Novell IDENTITY MANAGER 3.6.1 - MANUAL TASK SERVICE DRIVER Implementation Manual page 44

The Web server rejects any HTTP POST request that does not contain a responder-dn value and a
password value. In addition, if the HTTP POST data does not contain a protected-data item, then the
request is rejected.
The Subscriber channel supplies one or more
<item name="responder-dn" protect="yes">
elements under the element. Because the responder-dn items are used for user
<url-query>
authentication, the items must be protected.
password: Supplied to the Publisher channel Web server via HTTP POST data. The item content is
the password, which is validated against the eDirectory object specified by the responder-dn item in
the POST data. The password item is normally entered in the HTML form used to generate the
HTTP POST request.
Example:
<INPUT TYPE= "password" NAME="password" SIZE="20" MAXLENGTH="40"/>
response-template: Supplied to the Web server via HTTP POST data. Used to generate the Web
page used as the response to the POST. The response-template item is normally specified by using a
hidden INPUT element in the HTML form used to generate the HTTP POST request.
Example:
<INPUT TYPE="hidden" NAME="response-template" VALUE="post_form.xml"/>
response-stylesheet: Supplied to the Web server via HTTP POST data. Used to generate the Web
page used as the response to the POST. The response-stylesheet item is normally specified by using
a hidden INPUT element in the HTML form used to generate the HTTP POST request.
Example:
<INPUT TYPE="hidden" NAME="response-stylesheet" VALUE="process_template.xsl"/>
auth-template: Supplied to the Web server via HTTP POST data. Used to generate the Web page
that is used as the response to the POST if authentication of the user fails. The auth-template item is
normally specified by using a hidden INPUT element in the HTML form used to generate the HTTP
POST request.
Example:
<INPUT TYPE="hidden" NAME="auth-template" VALUE="auth_response.xml"/>
auth-stylesheet: Supplied to the Web server via HTTP POST data. Used to generate the Web page
that is used as the response to the POST if authentication of the user fails. The auth-template item is
normally specified by using a hidden INPUT element in the HTML form used to generate the HTTP
POST request.
Example:
<INPUT TYPE="hidden" NAME="auth-stylesheet" VALUE="process_template.xsl"/>
protected-data: The protected-data item contains the encrypted data constructed by the Subscriber
channel. On the Subscriber channel, the protected data item is an automatically supplied item.
On the Publisher channel, the protected-data item is obtained from the URL query string for an
HTTP GET request and is obtained from the POST data for an HTTP POST request.
44 Identity Manager 3.6 Manual Task Service Driver Implementation Guide