Agent Guides › Web Agent Guide › Protecting Web Applications › SiteMinder Default HTTP Headers › Disable Default HTTP Header Variables

Disable Default HTTP Header Variables

Many system platforms have an HTTP header limit of 4096 bytes. To avoid exceeding this limit and to allow space for custom response variables, you can disable some of SiteMinder’s default HTTP header variables.

The default variables are grouped into the following categories:

Note: You cannot disable individual variables. You can only disable a category of several variables.

• Authentication source variables
  • SM_AUTHDIRNAME
  • SM_AUTHDIRSERVER
  • SM_AUTHDIRNAMESPACE
  • SM_AUTHDIROID
• User Session variables
  • SM_SERVERSESSIONID
  • SM_SERVERSESSIONSPEC
  • SM_SERVERIDENTITYSPEC
  • SM_SESSIONDRIFT
  • SM_TIMETOEXPIRE
• User Name variables
  • SM_USER
  • SM_USERDN
  • SM_DOMINOCN

To disable the default use of HTTP header variables do any of the following tasks:

• To disable authentication source variables, set the value of the DisableAuthSrcVars parameter to yes.
• To disable user session variables, set the value of the DisableSessionVars parameter to yes.
• To disable user name variables, set the value of the DisableUserNameVars parameter to yes.

  Note: If you are using CA Identity Manager, or any application that might use the variables in this category, ensure the value of this parameter is set to no (enabled).