Table of Contents
Advertisement
Guidelines
If a value is specified for the WS-Security S11:actor or S12:role identifier, the
AAA action will act as the assumed actor or role when it consumes the Security
headers. This setting takes effect only when the AAA policy attempts to process
the incoming message before making an authorization decision.
The Post Processing phase will not use the assumed actor or role, but will use its
own setting in generating the message for the next SOAP node.
authenticate
Specifies an authentication method and authority.
Syntax
authenticate method [url] [host] [port] [valcred]
authenticate custom url "" "" ""
authenticate client-ssl "" "" "" valcred
authenticate ldap "" host port ""
authenticate netegrity "" host port ""
Parameters
method Specifies the authentication method and takes one of the following values:
url
host
port
valcred Optional and meaningful only if the method is client-ssl to identify a
152
Command Reference
v cleartrust
v client-ssl
v custom
v kerberos
v ldap
v netegrity
v radius
v saml-artifact
v saml-authen-query
v saml-signature
v tivoli
v token
v validate-signer
v ws-secureconversation
v ws-trust
v xmlfile
Specifies the location of the style sheet for authentication purposes. If the
method is other than custom, use two double quotation mark ("")
characters without any intervening space.
Specifies the hostname or IP address of an LDAP or Netegrity
authentication server. If the method is not ldap or netegrity, use two
double quotation mark ("") characters without any intervening space.
Specifies a destination port on the LDAP or Netegrity authentication
server. If the method is not ldap or netegrity, use two double quotation
mark ("") characters without any intervening space.
Advertisement
Table of Contents
