ibm tivoli access manager:publib.boulder.ibm.com/.../ko_ko/pdf/am41_install.pdfv ibm tivoli access...

292
IBM Tivoli Access Manager 4.1 SA30-1854-01

Upload: others

Post on 27-Jul-2020

13 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

IBM Tivoli Access Manager

�� �� ���

�� 4.1

SA30-1854-01

���

Page 2: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating
Page 3: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

IBM Tivoli Access Manager

�� �� ���

�� 4.1

SA30-1854-01

���

Page 4: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�!

� ��� � ��� ���� ��� ���� ��, 251 ���� �� E ������� �����

� 2 �(2003� 8�)

� ���� GC32-0815-00� �����.

© Copyright International Business Machines Corporation 2001, 2003. All rights reserved.

Page 5: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

��

�� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ix

� �� ��� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ix

� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ix

�� � . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi

��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi

�� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi

WebSEAL ��. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xii

�� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xii

��� ��� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xii

�� �� ��� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii

�� � . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii

IBM Global Security Toolkit . . . . . . . . . . . . . . . . . . . . . . . . . . xiv

IBM DB2 Universal Database . . . . . . . . . . . . . . . . . . . . . . . . . . xiv

IBM Directory Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiv

IBM WebSphere Application Server . . . . . . . . . . . . . . . . . . . . . . . . xv

IBM Tivoli Access Manager for Business Integration . . . . . . . . . . . . . . . . . . xv

IBM Tivoli Access Manager for Operating Systems . . . . . . . . . . . . . . . . . . . xv

��� � ��� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvi

�� ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvi

����� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvi

� �� ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvii

��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvii

���� �� �� � ��. . . . . . . . . . . . . . . . . . . . . . . . . . . . xvii

� 1 � Tivoli Access Manager �� �� . . . . . . . . . . . . . . . . . . . . . . . . 1

�� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1

�� ��� � . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

�� ��� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

��� ����� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

IBM Directory Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

IBM Global Security Toolkit . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Tivoli Access Manager Policy Server . . . . . . . . . . . . . . . . . . . . . . . . . 5

Tivoli Access Manager Authorization Server . . . . . . . . . . . . . . . . . . . . . . . 5

Tivoli Access Manager JRE(Java Runtime Environment) . . . . . . . . . . . . . . . . . . 5

Tivoli Access Manager Runtime . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

Tivoli Access Manager Web Portal Manager . . . . . . . . . . . . . . . . . . . . . . 6

Tivoli Access Manager Application Development Kit . . . . . . . . . . . . . . . . . . . . 6

�� ���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

�� �� ���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

�� �� ���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

�� �� � . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

© Copyright IBM Corp. 2001, 2003 iii

Page 6: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�� �� ��� ��. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

�� �� ������ �� ��� �� . . . . . . . . . . . . . . . . . . . . . . . . 14

�� �� ��� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

�� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

LANG �� � UNIX ��� . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

LANG �� � Windows ��� . . . . . . . . . . . . . . . . . . . . . . . . . . 18

�� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

��� ���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

��� ���(�� ��) �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

�� �� � �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

� 2 � Tivoli Access Manager� �� ����� �� . . . . . . . . . . . . . . . . . . . 21

LDAP �� �� � . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

IBM Directory Server �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

iPlanet Directory Server �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

Novell eDirectory �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

��� GSO ���� Tivoli Access Manager� ��. . . . . . . . . . . . . . . . . . . . 35

z/OS � OS/390 �� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

TDBM ���� �� DB2 ������ �� . . . . . . . . . . . . . . . . . . . . . . 36

TDBM ���� �� LDAP �� � ��. . . . . . . . . . . . . . . . . . . . . . . 37

�� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

��� � �� � �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

ACL� � LDAP ���� � . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

LDAP �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

��� LDAP ��� �� � � ��� �� . . . . . . . . . . . . . . . . . . . . . 39

��� LDAP ��� ���� ���� �� . . . . . . . . . . . . . . . . . . . . . . 40

Tivoli Access Manager for LDAP �� . . . . . . . . . . . . . . . . . . . . . . . . 40

�� �� ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

Active Directory �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

Active Directory ���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42

Active Directory ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42

Active Directory ��� � . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

Active Directory ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

Active Directory �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

Lotus Domino �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

Lotus Notes ������ Domino ��� �� . . . . . . . . . . . . . . . . . . . . . . 48

Tivoli Access Manager for Domino ��� �� . . . . . . . . . . . . . . . . . . . . . 49

� 3 � AIX� Tivoli Access Manager �� . . . . . . . . . . . . . . . . . . . . . . . 51

�� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

�� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

IBM Global Security Toolkit �� . . . . . . . . . . . . . . . . . . . . . . . . . . 54

IBM Directory Client �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

Tivoli Access Manager ��� �� � �� . . . . . . . . . . . . . . . . . . . . . . 55

��� JRE �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

Tivoli Access Manager JRE(Java Runtime Environment) �� � �� . . . . . . . . . . . . . 56

Web Portal Manager ��� �� � �� . . . . . . . . . . . . . . . . . . . . . . . 57

iv IBM Tivoli Access Manager: �� �� ���

Page 7: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

IBM WebSphere Application Server, Advanced Single Server �� . . . . . . . . . . . . . 58

IBM WebSphere Application Server ��� 3 �� . . . . . . . . . . . . . . . . . . . 59

Tivoli Access Manager �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

Tivoli Access Manager ��� �� � . . . . . . . . . . . . . . . . . . . . . . . 61

Tivoli Access Manager ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . 61

� 4 � HP-UX� Tivoli Access Manager �� . . . . . . . . . . . . . . . . . . . . . . 63

�� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

�� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

IBM Global Security Toolkit �� . . . . . . . . . . . . . . . . . . . . . . . . . . 65

IBM Directory Client �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66

Tivoli Access Manager ��� �� � �� . . . . . . . . . . . . . . . . . . . . . . 67

��� JRE �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68

Tivoli Access Manager JRE(Java Runtime Environment) �� � �� . . . . . . . . . . . . . 68

Tivoli Access Manager �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

Tivoli Access Manager ��� �� � . . . . . . . . . . . . . . . . . . . . . . . 69

Tivoli Access Manager ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . 70

� 5 � Linux� Tivoli Access Manager �� . . . . . . . . . . . . . . . . . . . . . . 71

�� �� ��(Red Hat Linux ��) . . . . . . . . . . . . . . . . . . . . . . . . . . 72

�� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73

IBM Global Security Toolkit �� . . . . . . . . . . . . . . . . . . . . . . . . . . 74

IBM Directory Client �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

Tivoli Access Manager ��� �� � �� . . . . . . . . . . . . . . . . . . . . . . 76

��� JRE �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78

Tivoli Access Manager JRE(Java Runtime Environment) �� � ��(Red Hat Linux ��) . . . . . . 78

Tivoli Access Manager �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

Tivoli Access Manager ��� �� � . . . . . . . . . . . . . . . . . . . . . . . 79

Tivoli Access Manager ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . 80

� 6 � Solaris� Tivoli Access Manager �� . . . . . . . . . . . . . . . . . . . . . . 83

�� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83

�� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85

IBM Global Security Toolkit �� . . . . . . . . . . . . . . . . . . . . . . . . . . 86

IBM Directory Client �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86

Tivoli Access Manager ��� �� � �� . . . . . . . . . . . . . . . . . . . . . . 87

��� JRE �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88

Tivoli Access Manager JRE(Java Runtime Environment) �� � �� . . . . . . . . . . . . . 88

Web Portal Manager ��� �� � �� . . . . . . . . . . . . . . . . . . . . . . . 89

IBM WebSphere Application Server, Advanced Single Server �� . . . . . . . . . . . . . 91

IBM WebSphere Application Server ��� 3 �� . . . . . . . . . . . . . . . . . . . 92

Tivoli Access Manager �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . 93

Tivoli Access Manager ��� �� � . . . . . . . . . . . . . . . . . . . . . . . 93

Tivoli Access Manager ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . 94

� 7 � Windows� Tivoli Access Manager �� . . . . . . . . . . . . . . . . . . . . . 97

�� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

�� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99

�� v

Page 8: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

IBM Global Security Toolkit ��. . . . . . . . . . . . . . . . . . . . . . . . . . 100

IBM Directory Client �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100

Tivoli Access Manager ��� �� � ��. . . . . . . . . . . . . . . . . . . . . . 102

��� JRE �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104

Tivoli Access Manager JRE(Java Runtime Environment) �� � �� . . . . . . . . . . . . . 104

Web Portal Manager ��� �� � �� . . . . . . . . . . . . . . . . . . . . . . . 105

IBM WebSphere Application Server, Advanced Single Server �� . . . . . . . . . . . . . 106

IBM WebSphere Application Server ��� 3 �� . . . . . . . . . . . . . . . . . . . 109

Tivoli Access Manager �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . 110

Tivoli Access Manager ��� �� � . . . . . . . . . . . . . . . . . . . . . . . 110

Tivoli Access Manager ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . 111

� 8 � Tivoli Access Manager, �� 4.1� ����� . . . . . . . . . . . . . . . . . . . 113

LDAP ������ ����� ���� . . . . . . . . . . . . . . . . . . . . . . . . . 113

Policy Server ��� ����� . . . . . . . . . . . . . . . . . . . . . . . . . . . 114

� ���� ���� Policy Server ����� . . . . . . . . . . . . . . . . . . . . . . 116

�� Tivoli Access Manager ��� ����� . . . . . . . . . . . . . . . . . . . . . . 118

� Policy Server� � �� ���� ��� �� . . . . . . . . . . . . . . . . . . . . . 120

���� �� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120

� 9 � UNIX �� �� ���� . . . . . . . . . . . . . . . . . . . . . . . . . . . 123

IBM Directory Server ��� ��. . . . . . . . . . . . . . . . . . . . . . . . . . . 123

Tivoli Access Manager Policy Server ��� �� . . . . . . . . . . . . . . . . . . . . . 130

Tivoli Access Manager Runtime ��� �� . . . . . . . . . . . . . . . . . . . . . . . 139

Web Portal Manager ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . 145

� 10 � Windows �� �� ���� . . . . . . . . . . . . . . . . . . . . . . . . . 153

IBM Directory Server ��� ��. . . . . . . . . . . . . . . . . . . . . . . . . . . 153

Tivoli Access Manager Policy Server ��� �� . . . . . . . . . . . . . . . . . . . . . 161

Tivoli Access Manager Runtime ��� �� . . . . . . . . . . . . . . . . . . . . . . . 169

Web Portal Manager ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . 172

� 11 � �� �� �� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . 185

�� � �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 185

�� � � ���� ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . 186

�� � �(ezinstall) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 186

UNIX � . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187

Windows � . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187

�� � �(install_pdrte) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188

UNIX � . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188

Windows � . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189

�� � �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189

UNIX �� � �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189

Windows �� � �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 190

�� A. SSL(Secure Sockets Layer) �� . . . . . . . . . . . . . . . . . . . . . . . . 193

SSL ���� �� IBM Directory Server �� . . . . . . . . . . . . . . . . . . . . . . 194

� ������ � � ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . 194

vi IBM Tivoli Access Manager: �� �� ���

Page 9: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

CA(Certificate Authority)��� �� ��� ��. . . . . . . . . . . . . . . . . . . . . 196

�� ��� ��� �� � ��. . . . . . . . . . . . . . . . . . . . . . . . . . . 196

SSL ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 197

SSL ���� �� iPlanet Directory Server �� . . . . . . . . . . . . . . . . . . . . . 200

�� ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 200

�� ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 201

SSL ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 202

SSL ���� �� OS/390 � z/OS LDAP �� �� . . . . . . . . . . . . . . . . . . . . 203

�� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 203

� ������ � �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 204

SSL ���� �� Novell eDirectory Server �� . . . . . . . . . . . . . . . . . . . . . 205

� CA(Certificate Authority) ���� �� . . . . . . . . . . . . . . . . . . . . . . 206

�� ��� ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 207

LDAP ��� �� �� ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . 207

SSL �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 208

�� ��� ���� IBM � � � �� . . . . . . . . . . . . . . . . . . . . . . . 208

SSL ���� �� IBM Directory Server �� . . . . . . . . . . . . . . . . . . . . . . 208

� ������ � �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 209

��� ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 210

SSL ��� ��� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 211

LDAP �� � ����� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . 212

� ������ � �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 212

CA(Certificate Authority)��� �� ��� ��. . . . . . . . . . . . . . . . . . . . . 213

�� ��� ��� �� � ��. . . . . . . . . . . . . . . . . . . . . . . . . . . 214

��� ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 215

SSL ��� ��� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 216

Domino� SSL �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217

SSL � � �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217

SSL ��� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217

�� B. Tivoli Access Manager �� �� . . . . . . . . . . . . . . . . . . . . . . . 219

UNIX �� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 219

Tivoli Access Manager Runtime . . . . . . . . . . . . . . . . . . . . . . . . . . 219

Tivoli Access Manager Policy Server . . . . . . . . . . . . . . . . . . . . . . . . 220

Tivoli Access Manager Authorization Server . . . . . . . . . . . . . . . . . . . . . . 221

Windows �� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 222

Tivoli Access Manager Runtime . . . . . . . . . . . . . . . . . . . . . . . . . . 222

LDAP �����. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 222

Active Directory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 224

Lotus Domino . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 225

Tivoli Access Manager Policy Server . . . . . . . . . . . . . . . . . . . . . . . . 226

Tivoli Access Manager Authorization Server . . . . . . . . . . . . . . . . . . . . . . 226

�� � . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 227

�� C. OS/390 � z/OS LDAP �� �� . . . . . . . . . . . . . . . . . . . . . . . 229

�� LDAP �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 229

SPUFI� �� DB2 ������ � ��� � �� . . . . . . . . . . . . . . . . . . . 230

�� vii

Page 10: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

SPUFI� �� DB2 �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . 236

�� CLI ��� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 239

�� CLI ��� � . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 240

�� D. �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243

Tivoli Access Manager� �� policy . . . . . . . . . . . . . . . . . . . . . . . . . 244

�� �� policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 244

��� �� policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 244

Tivoli Access Manager ��� policy . . . . . . . . . . . . . . . . . . . . . . . . 245

��� �� �� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 246

CC � �� �� � �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 246

Tivoli Access Manager �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247

WebSEAL �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247

WebSEAL �� ���� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . 248

���� cipersuite . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 248

�� �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 249

�� WebSEAL �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 249

��� policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 249

�� policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 250

�� � �� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 250

CC �� �� � . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 250

�� E. ���� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 251

XML Parser Toolkit ��� . . . . . . . . . . . . . . . . . . . . . . . . . . . . 253

Pluggable Authentication Module ��� . . . . . . . . . . . . . . . . . . . . . . . . 254

Apache Axis Servlet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 254

JArgs command line option parsing suite for Java . . . . . . . . . . . . . . . . . . . . . 255

Java DOM implementation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 256

� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 257

�� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 259

�� . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 267

viii IBM Tivoli Access Manager: �� �� ���

Page 11: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

��

IBM® Tivoli® Access Manager(Tivoli Access Manager)� IBM Tivoli Access

Manager ����� ������� ���� � �� �� ��������. � �

�� IBM Tivoli Access Manager ������� ���� ��� � �� �

�� ���� ����. �� ����� ���� � ��� e-business ���

���� �� ��� � ������ �� policy� � � ��� ���� �

�� �� �� ���� ����.

�: IBM Tivoli Access Manager� �� Tivoli SecureWay® Policy Director� �

�� �����. Tivoli SecureWay Policy Director ����� � ���� �

�� �� ��� ���� policy ��� � ��.

IBM Tivoli Access Manager �� �� ������ Tivoli Access Manager ��

������ ��, �� � ������� �� �����.

� �� ���

� �� IBM Tivoli Access Manager� �� � ��� ��� ��� ����

���� ���.

���� ��� � � � �� ���.

v PC � UNIX® ���

v ������ �� � ��

v �� ��

v HTTP, TCP/IP, FTP � telnet �� ��� �� �

v LDAP(Lightweight Directory Access Protocol) � �� � ���

v ���� �����

v �� � �

SSL(Secure Sockets Layer) ��� ���� ��, SSL �� �, � �(� �

��), ��� ��, ��� ��� � CA(Certificate Authority)� � � � �

� ���.

� �� ��

� �� �� �� ���� ����.

v 1 ���� � 1 � �Tivoli Access Manager �� ��

© Copyright IBM Corp. 2001, 2003 ix

Page 12: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Tivoli Access Manager ���� �� �� ���� � �� �� ��� ��

��, Tivoli Access Manager �� ���� ���� � �� �� �

����. � ���� �� ��� Tivoli Access Manager� ���� � �

� ���� ���� �� �����.

v 21 ���� � 2 � �Tivoli Access Manager� �� ����� ���

Tivoli Access Manager� �� �� �� ������ �� � ���� �

� �����.

v 51 ���� � 3 � �AIX� Tivoli Access Manager ���

v 63 ���� � 4 � �HP-UX� Tivoli Access Manager ���

v 71 ���� � 5 � �Linux� Tivoli Access Manager ���

v 83 ���� � 6 � �Solaris� Tivoli Access Manager ���

v 97 ���� � 7 � �Windows� Tivoli Access Manager ���

�� �� �� �� �� ��� ����� ���� Tivoli Access Manager

���� �� � ���� �� �� ����� ����. Tivoli Access

Manager ���� �� ��� ���� �� ����� ����.

v 113 ���� � 8 � �Tivoli Access Manager, �� 4.1� ������

� Tivoli Access Manager, �� 3.8 �� �� 3.9 �� ���� IBM Tivoli

Tivoli Access Manager, �� 4.1� ������� �� � �����.

v 123 ���� � 9 � �UNIX �� �� �����

�� �� � � ���� UNIX ���� Tivoli Access Manager ���� �

� � ���� �� �� � ����� �� �� ����.

v 153 ���� � 10 � �Windows �� �� �����

�� �� � � ���� Windows ���� Tivoli Access Manager ����

�� � ���� �� �� � ��� �� �� ����.

v 185 ���� � 11 � ��� �� �� � ���

�� �� ���� ���� Tivoli Access Manager ���� � ���

���� � �� � � ���� �� �����.

v 193 ���� �� A �SSL(Secure Sockets Layer) ���

LDAP ��� IBM Directory Client �� �� ��� �� SSL ��� ���

�� �� � �����. Lotus Domino Server � IBM Directory Client �

� SSL� ���� �� ����� ��� ����.

v 219 ���� �� B �Tivoli Access Manager �� ���

�� �� ����� ���� Tivoli Access Manager ���� �� � �

�� ��� �� ��� �� ��� ����.

v 229 ���� �� C �OS/390 � z/OS LDAP �� ���

x IBM Tivoli Access Manager: �� �� ���

Page 13: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Tivoli Access Manager� �� �� OS/390 �� z/OS Security Server� �

� � �� ��� ����.

v 243 ���� �� D �� ���

v 251 ���� �� E ������

v 259 ���� ����

�� ��

Tivoli Access Manager ����� �� �� ���� ����.

v ���� ���

v ��� ���

v xii ���� �WebSEAL ���

v xii ���� � �� ���

v xii ���� ���� ����

v xiii ���� ��� �� ����

��� ��

v IBM Tivoli Access Manager Read Me

GA30-1852-00(am41_readme.pdf)

Tivoli Access Manager �� � ����� �� ��� ����.

v IBM Tivoli Access Manager ���� ��

SA30-1853-00(am41_relnotes.pdf)

����� ����, �� �� �� � �� ���� �� �� ��� �

���.

�� ��

v IBM Tivoli Access Manager �� �� ���

SA30-1854-01(am41_install.pdf)

Web Portal Manager ������ �� Tivoli Access Manager ������

��, �� � ����� �� � �����.

v IBM Tivoli Access Manager �� ��� ���

SA30-1855-01(am41_admin.pdf)

Tivoli Access Manager ��� ��� �� �� � ��� � �����.

pdadmin ��� ���� Web Portal Manager ������� ��� ���

� ��� ����.

�� xi

Page 14: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

WebSEAL ��

v IBM Tivoli Access Manager WebSEAL �� ���

SA30-1856-01(amweb41_install.pdf)

WebSEAL �� � WebSEAL ������ �� �� �� ��, �� � ��

��� ����.

v IBM Tivoli Access Manager WebSEAL ��� ���

SA30-1857-01(amweb41_admin.pdf)

WebSEAL� ���� �� ���� ��� ���� ��� �� �����

��, �� �� � �� �� ��� ����.

� �� ��

v IBM Tivoli Access Manager for WebSphere Application Server ��� ���

SA30-1858-01(amwas41_user.pdf)

Tivoli Access Manager for IBM WebSphere® Application Server� �� ��,

�� � �� ��� ����.

v IBM Tivoli Access Manager for WebLogic Server ��� ���

SA30-1859-01(amwls41_user.pdf)

Tivoli Access Manager for BEA WebLogic Server� �� ��, �� � ��

��� ����.

v IBM Tivoli Access Manager Plug-in for Edge Server ��� ���

SA30-1860-01(amedge41_user.pdf)

IBM WebSphere Edge Server ������� ���� ��, �� � ��

�� � �����.

v IBM Tivoli Access Manager Plug-in for Web Servers User’s Guide

SC32-1139-01(amws41_user.pdf)

��� ���� ���� ��� ��� �� ��, �� �� � �� �

� ��� ����.

