Previous Topic: Configure the SOA Agent for Web Servers

Next Topic: Configure SOA Agent for Web Servers to Enable Fine-Grain Resource Identification

SOA Agent for Web Servers Parameters

The following table lists configuration parameters for the SOA Agent for Web Servers.

Parameter Name

Value

Description

IgnoreXMLSDK

yes or no

If this parameter is added to the Agent Configuration Object and is set to Yes, the SOA Agent for Web Servers is disabled. This means that the Agent behaves as a Web Agent for all incoming requests.

If added to the Agent Configuration Object and set to No (or not added to to the Agent Configuration Object at all), the SOA Agent for Web Servers is enabled. That is, the Agent uses the XML SDK to process incoming HTTP requests under these conditions:

  • HTTP action is POST
  • HTTP MIME type is “text/xml” or, if the XMLSDKMimeTypes parameter is configured, any one of the MIME types specified by that parameter.
  • HTTP content is an XML document

XMLSDKMimeTypes

String

A comma-delimited list of MIME types that the SOA Agent for Web Servers will accept for processing by SOA Security Manager. All POSTed requests having one of the listed MIME types are processed. Examples:

  • text/xml
  • application/octet-stream
  • text/xml,multipart/related

If you do not add this parameter to the Agent Configuration Object, the SOA Agent for Web Servers defaults to accepting only the text/xml MIME type.

ServerProductName

String

Description of the product name—for example, iPlanet Web Server. Provides a value for the SOA Agent for Web Servers variable property Server Product Name.

Note: For more information about setting this variable, see the SOA Security Manager Policy Configuration Guide.

ServerVendor

String

Description of the Web Server vendor—for example, Sun. Provides a value for the SOA Agent for Web Servers Variable property Server Vendor.

Note: For more information about setting this variable, see the SOA Security Manager Policy Configuration Guide.

ServerVersion

String

Description of the product version—for example, 6.0 SP2). Provides a value for the SOA Agent for Web Servers Variable property Server Version.

Note: For more information about setting this variable, see the Policy Configuration Guide.

MaxXmlSdkRetries

Number

Defines the number of times the SOA Agent for Web Servers tries to contact the XML SDK server when it receives requests. The default is 3.

The Agent does not continually retry the server for the same request. If a request comes in and the Agent cannot contact the SDK server, that request is dropped and the Agent tries again when a subsequent request is made. The Agent attempts to connect for each new request until it reaches the number specified in this parameter.

If the SOA Agent does not connect to the XML SDK server, the Agent assumes the server is not running and stops trying to process SOA Security Manager-specific requests.

Note: For the SOA Agent for Web Servers on Apache Web servers, this value applies to each process.

XMLSDKResourceIdentification

yes or no

Determines if the SOA Agent should identify the web service operation being requested by an incoming XML message as well as the resource identifier (that is, perform fine-grain resource identification).

The default is No.

Note: You must set this option to Yes if you want to use the Administrative UI to configure policies to protect resources with the SOA Agent for Web Servers.

XMLSDKAcceptSMSessionCookie

yes or no

Determines whether or not the SOA Agent for Web Servers accepts an CA SiteMinder session cookie to authenticate a client. The default is no.

If set to yes, the SOA Agent for Web Servers uses information in a session cookie sent as an HTTP header in the request as a means of authenticating the client.

If set to no, session cookies are ignored and the SOA Agent for Web Servers requests credentials required by the configured authentication scheme.

SAMLSessionTicketLogoffi

yes or no

Determines whether the SOA Agent for Web Servers should attempt to log off session tickets in SAML assertions. The default is yes.

XMLAgentSoapFaultDetails

yes or no

Determines whether or not the SOA Agent for Web Servers should insert the authentication/authorization rejection reason (if provided by the Policy Server) into the SOAP fault response sent to the Web service consumer. The default is no.