An Agent Configuration Object holds the parameters that define the Web Agent configuration. The configuration object is the Policy Server counterpart to Web Agent configuration file.
When you configure a Web Agent, you are prompted for the name of the Agent Configuration Object. The configuration object is associated with the Web Agent that you are configuring.
For more information about the initial configuration of a Web Agent and the required Web Agent parameters, see the Web Agent Installation Guide.
You can create a new Agent configuration object by copying an existing Agent configuration object. Sample Agent configuration objects are provided for the Web Agents that CA SiteMinder® supports. After the new Agent configuration object is created, you can modify its list of parameters and their values.
Note: For more information about parameters and default settings, see the Web Agent Configuration Guide.
To copy an Agent Configuration Object
The Agent Configuration Objects page appears.
The Create Agent Configuration page appears.
The Create Agent Configuration: page appears.
You are prompted to specify a parameter or continue entering a comment.
The Agent Configuration Object based on the default Agent Configuration Object is created.
The Policy Server installer creates several Agent Configuration Objects for several supported web servers that contain default settings. These sample objects have names, such as IISDefaultSettings or iPlanetDefaultSettings. You can duplicate these default objects and use them as templates for your Agent configuration.
Note: We recommend creating a new Agent Configuration Object by copying an existing object and modifying its list of parameters and their values. If you create a new Agent Configuration object without copying an existing one, enter all of your parameters and their values manually.
To create an Agent Configuration Object
The Agent Configuration Objects page appears.
Verify that the Create a new object of type Agent Configuration option is selected.
The Create Agent Configuration page appears.
Note: Click Help for descriptions of settings and controls, including their respective requirements and limits.
The Create Parameter page appears.
Note: You cannot enter multiple values for encrypted parameters. A single encrypted value is displayed as a string of symbols.
The parameter is added to the list.
Note: Parameters are listed in alphabetical order by name. To edit a parameter on the list, click the right arrow. To delete a parameter from the list, click the minus sign. To add more parameters to the Agent configuration object, repeat Steps 4 through 7.
The Agent Configuration Object is created.
When you configure an Agent Configuration Object, the following parameters must be configured:
Note: More information about these parameters exists in the Web Agent Installation Guide.
Configuring an IIS Web Agent requires that you configure the following settings in the Agent Configuration Object:
Note: If you plan to use the NTLM authentication scheme, or enable the Windows User Security Context feature, do not specify values for these IIS parameters.
Specifies the username of the IIS Proxy user.
Specifies the password of the IIS Proxy user.
The DefaultUserName and DefaultPassword identify an existing NT user account that has sufficient privileges to access resources on an IIS Web server protected by CA SiteMinder®. When users want to access resources on an IIS Web server protected by CA SiteMinder®, they may not have the necessary server access privileges. The Web Agent must use this NT user account, which is assigned by an NT administrator, to act as a proxy user account for users granted access by CA SiteMinder®.
Configuring a Web Agent on a Domino server requires that you edit the following settings to match your system:
If the user is not in the Domino Directory, and they have been authenticated by CA SiteMinder® against another user directory, this is the name by which the Domino Web Agent identifies that user to the Domino server. This value can be encrypted.
Ensures that all users successfully logged into CA SiteMinder® will be logged into Domino as the Domino SuperUser. This value can be encrypted.
All Web Agents require that you specify a value for the DefaultAgentName.
Identifies the Agent identity that the Web Agent uses when it detects an IP address on its Web server that does not have an Agent identity assigned to it.
Default: the default Agent name is the name of the installed Web Agent.
You can edit the names and values of the parameters in an Agent configuration object. Parameter names must be unique. Parameter values can be plain, encrypted, or multi-value. To make an inactive parameter active, remove the pound sign (#).
Note: For more information about parameters and default settings, see the Web Agent Configuration Guide.
To modify an Agent configuration object
The Agent Configuration Objects page appears.
A list of Agent configuration objects that match the search criteria appears.
The View Agent Configuration page appears.
Note: Click Help for descriptions of settings and controls, including their respective requirements and limits.
The settings and controls become active.
The Edit Parameter page appears.
Note: To delete a value, click the minus sign. To change the sequence of multiple values, click the up and down arrows. To specify multiple values for one parameter, click Add. Multiple values are separated by the square symbol () when displayed on the Parameters page.
Note: When Encrypted is selected, the option of specifying multiple values for one parameter is disabled. A single encrypted value is displayed as a string of symbols on the Parameters page.
The value of the parameter is updated.
Note: Parameters are listed in alphabetical order by name. To edit a parameter on the list, click the right arrow. To delete a parameter from the list, click the minus sign. To edit multiple parameters for the Agent configuration object, repeat steps 5 through 8.
The Agent configuration object is modified.
Copyright © 2013 CA.
All rights reserved.
|
|