��� ���

v IBM Tivoli Access Manager Authorization C API Developer’s Reference

SC32-1140-01(am41_authC_devref.pdf)

Tivoli Access Manager � �� C API � Access Manager ��� ���

������ ���� Tivoli Access Manager ��� ������� ����

�� ���� �� ��� ����.

v IBM Tivoli Access Manager Authorization Java Classes Developer’s Reference

SC32-1141-01(am41_authJ_devref.pdf)

xii IBM Tivoli Access Manager: �� �� ���

Page 15: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� �� API� Java™ �� ��� ���� ������� Tivoli Access

Manager ��� ���� �� � �� ��� ����.

v IBM Tivoli Access Manager Administration C API Developer’s Reference

SC32-1142-01(am41_adminC_devref.pdf)

�� API� ���� ������� Tivoli Access Manager �� ��� ��

�� �� � �� ��� ����. � ����� �� API� C ��� �

�����.

v IBM Tivoli Access Manager Administration Java Classes Developer’s Reference

SC32-1143-01(am41_adminJ_devref.pdf)

� �� API� Java �� ��� ���� ������� Tivoli Access Manager

�� ��� �� � �� ��� �� �� ��� ����.

v IBM Tivoli Access Manager WebSEAL Developer’s Reference

SC32-1135-01(amweb41_devref.pdf)

CDAS(Cross-domain Authentication Service), CDMF(Cross-domain Mapping

Framework) � Password Strength Module� �� �� � ��� � ��� �

���.

�� �� ���

v IBM Tivoli Access Manager Command Reference

GC32-1107-01(am41_cmdref.pdf)

Tivoli Access Manager� �� ��� ��� ���� � ��� �� �

�� ����.

v IBM Tivoli Access Manager Error Message Reference

SC32-1144-01(am41_error_ref.pdf)

Tivoli Access Manager�� ���� ���� �� � ��� ����.

v IBM Tivoli Access Manager Problem Determination Guide

GC32-1106-01(am41_pdg.pdf)

Tivoli Access Manager� �� ��� � ��� ����.

v IBM Tivoli Access Manager Performance Tuning Guide

SC32-1145-01(am41_perftune.pdf)

��� ������ ��� IBM Directory ��� �� Tivoli Access Manager

� ���� ��� �� �� �� ��� ����.

�� ��

� ���� Tivoli Access Manager ����� ��� �� �����.

Tivoli Software Library��� white papers, datasheets, demonstrations, redbooks

� announcement letters� �� ��� Tivoli ��� ����. �� ����

�� xiii

Page 16: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� Tivoli Software Library� �� � ����.

http://www.ibm.com/software/tivoli/library/

Tivoli Software Glossary�� Tivoli ������ ��� �� ��� ���� �

���. Tivoli Software Glossary� �� ���� ��� � ����. Tivoli

Software Library(http://www.ibm.com/software/tivoli/library/)� �� Glossary

� �����.

IBM Global Security Toolkit Tivoli Access Manager� IBM Global Security Toolkit(GSKit)� �� ��� �

�� ��� ����. GSKit� �� ���� IBM Tivoli Access Manager Base

CD� ��� ����.

GSKit ���� ���� � ������, �-�� � � � ��� �� ��

� �� iKeyman � �� ����(gsk5ikm)� �����. �� �� Tivoli

Information Center ���� �� IBM Tivoli Access Manager �� ��� �

� ��� � ����.

v Secure Sockets Layer Introduction and iKeyman User’s Guide

(gskikm5c.pdf)

Tivoli Access Manager ���� SSL ��� ����� ���� ��� ��

��� �� ���� �� ��� ����.

IBM DB2 Universal Database IBM DB2® Universal Database™� IBM Directory Server, z/OS™ � OS/390®

LDAP ��� �� � ����. DB2� ��� ��� ���� �� CD� �

���.

v IBM AIX®

v Microsoft™ Windows™

v Sun Solaris Operating Environment

DB2 ��� �� ���� � ����.

http://www.ibm.com/software/data/db2/

IBM Directory Server IBM Directory Server, �� 4.1� zSeries™� Linux� ��� � ���� IBM

Tivoli Access Manager Base CD� ��� ����. S/390� Linux� �� IBM

Directory Server ������ ���� � � ����.

http://www.ibm.com/software/network/directory/server/download/

xiv IBM Tivoli Access Manager: �� �� ���

Page 17: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

��� ������ IBM Directory Server� �����, �� ���� ���

���.

http://www.ibm.com/software/network/directory/library/

IBM WebSphere Application Server IBM WebSphere Application Server, Advanced Single Server Edition 4.0.3� Web

Portal Manager CD� ��� ��� Web Portal Manager ������ ����

�����. IBM WebSphere Application Server� �� ��� ��� �� �

��� ������.

http://www.ibm.com/software/webservers/appserv/infocenter.html

IBM Tivoli Access Manager for Business Integration IBM Tivoli Access Manager for Business Integration� �� �� � �� �

���, IBM MQSeries® �� 5.2 �� ��� IBM WebSphere® MQ �� 5.3

���� ����. IBM Tivoli Access Manager for Business Integration� ��

� ������ ��� �� ���� WebSphere MQSeries ������� ��

���� �� ��� ���� �� � ��� ���. WebSEAL � IBM

Tivoli Access Manager for Operating Systems�, IBM Tivoli Access Manager

for Business Integration� IBM Tivoli Access Manager for e-business� � �

� ���� ���� �� ��� �����.

IBM Tivoli Access Manager for Business Integration �� 4.1� �� �� ��

� Tivoli Information Center ���� ����.

v IBM Tivoli Access Manager for Business Integration �� ���(SA30-1825-00)

v IBM Tivoli Access Manager for Business Integration ���� ��(GA30-1827-00)

v IBM Tivoli Access Manager for Business Integration Read Me(GA30-1826-00)

IBM Tivoli Access Manager for Operating Systems IBM Tivoli Access Manager for Operating Systems� �� �� � �� ��

��, �� ����� ��� � ��� UNIX ����� � �� policy �

� �� ����. WebSEAL � IBM Tivoli Access Manager for Business

Integration�, IBM Tivoli Access Manager for Operating Systems� IBM Tivoli

Access Manager for e-business� � �� ���� ���� �� ��� ��

���.

IBM Tivoli Access Manager for Operating Systems �� 4.1� �� ��� Tivoli

Information Center ���� ����.

v IBM Tivoli Access Manager for Operating Systems �� ���(SA30-1841-00)

v IBM Tivoli Access Manager for Operating Systems �� ���(SA30-1840-00)

�� xv

Page 18: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v IBM Tivoli Access Manager for Operating Systems ��� � ���

(SA30-1842-00)

v IBM Tivoli Access Manager for Operating Systems ���� ��(GA30-1843-00)

v IBM Tivoli Access Manager for Operating Systems Read Me(GA30-1844-00)

��� �� ���

�� ����� �� �� Tivoli Software Library� PDF �� HTML ���

� � ����.

http://www.ibm.com/software/tivoli/library

�� ����� ������ Product manuals � �����. Tivoli Software

Information Center� �� �� ��� �� �����.

�� �� ���� ��, �� ���, ��� ���, ��� ��� � ��� �

��� ����.

�: PDF ��� � ��, Adobe Acrobat � �� ��(�� → ��� ���

��)�� ���� ���� �� � ����.

�� ��� ��

�� ��� ��� �� � ��� �� � � �� �� �� ���� �

���� ��� �� � ��� �����. � ����� �� ��� ����

������ ��� �� �� � ����. �� ��� �� ���� ����

� � ��� ������ � ��� �� � ����.

����� �� ��

����� ��� �����, �� IBM Tivoli Software Support ���� �

�����.

http://www.ibm.com/software/sysmgmt/products/support/

��� �� ��, �� ����� IBM Software Support Guide� ���

�� ���� ����� ��� ������.

http://techsupport.services.ibm.com/guides/handbook.html

� �� ���� ��� �� IBM Software Support�� �� � � ��

�� ��� ����.

v �� � ��

v ���� �� ��� ���� � �� � ��

v ��� ��� �� � ��

xvi IBM Tivoli Access Manager: �� �� ���

Page 19: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� �� ��� ��

� ���� �� ��� ��, ��� �� ��� � � ��� ����

�.

��� ��

� ���� �� �� ��� ��� �����.

�� ��� �� ��� ��� � ���� �� ��, ���, ����, ��,

Java � � �� � ����� �� ����.

����

��, � ��, ���� ��� �� ����� ����.

������

��� �� ��� �� �, � , ��, ���, �� �, ��� ��

�, �� �� ��� � ��� �� �� ��� ������� �

���.

����� �� �� � ��

� ���� �� � �� � UNIX ��� �����. Windows ����� �

� ��� �� ��� $variable� %variable%� ���, �� � ��� �

(/)� � �(\)� �����. Windows ����� bash �� �� ��, UNIX

��� ������.

�� xvii

Page 20: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

xviii IBM Tivoli Access Manager: �� �� ���

Page 21: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� 1 � Tivoli Access Manager �� ��

IBM Tivoli Access Manager� ��� ���� �� ��� � �� ���

� � � �� ���. � ��� �� �� �� ��� ����.

v ��� ���

v 2 ���� ��� ��� ��

v 4 ���� ��� ����

v 7 ���� ��� �����

v 11 ���� ���� ���

��

��� ���, ���� ��� � �� �� ����� �� ��� ��

� IBM Tivoli Access Manager ���� ��� ������.

�� ��

�� Tivoli Access Manager ���� ���� �� ����� ��� �� �

� � �� ��� � ���.

Tivoli Access Manager �� ��� �� ���� � �� �� �� ��� �

� �� ���� ���� ����. �� ���� ����� �� ���, �

��� � ���� ��� �� ���� policy� ���� �� �����.

���� �� �� ��� �� ��� ����.

v �� �� ����

v � ����� � ���� ��

v �� ��� ���� ���

�� policy� �� ���� ��� ��� ���� �� ��� �� ��

�� � ���. ���� ��, ��� � ���� �� �� � � �

�� ��� �� ����. Tivoli Access Manager �� ��(�� �����

� �)� ����� ��� ��� ��� ��� �� ��� �� ����

����� ���� ������ ���� �� � ��� � ���.

�� policy� ��� ��� ���� �� �� ��� �, ��� � �

�� � ���. �� ��, � �� �� � �� �� ��� �� ���

© Copyright IBM Corp. 2001, 2003 1

Page 22: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� ���. ��� �����, ������ � ������� Tivoli Access

Manager ������ ���� �� �� ���.

�� ��� � �� ��� ��� �� policy� ���� ���� � �

� Tivoli Access Manager ���� ������� � ��� � � ��

��.

�� �� � ���� ����� ��� �� ���� ������.

www.ibm.com/redbooks

http://www-3.ibm.com/software/sysmgmt/products/ support/Field_Guides_Technical.html

�� ��� ��

�� ���� Tivoli Access Manager�� ��, � � ��� ��� �� ��

policy� �� ���� � ��� �� �� �� �����. �� ���� ��

��� � ������� � ��� ���� ����� � � ������.

�� ����(��)� �� ��� ��( : ��� ��� �� �� �� ��)

� ����� Tivoli Access Manager� � � ���� � ���. ��

� Tivoli Access Manager ��� � ���� � ��� �����.

�� 1��� � �� ���� ���� �����. � ����� � �� ��(�

�� �����, Policy Server, Authorization Server �)� ��� ���� ���

�� �����. �� �� Tivoli Access Manager� � ���� �����

�� ���� ���� ���� � �� � ������ ��� �� ���

� �� �� ����. ��� ��� ��� �� ����� ������

� ����� ��� � �����. ��� ��� �� � �� ���� ��

���( : ��� ����� �� ������ �� ���)� �� � ����.

�� ���� ��

2 IBM Tivoli Access Manager: �� �� ���

Page 23: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

1�� �� 1� ��� Tivoli Access Manager ���� �� ��/ ��

�� �� ����. � ���� �� ��� 4 ���� ��� ����� ���

���.

1. Tivoli Access Manager ��� ���

��� �� ����

Tivoli Access Manager

policy ��v IBM Global Security Toolkit

v IBM Directory Client *

v Tivoli Access Manager Runtime

v Tivoli Access Manager Policy Server

Tivoli Access Manager

��� ���v IBM Global Security Toolkit

v IBM Directory Client *

v Tivoli Access Manager Runtime

Tivoli Access Manager

�� ���v IBM Global Security Toolkit

v IBM Directory Client *

v Tivoli Access Manager Runtime

v Tivoli Access Manager Application Development Kit

v Tivoli Access Manager JRE(Java Runtime Environment)

Tivoli Access Manager

� ��v IBM Global Security Toolkit

v IBM Directory Client *

v Tivoli Access Manager Runtime

v Tivoli Access Manager Authorization Server

�� 1. �� ���� ��� �

�� ���� ��

� 1 � Tivoli Access Manager �� � 3

Page 24: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

1. Tivoli Access Manager ��� ��� (��)

��� �� ����

Tivoli Access Manager

JRE(Java Runtime Environment) v Tivoli Access Manager JRE(Java Runtime Environment)

v �� ���� JRE

Tivoli Access Manager

Web Portal Manager ���v IBM Global Security Toolkit

v IBM Directory Client *

v Tivoli Access Manager Runtime Environment

v IBM WebSphere Application Server, Advanced Single Server

4.0 � ��� 3

v Tivoli Access Manager Web Portal Manager

v Tivoli Access Manager JRE(Java Runtime Environment)

* Active Directory� ��� ������ ��� ��, �� ���� Access Manager

���� IBM Directory Client� ��� ����.

�� ����

� ���� ��� � Tivoli Access Manager ��� ��� �� ���

� �����.

��� �����

� ��� ����� Tivoli Access Manager� ��� ������ ����.

������ Tivoli Access Manager� �� ��� ID� ������� ��

��. ���� ��� Tivoli Access Manager � ��� �� �� ����.

���� ����� ��� IBM Tivoli Access Manager ���� ��� ����

��.

IBM Directory Client

IBM Directory Client� Active Directory� ���� � Tivoli Access Manager

������ �����. Tivoli Access Manager� ���� � ���� IBM

Directory Client� �� � �� ���. �� �� �� �� ����.

v Active Directory� Tivoli Access Manager ������ ���� ����� IBM

Directory Client� ��� ����.

v Tivoli Access Manager JRE(Java Runtime Environment) ����� IBM Directory

Client� ��� ����.

IBM Directory Client� �� ���� IBM Tivoli Access Manager Base CD��

IBM Directory� �� ����. � ����� �� ����� � �� � � �

�� �����(GUI)� ��� ����. �� �� �� ������ ���

�� ���� ��

4 IBM Tivoli Access Manager: �� �� ���

Page 25: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� IBM Directory Server� �� �� � ������ ��� �� � ���

�. �� � �� �� ���� ��( : ��� ��, �� � �� � ��� �

�)� �� ��� ���� � � ����. ��� ��� ���� � � �

����� �� ��� ��� � ����.

�: zSeries� Linux��� �� �� �� ������ ���� ����.

IBM Global Security Toolkit

Tivoli Access Manager� IBM Global Security Toolkit(GSKit)� ���� ���

���� ����. GSKit ���� �� iKeyman � �� ����(gsk5ikm)�

�����. � ����� ���� � ������, �-�� � � � �� ��

�� � ����.

� ����� ���� SSL� ���� �� �� ��� Secure Sockets Layer

Introduction and iKeyman User’s Guide � 193 ���� �� A �SSL(Secure

Sockets Layer) ���� ������.

Tivoli Access Manager Policy Server

�� ���� �� ��� ��� Tivoli Access Manager Policy Server� ��

���� �� ��� � ������� �������. � ��� ��� ��, �

� � � � �� �� ����. �� � ������ ���� ���� �

� ���� �� �� Tivoli Access Manager ��� �� �� ��� �����

��.

�� ����� � �� ��� Policy Server � ��� � ������ �

����� �� � ����. ���� �, standby ��� ��� �� � Policy

Server ��� ����� �� � ����.

Tivoli Access Manager Authorization Server

Authorization Server� Policy Server� ��� �� � � �� �� ��� �

���. � policy ������� ���� ������ � �� �� �

� �����. �� � ��� �� � ���� Tivoli Access Manager �

API� ���� �� ��(third-party) ������� �� � ��� ���� �

�� ����. � ���� ���.

Tivoli Access Manager JRE(Java Runtime Environment)

Tivoli Access Manager JRE(Java Runtime Environment)� Tivoli Access Manager

�� ����� Java ������� �� � ���� �� �� �� ��� �

���. �� ���� ��� � Java ������� Tivoli Access Manager

� � �� ���� ������. � ���� ���� �� ��� JRE� �

� ���.

�� ���� ��

� 1 � Tivoli Access Manager �� � 5

Page 26: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�� Tivoli Access Manager ����� �� Tivoli Access Manager JRE(Java

Runtime Environment)� ���� �� JRE� ����� ����� pdjrtecfg

��� �� ���. Tivoli Access Manager JRE(Java Runtime Environment)

� � ���� � �� �� �� JRE� ����� �� �� ����.

Web Portal Manager ������ ����� �� � ���� ����. Tivoli

Access Manager JRE(Java Runtime Environment) � �� ���� ��� �

�, Tivoli Access Manager ADK�� � ���� ����. ��� ��� IBM

Tivoli Access Manager Administration Java Classes Developer’s Reference � IBM

Tivoli Access Manager Authorization Java Classes Developer’s Reference� ��

����.

Tivoli Access Manager Runtime

Tivoli Access Manager Runtime�� ������� Tivoli Access Manager ��

� ����� � �� � �� ��� ���� � �� � � ����

�� ���� ��� � ���� Tivoli Access Manager Runtime �� Tivoli

Access Manager JRE(Java Runtime Environment)� �� ���.

Tivoli Access Manager Web Portal Manager

Web Portal Manager� Tivoli Access Manager ��� ���� ��

GUI(Graphical User Interface)���. pdadmin ��� ������ ����� �

GUI� ���, ��, � , �, policy � �� Tivoli Access Manager ���

�� ��� ����. � ��� �� ��� �� �� � ��� ��

�� �� � ��� ����.

�� Web Portal Manager�� �� �� ��� ��� ����. � ���� ��

�� ��� ��, �� � � ��, �� ��, ������ ��� �� ���

� ���� ���(�����)�� �� � ��� ���. �� ������

���� ���� �� ������� ��� �� ����, � � ��� �

� �� � �� � ��� �����.

� ���� IBM Tivoli Access Manager Web Portal Manager CD� � �

�� AIX, Solaris � ��(�� Solaris� �) � Windows ����� �� �

����. � ���� ���.

Tivoli Access Manager Application Development Kit

ADK� � �� � � ��� �� � ��� ����(third-party) ���

���� �� � �� �� ��� ����. ADK� C API � Java � ��

�� � � �� ��� ����� �����. � ���� ���.

�� ���� ��

6 IBM Tivoli Access Manager: �� �� ���

Page 27: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�� ����

Tivoli Access Manager ��� �� ���� ����� ��� �� �� ��

����.

1. Tivoli Access Manager ��� ������. Tivoli Access Manager� ��

� ���� �� ���� �����. ��� ��� 1 ���� ��� ���

� ������.

2. IBM Tivoli Access Manager ���� ��� ��� � ����� ���

� ���� ����� ������.

3. �� Tivoli Access Manager ��� ��� �����. ��� ��� 2 �

��� ��� ��� ��� ������.

4. 2� ��� �� ��� �� ����� �����.

2. �� ��

�� �� ����

�� �� �� ���� �� ��� Tivoli Access

Manager ���� ���� �� � �����

��� ������.

��� �� ������ ��

����.

�� �� �� ��� ����� ���� Tivoli Access

Manager ���� �� � ��� �� �

� ��� ������.

8 ���� ��� �� ��

���� ������.

����� Tivoli SecureWay Policy Director �� 3.8 �

� Tivoli Access Manager �� 3.9�� ���

�� �� ������.

1 1 3 � � � � � 8 �

�Tivoli Access Manager, �

� 4.1� ������� ��

����.

�� �� ����

�� ��� ���� �� ���� Tivoli Access Manager ���� �� � ��

��� ��� �� �� ������.

1. �� ���� �� �� �� ″�� �� ��″ �� � ����. Tivoli Access

Manager ���� ����� ���� �� �� ����� �� � ��� �

�����.

2. �(���) ��� ��� �� � ���� ��� �� �� ��� ���

� �� �� �� ���� �� ���. ��� ��� 13 ���� ���

�� ��� ���� ������.

3. Tivoli Access Manager� �� ���� � ���� ������ �� � �

���� �� ��� ������.

v Tivoli Access Manager��� �� � ������ ��� ��� � �

���� ���� ���� �������� ������. �� �� 21 ��

�� � 2 � �Tivoli Access Manager� �� ����� ���� �����

�� Tivoli Access Manager� �� �� ������ ������.

�� ���� ��

� 1 � Tivoli Access Manager �� � 7

Page 28: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v IBM Tivoli Directory Server(Tivoli Access Manager� �)� �����

ezinstall_ldap_server ����� ������. �� �� ����� ���

� IBM Tivoli Directory Server � �� �� ������ �� � ��

� �� �� SSL� �� � ����.

v IBM Tivoli Directory Server ��� ���� ������ ����� ��

��� ������. �� �� 21 ���� � 2 � �Tivoli Access Manager

� �� ����� ���� ���� Tivoli Access Manager� �� ��

������ ������.

4. ezinstall_pdmgr ��� ���� Tivoli Access Manager Policy Server �

��� ������.

5. Policy Server� ��� �, �� ���� �� ���� �� � ����.

� �, ��� �� � ����.

v ezinstall_pdauthADK ��� ���� ADK(Application Development Kit)

� �� �� ���� ������.

v ezinstall_pdacld ��� ���� Authorization Server ���� ����

��.

v ezinstall_pdwpm ��� ���� Web Portal Manager ������ �

� ��� ���� ������.

v install_pdrte InstallShield ����� ���� �� ��� ��� ����

� ���� ������.

6. : Tivoli Access Manager �� ���� Java ������� �� � �

��� ��, Tivoli Access Manager JRE(Java Runtime Environment)� ��

� ����. �� ��� ���� � ���� �� � �� ���, �

� � ���� �� ��� �� �� ����� �����.

