Novell ACCESS MANAGER 3.1 SP2 - POLICY GUIDE 2010 Manual page 18

Uploading and Configuring a JAR File
To install an extension, you need to have access to the
about the extension or extensions contained within the file.
What you need to
create
What you need to know
If the file contains more than one extension, you need to create a configuration for each extension in
the file.
1 Copy the
2 In the Administration Console, click Policies > Extensions.
3 To upload the file, click Upload > Browse, select the file, then click Open.
4 (Conditional) If you want this
Overwrite existing *.jar file.
5 Click OK.
The file is uploaded to the Administration Console, but nothing is visible on the Extensions
page until you create a configuration.
6 To create an extension configuration, click New, then fill in the following fields:
Name: Specify a display name for the extension.
Description: (Optional) Specify the purpose of the extension and how it should be used.
18 Novell Access Manager 3.1 SP2 Policy Guide
A display name for the extension.
A description for the extension.
The policy type of the extension, which defines the policy type it can be
used with. You should know whether it is an extension for an Access
Gateway Authorization policy, an Access Gateway Identity Injection policy,
or an Identity Server Role policy.
The name of the Java class that is used by the extension. Each data type
usually uses a different Java factory class.
The filename of the extension.
The names, IDs, and mapping type of any configuration parameters.
Configuration parameters allow the policy engine to pass data to the
extension, which the extension can then use to retrieve data or to evaluate
a condition.
The type of data the extension manipulates.
Authorization Policy: Can be used to return the following:
An action of deny, permit, or obligation.
A condition that the extension evaluates and returns either true or false.
A data element that the extension retrieves and the policy can use for
evaluating a condition.
Identity Injection Policy: A data extension that retrieves data for injecting into
a header.
Identity Role Policy: Can be used to return the following:
A condition that the extension evaluates and returns either true or false.
A data element that the extension retrieves which can be used in
evaluating a condition or used to assign roles.
file to a location that you can browse to from the Administration Console.
.jar
.jar
file and know the following information
.jar
file to overwrite an existing version of the file, select