Previous Topic: Configure the az_provider_resource_filter Section

Next Topic: Configure the resource_type-specific_mapping Section

Configure the resource_type_filter Section

The second section of the mapping, resource_type_filter, tells SiteMinder what type of WebLogic resource is protected. Its value is determined by the type of resource, as shown in the following table.

Resource Type

resource_type_filter value

Administration Resource

adm

EJB Resource

ejb

JDBC Resource

jdbc

JMS Resource

jms

JNDI Resource

jndi

Server Resource

svr

URL Resource

url

Note: If the SiteMinder Resource Mapper obtains a resource from WebLogic that is not of the types shown in the previous table, the default resource mapping is a concatenation of the requested resource values obtained from the WebLogic resource type. Spaces within the resource values are converted to a slash (/). You can use debug log messages from the SiteMinder Authorization Provider to obtain information about the requested WebLogic resource and the SiteMinder mapping of the WebLogic resource to a SiteMinder resource.

We recommend that you configure a nested realm under the SiteMinder Authorization Provider validation realm for each WebLogic resource type, specifying the appropriate resource_type_filter as the resource filter as shown in the following table.

Nested Realm Resource Filter

Nested Realm Type

Realm Contents

/adm

Administration Resource realm

Rules for Administration Resources

/jdbc

JDBC resource realm

Rules for JDBC resources

/jms

JMS resource realm

Rules for JMS resources

/jndi

JNDI resource realm

Rules for JNDI resources

/svr

Server resource realm

Rules for Server resources

/url

URL resource realm

Rules for URL resources

Note: If you implement your security policies using nested realms, verify that the Enable Nested Security setting is enabled on the SiteMinder Global Settings dialog. Additionally, create a simple allow access rule in the SiteMinder Authorization Provider validation realm and include it in your authorization policy. For more information about nested realms, see the SiteMinder Policy Server Configuration Guide.

Alternatively, include the resource_type_filter value as part of the resource specification in the rule.


Copyright © 2010 CA. All rights reserved. Email CA about this topic