7. : LDAP ��� IBM Directory Client �� SSL� ���� �� ���

�. ��� ��� 193 ���� �� A �SSL(Secure Sockets Layer) ����

������.

�: ezinstall_ldap_server ��� ����� SSL� �� �� � ��

�� � ����.

�� �� ����

�� ����� �� ��� � Tivoli Access Manager ���� �� � �

��� �� � �����. ��� ���� �� �� �� ����

����. 3 ���� 1�� �� Tivoli Access Manager ���� �� �� �

�� ��� ������.

�� ��� ���� Tivoli Access Manager ���� �� � ����� ���

�� �� ������.

�� ���� ��

8 IBM Tivoli Access Manager: �� �� ���

Page 29: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

1. Tivoli Access Manager� �� ���� � ���� ������ �� � �

���� �� ��� ������.

�: IBM Directory Server� �� �� �� ��� �� ������ IBM

Directory Server �� 4.1 �� � �� ���� �� ����� ����

��.

http://www.ibm.com/software/network/directory/library/

v IBM Directory Server ��� ���� ������ ����� �� ���

������.

v Tivoli Access Manager��� �� � ������ ��� ��� � �

���� ���� ���� �������� ������.

v AIX, Solaris �� Windows ���� IBM Directory Server� ����� �

� �� �����.

a. AIX, Solaris �� Windows� IBM Tivoli Access Manager Base CD�

���� IBM Directory Server� ������. IBM Directory Server�

����� �� ��� ������.

– AIX ���� ��:

installp -c -a -g -X -d /dev/cd0 ldap.server

– Solaris ���� ��:

pkgadd -d /cdrom/cdrom0/solaris -a /cdrom/cdrom0/solaris/pddefault \ IBMldaps

– Windows ���� ��:

/windows/Directory/ismp/setup.exe

b. AIX, Solaris �� Windows� IBM Tivoli Access Manager Base CD�

�� �� �� �� IBM Directory LDAP ��� ������. � ��

� ���� �� ��� ������.

– AIX � Solaris ���� ��:

apply_ldap41_patch.sh

– Windows ���� ��:

apply_ldap41_patch.bat

c. AIX, Solaris �� Windows� IBM Tivoli Access Manager Base CD�

�� �� �� �� IBM HTTP Server ��� ������. � ���

���� �� ��� ������.

– AIX � Solaris ���� ��:

http_1319_efix2.sh

– Windows ���� ��:

http_1319_efix2.bat

�� ���� ��

� 1 � Tivoli Access Manager �� � 9

Page 30: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v zSeries� Linux ���� IBM Directory Server� ����� �� �� �

����.

a. �� ���� �� � �� zSeries Linux� IBM Directory Server�

������.

http://www.ibm.com/software/network/directory/server/download/

b. IBM Directory 4.1� ��� 1� ������. Linux 390 OS

���(FP410T-01.tar.Z)� �� ���� �� � ����.

http://www.ibm.com/software/network/directory/ server/support/efixes.html

c. Bulkload patch for 4.1(.1) ��� 1� ������. Linux 390 OS ��

�(P410T-001A.tar.Z)� �� ���� �� � ����.

http://www.ibm.com/software/network/directory/ server/support/efixes.html

2. Lotus Domino ������ ��, �� Domino ��� IBM Directory Client

�� SSL ��� ���� �� ����. ��� ��� 217 ���� �Domino�

SSL ���� ������.

3. �� ��� ������.

v zSeries� Linux� IBM Directory Server� ��� �� 4�� ����. IBM

Directory Server� ���� �� Tivoli Access Manager� �� ���.

v Tivoli Access Manager� �� �� ������ ������. ��� �

�� 21 ���� � 2 � �Tivoli Access Manager� �� ����� ���

� ������.

4. �� ���� Tivoli Access Manager ���� ������. �� � ���

� �� �� ��� �� ��� ���� ������.

v IBM GSKit(Global Security Toolkit) - �� Tivoli Access Manager ��

�� ���� �� GSKit� �� ���. GSKit� Tivoli Access Manager

Runtime ��� �� �� �� �������, �� ���� �� � �

���� � ��� ����.

v IBM Directory Client - Tivoli Access Manager� ���� � ���(Active

Directory ��)�� � ������ ����.

v Tivoli Access Manager Runtime

v Tivoli Access Manager Policy Server

v Tivoli Access Manager Authorization Server

v Tivoli Access Manager Application Development Kit

v Tivoli Access Manager JRE(Java Runtime Environment)

v Tivoli Access Manager Web Portal Manager

��� ��� �� ���� �� �� �� ������.

�� ���� ��

10 IBM Tivoli Access Manager: �� �� ���

Page 31: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v �� ��� �� ��� �� �� ��� ��� 3 ���� 1� �

�����.

v � �� ���� � Policy Server� ��� ���� �� ���.

v Policy Server� ���� ��, Runtime Environment� �� ��

���. �� Policy Server� ��� ��� Runtime Environment�

���� ����.

5. zSeries� Linux� IBM Directory� ��� ��, �� Tivoli Access Manager

� �� �� ��� ������. ��� ��� 22 ���� �IBM Directory

Server ���� ������.

6. ������ IBM Directory ����� �� SSL ��� ���� �� ���

�. ��� ��� 193 ���� �� A �SSL(Secure Sockets Layer) ����

������.

�: Active Directory for Tivoli Access Manager� ���� SSL� �� Kerberos

� �����.

7. �(���) ��� ��� �� � ���� ���, Tivoli Access Manager �

��� ��� � � ���� ���� �� �� �� ���� ��

���. ��� ��� 13 ���� ��� �� ��� ���� ������.

��� ��

� ���� Tivoli Access Manager �� ���� ��� �� ��� � ���

��. � �� ��� �� ����.

v 12 ���� ��� �� ��

v 13 ���� ��� �� ��� ���

v 14 ���� ��� �� ������ �� ��� ���

v 16 ���� ��� �� ��� �� ���

v 17 ���� ��� �� ���

v 19 ���� ���� �����

v 19 ���� ���� ���(�� ��) ���

�� ���� ��

� 1 � Tivoli Access Manager �� � 11

Page 32: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�� �� ����� IBM Tivoli Access Manager ���� ��� �� ��

� �� �� � ����.

�� �� ��

Tivoli Access Manager ������ �� ��� �����.

v ����(���)

v ���

v ��

v ���

v ����

v � �

v ����

v �����

v ��

v ���

v ����

v ����

v ���

�� ��� ���� � �� IBM Tivoli Access Manager Language Support

CD� �� �� ���� ����. Tivoli Access Manager� �� ��� ���

�, ��� �� �� ���� �� ���.

�� ��� �� ��, Tivoli Access Manager� ���� �� �� ���� �

� ���� �� ���� � ����. �� ��� ��, Tivoli Access

Manager ���� ��� � � ���� ���� �� �� ���� �

�����. �� �� ���� ���� �� ��, �� ��� � ���� �

� ����. � ��� �� �� ��� �� �� ������.

�� �� ��� ��� ���� ��� ����� ��, �� �� ��(

� ��) �� �� ���. �� ��� ��� ��� ���� �� ��

� ����� ��� ������. ����� � �� ��� ���� �� ��,

�� ��� � �� � ���� �� ����.

�� ���� ��

12 IBM Tivoli Access Manager: �� �� ���

Page 33: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�� �� ��� ��

�� �� ���� ����� �� �� �����.

1. ���� root �� ���� �������.

2. IBM Tivoli Access Manager �� �� CD� ��� ����� CD� �� �

� �� �� ������.

3. �� ���� � ���� �� ���� JRE� ������. ��� ��

� �� ��� ������.

v AIX ���� ��, 56 ���� ������.

v HP-UX ���� ��, 68 ���� ������.

v Red Hat Linux �� zSeries� Linux ���� ��, 78 ���� �����

�.

v Solaris ���� ��, 88 ���� ������.

v Windows ���� ��, 104 ���� ������.

4. �� Tivoli Access Manager ��� ��, �� �� �� �� ���

������.

v ��� UNIX ������ ���� �� � (.bat ���)�

Windows ������ �����.

v jre_path� ���� �� ��� �� ��, Java �� � � PATH

�� ��� �� ���. ��� ���, �� �� jre_path� �

��� ��� ������.

package jre_path

� �, Tivoli Access Manager Base� �� ���� ����� �

�� ������.

install_pdrte_lp /usr/bin

���, /usr/bin� JRE� �� �����.

�� ���� �� ����.

install_pdjrte_lp Tivoli Access Manager JRE(Java Runtime

Environment)� �� �� ���� �����.

install_pdrte_lp Tivoli Access Manager Base� �� �� ��

�� �����.

�� ���� ��

� 1 � Tivoli Access Manager �� � 13

Page 34: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

install_pdwas_lp WebSphere Application Server� �� ����

����� �����.

install_pdwbpi_lp Tivoli Access Manager Plug-in for Web Server

� �� ���� ����� �����.

install_pdweb_lp Tivoli Access Manager WebSEAL� �� ��

�� ����� �����.

install_pdwls_lp WebLogic Server� �� ���� ����� �

����.

install_pdwpm_lp Tivoli Access Manager Web Portal Manager�

�� ���� ����� �����.

install_pdwsl_lp Tivoli Access Manager Plug-in for Edge Server

� �� ���� ����� �����.

5. ��� ����� �� �����. ����� ��� �� �� ���

����.

6. ��� ��� ���� ��� ��� ������ �� �� ���

��. �� ��� ��� ���� �� ��� ����.

7. �� �� ���� �� �� �����. � �� ���� �� �

��� ���� �� ��� ����.

8. � �� ���� ��� �� �����. � �� ���� ���

��.

9. Tivoli Access Manager �� �� ��� ��� � ��� � ���� ��

���� �� ������.

�� �� ������ �� ��� ��

Tivoli Access Manager ������ �� ���� ���� AIX � Solaris ��

��� IBM HTTP Server, IBM Directory � IBM DB2 ��� �� ���� �

� ���. � �� ���� IBM Tivoli Access Manager �� �� CD���

����.

1. �� �� ����� �� ���� ����� �� ��� ������.

v AIX ���� ��, �� ��� ������.

installp -c -a -g -X -d /dev/cd0 package

���, package� usr/sys/inst.images �� �� ���� �� ��

��� �� � ����.

http_server.html.lang IBM HTTP Server ��� �����.

http_server.msg.lang.admin IBM HTTP Server ���� �����.

�� ���� ��

14 IBM Tivoli Access Manager: �� �� ���

Page 35: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

http_server.msg.lang.ssl.core IBM HTTP Server SSL ���� �����.

ldap.html.lang IBM Directory ��� �����.

ldap.msg.lang IBM Directory ���� �����.

db2_07_01.msg.lang IBM DB2 �� ���� �����.

���, lang� �� � �����.

� �, ������ IBM HTTP Server ��� ����� ��� ���

���.

installp -c -a -g -X -d /dev/cd0 http_server.html.it_IT

v Solaris ���� ��, �� ��� ������.

pkgadd -d /cdrom/cdrom0/solaris -a /cdrom/cdrom0/solaris/pddefault package

���, package� /solaris �� �� ���� �� �� ��� ��

� ����.

IBMHAlang IBM HTTP Server ���� �����.

IBMHSlang IBM HTTP Server ��� �����.

IBMHSSlang IBM HTTP Server SSL ���� �����.

IBMldilang IBM Directory ��� �����.

IBMldmlang IBM Directory ���� �����.

db2mslang1 IBM DB2 �� ���� �����.

lang� �� � �����.

� �, ��� IBM Directory ���� ����� ��� ������.

pkgadd -d /cdrom/cdrom0/solaris -a /cdrom/cdrom0/solaris/pddefault IBMldmJa

2. IBM HTTP Server � IBM HTTP �� ��(�� ���)� �� � ��

�����. � �, UNIX ���� http_directory/bin �� ��� ��

��� ������.

apachectl stop

adminctl stop

�: httpd ����� �� �� ��� ��� �� ��� ������.

ps -ef | grep -i http

httpd ����� ��� �� �� kill ��� ������.

kill -i http_process_id_(pid)

�� ���� ��

� 1 � Tivoli Access Manager �� � 15

Page 36: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

3. http_directory/bin �� ��� setuplang ��� ������. � � �

�� � ��� �� httpd.conf � admin.conf � � �����. �� �

���� ��� ��� ����.

4. HTTP ��� �� ����� �� ��� ������.

http_directory/bin/apachectl start

http_directory/bin/adminctl start

5. ��� ��� ��� �� �� ���. ����� � ��� ����

� ��� �� ��� �� ��� ������.

�� �� ��� �� ��

�� �� ���� �� ����� �� �� �����.

1. �� �� � ��� ������.

v UNIX ���� ��:

/opt/location

v Windows ���� ��:

C:\Program Files\location

���, location� �� ����.

PDBLP/Lp_uninst Tivoli Access Manager WebSEAL� �� ��

� ��� �����.

PDJrtLP/lp_uninst Tivoli Access Manager JRE(Java Runtime

Environment)� �� ��� ��� �����.

PDWasLP/lp_uninst WebSphere Application Server� �� ��� �

�� �����.

PDWpiLP/lp_uninst Tivoli Access Manager Plug-in for Web Server

� �� ��� ��� �����.

PDWebLP/lp_uninst Tivoli Access Manager WebSEAL� �� ��

� ��� �����.

PDWlsLP/lp_uninst WebLogic Server� �� ��� ��� ����

�.

PDWpmLP/Lp_uninst Tivoli Access Manager Web Portal Manager�

�� ��� ��� �����.

PDWslLP/Lp_uninst Tivoli Access Manager Plug-in for Edge Server

� �� ��� ��� �����.

2. �� �� ���� �� ����� �� ��� ������.

v UNIX ���� ��:

�� ���� ��

16 IBM Tivoli Access Manager: �� �� ���

Page 37: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

jre_path/java package

v Windows ���� ��:

jre_path\java -jar package

���, jre_path� Java �� � � �� ���� ���� �� �����.

�: Java �� � � ��� �� ��, jre_path� �� �� ����.

pdrte_lp_uninstall.jar Tivoli Access Manager Base� �� ���� �

����.

pdjrte_lp_uninstall.jar Tivoli Access Manager JRE(Java Runtime

Environment)� �� ���� �����.

pdwas_lp_uninstall.jar WebSphere Application Server� �� ����

�����.

pdwbpi_lp_uninstall.jar Plug-in for Web Servers� �� ���� ��

���.

pdweb_lp_uninstall.jar Tivoli Access Manager WebSEAL� �� ��

�� �����.

pdwls_lp_uninstall.jar WebLogic Server� �� ���� �����.

pdwsl_lp_uninstall.jar Tivoli Access Manager Plug-in for Edge Server

� �� ���� �����.

��� �� ��

���� �� ���� ����� ��� �� � ���� �� �����

� ����. Tivoli Access Manager ������ ��, LANG �� ��� POSIX,

X/Open �� �� � ��� �� ���� ��� �� ���� �����

�.

�: Windows ��� �� ��, ���� ��� ���� �� ��� �� ��

����.

LANG �� ��� ���� �� ��� �� ��, LANG �� ��� ��

��� �����.

� ��� ��� ��� ��, � �� � �� ��� �� �� ���

LANG� �����. �� ���� ��� ��� ����.

v LC_CTYPE

v LC_TIME

v LC_NUMERIC

v LC_MONETARY

�� ���� ��

� 1 � Tivoli Access Manager �� � 17

Page 38: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v LC_COLLATE

v LC_MESSAGES

v LC_ALL

�� �� ���� ��� ��, LANG ��� ���� ��� ��

���.

LANG �� � UNIX ���

���� UNIX ���� LANG ��� ���� �� � �����. ��

�� �� UNIX ���� � ��� ���� � �� �� �� ��� �

����. �� � UNIX ���� ���� LANG �� ������.

UNIX ���� �� ��� ��� �� ��� ������.

locale -a

LANG �� � Windows ���

���� ���� LANG �� ��� ���� ����. �� Tivoli Access

Manager ������ LANG� ���� ��� ��� � � ����. � �

�, LANG� ISO �� �� �� ��� ���� �� �� ��� �� � ��

���� ������. � �, �� ����.

v fr� � ���� �� ���.

v ja� �� �� ���.

v pt_BR� ����(���) �� ���.

v C� C �� � � �� ���.

Windows �����, LANG� ���� �� ��, Tivoli Access Manager�

Windows ���� ��� �� ����� �� �� ��� �����.

��� �� ��

Tivoli Access Manager ������ �� � ��� ����� ����, ���

�� ��� �� � ����, Tivoli Access Manager� �� ���� �

���. � �, Tivoli Access Manager� ����� � �� ��� ����,

��� � �� ��� ��� ����.

v fr� � ���� �� ���.

v fr_FR� ����(���) �� �����.

v fr_CA� ����(��) �� �����.

v fr_CH� ����(���) �� �����.

�� ���� ��

18 IBM Tivoli Access Manager: �� �� ���

Page 39: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

��� ����

��� ��� ����� msg ���� �� ���� ��� ��� �����

�� �� �� ���� � � � �����.

v UNIX ���� ��:

/opt/PolicyDirector/nls/msg/locale

v Windows ���� ��:

install_dir/nls/msg/locale

Tivoli Access Manager� UNIX �� �� ��� ���� ��� ��� �

� �� ��� ����� �� � ����.

NLSPATH ��� � ��� �� ��� �� �� ��� ���� �� �

� �� � �����. � �, ��� ����� /opt/PolicyDirector/nls/msg�

�� ��, NLSPATH ��� �� �� �����.

/opt/PolicyDirector/nls/msg/%L/%N.cat:/opt/PolicyDirector/nls/msg/%L/%N

�: Windows� �� ��(:) �� ����(;)� �� ��� ������.

%L ���� �� ��� �� �� �� ��� ��� ���� �� �

� ����, %N.cat� ��� ��� ����� �����.

��� ��� �� ��� ����� �� ��, � C ��� ����� �

����.

� �, � �(���)� � �� �� AIX �� � �� ��,

LANG=De_CH.IBM-850

%L ���� �� ��� ���� ��� �� � ����.

1. de_CH

2. de

3. C

Tivoli Access Manager� � �(���) �� ���� ��� �� ���, de_CH

� ����. Tivoli Access Manager � � �� ���� ��� ��, de� ��

���. ��� ���, �� �� C� ���� ���� �� ����.

��� ���(�� ��) ��

�� �� ���� �� �� ��� ���� ����� ��� ����. �

�, Windows ���� �� ���� � SJIS(�� ��� 932)� �����

UNIX ���� �� eucJP� �����.

�� ���� ��

� 1 � Tivoli Access Manager �� � 19

Page 40: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

��, � ��� � � �� � ��� � ����� � ���

� �� �� �� ��� ����� � ����. � ��, ���� ����

� ����� ���� �� �� �� ��� � � ��� �� � ���

�.

Tivoli Access Manager� ���� � UTF-8(����� � ���)� �� �

� ��� �� ���� ��� ���.

��� ����� UTF-8� ���� �����, ���� ����� ���� ��

�� ����� �����. �� ��, � ���� ��� ���� � � �

��� ��� ��� 1 �� ��( : ISO8859-1, Microsoft 1252, IBM PC 850

� IBM MVS™

1047)� �� � ����.

UTF-8� ���� ���� �� ��� � ����. � �, CORBA(Common

Object Request Broker Architecture) ���� UTF-8� �����. �� ���

�� ��� ���� �� ��� ��� ��� �� ��� �����. �

�, �� � ��� UNIX �� EUC �� � ���� ������

�� PC ������ �� � ����.

Tivoli ���� ������ ��� ���� UTF-8� ���� �� ��� ��

� ���� �� � � ����. ��� ��� �� ���� ���� ��

������ �� � �� � ��� ���� �� ����� �����.

�� �� �� �

�� ������ �� ��� �� �� � � ����. � � � UTF-8 �

� � �� ��� ��� �� ��� �� ���� � �����. � � ��

�� �� �������.

v UNIX ���� ��:

/opt/PolicyDirector/nls/msg/locale

v Windows ���� ��:

install_dir/nls/msg/locale

�� ���� ��

20 IBM Tivoli Access Manager: �� �� ���

Page 41: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� 2 � Tivoli Access Manager� �� ����� ��

� ���� Tivoli Access Manager� �� �� ���� ������ ����

�� � �����. �� ���� Tivoli Access Manager ���� ���� �

� �� �� ���� �� ����(7 ���� ��� ������ ��� �

�). �� ������ ��� ���� ��� IBM Tivoli Access Manager �

��� ��� ������.

� �� ��� �� ����.

v �LDAP �� �� ��

v 22 ���� �IBM Directory Server ���

v 30 ���� �iPlanet Directory Server ���

v 34 ���� �Novell eDirectory ���

v 35 ���� �z/OS � OS/390 �� �� ���

v 41 ���� �Active Directory ���

v 47 ���� �Lotus Domino ���

LDAP �� �� ��

���� LDAP �� ��� �� � �� ��(DIT)�� � �� ��� ��

���. ��� � �� ����� ���(���� ���� �� ����� �).

LDAP ���� ��� ��� �� ��� � �� ���� �� � ���

� � �� � ����.

�� ���� �� LDAP ����� Tivoli Access Manager ���� ����

�� �����. �� Tivoli Access Manager� ��� LDAP ��� �� �

���� �� ACL(Access Control List)� ����� �����. �� ��

� �� ��� ��� � ��� ���� � �� �� Tivoli Access Manager

� ���� � ��� ����. Tivoli Access Manager� �� �� �� ���

� ���� ��, � �� ACL� �� ���. ����� IBM Tivoli Access

Manager �� ��� ���� ������.

