The second section of the mapping, resource_type_filter, tells SiteMinder what type of WebLogic resource is protected. Its value is determined by the type of resource, as shown in the following table.
|
Resource Type |
resource_type_filter value |
|---|---|
|
Administration Resource |
adm |
|
EJB Resource |
ejb |
|
JDBC Resource |
jdbc |
|
JMS Resource |
jms |
|
JNDI Resource |
jndi |
|
Server Resource |
svr |
|
URL Resource |
url |
Note: If the SiteMinder Resource Mapper obtains a resource from WebLogic that is not of the types shown in the previous table, the default resource mapping is a concatenation of the requested resource values obtained from the WebLogic resource type. Spaces within the resource values are converted to a slash (/). You can use debug log messages from the SiteMinder Authorization Provider to obtain information about the requested WebLogic resource and the SiteMinder mapping of the WebLogic resource to a SiteMinder resource.
We recommend that you configure a nested realm under the SiteMinder Authorization Provider validation realm for each WebLogic resource type, specifying the appropriate resource_type_filter as the resource filter as shown in the following table.
|
Nested Realm Resource Filter |
Nested Realm Type |
Realm Contents |
|---|---|---|
|
/adm |
Administration Resource realm |
Rules for Administration Resources |
|
/jdbc |
JDBC resource realm |
Rules for JDBC resources |
|
/jms |
JMS resource realm |
Rules for JMS resources |
|
/jndi |
JNDI resource realm |
Rules for JNDI resources |
|
/svr |
Server resource realm |
Rules for Server resources |
|
/url |
URL resource realm |
Rules for URL resources |
Note: If you implement your security policies using nested realms, verify that the Enable Nested Security setting is enabled on the SiteMinder Global Settings dialog. Additionally, create a simple allow access rule in the SiteMinder Authorization Provider validation realm and include it in your authorization policy. For more information about nested realms, see the SiteMinder Policy Server Configuration Guide.
Alternatively, include the resource_type_filter value as part of the resource specification in the rule.
| Copyright © 2010 CA. All rights reserved. | Email CA about this topic |