsers and the Identity Server . . . . . . . . . . . . . 66
2.4 Configuring SSL between the Proxy Service and the Web Servers. . . . . . . . . . . . . . . . . . . . . 68
2.5 Enabling Secure Cookies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
2.5.1 Securing the Embedded Service Provider Session Cookie . . . . . . . . . . . . . . . . . . . . 71
2.5.2 Securing the Proxy Session Cookie . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
2.6 Managing Access Gateway Certificates. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
2.6.1 Managing Embedded Service Provider Certificates . . . . . . . . . . . . . . . . . . . . . . . . . 73
2.6.2 Managing Reverse Proxy and Web Server Certificates . . . . . . . . . . . . . . . . . . . . . . 73
9
11
63
Contents 5