Tivoli Access Manager��� Tivoli Access Manager ������ ������

secAuthority=Default�� ��� ���� �� ���. � ���� ��

LDAP ��� �� � � �� �� ���. � ���� ���� Tivoli Access

Manager� ���� � �� �� � ����. �� ���� �� ���� �

��� � � �� ���� � ���.

© Copyright IBM Corp. 2001, 2003 21

Page 42: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�� Policy Server �� GSO(Global Sign-On) � ��� ����� ���

� ����. GSO ������ ���� � ���� ����� � LDAP DIT

��� � ��� �� � ����. LDAP DIT �� �� ���� GSO ��

���� �� � ���, ��� �� � ���. ���� ���� ��, GSO

������ ��� ��� �� ��� ���� �� �� �� �� ����.

� �, �� �� GSO ������ ��� ��� �� ���� ���

o=ibm,c=tw� �����. ��� � �� ��� ������ �� �� ����

�� �� ����.

���� ��� ��� � ���� �� �� � ��� �� ���. �� �

��� ������� � ��� ����. ��� ��� Tivoli Access Manager

� ��� � ACL� �� � ����. ACL� ��� �� ��� ��� � �

�� ���� � �� �� Tivoli Access Manager� �����.

�: ��� ��� �� ��� ��� �� LDAP ��� �� �� �� ���

������. �� ��� ��� ���� ���� �� � ��� � � �

��. � ��� ��� ���� ���� �� ����.

�� ���� ��� ���� LDAP ������ ���� �� �����.

v �IBM Directory Server ���

v 30 ���� �iPlanet Directory Server ���

v 34 ���� �Novell eDirectory ���

v 35 ���� �z/OS � OS/390 �� �� ���

IBM Directory Server ��

v �� �� ezinstall_ldap_server ��� ���� IBM Directory Server

� ���� ��� ���� � �� ����� ������. �� ���

IBM Directory Server� ��� �����.

v IBM Directory Server� ���� �� 8 ���� ��� �� ������

��� ���� �� ���� ������. �� �� ��� ����.

v zSeries� Linux� IBM Directory� �� ��, Tivoli Access Manager�

8 ���� ��� �� ������ �� �� ��� �� ��� ����

��.

22 IBM Tivoli Access Manager: �� �� ���

Page 43: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Tivoli Access Manager� �� IBM Directory Server� ����� �� �� �

����.

1. IBM Directory Server� ���� ��� ������.

2. �� ��� ������.

v zSeries� Linux� ��� �� ���� �� 3�� ����.

v zSeries� Linux ���� ���� �� �� �����.

a. Tivoli Access Manager ���� �����. secschema.def�� � �

� Tivoli Access Manager� ��� etc �� �� ����. � ��

�� ���� ��� � ���� ������.

ldapmodify -h ldap_host -p port -D cn=root -w pswd -c -v -f secschema.def

b. Series� Linux� �� JRE� ������. ��� ��� 78 ����

���� JRE ���� ������.

�: IBM Directory Server dmt � ldapcfg ��� ��� ����

� JRE 1.3.1 ��� ����.

c. dmt � ldapcfg ���� IBM Directory� �� ��� JRE �� ��

JRE �� 1.3.1� ����� ��� ������.

– /usr/ldap/bin/dmt ��� ��� �� �� �� �����.

find_java() { # First, try to find the version of Java that we install with LDAP. # if [ "${ENV_JAVA}" == "" ] ; then COMMENT THIS LINE # OVERRIDE=${LDAPIDIR}/java/bin/java COMMENT THIS LINE # fi COMMENT THIS LINE

– /usr/ldap/bin/ldapcfg ��� ��� �� �� �� ��

���.

find_java() { # First, try to find the version of Java that we install with LDAP. # if [ "${OS}" != "HP-UX" ] ; then COMMENT THIS LINE # if [ "${ENV_JAVA}" == "" ] ; then COMMENT THIS LINE # OVERRIDE=${LDAPCIDIR}/java/bin/java COMMENT THIS LINE # fi COMMENT THIS LINE # fi COMMENT THIS LINE

3. �� ��� ������.

v zSeries� Linux� ��� �� ���� ��, �� ��� �� IBM

Directory Server �� ��� ���� �� 24 ���� 4�� ���

���.

http://servername:port/ldap/index.html.

���, servername� LDAP ��� ���� port� httpd.conf � � �

�� � �����.

IBM Directory Server

� 2 � ���� ����� �� 23

Page 44: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v zSeries� Linux ���� ����, ��� slapd32.conf � � ���

� �� ���� ������. �� �� Tivoli Access Manager ����

GSO ������ �� ���(�� � DN) � ��� ��( :

o=ibm,c=tw)� ���� slapd32.conf � � dn: cn=Directory �� �

�����. �� �� 28 ���� 14�� �� IBM Directory Server �

�� ������.

dn: cn=Directory, cn=RDBM Backends, cn=IBM, cn=Schemas, cn=Configuration cn: Directory ibm-slapdDbAlias: ldapdb2b ibm-slapdDbConnections: 30 ibm-slapdDbInstance: ldapdb2 ibm-slapdDbName: ldapdb2 ibm-slapdDbUserId: ldapdb2 ibm-slapdDbUserPW: >1aV1aFVp/G44POPw/p4ZkJAldiDt+GsRizdgwYF0F7tJYkcEUuBg4K7 HnRFBgMev8jrleaPmiblTpnxb3br96RQ6ZjHeu75ZqCQ9/cIGqH/G6aDVCfbkmk3xyErW1eQdNt 7i8iY9HHqgICIGQek6Qm1K< ibm-slapdPlugin: database /lib/libback-rdbm.so rdbm_backend_init ibm-slapdReadOnly: FALSE ibm-slapdSuffix: o=ibm,c=tw ibm-slapdSuffix: secAuthority=Default ibm-slapdSuffix: cn=localhost objectclass: top objectclass: ibm-slapdRdbmBackend

4. LDAP ���� �� � ��� ��� � � � �� �� �� �� �

����.

IBM Directory Server �� ���� ����.

IBM Directory Server

24 IBM Tivoli Access Manager: �� �� ���

Page 45: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

5. IBM Directory Server� ����� �� �� � ��� � �� → �� �

�� ����. �� �� �� ����.

6. ��� ��� ��/��� �� � ��� � ��� ������. ��� �

� �� ��� ���� ����.

7. ���� ����� �� �� � ��� ��� → ��� ����.

�� �� ����.

8. Tivoli Access Manager� ������ ������ ���� ����� �

� �� �� ��� �� ���� ������.

secAuthority=Default

�: ��� � ��� ����� ���� ����.

9. �� �����. �� �� ����. � ���� � �� �� ��

�� ����.

10. GSO ������ �� ���� ����� � ��, �� DN ��� �

��� � ��� ������. � �, ��� �� �� o=ibm,c=tw�

�� � ����.

IBM Directory Server

� 2 � ���� ����� �� 25

Page 46: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Tivoli Access Manager ��� �� � GSO ���� ����� ���

� ����. GSO ���� �� ��� �� ��� ��� 21 ����

�LDAP �� �� ��� ������.

11. �� �����. �� �� �� ����. �� ��� � �� ��� �

����� �� �� ���� �� � ����.

�: ���� ���� �� �� ��� ��� �� ��� � � ���

�� �� � �����.

IBM Directory Server

26 IBM Tivoli Access Manager: �� �� ���

Page 47: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

12. ��� ��� ���� �� �� �� � � �� �� ����� ��

��� �����.

� � �� �� ���� ����.

���� ��� �� ����.

���� ��� ��� IBM Directory Server� �� ������. �

�, Windows ���� ��, �� → �� → ���� �� ���� ���

��. IBM Directory ���� �� ��� � LDAP ��� �� ��

����.

13. �� ��� ������.

v secAuthority=Default� �� ��� ���� ���� �� ��, 28 �

��� 14 - 30 ���� 20�� ����. Policy Server� ��� �

secAuthority=Default� �� �� � ��� ��� �����.

v secAuthority=Default ��� ���� ��� ��, 28 ���� 14��

�� ���� � ���� �� �� � ��� ������.

IBM Directory Server

� 2 � ���� ����� �� 27

Page 48: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

14. �� � ��� ����� �� ����� dmt� ���� DMT(Direcotry

Management Tool)� ������. �� �� ����.

15. � � � ��� �� �� �� �����. �� �� �� ����.

16. �� ��� ������.

v DMT ��� LDAP �� �� SSL(Secure Sockets Layer)� ����� SSL

��� �� ��� ��� ������. ��� �� ��� ��� �

�� �����.

v DMT ��� LDAP �� �� SSL� ���� ���� �� ��� �

���.

IBM Directory Server

28 IBM Tivoli Access Manager: �� �� ���

Page 49: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

a. � �� �� SASL� � �� �� ��� ��� ����.

b. �� �� CRAM MD5� � �� ��� DN � ��� ��� �

�� �� ��� �����.

17. �� � ��� �� ��� ����. ��� ���� ���� � ��

��� �� �� ���� ����. ��� � � ���� ������.

�� �� �� ����.

18. ��� ���� ��� ��� �� ��� �����. � �, ��

��� ��� ��� ldap://lsc020:389���.

19. LDAP ��� �� ��� ��� �� ���� ��� �����. � �,

GSO ���� �� �� � ��� ���� ��� �� �� �� ��

��.

IBM Directory Server

� 2 � ���� ����� �� 29

Page 50: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

20. ��� �� �� ��� � ��� �����. � �, � � �� ��

GSO ��� �� �����.

21. ��� ���� �� �� � ��� ��� ���� ��� � IBM ��

� �� � �� �����.

iPlanet Directory Server ��

�� iPlanet Directory Server �� ��� ��� �� �� �� �� � ��� �

���� ������. ��� ��� �� ��� �� iPlanet Directory Server

��� ������.

http://docs.iplanet.com/docs/manuals/directory.html

Tivoli Access Manager� �� iPlanet Directory Server� ����� �� ��

�����.

1. �� ��� ���� �� � �� ��(slapd-serverID) � Management

Server ��(admin-serv)� �� �� ������.

v UNIX ���� ��, �� ��� ������.

/usr/iplanet/servers/slapd-serverID/start-slapd

/usr/iplanet/servers/start-admin

v Window ���� ��, �� → �� → ���� � � ��� �� �

�����. iPlanet Administration Server 5.0 � iPlanet Directory Server

5 ���� � � ��� �����.

2. �� ��� ���� iPlanet Console� ������.

v UNIX ���� ��, ��� ������.

IBM Directory Server

30 IBM Tivoli Access Manager: �� �� ���

Page 51: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

% /usr/iplanet/servers/startconsole

v Windows ���� ��, �� → ���� → iPlanet Server �� → iPlanet

Console 5.0� ����.

�� �� �(o=NetscapeRoot �� �)� iPlaner Directory Server� � �

���� ���� ��� iPlanet Console Login �� ����. � ��,

�� � ��� �� Management Server� ��� ��� ��� ID, ��

� ��� ��� �� ����.

3. LDAP ���� �� ��� ID � ��� ���� �������. � �,

� � �� �� cn=Directory Manager � �� ��� ������.

iPlanet Console� ����.

4. Topology ��� Directory Server �� � �����. iPlanet Directory Server

�� ����.

5. iPlanet Directory Server ��� Configuration �� ����.

6. �� �� ��� Data� ��� ��� �� �� � New Root Suffix�

����. �� ��� �� �� Data� � � �� ���� Object

→ Suffix� �� � ���� �� � ����.

� ��� � ������ ��� ����� ��� ��� �� �� �

���.

7. Tivoli Access Manager ���� ������ ���� ����� New suffix

��� secAuthority=Default� ������. �� �� ��� �� ��

iPlanet Directory Server

� 2 � ���� ����� �� 31

Page 52: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� ������� � �� ��� ���� OK� �����.

�: Create associated database automatically �� �� ���. �

� � �� ���� �� ������� ���� � ����. ���

���� ��� ���� � �� ���� �� � ����.

8. GSO ������ ������ � ���� ����� � ��, New

suffix ��� ��� � ��� ��� � �� ������ ��� ����

��. � �, � � �� �� o=ibm,c=tw� ��� � OK� �� �

����.

Tivoli Access Manager �� � GSO ���� ����� ���� ��

��. GSO� �� ��� ��� 21 ���� �LDAP �� �� ��� ��

����.

9. �� ��� ������.

v secAuthority=Default� �� ��� ���� ���� �� ��, 10 - 13

�� ������. Policy Server� ��� � secAuthority=Default�

�� �� � ��� ��� �����.

v secAuthority=Default ��� ���� ��� ��, 10�� �� ���

� � ���� �� �� � ��� ������.

10. Directory �� ��� �� � � � �� �� �� ��� �������.

iPlanet Directory Server

32 IBM Tivoli Access Manager: �� �� ���

Page 53: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

11. Objects → New Root Object� ����. � � �� �� � ���

��� �� �� �� � ���� ��� ����.

12. � � ���(secAuthority=Default� ��)� � � ���� ����.

New Object � �� ����. � � ���� �� � ����

�� �� ��� �����. � �, o=ibm,c=tw�� ��� ���� �

organization� � ����. ��� �� �� �� ��� �

� OK� �����.

13. Property Editor ��� ��� �� �� ������. o=ibm,c=tw� ��,

��� �� �� organization� �� ���� tivoli� ��� � OK� �

����.

iPlanet Directory Server

� 2 � ���� ����� �� 33

Page 54: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

14. ��� � ���� �� ��� ��� ��� Console → Exit� ��

�� �����.

Novell eDirectory ��

�� �� ��� Novell �� ��� ��� �� Novell eDirectory �

ConsoleOne ��� �� �� �� � ��� ����� ������.

http://www.novell.com/documentation/lg/ndsedir86/index.html

IBM Tivoli Access Manager ���� ��� ��� ��� ��� � Tivoli Access

Manager ����� � �� ����� ������.

Tivoli Access Manager� �� Novell eDirectory� ����� �� �� ���

��.

1. Novell Client ������ ����� ConsoleOne� ������.

2. NDS ��� ��� �� �� � ��� ��� ������. �� � ��

� �� �� ��(� ���� � Security ��� ����)� ����.

3. � �, � �� � � �� AM� ����. �� �� � ��

�� ����� ����.

4. Tivoli Access Manager�� �� � ��� ���� ����� LDAP Group

����� ��� ��� �� ��� Properties� ����. �� ��

�� ����.

5. LDAP �� �� ��� � � �� �� ����.

6. LDAP �� � � �� ��� ��� �� ��� ��� �� Apply�

����.

inetOrgPerson groupOFNames

iPlanet Directory Server

34 IBM Tivoli Access Manager: �� �� ���

Page 55: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

7. LDAP �� �� ���� �� �� �� ����. LDAP �� �� ��

��� �� ����.

8. ���� ���� NDS ��� Member ��� ����. �� LDAP

�� �� Member�� ������. LDAP �� �� Member� �� ��

Modify� �����.

9. �� �� ��� ��� ��� �� OK� ����.

v NDS Attribute = Member

v Primary LDAP Attribute = Member

v Secondary LDAP attribute = uniqueMember

10. LDAP �� �� ��� Apply � Close� �����.

��� GSO ���� Tivoli Access Manager� ��

�� ����� �� GSO ���� �� ���. �� � �� �� ��

���.

1. ConsoleOne� ������.

2. �� ���� �����. �� LDAP �� �� � �� ��(DIT)��

GSO(Global Sign-On) ������ �� ��� � �����. ���� �

���� � LDAP DIT ��� DN� �� � ����. �� ��� ��

� ����� �� ���.

3. � ����� ��� ��� �� ��� New → Object → Country�

� �� OK� �����.

4. �� ��� ������. � �, US� ���� OK� �����. ��

IBM �� � � ��� ����.

5. ��(US)� ��� ��� �� ��� New → Object → Organization�

� �� OK� �����.

6. �� ������. � �, Tivoli� ���� OK� �����.

z/OS � OS/390 �� �� ��

� ���� Tivoli Access Manager� �� z/OS �� OS/390� LDAP ��� �

��� � �� �� �� � �����. Tivoli Access Manager� ��

SAF(Security Authorization Facility) ������ � ���� � � ���

��.

� ���� � LDAP �� ����� Tivoli Access Manager ����� ���

� ���� ��� �����. ��� ��� �� ���� OS/390 �� z/OS�

LDAP �� �� � �� ���� ������. � ��� �� ��� z/OS ��

���� �� � ����.

Novell eDirectory

� 2 � ���� ����� �� 35

Page 56: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

http://www-1.ibm.com/servers/eserver/zseries/zos/bkserv/

��� ��� � ���� PTF� ��� IBM Tivoli Access Manager ��

�� ��� ������.

� ��� �� �� �� ��� ����. �� �� � � ����.

v TDBM ���� �� DB2 ������ ��

v TDBM ���� �� LDAP �� � ��

v �� ��

v ��� � �� � ��

v LDAP �� ��

v Tivoli Access Manager for LDAP ��

TDBM ��� �� DB2 ���� ��

TDBM ���� �� DB2 ������� ����� LDAP ��� �� �� �

� �� README � � ����� �����.

/usr/lpp/ldap/examples/sample_server

�� �� ����.

1. CLI(Call Level Interface)� �������. CLI� SQL ���� �� ��

����. � �� LDAP ��� CLI� ���� � �� ��� ����

�. �� ��� CLI� ����� �� �� � � ����. ��� ����

�� ���� � � MVS™ ����� ��� ���. � � � ��� �

�� 239 ���� ��� CLI ��� �� ���� ������.

2. CLI ��� � � ������. ��� � � LDAP ��� CLI� �� � �

�� ��� ����. � � � �� �� ��� ����. �� LDAP �

� � �� �����. � � � ��� ��� 240 ���� ��� CLI �

�� � �� ������.

3. � ������� ������. SQL ��� ���� � OS/390�� DB2

Interactive(DB2 I)� ����� SPUFI(SQL Processor Using File Input) �

�� ������. � ������ � ��� ��� �� �����, 230

���� �SPUFI� �� DB2 ������ � ��� � ���� ��

SPUFI � � ������. � ������� ��� ����� 236 ����

�SPUFI� �� DB2 �� ���� ��� SPUFI � � ������. SPUFI

��� �����, DB2 I� ���� �� �� ���� SPUFI� ��

��.

z/OS � OS/390 �� ��

36 IBM Tivoli Access Manager: �� �� ���

Page 57: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

TDBM ��� �� LDAP �� �� ��

TDBM ���� �� LDAP �� � � �����, 229 ���� ��� LDAP �

��� �� �� �� � � ������. TDBM�� �� ��� ����.

database TDBM GLDBTDBM

������ �� � ���� ��� �����. � ��� �� � �

�� TDBM ��� ��� ����.

databasename dbname

���� � ���� DB2 ������� ��� �����. � ��� �

����� � ��� �� ���� � ���� SPUFI� CREATE

DATABASE ��� �����. 36 ���� 3�� ������.

dsnaoini dataset

DB2 ��� � � �����. � � � ��� �� ��� ��� 36 �

��� 2�� ������. � ��� �� USERID.FILENAME ����

�.

dbuserid userid

DB2� ���� OS/390 ���� �����. userid� SPUFI ���

��� ���� ���(36 ���� 2�).

servername string

LDAP ��� ���� ���� DB2 �� ��� ��� �����. ��

�� CLI ��� � � DATA SOURCE ���� ��� ����.

attrOverflowSize num_of_bytes

�� DB2 ���� �� ��� ��� �� �����. �� 2� ��

�� �� ��� �� ����� �� ���.

suffix dn_suffix

� ��� �� � ��� ���� �� �� �� ����� ��� ��

���. ������ � ��� DN � Tivoli Access Manager �� ��

���� �� DN� ���� secAuthority=Default� ����.

�� ��� ����� �� �� ��� ����. �� ��� �� ��� �

�� OS/390 LDAP Server Administration and Usage �� ������.

UseNativeAuth [SELECTED | ALL | OFF]

SELECTED ��� ibm-nativeId �� �� �� ��� ��� SAF� �

���� �����. SELECTED� �� ���� ���� �� �

� ��� ������. ALL ��� ��� UID ��� �� ��� ��

� � SAF ��� �����(ibm-nativeId ��� ���� �� ��) �

����.

z/OS � OS/390 �� ��

� 2 � ���� ����� �� 37

Page 58: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

NativeAuthSubTree dn_suffix

�� ��� ��� �� �� �� ���� �� ��� ��� ���

��.

nativeAuthUpdateAllowed YES

Tivoli Access Manager ���� �� pkmspasswd ����� � SAF

��� �� � ��� ���.

�� ��

40 ���� �Tivoli Access Manager for LDAP ���� ��� �� � � ��

� ����. LDAP ��� �� � �� DLL� ���� ���. DLL�

PDS � ���� �����. slapd� z/OS ��� �� ��, �� ��

STEPLIB �� ��� ��� PDS� �� ���.

export STEPLIB=GLD.SGLDLNK export PATH=$PATH:/usr/lpp/ldap/sbin GLDSLAPD -f slapd.conf

��� �� �� � ��

��� � � �� � �����, � �� ��� � � �� �� �� ��

���.

v schema.user.ldif

v schema.IBM.ldif

��� � �� SAF �� �� ���� � ��� ���, Tivoli Access Manager

���� ���� ���� � ���� ���� � ��� � ����.

LDAP �� � � � DN ���� ��� � ��� � � �� ���. �

� ���� DN� ���� � �� ����.

� �, � ��� � � ��� �� �� ������.

dn: cn=schema, suffix

dn: cn=schema,o=ibm,c=tw

�� ��� �����, �� �� ldapmodify ��� ������.

ldapmodify -h hostname -p port -D bind_DN -w bind_pwd -f schema_file

�: schema.user.ldif� ��� �� schema.IBM.ldif� �� ���. ���

� ��� DN� � ���� �� �� �� ����.

z/OS � OS/390 �� ��

38 IBM Tivoli Access Manager: �� �� ���

Page 59: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

ACL� � LDAP ���� ��

Tivoli Access Manager� ����� � ���� �� ACL LDIF� �� �

� �����. cn=securitygroup� ���� �� ��� ��� �� ���

�.

ldapmodify ��� �� ����.

ldapmodify -h hostname -p port -D admin_DN -c -v -f ldif_filename

LDAP �� ��

� ���� LDAP ��� �� ���� �� �� �����. LDAP ��� �

� ��� � master-slave ��� ����. ��� ��� �� � ����

� �� ��� �����. �� ��(�� ��� ��)� �� � ��� ��

� �� ��� � � ����.

����, LDAP ��� ��� ��� ����� �������. �� ��� �

�� �� ��� ���� ����� �� ���� ��� ��� �����.

��� LDAP ��� �� ��� ��� ��

��� LDAP �� � � ���� ����� 229 ���� ��� LDAP ����

�� ��� �� ������. ��� LDAP ��� �� ��� �� ���

�.

masterServer ldapURL

LDAP URL� ldap://server_name:port ���� �����. � ���

��� ��� FQDN � �� �����.

masterServerDN DN

40 ���� ���� LDAP ��� ���� ���� �����

replicaBindDN� �� DN� �����.

masterServerPW string

40 ���� ���� LDAP ��� ���� ���� �����

replicaCredentials� �� ��� �����.

<suffix> aclpropagate=TRUE aclentry=group:cn=ivacld-servers,cn=securitygroups,secauthority=default:normal:csr aclentry=group:cn=remote-acl-users,cn=securitygroups,secauthority=default:normal:csr aclentry=group:cn=securitygroup,secauthority=default:object:ad:normal:cwsr:sensitive:cwsr:critical: \ cwsr:restricted:cwsr aclentry=access-id:<LDAP admin DN>:object:ad:normal:rwsc:sensitive:rwsc:critical:cwsr:restricted:cwsr <suffix> ownerpropagate=TRUE entryOwner=group:cn=SecurityGroup,secAuthority=Default entryOwner=access-id:LDAP admin DN>

z/OS � OS/390 �� ��

� 2 � ���� ����� �� 39

Page 60: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

��� LDAP ��� ��� ��� ��

�� ����� ���� ldif � � �� �� ����.

dn: cn=replicas objectclass: replicaObject cn: replicas replicaHost: hostname replicaPort: port replicaBindDn: any_unique_DN_to_bind_with replicaCredentials: password_to_bind_with description:"Description Here"

�� �� ldapmodify ���� � ����� �� � ����.

ldapmodify -h hostname -p port -D bind_DN -w bind_pwd -f schema_file

Tivoli Access Manager for LDAP ��

�� ��� �����, auth-using-compare� � � ���. � ��,

ivmgrd.conf � webseald.conf � � [ldap] ���� ��� �� �� �

� ������.

auth-using-compare = no

����, LDAP�� ��� ���� �� � ���� �����.

Tivoli Access Manager� LDAP �� �� � �� ��� �� �� ���� �

����. Tivoli Access Manager �� ���� GSO ���� �� � � ��

� ����. ��� ��� ��� ��(39 ���� �LDAP �� ��� ��),

ldap.conf � �� Tivoli Access Manager� ��� ��� ��� � � �

���.

�� �� ��� ��

�� ��� ��� ���� �� ��� ���� �� ��� ����. ��(

: ��� ��, ��� ��, ACL �� �� ��� ��� ��, � ��� ��

��(�� ��))� � LDAP ������ ��� Tivoli Access Manager� ��

��� �����. ���� �� pkmspasswd ����� ���� �� SAF

��� �� � ����.

�� ��� Tivoli Access Manager ���� SAF ��� ID� �� (many-to-one)

�� � �� �� ��� ����. � ���� � ibm-nativeId� ��

� ���, �� � ��� ������. ���, �� � ��� ���� SAF

��� ���� ���(���� ��� ��� ������ ��� ��� �� �

) ��� �� � ����.

pdadmin> group modify SAFusers add user1 pdadmin> acl create deny_pkms pdadmin> acl modify deny_pkms set group SAFusers T pdadmin> acl attach /Webseal/server_name/pkmspasswd deny_pkms

z/OS � OS/390 �� ��

40 IBM Tivoli Access Manager: �� �� ���

Page 61: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

OS/390 LDAP �� �� ���� �� ���� ���� �� �� ��� �

���. � �, �� ��� �� �� ��, �� Tivoli Access Manager �

� ��� ��� ����.

pdadmin> user modify user1 password ChangeMe1

��� ���� � ibm-nativeId ��� ���� out-of-the-box �� ��� �

���. �� �, �� ������� ��� nativeId� �� Tivoli Access

Manager ��� ��� �����.

user create ��� ���� ����.

pdadmin> user create user1 cn=user1,o=ibm,c=tw user1 user1 ChangeMe1 pdadmin> user modify user1 account-valid yes

��(� ��� ChangeMe1)� LDAP� ��� userpassword ��� �����.

�� �� ��� ���� �� � ����. ������� � ��� �� �

��� ��� ��� ������(�� ��� �� ��� �� ����� ��

� ����).

���� � ibm-nativeId ��� �����, �� �� ldif � � ����

��.

cn=user1,o=ibm,c=tw objectclass=inetOrgPerson objectclass=ibm-nativeAuthentication ibm-nativeId=SAF_username

�� �� ldapmodify ��� ���� ldif � � �� � ����.

ldapmodify -h hostname -p port -D bind_DN -w bind_pwd -f schema_file

��� ��� ����� �� SAF ��� �� ����.

subsystem_prefix ALTUSER userid PASSWORD password

Active Directory ��

Active Directory for Tivoli Access Manager� ����� �� ��� ����

�� ���.

1. Active Directory ��� ��

2. Active Directory ��� �

3. Active Directory ��� ��

Tivoli Access Manager� �� �� Active Directory ���� ��� �, ��

�� �� ���� Tivoli Access Manager ���� ���� ����. ��� �

�� 97 ���� � 7 � �Windows� Tivoli Access Manager ���� �����

z/OS � OS/390 �� ��

� 2 � ���� ����� �� 41

Page 62: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�. Active Directory� ��� � IBM Directory Client� �� �� ��

��. �� �� �� ����� 10 ���� 4�� ��� ���� Tivoli Access

Manager ���� �� ���.

Active Directory ����

Active Directory for Tivoli Access Manager� ���� �� �� ��� �

���.

v Tivoli Access Manager� Active Directory ��� �� � ��� ��

� ��� � ����. ��� �� � ��� ��� �� ��� ��

��� Active Directory �� ��� ������.

http://www.microsoft.com/windows2000/en/server/help/

v ��� ����, ���� ��� ���� Tivoli Access Manager� ��

� � ��� � ���. � ��� ����, ���� ��� �

��� Active Directory ��� � ���.

v �� �� �� � � ���� Tivoli Access Manager� �� � ���

�.

v �� ��� ��� �����.

v Active Directory ���� Tivoli Access Manager ���� ����� Active

Directory ���� ��� ��� Tivoli Access Manager ���� �� ���

ID� ������.

v Active Directory Client� Tivoli Access Manager� �� � ��� ��( �

�, Tivoli Access Manager� Active Directory� �� �� ���� �� ��),

����� ���� ���� ��� �� ���� ���� ���� �� �

�� ����� ���� �� Tivoli Access Manager ��� �� ���.

v ����� ���� ��� TCP/IP ��� DNS� ��� ���� ���

TCP/IP �� ���. �� ��� ���� DNS ��� �����

�� DNS� �� � ����.

v Tivoli Access Manager� ���� ����� ���� ��� �� �

��� ��, �� ��� ����� adschema_update.exe� ��� ��

���.

Active Directory ��� ��

Active Directory �� ���� ���� Windows 2000 �� ���� ��� �

��� �������. ��� ���� ���� Active Directory ��� ��

�����.

Active Directory

42 IBM Tivoli Access Manager: �� �� ���

Page 63: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

���� ��, � ���� �� ��� ���� �� ��� � ���� �

� ��� ���� �� ��� ��� � ���. � ���� �� ��

� ���� �����, � ���� �� ��� ���.

v � ���(forest)� � �� ���

v � ���(forest)� � ��� ��� �� � �� ���

v � ��� ��� �� ���

�: DNS� Forward Lookup Zones� � ��� ��� ��� �� ��, � �

�� ���� ���� �� �� � ��� �� ���. ��� ���

, ��� ��, ���(forest)� �� ��� ��� Windows 2000 �� �

�� ������.

���� ����� � ���� ��� ���� ����� �� �� ���

���.

v �Active Directory ��� ��

v 46 ���� �Active Directory ��� ���

Active Directory ��� ��

Active Directory ���� ��� �, �� �� �� Windows 2000 Advanced

Server� Active Directory ���� �����.

�: �� ���� ���� ����� ��� ��� �� � ��� ��� ��

���. �� ���� ���� ���� �� ������ �� ����

� DNS� ��� ������.

1. � ���� ��� ��� �� �� �� �� �� ���� �� ��� �

����. ��� �� ��� ����.

Active Directory

� 2 � ���� ����� �� 43

Page 64: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

2. ���� �� �� �����.

3. �� ��� �����. � �� � �� ���� �� �� � ����

��� ����. ����� ��� �����.

Active Directory

44 IBM Tivoli Access Manager: �� �� ���

Page 65: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

4. ��� ��� �� � �� ��� ��� ��� �� � ��� ��� ��,

��� � ���� ���� �����.

5. � ��� ��� �� �� �� �� ����. ����� ��� ��

���.

6. ���� �� �� �� �� �� ��� ����. ����� ���

�����.

Active Directory

� 2 � ���� ����� �� 45

Page 66: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

7. � ��� ������ ��� ��� �� ���� ����. ���� �

� ����� ��� �����.

�: ���� �� ��� � �� AD ����� �� ���� ������.

��� �� ���� Windows 2000 ��� �� �� ������.

Active Directory ��� ��

Tivoli Access Manager ���� �� Active Directory ���� �����, ��

�� ������.

1. Active Directory Server �����, �� → ���� → � �� → Active

Directory ��� � ���� ����.

2. � ���� ���� � ���� ���, ��� ���, ������ ��� �

��� ��� ��� ������. � ���� Active Directory ��� �,

Tivoli Access Manager ���� ����. sec_master� ��� ��� ���

��� ��� ���� � ����. � ��� Tivoli Access Manager

���� ������.

Active Directory ��

��� ���� Active Directory� �� ��� ����� �� �, ��� �

��� �� ��� ����� ���� ��� ��� ���� �����. �

���, � ��� 300�(5�)���. �� ��� � ��, ��� ���� �

��� ��� �� ���� �� ����� ��� ��. �� �� �

� ����� �� �� ��� ��(�)� ����. � ����� �� ���

Active Directory

46 IBM Tivoli Access Manager: �� �� ���

Page 67: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� ���� ��� ���. ����, � ��� 30����. ������ ��

� � � ��� �� �� � ����.

Active Directory� �� �� �� �� �� ��� ����� ����� ��

� ���� �� ����� �� �� Replicator notify pause after modify(secs)

DWORD �� ���� ������.

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Parameters

��: ����� ��� ���� ���� �� �� ������. �����

��� �� ���� �� ��� ���� ���� �� �� ��

����.

Replicator notify pause after modify(secs) DWORD �� ��� ���� 16�

��� 0x12c�� 10��� 300(5�)���.

��� ��� �� �� ��� ����� ����� ��� ���� �� �

���� �� �� Replicator notify pause between DSA(secs) DWORD ��

���� ������.

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Parameters

Replicator notify pause between DSA(secs) DWORD �� ��� ���� 16

� ��� 0x1e�� 10��� 30(30�)���.

�: ������ ��� �� Policy Server� ��� ���� �� �� �

��.

Active Directory � ��� �� �� ���� 5� ���� ��� �� ��

� �����. ��� �� ���� � ��� ��� �� ��� ��� � �

� �� � ��� ��� � ��� �� �� ����. �����, �� �� �

�� ����� �� ��� ��� �� ��� 2� �� ���� �� ��� �

� �� ����. Windows 2000 ��� ������� Replicator notify pause

after modify � Replicator notify pause between DSAs �� ����, ���

�� �� �� �� � ����.

Lotus Domino ��

Domino™ ��� Tivoli Access Manager� ������ �����, Lotus Notes®

������ Domino ��� �� ���. �� Domino ����

LDAP(Lightweight Directory Access Protocol) ������ �� �� ���.

�� Tivoli Access Manager� ��� ��� ���� ���� �� �

����. ��� ���� IBM Tivoli Access Manager �� ��� ���� �

�����.

Active Directory

� 2 � ���� ����� �� 47

Page 68: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Domino ������ ���� Tivoli Access Manager� Windows ������ �

����. Tivoli Access Manager�� Notes ������ ���, �� Notes �

����� Windows ������ ���� �����. LDAP ��� ��� �

��, � Tivoli Access Manager ����� IBM Directory Client �� ����

���.

IBM Directory Client� Domino LDAP ��� �� ��� ���� ��� ��

� �� ��� ���� � �����. �� � ��( : ��� �� �� �

��)� � ���(�� ��� � ��� ����)� � ����� � Notes

������ �����.

Lotus Notes ����� Domino ��� ��

Notes ������ Domino ��� �����, �� �� ������.

1. Windows� Notes/Domino CD�� Notes ������ ������.

2. Notes ������� ����� Notes �� �� ��� ��� ����.

Notes ����� ��� �� ��� ��� Lotus Notes Installation Guide�

������.

3. ��� ����, Notes ������ ���� ��� ������.

4. Domino ��� �� ����.

5. ���� �(LAN �)� ����.

6. ��� Domino �� ��� ������. � �, ��� ������.

domino1/Tivoli

7. ID�� � �� �� �� �� �� Tivoli Access Manager

��� ID( : AMDaemons)� ������. ID � � � ��, ��� ID

��� �� �� �� ID � � c:\lotus\notes\data �� �

� �����.

8. ����� ��� �����. �� �� ��� �� ���� ���, �

� ���� �� ���. Notes ����� �� �� �� ����

� ��� �����.

9. �� ��, ��� ��� ��� �� � �� ��

��.

Notes ������ �� Domino ��� ��� � �� � �� ����

����.

10. Tivoli Access Manager ���� ��� ������. ��� ����, Notes

������ ���� ��� ��� �����.

��� ����, ���� Notes ID � � �� ���� Notes �� �� �

� �����.

Domino

48 IBM Tivoli Access Manager: �� �� ���

Page 69: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Tivoli Access Manager for Domino ��� ��

1. Domino ��� ��� GUI�� ���� ��� ��� ����.

2. ��� ���� ��� ����.

3. Domino ��� ��� ID(�� ��� C:\Lotus\Domino\data)� ����.

4. ��� ��(�� �� ��)� ������.

5. �� �� �� Tivoli Access Manager ��� �� � ��� ����

��. � �, �� ����.

v �: PD

v ��: Daemons

v ��: password

6. ID ��� � Notes ID � � Domino �� �� ������ ������.

7. ��� �� �� � Tivoli Access Manager ���� �� �� �����

�. �� ��� ��� �����.

8. ��� ��� ��� ����� ��� � Domino ��� ���� ���

���.

9. �� ���� �� �� ��� Domino ��� Tivoli Access Manager ��

�� �� ��� ������ ������.

Domino

� 2 � ���� ����� �� 49

Page 70: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Domino

50 IBM Tivoli Access Manager: �� �� ���

Page 71: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� 3 � AIX� Tivoli Access Manager ��

� ���� AIX ���� Tivoli Access Manager ���� �� � ���� �

�� ����. �� �� � �� �� � ��� � �����. �� �

� ���� ����.

v ��� �� ���

v 53 ���� ��� �� ���

v 60 ���� �Tivoli Access Manager �� ���

�� �� ��

��� ��

v IBM Tivoli Access Manager for e-business ���� ���� � ��

� ��� ���� ��� ��� ���� � ����.

v 7 ���� ��� ������ ��� ���� Tivoli Access Manager ��

�� ����� ������.

v �� �� � � ��� �����. �� �� �� �� � �

����� �� ��� �� �� ��� 123 ���� � 9 � �UNIX

�� �� ������ ������.

�� ���� ����� � �� ���� ��� �� ���� ���� ��,

�� �� ��� ������. �� ��� �� �� ������ ���

�� ���� Tivoli Access Manager� � �� � �� ���. � �,

ezinstall_ldap_server� ���� IBM Directory Server� Tivoli Access Manager

������ �� � �� ��, � ��� IBM Directory Server� � �

� �� ����� �� � ��� �����. �� ��� �� ��� ��� �

�� ����� �� ���� ���� ����. � �, ��

ezinstall_ldap_server� ��� � ����� ezinstall_pdmgr� ���� Policy

Server� �� ��, GSKit � IBM Directory Client� �� ���� ����.

�� �� ��� �� ��� ����� ���� ��� �����. � �

�� �� ��� ��� ��� �� �� ���� ���� �����. ���

� ���� �� �� �� ��, �� �� ��� �� � ��� ��

© Copyright IBM Corp. 2001, 2003 51

Page 72: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� � �� � ����. �� � � ��� �� ��� ��� ���� ��

� �� �� �� ����. ��� ��� 185 ���� � 11 � ��� ��

�� � ���� ������.

3� AIX ���� �� �� �� ��� �����. � ����� AIX�

IBM Tivoli Access Manager Base CD� �� �� �� ���, ezinstall_wpm

����� ����. � ����� AIX� IBM Tivoli Access Manager Web Portal

Manager CD� �� �� �� ����.

3. AIX� �� �� ��

�� �� ��

ezinstall_ldap_server �� �� ����� ���� �� IBM Directory Server �

��� �����.

v IBM DB2

v IBM Global Security Toolkit

v IBM HTTP Server

v IBM Directory Client

v IBM Directory Server

�: �� ��� IBM Directory Server� � �� � ��

� ���� �� �����.

ezinstall_pdacld �� �� ����� ���� �� Authorization Server ���

� �����.

v IBM Global Security Toolkit

v IBM Directory Client

v Tivoli Access Manager Runtime

v Tivoli Access Manager Authorization Server

ezinstall_pdauthadk �� �� ����� ���� �� Tivoli Access Manager �

� ���� �����.

v IBM Global Security Toolkit

v IBM Directory Client

v Tivoli Access Manager Runtime

v Tivoli Access Manager Application Development Kit

ezinstall_pdmgr �� �� ����� ���� �� Tivoli Access Manager Policy

Server ���� �����.

v IBM Global Security Toolkit

v IBM Directory Client

v Tivoli Access Manager Runtime

v Tivoli Access Manager Policy Server

AIX

52 IBM Tivoli Access Manager: �� �� ���

Page 73: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

3. AIX� �� �� �� (��)

�� �� ��

ezinstall_pdwpm �� �� ����� ���� �� Web Portal Manager ��

�� �����.

v IBM Global Security Toolkit

v IBM Directory Client

v Tivoli Access Manager Runtime

v IBM WebSphere Application Server, Advanced Single Server

4.0 ��� 3

v Tivoli Access Manager Web Portal Manager

v Tivoli Access Manager JRE(Java Runtime Environment)

install_pdrte �� �� ����� ���� �� Tivoli Access Manager

Runtime ���� �����.

v IBM Global Security Toolkit

v IBM Directory Client

v Tivoli Access Manager Runtime

�� �� ��

��� ��

v IBM Tivoli Access Manager �� ��� ����� � ��� ���

���� ��� ��� ���� � ����.

v ����� ��� 7 ���� ��� ������ ��� ���� Tivoli

Access Manager ���� ����� ������.

v �� �� � � ��� �����. �� �� ��� ��� 219

���� �UNIX �� �� ���� ������.

� ��� �� ��� ����� ���� Tivoli Access Manager� ���� �

��� �� �� ��� ���� ����. �� ���� ���� ��� �

��� ��, � ��� � �� �� ������ �� ���� � ��

���.

� �� ��� �� ����.

v 54 ���� �IBM Global Security Toolkit ���

v 54 ���� �IBM Directory Client ���

v 55 ���� �Tivoli Access Manager ��� �� � ���

v 56 ���� ���� JRE ���

AIX

� 3 � AIX� Tivoli Access Manager �� 53

Page 74: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v 56 ���� �Tivoli Access Manager JRE(Java Runtime Environment) �� �

���

v 57 ���� �Web Portal Manager ��� �� � ���

IBM Global Security Toolkit ��

AIX ���� GSKit� ����� �� �� �����.

1. root� ���� �������.

2. AIX� IBM Tivoli Access Manager Base CD� �����.

3. �� ����� ��� ������.

installp -c -a -g -X -d /dev/cd0 gskkm.rte

4. iKeyman ����� ��� ����� �� �� AIX ��� �� ��

�.

export JAVA_HOME=path

���, path� Tivoli Access Manager JRE� ��� �����.

GSKit� ��� ��� ��� ��� ��� ����.

iKeyman � �� ����(gsk5ikm)� GSKit ���� �� ���� ������.

� ����� ���� SSL � � , �-�� � � � ��� �� �� �

����. ��� ��� 193 ���� �� A �SSL(Secure Sockets Layer) ���

� Secure Sockets Layer Introduction and iKeyman User’s Guide� ������.

IBM Directory Client ��

AIX ���� IBM Directory Client� ����� �� �� �����.

1. root� ���� �������.

2. AIX� IBM Tivoli Access Manager Base CD� �����.

3. �� ����� ��� ������.

installp -c -a -g -X -d /dev/cd0 ldap.client ldap.max_crypto_client

IBM Directory Client� ��� ��� ��� ��� ��� ����.

AIX

54 IBM Tivoli Access Manager: �� �� ���

Page 75: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Tivoli Access Manager ���� �� � ��

��� ��

v IBM Tivoli Access Manager �� ��� ����� � ��� ���

���� ��� ��� ���� � ����.

v ����� ��� 7 ���� ��� ������ ��� ���� Tivoli

Access Manager ���� ����� ������.

v �� �� � � ��� �����. �� �� ��� ��� 219

���� �UNIX �� �� ���� ������.

Tivoli Access Manager ���� ����� �� �� �����.

1. root� ���� �������.

2. Tivoli Access Manager ���� ����� �� ��� ������.

v AIX� IBM Tivoli Access Manager Base CD� �����.

v Web Portal Manager ���� ���� AIX� IBM Tivoli Access Manager

Web Portal Manager CD� �����.

3. �� ����� ��� ������.

installp -c -a -g -X -d /dev/cd0 package

���, /dev/cd0� �� ��� package� �� ��� �� �����.

PD.RTE Tivoli Access Manager Runtime� �� ��.

PD.Mgr Tivoli Access Manager Policy Server� �� ��.

PD.AuthADK Tivoli Access Manager Application Development Kit� ��

��.

PD.Acld Tivoli Access Manager Authorization Server� �� ��.

PD.WPM Tivoli Access Manager Web Portal Manager� �� ��. 57

���� �Web Portal Manager ��� �� � ����� ��

����� ������. � ���� Web Portal Manager �

� ��� � ����.

PDJ.rte Tivoli Access Manager JRE(Java Runtime Environment)� �

� ��. 56 ���� �Tivoli Access Manager JRE(Java Runtime

Environment) �� � ����� �� ����� ������.

� ���� JRE(Java Runtime Environment) �� ���

� ����.

4. �� ��� ���� �� ����� ������.

AIX

� 3 � AIX� Tivoli Access Manager �� 55

Page 76: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

pdconfig

Tivoli Access Manager �� ��� ����.

5. ��� ��� �� �� ��� ������. Tivoli Access Manager �� �

�� ����. ��� Tivoli Access Manager ��� ��� ����.

6. �� ���� � �� ��� ����.

� ���� �� �� ��� �� ���� ����. �� �� �

�� ��� 219 ���� �UNIX �� �� ���� ������.

7. ���� ��� ������ �� ���� ���� Enter� � ��

� ���� ����� x ��� � � �� �� ����� �����.

���� JRE ��

Tivoli Access Manager Java ��� ��� � �� �� ���� �� �� �

�� JRE� ����. AIX� �� �� JRE ���� ����� �� ��� �

�����.

installp -c -a -g -X -d /dev/cd0 Java131.rte

� �� �� ��� ����� ��� ������.

export PATH=jre_path:$PATH

����� JRE �� ����� ����� IBM Tivoli Access Manager �� �

�� ���� ������.

Tivoli Access Manager JRE(Java Runtime Environment) �� �

��

Tivoli Access Manager JRE(Java Runtime Environment)� �� � ����� �

�� �� �����.

1. root� ���� �������.

2. AIX� IBM Tivoli Access Manager Base CD� �����.

3. ���� ��� JRE� ������. ��� ��� ���� JRE ���� �

�����.

4. Tivoli Access Manager JRE� ����� ��� ������.

installp -c -a -g -X -d /dev/cd0 PDJ.rte

5. �� JRE ��� �� Tivoli Access Manager JRE� �����,

install_dir/sbin �� �� ���� �� ��� ������.

pdjrtecfg -action config

�: pdjrtecfg ��� �� ��� ��� IBM Tivoli Access Manager Command

Reference� ������.

AIX

56 IBM Tivoli Access Manager: �� �� ���

Page 77: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Web Portal Manager ��� �� � ��

Web Portal Manager ���� �� � ����� �� �� �����.

1. GSKit� ������. ��� ��� 54 ���� �IBM Global Security Toolkit

���� ������.

2. IBM Directory Client� ������. ��� ��� 54 ���� �IBM Directory

Client ���� ������.

3. IBM WebSphere Application Server, Advanced Single Server 4.0� ����

��. ��� ��� 58 ���� �IBM WebSphere Application Server,

Advanced Single Server ���� ������.

4. IBM WebSphere Application Server ��� 3� ������. ��� ���

59 ���� �IBM WebSphere Application Server ��� 3 ���� ����

��.

5. Tivoli Access Manager Java runtime ���� ������. �� ����

� ��� ������.

installp -c -a -g -X -d /dev/cd0 PDJ.rte

�: Tivoli Access Manager Java runtime ���� ��� ��� ����.

�� ��� JRE� ��� �� �� ����. WebSphere� ��

� JRE� ���� �� JRE ��� ���� � Tivoli Access Manager

JRE(Java Runtime Environment)� �����.

6. Tivoli Access Manager Runtime � Web Portal Manager ���� �� �

������. ��� ��� 55 ���� �Tivoli Access Manager ��� �

� � ���� ������.

�: Tivoli Access Manager Runtime � Web Portal Manager ���� IBM

WebSphere Application Server� � ���� �� ���. ���

Tivoli Access Manager Runtime� ��� �� IBM WebSphere Application

Server� ��� ��, Tivoli Access Manager�� ���� GSKit ���

������ ������.

7. Web Portal Manager ������ ���� �� WebSphere Application

Server� �� �� ������. �� �����, /usr/WebSphere/

AppServer/bin �� �� ��� startServer.sh ��� ������.

�: �� ����� 443 �� � ��� IBM WebSphere Application

Server� SSL ��� �����.

8. �� SSL � � � �� � � � ����� IBM HTTP Server �� �

�� SSL ��� �����. �� � � ����� ����. ���

� ���� ���� �� � � �� ���.

AIX

� 3 � AIX� Tivoli Access Manager �� 57

Page 78: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

/var/PolicyDirector/keytab/pdwpm.kdb

� ������ � � �����. � ��� httpd.conf � ��

�����.

/var/PolicyDirector/keytab/pdwpm.sth

� ������ ��� ��� � � �����.

9. IBM HTTP Server� ���� �� LDAP ��� ���� � ���� Web

Portal Manager� �� ��, �� �� ��� ������. IBM HTTP

Server �� �� ����� /usr/HTTPServer/conf/httpd.conf � �

��� �� �� �� � 80� 8080�� ������.

# Port: The port the standalone listens to. Port 8080

10. Web Portal Manager ������ ������ �� ��� ����� �

�����.

https://hostname/pdadmin

���, hostname� IBM HTTP Server� �� � ���� �����.

�: �� IBM HTTP Server�� �� ��� � http �� https� ��

���.

Web Portal Manager �� �� �� �� � �� ��� ����.

IBM WebSphere Application Server, Advanced Single Server �

IBM WebSphere Application Server, Advanced Single Server 4.0� �����, �

� �� �����.

1. root� ���� �������.

2. AIX� IBM Tivoli Access Manager Web Portal Manager CD� �����.

3. CD� ��� ����� usr/sys/inst.images/WebSphere �� �� ����

��.

4. �� ��� ������.

v GUI� ���� IBM WebSphere Application Server� ����� ��� �

�����.

./install.sh

v �� � � �����, install.sh ��� �� �� ���� 59 �

��� �IBM WebSphere Application Server ��� 3 ���� ����.

./install.sh -silent -responseFile ./install.script \ -prereqfile ./prereq.properties

AIX

58 IBM Tivoli Access Manager: �� �� ���

Page 79: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

WebSphere Application Server, Advanced Single Server Edition ��

����. ����� �� �����.

�: ����� �� ���� ���� ��� �� ��� ���� ��

� ����.

5. �� ��(�� ��)� �� �� �����.

6. WebSphere Application Server �� �� � � IBM HTTP Server� �� �

�� ����. ���� �� ���� ��� IBM HTTP Server� ����

�� ��, � ��� ��� ����. � ��� ��� �� ��

���� ����.

�: WebSphere Application Server ��� 3� ���� � �� ��� ��

��� ���� ����. �� ��� �� ����.

v WebSphere Application Server: /usr/WebSphere/AppServer.

v IBM HTTP Server: /usr/HTTPServer

�� �� ��� �� ��� �� ��. ��� �� �� �����

������.

7. IBM WebSphere Application Server� IBM HTTP Server� �����. AIX�

IBM Tivoli Access Manager Web Portal Manager CD� �� �� �� ��

�� ��� �� ���. �� ����� ��� ������.

http_1319_efix2.sh

8. ���� �����, �IBM WebSphere Application Server ��� 3 ���� �

�����.

IBM WebSphere Application Server ��� 3 ��

IBM WebSphere Application Server ��� 3� �����, �� �� ����

�.

1. WebSphere Application Server, HTTP Server � LDAP ��� �����

( � ���� ��� ��).

2. AIX� IBM Tivoli Access Manager Web Portal Manager CD� �����.

3. CD� ��� ����� /usr/sys/inst.images/WebSphere_PTF3 �� ��

���� �� ��� ������.

install.sh

4. IBM WebSphere Application Server � �� �� ���� Enter� ���

��. � �, ��� ������.

/usr/WebSphere/AppServer

5. ������ ��� ����� �� ����.

6. JDK� ��� ����� �� ����.

AIX

� 3 � AIX� Tivoli Access Manager �� 59

Page 80: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

7. iPlanet Directory� ������ �� ��, �� �� WebSphere�� �

���� iPlanet �� ��� ������. ��� ���, ���� �

���.

8. IBM HTTP Server� ����� �� ����.

9. IBM HTTP Server� �� ��, IBM HTTP Server � �� �� ����

Enter� �����. � �, ��� ������.

/usr/HTTPServer

10. ������ �� �� �� �� ����� �� ����.

11. WebSphere Application Server � �� �� ��� ����� �� ��

��.

������ �����. ���� IBM JDK ����� � ���� ��

��. �� ������ � AIX®� IBM Developer Kit� WebSphere �

� �� �����. �� ���� �� �� ��� ��� �� ��� ��

��.

������ ����, �� ���� ����. �� �� ��� ��

�����. ��� ��� �� ��� ������. ����� �

� �� �����.

12. ����� � �� �����.

WebSphere Application Server, Advanced Single Server 4.0 � ��� 3� �

������.

13. ����� ���� ���� �� ������.

Tivoli Access Manager �� ��

��� ��

v ���� �� ���� �� � Tivoli Access Manager ��� � ��

����� ������.

v Policy Server � ��� ���� �� ��� �� Tivoli Access

Manager ������( : WebSEAL)� �� �� �����.

v ����� Policy Server ���� �� ��� ������.

Tivoli Access Manager �� ��� � ���� ��� �������. �����

� �� ����� �� ��� �� ���� �� �� � �� ��

�.

� �� ��� �� ����.

AIX

60 IBM Tivoli Access Manager: �� �� ���

Page 81: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v �Tivoli Access Manager ��� �� ��

v �Tivoli Access Manager ��� ���

Tivoli Access Manager ���� �� ��

Tivoli Access Manager ���� ���� ��, ���� �� ����� ��

���. �� ����� �� �� �����.

1. root� ���� �������.

2. �� ����� ����� ��� ������.

pdconfig

Access Manager for e-business �� ��� ����.

3. ���� �� ����, Tivoli Access Manager ���� �� �� ��

� ��� ������. �� ���� � ���� � � ��� �����

�.

�:

v ���� ���� �� ��, ��� �� � ����. �Tivoli Access

Manager ��� ���� ����.

v ��� �� ��� ��, LDAP ���� � �� � ��� �����

���� ����.

v Policy Server� �� ��� � �� � � ��� �� ����� �

����. Tivoli Access Manager ������( : WebSEAL)� ���� �

�� ����. ����� y� ������.

4. Tivoli Access Manager JRE(Java Runtime Environment)� �� ����,

pdjrtecfg ��� ������. � �, jre_path ��� � ��� JRE�

�� ���� ��� ������.

pdjrtecfg -action unconfig -java_home jre_path

�: ��� � JRE� � pdjrtecfg ��� ����� ������. ��� �

�� IBM Tivoli Access Manager Command Reference� ������.

Tivoli Access Manager ��� ��

AIX ����� ���� ����� �� �� �����.

1. �� �� ���� ������. 61 ���� �Tivoli Access Manager �

�� �� ��� �� ����� �����.

2. �� ��� ��� � �� ������ ����� ��� ������.

installp -u -g package

���, package� �� �����.

AIX

� 3 � AIX� Tivoli Access Manager �� 61

Page 82: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�: ��� �� ���� � �� ������ ��� ���� -g ��� �

�����.

PD.AuthADK Tivoli Access Manager Application Development Kit� ��

��.

PD.Mgr Tivoli Access Manager Policy Server� �� ��.

PD.Acld Tivoli Access Manager Authorization Server� �� ��.

PD.RTE Tivoli Access Manager Runtime� �� ��.

PDJ.rte Tivoli Access Manager JRE(Java Runtime Environment)� �

� ��.

PD.WPM Tivoli Access Manager Web Portal Manager� �� ��.

ldap.client IBM Directory Client� �� ��.

ldap.max_crypto_client

IBM Directory Client� �� �� ���� �� ��.

gskkm.rte GSKit� �� ��.

AIX

62 IBM Tivoli Access Manager: �� �� ���

Page 83: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� 4 � HP-UX� Tivoli Access Manager ��

� ���� HP-UX ���� Tivoli Access Manager ���� �� � ����

�� �� ��� ����. �� �� � �� �� � ��� � ����

�. �� �� ���� ����.

v ��� �� ���

v 65 ���� ��� �� ���

v 69 ���� �Tivoli Access Manager �� ���

�� �� ��

��� ��

v IBM Tivoli Access Manager ���� ���� � ��� ��� ��

�� ��� ��� ���� � ����.

v 7 ���� ��� ������ ��� ���� Tivoli Access Manager ��

�� ����� ������.

v �� �� � � ��� �����. �� �� �� �� � �

����� �� ��� �� �� ��� 123 ���� � 9 � �UNIX

�� �� ������ ������.

�� ���� ����� � �� ���� ��� �� ���� ���� ��,

�� �� ��� ������. �� ��� �� �� ������ ���

�� ���� Tivoli Access Manager� � �� � �� ���. � �,

ezinstall_pdmgr� ���� Tivoli Access Manager Policy Server ���� ��

��, ������ Policy Server ���� �� �� ����� � ��� �

����. �� ��� �� ��� ��� ��� ����� �� ���� ���

� ����. � �, �� install_pdrte� ��� � �����

ezinstall_pdacld� �� ��, GSKit, IBM Directory Client �� Tivoli Access

Manager Runtime� ����� ����.

�� �� ��� �� ��� ����� ���� ��� �����. � �

�� �� ��� �� ��� �� �� ���� ���� �����. ��� �

���� �� �� �� ��, �� �� ��� �� � ��� �� �

© Copyright IBM Corp. 2001, 2003 63

Page 84: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� �� � ����. �� � � ��� �� ��� ��� ���� ���

�� �� �� ����. ��� ��� 185 ���� � 11 � ��� �� ��

� ���� ������.

4� HP-UX ���� �� �� �� ��� �����. �� ���

HP-UX� IBM Tivoli Access Manager Base CD� �� �� �� ����.

4. HP-UX� �� �� ��

�� � �� ��

ezinstall_pdacld �� �� ����� ���� �� Authorization Server ���

� �����.

v IBM Global Security Toolkit

v IBM Directory Client

v Tivoli Access Manager Runtime

v Tivoli Access Manager Authorization Server

ezinstall_pdauthadk �� �� ����� ���� �� Tivoli Access Manager �

� ���� �����.

v IBM Global Security Toolkit

v IBM Directory Client

v Tivoli Access Manager Runtime

v Tivoli Access Manager Application Development Kit

ezinstall_pdmgr �� �� ����� ���� �� Tivoli Access Manager Policy

Server ���� �����.

v IBM Global Security Toolkit

v IBM Directory Client

v Tivoli Access Manager Runtime

v Tivoli Access Manager Policy Server

install_pdrte �� �� ����� ���� �� Tivoli Access Manager

Runtime ���� �����.

v IBM Global Security Toolkit

v IBM Directory Client

v Tivoli Access Manager Runtime

HP-UX

64 IBM Tivoli Access Manager: �� �� ���

Page 85: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�� �� ��

��� ��

v IBM Tivoli Access Manager ���� ���� � ��� ��� ��

�� ��� ��� ���� � ����.

v ����� ��� 7 ���� ��� ������ ��� ���� Tivoli

Access Manager ���� ����� ������.

v �� �� � � ��� �����. �� �� ��� ��� 219

���� �UNIX �� �� ���� ������.

� ��� �� ��� ����� ���� Tivoli Access Manager ���� �

��� ���� �� �� ��� ���� ����. �� ���� ���� �

�� ���� ��, � ��� � �� ��� �� ���� � ��

���.

� �� ��� �� ����.

v �IBM Global Security Toolkit ���

v 66 ���� �IBM Directory Client ���

v 67 ���� �Tivoli Access Manager ��� �� � ���

v 68 ���� ���� JRE ���

v 68 ���� �Tivoli Access Manager JRE(Java Runtime Environment) �� �

���

IBM Global Security Toolkit ��

HP-UX ���� GSKit� ����� �� �� �����.

1. root� ���� �������.

2. HP-UX� IBM Tivoli Access Manager Base CD� �����.

3. pfs_mountd � pfsd� �� �� ��� �� ������ ������.

pfs_mount ���� CD� �������. � �, ��� ������.

/usr/sbin/pfs_mount /dev/dsk/c0t0d0 /cd-rom

���, /dev/dsk/c0t0d0� CD ������ /cd-rom� ��� �����.

4. �� ����� ��� ������.

swinstall -s /cd-rom/hp gsk5bas

���, /cd-rom/hp� �� ����.

HP-UX

� 4 � HP-UX� Tivoli Access Manager �� 65

Page 86: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

5. SHLIB_PATH� /usr/lib �� /opt/ibm/gsk5/lib� ���� ��� ���

��. ���� �� ��� ��� ������.

export SHLIB_PATH=/usr/lib;$SHLIB_PATH

� ��� ���� �� ��� Tivoli Access Manager � ���� GSKit �

���� ����� � � ����.

GSKit� ��� ��� ��� ��� ��� ����.

SHLIB_PATH� GSKit ���� �� ���� iKeyman � �� ����(gsk5ikm)

� ���� �� ����. � ����� ���� SSL � � , �-�� � �

� ��� �� �� � ����. gsk5ikm� �� ��� ��� 193 ����

�� A �SSL(Secure Sockets Layer) ��� � Secure Sockets Layer Introduction

and iKeyman User’s Guide� ������.

IBM Directory Client ��

HP-UX ���� IBM Directory Client� ����� �� �� �����.

1. � ��� ���� �� ��� LDAP ����� ���� ����� ����

��.

2. root� ���� �������.

3. HP-UX� IBM Tivoli Access Manager Base CD� �����.

4. pfs_mountd � pfsd� �� �� ��� �� ������ ������.

pfs_mount ���� CD� �������. � �, ��� ������.

/usr/sbin/pfs_mount /dev/dsk/c0t0d0 /cd-rom

���, /dev/dsk/c0t0d0� CD ������ /cd-rom� ��� �����.

5. �� ����� ��� ������.

swinstall -s /cd-rom/hp LDAPClient

���, /cd-rom/hp� �� ��� LDAPClient� IBM Directory Client ��

�� �����.

6. HP-UX� IBM Tivoli Access Manager Base CD� �� �� ��� ��� �

��� IBM Directory Client ��� ������.

apply_ldap41_patch.sh

IBM Directory Client� ��� ��� ��� ��� ��� ����.

HP-UX

66 IBM Tivoli Access Manager: �� �� ���

Page 87: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Tivoli Access Manager ���� �� � ��

��� ��

v IBM Tivoli Access Manager ���� ���� � ��� ��� ��

�� ��� ��� ���� � ����.

v ����� ��� 7 ���� ��� ������ ��� ���� Tivoli

Access Manager ���� ����� ������.

v �� �� � � ��� �����. �� �� ��� ��� 219

���� �UNIX �� �� ���� ������.

HP-UX�� Tivoli Access Manager� �����, �� �� �����.

1. root� ���� �������.

2. HP-UX� IBM Tivoli Access Manager Base CD� �����.

3. pfs_mountd � pfsd� �� �� ��� �� ������ ������.

pfs_mount ���� CD� �������. � �, ��� ������.

/usr/sbin/pfs_mount /dev/dsk/c0t0d0 /cd-rom

���, /dev/dsk/c0t0d0� CD ������ /cd-rom� ��� �����.

4. �� ����� ��� ������.

swinstall -s /cd-rom/hp package

���, /cd-rom/hp� �� ��� package�� �� �� �����.

PDRTE Tivoli Access Manager Runtime� �� ��.

PDMgr Tivoli Access Manager Policy Server� �� ��.

PDAuthADK Tivoli Access Manager Application Development Kit� ��

��.

PDAcld Tivoli Access Manager Authorization Server� �� ��.

PDJrte Tivoli Access Manager JRE(Java Runtime Environment)� �

� ��. 68 ���� �Tivoli Access Manager JRE(Java Runtime

Environment) �� � ����� �� ����� ������.

� ���� JRE(Java Runtime Environment) �� ���

� ����.

5. �� ��� ���� �� ����� ������.

pdconfig

Tivoli Access Manager �� ��� ����.

HP-UX

� 4 � HP-UX� Tivoli Access Manager �� 67

Page 88: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

6. ��� ��� �� �� ��� ������. Tivoli Access Manager �� �

�� ����. ��� Tivoli Access Manager ��� ��� ����.

7. �� ���� � �� ��� ����.

� ���� �� �� ��� �� ���� ����. �� �� �

�� ��� 219 ���� �UNIX �� �� ���� ������.

8. ���� ��� ������ �� ���� ���� Enter� � ��

� ���� ����� x ��� � � �� �� ����� �����.

���� JRE ��

Tivoli Access Manager Java ��� ��� � �� �� ���� �� �� �

�� JRE� ����. HP-UX� �� �� JRE ���� ����� �� ��

� ������.

swinstall -s /cd_drive/hp rte_13101os11.depot B9789AA

���, /cd_drive� CD ��� ���� /cd_drive/hp� �� ����.

� �� �� ��� ����� ��� ������.

PATH=java_path:$PATH

����� JRE �� ����� ����� IBM Tivoli Access Manager ���

� ��� ������.

Tivoli Access Manager JRE(Java Runtime Environment) �� �

��

Tivoli Access Manager JRE(Java Runtime Environment)� �� � ����� �

�� �� �����.

1. root� ���� �������.

2. HP-UX� IBM Tivoli Access Manager Base CD� �����.

3. pfs_mountd � pfsd� �� �� ��� �� ������ ������.

pfs_mount ���� CD� �������.

4. ���� ��� JRE� ������. ��� ��� ���� JRE ���� �

�����.

5. Tivoli Access Manager JRE� ����� ��� ������.

swinstall -s /cd-rom/hp PDJrte

6. �� JRE ��� �� JRE� �����, install_dir/sbin �� �� ��

�� �� ��� ������.

pdjrtecfg -action config -java_home jre_path

HP-UX

68 IBM Tivoli Access Manager: �� �� ���

Page 89: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�: pdjrtecfg ��� �� ��� ��� IBM Tivoli Access Manager Command

Reference� ������.

Tivoli Access Manager �� ��

��� ��

v ���� �� ���� �� � Tivoli Access Manager ��� � ��

����� ������.

v Policy Server � ��� ���� �� ��� �� Tivoli Access

Manager ������( : WebSEAL)� �� �� �����.

v ����� Policy Server ���� �� ��� ������.

Tivoli Access Manager �� ��� � ���� ��� �������. �����

� �� �� ����� �� ��� �� ���� �� �� � ��

���.

� ��� �� ��� ��� ����.

v �Tivoli Access Manager ��� �� ��

v 70 ���� �Tivoli Access Manager ��� ���

Tivoli Access Manager ���� �� ��

UNIX ����� Tivoli Access Manager ���� ���� �� �� ����

�� � ���. �� ����� �� �� �����.

1. root� ���� �������.

2. �� ��� ���� �� ����� ������.

pdconfig

Tivoli Access Manager �� ��� ����.

3. �� � ��� ���� 2� �����. �� ��, �� � Tivoli Access

Manager ���� �� �� ��� ��� ������. �� ���� �

���� � � ��� ������.

�:

v ���� ���� �� �� ��� �� � ����. 70 ���� �Tivoli

Access Manager ��� ���� ����.

v ��� �� ��� ��, LDAP ���� � �� � ��� ��� �

��� ����.

HP-UX

� 4 � HP-UX� Tivoli Access Manager �� 69

Page 90: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v Policy Server� �� ��� � �� � � ��� �� ����� �

����. Tivoli Access Manager ������( : WebSEAL)� ���� �

�� ����. ����� y� ������.

4. Tivoli Access Manager JRE� �� ����, pdjrtecfg ��� ������.

� �, jre_path ��� � ��� JRE� �� ���� ��� ����

��.

pdjrtecfg -action unconfig -java_home jre_path

�: pdjrtecfg ��� �� ��� ��� IBM Tivoli Access Manager Command

Reference� ������.

Tivoli Access Manager ��� ��

HP-UX ����� ���� ����� �� �� �����.

1. �� �� ���� ������. 69 ���� �Tivoli Access Manager �

�� �� ��� �� ����� �����.

2. �� ��� ���� ����� ��� ������.

swremove package

���, package� �� �� �����.

PDAuthADK ADK� �� ��.

PDMgr Tivoli Access Manager Policy Server� �� ��.

PDAcld Tivoli Access Manager Authorization Server� �� ��.

PDRTE Tivoli Access Manager Runtime� �� ��.

PDJrte Tivoli Access Manager JRE(Java Runtime Environment)� �

� ��.

LDAPClient IBM Directory Client� �� ��.

gsk5bas GSKit� �� ��.

�� � ��� ���� �� ���� ����. � � � �����

�����.

HP-UX

70 IBM Tivoli Access Manager: �� �� ���

Page 91: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� 5 � Linux� Tivoli Access Manager ��

� �� Red Hat Linux � zSeries� Linux ���� Tivoli Access Manager ��

�� �� � ���� ��� ����. �� �� � �� �� � ���

� �����. �� �� ���� ����.

v 72 ���� ��� �� ��(Red Hat Linux ��)�

v 73 ���� ��� �� ���

v 79 ���� �Tivoli Access Manager �� ���

5� ���� Tivoli Access Manager ��� � �� �� �����.

5. ���� Tivoli Access Manager ���

���� Red Hat Linux zSeries� Linux

�� �� �� �� �� �� �� ��

Tivoli Access Manager Application

Development Kit

U U U

Tivoli Access Manager Authorization

Server

U

Tivoli Access Manager JRE(Java

Runtime Environment)

U

Tivoli Access Manager Policy Server U

Tivoli Access Manager Runtime U U U

© Copyright IBM Corp. 2001, 2003 71

Page 92: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�� �� ��(Red Hat Linux ��)

��� ��

v IBM Tivoli Access Manager ���� ���� � ��� ��� ��

�� ��� ��� ���� � ����.

v 7 ���� ��� ������ ��� ���� Tivoli Access Manager ��

�� ����� ������.

v �� �� � � ��� �����. �� �� �� �� � �

����� �� ��� �� �� ��� 123 ���� � 9 � �UNIX

�� �� ������ ������.

v �� �� ��� ���� �� ksh� ���� ��� ����� �

� �� �� bash� �� ��� � ������.

ln -s /bin/bash /bin/ksh

v ���� ���� �� nss_ldap-149.1 ��� �� �� �� LDAP �

��� ���� ��� �� ������.

�� ���� ����� � �� ���� ��� �� ���� ���� ��,

�� �� ��� ������. �� ��� �� �� ������ ���

�� ���� Tivoli Access Manager� � �� � �� ���. � �,

install_pdrte� ���� Runtime Environment� ��� ��

ezinstall_pdauthadk� �� ���� ���� �� Authorization Server� ��

� ����. �� � ��� �� ���� � ���� � ���� �

� � �� � ����. �� ��� �� ��� ��� ��� ����� ��

���� ���� ����.

�� �� ��� �� ��� ����� ���� ��� �����. � �

�� �� ��� �� ��� �� �� ���� ���� �����. ��� �

���� �� �� �� ��, �� �� ��� �� � ��� �� �

� �� � ����. �� � � ��� �� ��� ��� ���� ���

�� �� �� ����. ��� ��� 185 ���� � 11 � ��� �� ��

� ���� ������

73 ���� 6� Red Hat Linux ���� �� �� �� ��� �����.

�� ��� Linux� IBM Tivoli Access Manager Base CD� �� �� �

� ����.

Linux

72 IBM Tivoli Access Manager: �� �� ���

Page 93: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

6. Red Hat Linux� �� �� ��

�� � �� ��

ezinstall_pdauthadk �� �� ����� ���� �� Tivoli Access Manager �

� ���� �����.

v IBM Global Security Toolkit

v IBM Directory Client

v Tivoli Access Manager Runtime

v Tivoli Access Manager Application Development Kit

install_pdrte �� �� ����� ���� �� Tivoli Access Manager

Runtime ���� �����.

v IBM Global Security Toolkit

v IBM Directory Client

v Tivoli Access Manager Runtime

�� �� ��

��� ��

v IBM Tivoli Access Manager ���� ���� � ��� ��� ��

�� ��� ��� ���� � ����.

v ����� ��� 7 ���� ��� ������ ��� ���� Tivoli

Access Manager ���� ����� ������.

v �� �� � � ��� �����. �� �� ��� ��� 219

���� �UNIX �� �� ���� ������.

� ��� �� ��� ����� ���� Tivoli Access Manager ���� Red

Hat Linux � zSeries� Linux ���� ���� ���� �� �� ��� �

�� ����. �� ���� ���� ��� ���� ��, � ��� �

�� ��� �� ���� � �� ���.

� �� ��� �� ����.

v 74 ���� �IBM Global Security Toolkit ���

v 75 ���� �IBM Directory Client ���

v 76 ���� �Tivoli Access Manager ��� �� � ���

v 78 ���� ���� JRE ���

v 78 ���� �Tivoli Access Manager JRE(Java Runtime Environment) �� �

��(Red Hat Linux ��)�

Linux

� 5 � Linux� Tivoli Access Manager �� 73

Page 94: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

IBM Global Security Toolkit ��

Linux ���� GSKit� ����� �� �� �����.

1. root� ���� �������.

2. SuSE SLES-7 31�� ��� ��: compat-libstdc++ ���� ���� ���

������. � ��� compat.rpm��� GSKit� �� ��� C++ ���

��� /suse/a1 �� �� SuSE SLES-7 developer CD 1� ����.

�: SuSE SLES-7 64�� ���� compat-libstdc++ ���� �� ����.

3. Linux� IBM Tivoli Access Manager Base �� zSeries Linux� IBM Tivoli

Access Manager Base CD� �����.

4. �� �� � ��� ������.

v Red Hat Linux ���� ��, /mnt/cdrom/linux �� �� ������.

���, /mnt/cdrom� CD� �� ��� �����.

v zSeries� Linux ���� ��, Tivoli Access Manager Base for Linux on

zSeries rpm � � �� ��� �� ������.

�: zSeries� Linux� � � CD ���� ��� ���� ����. �� �

� ����� �� ��� ������.

– Tivoli Access Manager Base for Linux on zSeries rpm � � ��

������ ������. �� �� ftp� ���� � � � ��

�� �� �� ������.

– zSeries Linux� Tivoli Access Manager Base CD� �� ����

�� �������. �� �� NFS� ���� � ����� �� �

������.

5. �� ��� GSKit� ����� ��� ������.

v Red Hat Linux� ��, ��� ������.

rpm -i gsk5bas-5.0.5.46.i386.rpm

v zSeries� Linux� ��, ��� ������.

rpm -i gsk5bas-5.0.5.46.s390.rpm

�: GSKit� ����� �� -U ��� ������. � �, ��� �

�����.

rpm -U gsk5bas-5.0.5.46.s390.rpm

6. Red Hat Linux �� SuSE SLES-7 31�� ����� LD_PRELOAD �� �

�� ����� ������. �� ����� �� ��� ������.

export LD_PRELOAD=/usr/lib/libstdc++-libc6.1-2.so.3

GSKit � LDAP ��� ����� ���� �� �� ���.

Linux

74 IBM Tivoli Access Manager: �� �� ���

Page 95: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

GSKit� ��� ��� ��� ��� ��� ����. GSKit� �� ��� ��

� 193 ���� �� A �SSL(Secure Sockets Layer) ��� � Secure Sockets Layer

Introduction and iKeyman User’s Guide� ������.

IBM Directory Client ��

Linux ���� IBM Directory Client� ����� �� �� �����.

�: � ��� ���� �� � ��� IBM Directory Client� ������.

1. root� ���� �������.

2. nss_ldap-149-1 ��� �� �� �� LDAP ���� ���� ��� ��

������.

3. Linux� IBM Tivoli Access Manager Base �� zSeries Linux� IBM Tivoli

Access Manager Base CD� �����.

4. �� �� � ��� ������.

a. Red Hat Linux ���� ��, /mnt/cdrom/linux �� �� ������.

���, /mnt/cdrom� CD� �� ��� �����.

b. zSeries� Linux ���� ��, Tivoli Access Manager Base for Linux on

zSeries rpm � � �� ��� �� ������.

�: zSeries� Linux� � � CD ���� ��� ���� ����. �� �

� ����� �� ��� ������.

v Tivoli Access Manager Base for Linux on zSeries rpm � � �

� ������ ������. �� �� ftp� ���� � � �

���� �� �� ������.

v zSeries Linux� Tivoli Access Manager Base CD� �� ����

�� �������. �� �� NFS� ���� � ����� CD�

�������.

5. �� ��� IBM Directory Client� ����� ��� ������.

a. Red Hat Linux� ��, ��� ������.

rpm -i ldap-clientd-4.1-1.i386.rpm rpm -i ldap-dmtjavad-4.1-1.i386.rpm

b. zSeries� Linux� ��, ��� ������.

rpm -i ldap-clientd-4.1-1.s390.rpm

6. Red Hat Linux �� SuSE SLES-7 31�� ����� LD_PRELOAD �� �

�� ����� ������. �� ����� �� ��� ������.

export LD_PRELOAD=/usr/lib/libstdc++-libc6.1-2.so.3

SSL� ���� GSKit � LDAP ��� ����� ���� �� �� �

��.

Linux

� 5 � Linux� Tivoli Access Manager �� 75

Page 96: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

IBM Directory Client� ��� ��� ��� ��� ��� ����.

Tivoli Access Manager ���� �� � ��

��� ��

v IBM Tivoli Access Manager ���� ���� � ��� ��� ��

�� ��� ��� ���� � ����.

v ����� ��� 7 ���� ��� ������ ��� ���� Tivoli

Access Manager ���� ����� ������.

v �� �� � � ��� �����. �� �� ��� ��� 219

���� �UNIX �� �� ���� ������.

Red Hat Linux �� zSeries� Linux� Tivoli Access Manager ���� ���

�� �� �� �����.

1. root� ���� �������.

2. Linux� IBM Tivoli Access Manager Base �� zSeries Linux� IBM Tivoli

Access Manager Base CD� �����.

3. �� �� � ��� ������.

a. Red Hat Linux ���� ��, /mnt/cdrom/linux �� �� ������.

���, /mnt/cdrom� CD� �� ��� �����.

b. zSeries� Linux ���� ��, Tivoli Access Manager Base for Linux on

zSeries rpm � � �� ��� �� ������.

�: zSeries� Linux� � � CD ���� ��� ���� ����. �� �

� ����� �� ��� ������.

v Tivoli Access Manager Base for Linux on zSeries rpm � � �

� ������ ������. �� �� ftp� ���� � � �

���� �� �� ������.

v zSeries Linux� Tivoli Access Manager Base CD� �� ����

�� �������. �� �� NFS� ���� � ����� CD�

�������.

4. �� ��� ���� ����� �� ��� ������.

v Tivoli Access Manager ���� �����, �� ��� ������.

rpm -i package

v Tivoli Access Manager ���� ��������, �� ��� �����

�.

rpm -U package

Linux

76 IBM Tivoli Access Manager: �� �� ���

Page 97: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

���, package� �� �����.

v Red Hat Linux� ��:

PDRTE-PD-4.1.0-0.i386.rpm

Tivoli Access Manager Runtime� �� �

�.

PDAuthADK-PD-4.1.0-0.i386.rpm

Tivoli Access Manager Application

Development Kit� �� ��.

PDJrte-PD-4.1.0-0.i386.rpm Tivoli Access Manager JRE(Java Runtime

Environment)� �� ��.

78 ���� �Tivoli Access Manager JRE(Java

Runtime Environment) �� � ��(Red Hat

Linux ��)��� �� ����� �����

�. � ���� JRE(Java Runtime

Environment) �� ��� � ����.

v zSeries� Linux� ��:

PDRTE-PD-4.1.0-0.s390.rpm Tivoli Access Manager Runtime� �� �

�.

PDMgr-PD-4.1.0-0.s390.rpm Tivoli Access Manager Policy Server� ��

��.

PDAcld-PD-4.1.0-0.s390.rpm Tivoli Access Manager Authorization Server

� �� ��.

PDAuthADK-PD-4.1.0-0.s390.rpm

Tivoli Access Manager Application

Development Kit� �� ��.

�: Linux ���� ����� ���� � �� �� ���� � �

����.

Access Manager Runtime� ���� ����. �� ���� �� ��� ���� �� ������.

PDRTE-PD-3.9.0-0 ���� ��� ������. �� 1� ������.

5. �� ����� ����� �� ��� ������.

pdconfig

Tivoli Access Manager �� ��� ����.

6. ��� ��� �� �� ��� ������. Tivoli Access Manager �� �

�� ����. ��� Tivoli Access Manager ��� ��� ����.

Linux

� 5 � Linux� Tivoli Access Manager �� 77

Page 98: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

7. �� ���� � �� ��� ����.

� ���� �� �� ��� �� ���� ����. �� �� �

�� ��� 219 ���� �UNIX �� �� ���� ������.

8. ���� ��� ������ �� ���� ���� Enter� � ��

� ���� ����� x ��� � � �� �� ����� �����.

���� JRE ��

Tivoli Access Manager Java ��� ��� � �� �� ���� �� �� �

�� JRE� ����. Linux� �� �� JRE ���� ����� �� ��

� ������.

v Red Hat Linux� ��:

1. JRE� ����� ��� ������.

rpm -i IBMJava2-JRE-1.3-10.0.i386.rpm

2. � �� �� ��� ����� ��� ������.

export PATH=jre_path:$PATH

v zSeries� Linux��:

1. IBM Tivoli Access Manager Language Support CD�� JRE� �����

�. �� ��� Linux� IBM Java ����� IBM JRE(Java Runtime

Environment), �� 1.3.1� ���� �� ����.

https://www6.software.ibm.com/dl/lxdk/lxdk-p

2. JRE� ����� ��� ������.

rmp -i IBMJava2-JRE-1.3.1-2.0.s390.rpm

3. PATH �� ��� � JRE� ��� � ��� ����� ��� ���

���.

export PATH=/opt/IBMJava2-s390-131/jre/bin:$PATH

����� JRE �� ����� ����� IBM Tivoli Access Manager ���

� ��� ������.

Tivoli Access Manager JRE(Java Runtime Environment) �� �

��(Red Hat Linux ��)

Red Hat Linux ���� Tivoli Access Manager JRE(Java Runtime Environment)

� ����� �� �� �����.

�: � ���� zSeries� Linux� ���� ����.

1. root� ���� �������.

2. Linux� IBM Tivoli Access Manager Base CD� �����.

Linux

78 IBM Tivoli Access Manager: �� �� ���

Page 99: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

3. /mnt/cdrom/linux �� �� ������. ���, /mnt/cdrom� CD� ��

��� �����.

4. ���� ��� JRE� ������. ��� ��� 78 ���� ���� JRE

���� ������.

5. �� ��� Tivoli Access Manager JRE� ����� ��� ������.

rpm -i PDJrte-PD-4.1.0-0.i386.rpm

6. �� JRE ��� �� Tivoli Access Manager JRE� �����,

opt/PolicyDirector/sbin �� �� ���� �� ��� ������.

./pdjrtecfg -action config -java_home jre_path

�: pdjrtecfg ��� �� ��� ��� IBM Tivoli Access Manager Command

Reference� ������.

Tivoli Access Manager �� ��

Tivoli Access Manager �� ��� � ���� ��� �������. ����

�� �� �� Tivoli Access Manager ���� �� ���.

� ��� �� ��� ��� ����.

v �Tivoli Access Manager ��� �� ��

v 80 ���� �Tivoli Access Manager ��� ���

Tivoli Access Manager ���� �� ��

��� ��

v ���� �� ���� �� � Tivoli Access Manager ��� � ��

����� ������.

v Policy Server � ��� ���� �� ��� �� Tivoli Access

Manager ������( : WebSEAL)� �� �� �����.

v ����� Policy Server ���� �� ��� ������.

Linux ����� Tivoli Access Manager ���� ���� �� �� ����

�� � ���. �� ����� �� �� �����.

1. root� ���� �������.

2. �� ��� ���� �� ����� ������.

pdconfig

Tivoli Access Manager �� ��� ����.

Linux

� 5 � Linux� Tivoli Access Manager �� 79

Page 100: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

3. �� � ��� ���� 2� �����. �� ��, �� � Tivoli Access

Manager ���� �� �� ��� ��� ������. �� ���� �

���� � � ��� ������.

4. Tivoli Access Manager JRE(Java Runtime Environment)� �� ����,

pdjrtecfg ��� ������. � �, jre_path ��� � ��� JRE�

�� ���� ��� ������.

/opt/PolicyDirector/sbin/pdjrtecfg -action unconfig -java_home jre_path

�: pdjrtecfg ��� �� ��� ��� IBM Tivoli Access Manager Command

Reference� ������.

Tivoli Access Manager ��� ��

Linux ����� ���� ����� �� �� �����.

1. ���� �� ���� ������. 79 ���� �Tivoli Access Manager

��� �� ��� �� ����� �����.

2. �� ��� ���� ����� ��� ������.

rpm -e package

���, package� �� �� �����.

v Red Hat Linux� ��:

PDAuthADK-PD Tivoli Access Manager Application

Development Kit� �� ��.

PDRTE-PD Tivoli Access Manager Runtime� �� �

�.

ldap_clientd IBM Directory Client� �� ��.

ldap_dmtjavad Directory Management Tool(DMT)� ��

��.

gsk5bas-5.0.5.46 GSKit� �� ��.

v zSeries� Linux� ��:

PDRTE-PD-4.1.1-0 Tivoli Access Manager Runtime� �� �

�.

PDAcld-PD-4.1.0-0 Tivoli Access Manager Authorization Server

� �� ��.

PDMgr-PD-4.1.0-0 Tivoli Access Manager Policy Server� ��

��.

PDAuthADK-PD-4.1.0-0 Tivoli Access Manager Application

Development Kit� �� ��.

Linux

80 IBM Tivoli Access Manager: �� �� ���

Page 101: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

ldap_clientd-4.1.0-0 IBM Directory Client� �� ��.

gsk5bas-5.0.5.46 GSKit� �� ��.

Linux

� 5 � Linux� Tivoli Access Manager �� 81

Page 102: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Linux

82 IBM Tivoli Access Manager: �� �� ���

Page 103: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� 6 � Solaris� Tivoli Access Manager ��

� ���� Solaris ���� Tivoli Access Manager ���� �� � ����

�� �� ��� ����. �� �� � �� �� � ��� � ����

�. �� �� ���� ����.

v ��� �� ���

v 85 ���� ��� �� ���

v 93 ���� �Tivoli Access Manager �� ���

�� �� ��

��� ��

v IBM Tivoli Access Manager ���� ���� � ��� ��� ��

�� ��� ��� ���� � ����.

v ����� ��� 7 ���� ��� ������ ��� ���� Tivoli

Access Manager ���� ����� ������.

v �� �� � � ��� �����. �� �� �� �� � �

����� �� ��� �� �� ��� 123 ���� � 9 � �UNIX

�� �� ������ ������.

�� ���� ����� � �� ���� ��� �� ���� ���� ��,

�� �� ��� ������. �� ��� �� �� ������ ���

�� ���� Tivoli Access Manager� � �� � �� ���. � �,

ezinstall_ldap_server� ���� IBM Directory Server� Tivoli Access Manager

������ �� � �� ��, � ��� LDAP ��� � �� �� ��

��� � ��� �����. �� ��� �� ��� ��� ��� ����� �

� ���� ���� ����. � �, �� ezinstall_ldap_server� ���

� ����� ezinstall_pdmgr� ���� Policy Server� �� ��, GSKit �

IBM Directory Client� ����� ����.

�� �� ��� �� ��� ����� ���� ��� �����. � �

�� �� ��� �� ��� �� �� ���� ���� �����. ��� �

���� �� �� �� ��, �� �� ��� �� � ��� �� �

© Copyright IBM Corp. 2001, 2003 83

Page 104: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� �� � ����. �� � � ��� �� ��� ��� ���� ���

�� �� �� ����. ��� ��� 185 ���� � 11 � ��� �� ��

� ���� ������

7� Solaris ���� �� �� �� ��� �����. Solaris� IBM Tivoli

Access Manager Web Portal Manager CD� �� �� �� ��

ezinstall_pdwpm� ��� � ����� Solaris� IBM Tivoli Access Manager

Base CD� �� �� �� ����.

7. Solaris� �� �� ��

�� � �� ��

ezinstall_ldap_server �� �� ����� ���� �� IBM Directory Server �

��� �����.

v IBM DB2

v IBM Global Security Toolkit

v IBM HTTP Server

v IBM Directory Client

v IBM Directory Server

�: � ��� IBM Directory Server� � �� � ��

� ���� �� �����.

ezinstall_pdacld �� �� ����� ���� �� Authorization Server ���

� �����.

v IBM Global Security Toolkit

v IBM Directory Client

v Tivoli Access Manager Runtime

v Tivoli Access Manager Authorization Server

ezinstall_pdauthadk �� �� ����� ���� �� Tivoli Access Manager �

� ���� �����.

v IBM Global Security Toolkit

v IBM Directory Client

v Tivoli Access Manager Runtime

v Tivoli Access Manager Application Development Kit

ezinstall_pdmgr �� �� ����� ���� �� Tivoli Access Manager Policy

Server ���� �����.

v IBM Global Security Toolkit

v IBM Directory Client

v Tivoli Access Manager Runtime

v Tivoli Access Manager Policy Server

Solaris

84 IBM Tivoli Access Manager: �� �� ���

Page 105: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

7. Solaris� �� �� �� (��)

�� � �� ��

ezinstall_pdwpm �� �� ����� ���� �� Web Portal Manager ��

�� �����.

v IBM Global Security Toolkit

v IBM Directory Client

v Tivoli Access Manager Runtime

v IBM WebSphere Application Server Single Server � ���

3

v Tivoli Access Manager Web Portal Manager

v Tivoli Access Manager JRE(Java Runtime Environment)

install_pdrte �� �� ����� ���� �� Tivoli Access Manager

Runtime ���� �����.

v IBM Global Security Toolkit

v IBM Directory Client

v Tivoli Access Manager Runtime

�� �� ��

��� ��

v IBM Tivoli Access Manager ���� ���� � ��� ��� ��

�� ��� ��� ���� � ����.

v 7 ���� ��� ������ ��� ���� Tivoli Access Manager ��

�� ����� ������.

v �� �� � � ��� �����. �� �� ��� ��� 219

���� �UNIX �� �� ���� ������.

� ��� �� ��� ����� ���� Tivoli Access Manager ���� �

��� ���� �� �� ��� ���� ����. �� ���� ���� �

�� ���� ��, � ��� � �� �� ������ �� ����

� �� ���.

� �� ��� �� ����.

v 86 ���� �IBM Global Security Toolkit ���

v 86 ���� �IBM Directory Client ���

v 87 ���� �Tivoli Access Manager ��� �� � ���

v 88 ���� ���� JRE ���

Solaris

� 6 � Solaris� Tivoli Access Manager �� 85

Page 106: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v 88 ���� �Tivoli Access Manager JRE(Java Runtime Environment) �� �

���

v 89 ���� �Web Portal Manager ��� �� � ���

IBM Global Security Toolkit ��

Solaris ���� GSKit� ����� �� �� �����.

1. root� ���� �������.

2. Solaris� IBM Tivoli Access Manager Base CD� �����.

3. /cdrom/cdrom0/solaris �� �� ������.

4. �� GSKit � � ����� ��� ������.

pkgadd -d /cdrom/cdrom0/solaris -a /cdrom/cdrom0/solaris/pddefault gsk5bas

GSKit� ��� ��� ��� ��� ��� ����.

iKeyman � �� ����(gsk5ikm)� GSKit ���� �� ���� ������.

� ����� ���� SSL � � , �-�� � � � ��� �� �� �

����. gsk5ikm� �� ��� ��� 193 ���� �� A �SSL(Secure Sockets

Layer) ��� � Secure Sockets Layer Introduction and iKeyman User’s Guide�

������.

IBM Directory Client ��

Solaris ���� IBM Directory Client� ����� �� �� �����.

1. root� ���� �������.

2. Solaris� IBM Tivoli Access Manager Base CD� �����.

3. /cdrom/cdrom0/solaris �� �� ������.

4. ��� ���� IBM Directory Client� ������.

pkgadd -d /cdrom/cdrom0/solaris -a /cdrom/cdrom0/solaris/pddefault IBMldapc

5. �� �� �� �� /opt� �� ��� ����. �� ���� �� �

� �� �� /opt� ������. /opt� �� �� �� ��� Enter�

�����.

IBM Directory Client� ��� ��� ��� ��� ��� ����.

Solaris

86 IBM Tivoli Access Manager: �� �� ���

Page 107: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Tivoli Access Manager ���� �� � ��

��� ��

v IBM Tivoli Access Manager ���� ���� � ��� ��� ��

�� ��� ��� ���� � ����.

v 7 ���� ��� ������ ��� ���� Tivoli Access Manager ��

�� ����� ������.

v �� �� � � ��� �����. �� �� ��� ��� 219

���� �UNIX �� �� ���� ������.

Tivoli Access Manager ���� ����� �� �� �����.

1. root� ���� �������.

2. �� � ����� �� Tivoli Access Manager� ���� �� ��, ��

��� ������.

v Solaris� IBM Tivoli Access Manager Base CD� �����.

v Web Portal Manager ���� ���� Solaris� IBM Tivoli Access

Manager Web Portal Manager CD� �����.

3. Tivoli Access Manager ���� �����, �� ��� ������.

pkgadd -d /cdrom/cdrom0/solaris -a /cdrom/cdrom0/solaris/pddefault package

���, -d /cdrom/cdrom0/solaris� ���� ��� ���� -a

/cdrom/cdrom0/solaris/pddefault� �� �� ��� ��� �����.

�� �� ���� �� ����. � ��� �� ��� �� ���� �

� ���.

PDRTE Tivoli Access Manager Runtime� �� ��.

PDMgr Tivoli Access Manager Policy Server� �� ��.

PDAuthADK Tivoli Access Manager Application Development Kit� ��

��.

PDAcld Tivoli Access Manager Authorization Server� �� ��.

PDWPM Tivoli Access Manager Web Portal Manager� �� ��. 89

���� �Web Portal Manager ��� �� � ����� ��

����� ������. � ���� Web Portal Manager �

� ��� � ����.

PDJrte Tivoli Access Manager JRE(Java Runtime Environment)� �

Solaris

� 6 � Solaris� Tivoli Access Manager �� 87

Page 108: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� �� . �Tivoli Access Manager JRE(Java Runtime

Environment) �� � ����� �� ����� ������.

� ���� JRE(Java Runtime Environment) �� ���

� ����.

� ���� �� ��� ���� �� ���� ����.

package� ��� �������.

4. �� ����� ����� �� ��� ������.

pdconfig

Access Manager for e-business �� ��� ����.

5. ��� ��� �� �� ��� ������. Tivoli Access Manager �� �

�� ����. ��� Tivoli Access Manager ��� ��� ����.

6. �� ���� � �� ��� ����.

� ���� �� �� ��� �� ���� ����. �� �� �

�� ��� 219 ���� �UNIX �� �� ���� ������.

�: �� �� �� ����� ���� ��� ����. �� �� ��

/opt���.

7. ���� ��� ������ �� ���� ���� Enter� � ��

� ���� ����� x ��� � � �� �� ����� �����.

���� JRE ��

Tivoli Access Manager Java ��� ��� � �� �� ���� �� �� �

�� JRE� ����. Solaris� �� �� JRE ���� ����� �� ���

������.

pkgadd -d /cdrom/cdrom0/solaris -a /cdrom/cdrom0/solaris/pddefault SUNWj3rt

���, /cdrom/cdrom0/solaris� JRE ���� ��� �� ����.

� �� �� ��� ����� ��� ������.

PATH=jre_path:$PATH export PATH

����� JRE �� ����� ����� IBM Tivoli Access Manager for

e-business ���� ��� ������.

Tivoli Access Manager JRE(Java Runtime Environment) �� �

��

Tivoli Access Manager JRE(Java Runtime Environment)� �� � ����� �

� �� �����.

Solaris

88 IBM Tivoli Access Manager: �� �� ���

Page 109: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

1. root� ���� �������.

2. Solaris� IBM Tivoli Access Manager Base CD� �����.

3. ���� ��� JRE� ������. ��� ��� 88 ���� ���� JRE

���� ������.

4. Tivoli Access Manager JRE� ����� �� ��� ������.

pkgadd -d /cdrom/cdrom0/solaris -a /cdrom/cdrom0/solaris/pddefault PDJrte

��� , -d /cdrom/cdrom0/solaris� ���� ��� ���� -a

/cdrom/cdrom0/solaris/pddefault� �� �� ��� ��� �����.

5. �� JRE ��� �� JRE� �����, install_dir/sbin �� �� ��

�� �� ��� ������.

pdjrtecfg -action config -java_home jre_path

�: pdjrtecfg ��� �� ��� ��� IBM Tivoli Access Manager Command

Reference� ������.

Web Portal Manager ��� �� � ��

Web Portal Manager ���� �� � ����� �� �� �����.

1. GSKit� ������. ��� ��� 86 ���� �IBM Global Security Toolkit

���� ������.

2. IBM Directory Client� ������. ��� ��� 86 ���� �IBM Directory

Client ���� ������.

3. IBM WebSphere Application Server, Advanced Single Server 4.0� ����

��. ��� ��� 91 ���� �IBM WebSphere Application Server,

Advanced Single Server ���� ������.

4. IBM WebSphere Application Server, ��� 3� �����, 92 ���� �IBM

WebSphere Application Server ��� 3 ���� ������.

5. Tivoli Access Manager Java Runtime ���� ������. �� ����

� ��� ������.

pkgadd -d /cdrom/cdrom0/solaris -a /cdrom/cdrom0/solaris/pddefault PDJrte

���, -d /cdrom/cdrom0/solaris� ���� ��� ���� -a

/cdrom/cdrom0/solaris/pddefault� �� �� ��� ��� ����

�.

�: Tivoli Access Manager Java Runtime ���� �� �� ����.

�� ��� JRE� ��� �� �� ����. WebSphere�� �

�� JRE� ���� �� JRE ��� ���� � Tivoli Access

Manager JRE(Java Runtime Environment)� �����.

Solaris

� 6 � Solaris� Tivoli Access Manager �� 89

Page 110: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

6. Tivoli Access Manager Runtime � Web Portal Manager ���� �� �

������. ��� ��� 87 ���� �Tivoli Access Manager ��� �

� � ���� ������.

�: Tivoli Access Manager Runtime � Web Portal Manager ���� IBM

WebSphere Application Server� � ���� �� ���. ���

Tivoli Access Manager Runtime� ��� �� IBM WebSphere Application

Server� ��� �� Tivoli Access Manager�� ���� GSKit ���

������ ������.

7. Web Portal Manager ������ ���� �� WebSphere Application Server

� �� �� ������. �� �����, /opt/WebSphere/AppServer/bin

�� �� �� startServer.sh ��� ������.

�: �� ����� 443 �� � ��� IBM WebSphere Application

Server� SSL ��� �����.

8. �� SSL � � � �� � � � ����� IBM HTTP Server �� �

�� SSL ��� �����. �� � � ����� ����. ���

� ���� ���� �� � � �� ���.

/var/PolicyDirector/keytab/pdwpm.kdb

� ������ � � �����. � ��� httpd.conf � ��

�����.

/var/PolicyDirector/keytab/pdwpm.sth

��� � ������ �� � � �����.

9. IBM HTTP Server� ���� �� LDAP ��� ���� � ���� Web

Portal Manager� �� �� �� �� �� ��� ������. IBM

HTTP Server �� �� ����� /usr/HTTPServer/conf/httpd.conf �

� ��� �� �� �� � 80� 8080�� ������.

# Port: The port the standalone listens to. Port 8080

10. Web Portal Manager� ����� �� ��� ����� ������.

https://hostname/pdadmin

���, hostname� IBM HTTP Server� �� � ���� �����.

�: �� IBM HTTP Server�� �� ��� � http �� https� ��

���.

Web Portal Manager �� �� �� �� � �� ��� ����.

Solaris

90 IBM Tivoli Access Manager: �� �� ���

Page 111: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

IBM WebSphere Application Server, Advanced Single Server �

IBM WebSphere Application Server� �����, �� �� �����.

1. root� ���� �������.

2. Solaris� IBM Tivoli Access Manager Web Portal Manager CD� �����.

3. CD� ��� ����� /solaris/WebSphere �� �� ������.

4. �� ��� ������.

v GUI� ���� IBM WebSphere Application Server� ����� ��� �

�����.

./install.sh

v �� � � �����, install.sh ��� �� �� ���� 92 �

��� �IBM WebSphere Application Server ��� 3 ���� ����.

./install.sh -silent -responseFile ./install.script \ -prereqfile ./prereq.properties

WebSphere Application Server, Advanced Single Server Edition v4.0 �

� ����. ����� �� �����.

�: ����� �� ���� ���� ��� �� ��� ���� ��

� ����.

5. �� ��(�� ��)� �� �� �����.

6. WebSphere Application Server �� �� � � IBM HTTP Server� �� �

�� ����. ���� �� IBM HTTP Server� ���� �� ��, �

��� ��� ����. � ��� ��� �� �� ����

����.

�: WebSphere Application Server ���� ���� � �� ��� ���

�� ���� ����. �� ��� �� ����.

v WebSphere Application Server: /opt/WebSphere/AppServer

v IBM HTTP Server: /opt/IBMHTTPD

�� �� ��� �� ��� �� ��. ��� �� �� �����

������.

7. IBM WebSphere Application Server� IBM HTTP Server� �����. Solaris�

IBM Tivoli Access Manager Web Portal Manager CD� �� �� �� ��

�� ��� �� ���. �� ����� ��� ������.

http_1319_efix2.sh

8. ���� �����, 92 ���� �IBM WebSphere Application Server ���

3 ���� ������.

Solaris

� 6 � Solaris� Tivoli Access Manager �� 91

Page 112: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

IBM WebSphere Application Server ��� 3 ��

IBM WebSphere Application Server ��� 3� �����, �� �� ����

�.

1. WebSphere Application Server, HTTP Server � LDAP ��� �����

( � ���� ��� ��).

2. Solaris� IBM Tivoli Access Manager Web Portal Manager CD� ����

�.

3. /usr/sys/inst.images/solaris/WebSphere_PTF3 �� �� ���� �� �

�� ������.

install.sh

4. IBM WebSphere Application Server � �� �� ���� Enter� ���

��. � �. ��� ������.

/opt/WebSphere/AppServer

5. ������ ��� ����� �� ����.

6. JDK� ��� ����� �� ����.

7. iPlanet Directory� ������ �� �� �� �� WebSphere�� �

���� iPlanet �� ��� ������. ��� ���, ���� �

���.

8. IBM HTTP Server� ����� �� ����.

9. IBM HTTP Server� �� ��, IBM HTTP Server � �� �� ����

Enter� �����. � �, ��� ������.

/opt/IBMHTTP

10. ������ �� �� �� �� ����� �� ����.

11. WebSphere Application Server � �� �� ��� ����� �� ��

��.

������ �����. ���� IBM JDK ����� ����� ��

��. �� ������ � Solaris� IBM Developer Kit� WebSphere �

� �� �����. �� ���� �� �� ��� ��� �� ��� ��

��.

������ ����, �� ���� ����. �� �� ��� ��

�����. ��� ��� �� ��� ������. ����� �

� �� �����.

12. ����� � �� �����.

WebSphere Application Server Single Server 4.0 � ��� 3� ������

�.

13. ����� ���� ���� �� ������.

Solaris

92 IBM Tivoli Access Manager: �� �� ���

Page 113: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Tivoli Access Manager �� ��

��� ��

v ���� �� ���� �� � Tivoli Access Manager ��� � ��

����� ������.

v Policy Server � ��� ���� �� ��� �� Tivoli Access

Manager ������( : WebSEAL)� �� �� �����.

v ����� Policy Server ���� �� ��� ������.

Tivoli Access Manager �� ��� � ���� ��� �������. �����

� ����� �� �� ����� �� ��� �� ���� �� �� �

�� ���.

� �� ��� �� ����.

v �Tivoli Access Manager ��� �� ��

v 94 ���� �Tivoli Access Manager ��� ���

Tivoli Access Manager ���� �� ��

UNIX ����� Tivoli Access Manager ���� ���� �� �� ����

�� � ���. �� ����� �� �� �����.

1. root� ���� �������.

2. �� �� �� ������.

cd /opt/PolicyDirector/bin

3. �� ����� ����� �� ��� ������.

pdconfig

Tivoli Access Manager �� ��� ����.

4. �� � Tivoli Access Manager ���� �� �� ��� ��� ���

���. ���� �� �� ��� ��� �� � ���. � �,

��� ���� ���� �� �����.

PDRTE Tivoli Access Manager Runtime� �� ��.

PDWPM Tivoli Access Manager Web Portal Manager� �� ��.

PDAcld Tivoli Access Manager Authorization Server� �� ��.

PDAuthADK Tivoli Access Manager Application Development Kit� ��

��.

Solaris

� 6 � Solaris� Tivoli Access Manager �� 93

Page 114: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

PDMgr Tivoli Access Manager Policy Server� �� ��.

5. �� ���� � ���� � � ��� ������.

�:

v ���� ���� �� ��, ��� �� � ����. �Tivoli Access

Manager ��� ���� ����

v ��� �� ��� ��, LDAP ���� � �� � ��� ��� �

��� ����.

v Policy Server� �� ��� � �� � � ��� �� ����� �

����. Tivoli Access Manager ������( : WebSEAL)� ���� �

�� ����. ����� y� ������.

6. Tivoli Access Manager JRE(Java Runtime Environment)� �� ����,

pdjrtecfg ��� ������. � �, jre_path ��� � ��� JRE�

�� ���� ��� ������.

pdjrtecfg -action unconfig -java_home jre_path

�: pdjrtecfg ��� �� ��� ��� IBM Tivoli Access Manager Command

Reference� ������.

Tivoli Access Manager ��� ��

Solaris ����� ���� ����� �� �� �����.

1. �� �� ���� ������. ���� �� ���� 93 ����

�Tivoli Access Manager ��� �� ��� �� ����� �����.

2. �� ��� ���� ����� ��� ������.

pkgrm package

���, package� �� �� �����.

PDAuthADK ADK� �� ��.

PDMgr Policy Server� �� ��.

PDAcld Authorization Server� �� ��.

PDRTE Tivoli Access Manager Runtime� �� ��.

PDJrte Tivoli Access Manager JRE(Java Runtime Environment)� �

� ��.

PDWPM Web Portal Manager� �� ��

IBMldapc IBM Directory Client� �� ��.

gsk5bas GSKit� �� ��.

3. � ���� ��� ���� ���� ��� y� ������.

Solaris

94 IBM Tivoli Access Manager: �� �� ���

Page 115: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�� � ��� ���� �� ���� ����. � � � ����� �

����.

Solaris

� 6 � Solaris� Tivoli Access Manager �� 95

Page 116: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

96 IBM Tivoli Access Manager: �� �� ���

Page 117: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� 7 � Windows� Tivoli Access Manager ��

� ���� Windows ���� Tivoli Access Manager ���� �� � ���

� �� �� ��� ����. �� �� � �� �� � ��� � ��

���. �� �� ���� ����.

v ��� �� ���

v 99 ���� ��� �� ���

v 110 ���� �Tivoli Access Manager �� ���

�� �� ��

��� ��

v IBM Tivoli Access Manager ���� ���� � ��� ��� ��

�� ��� ��� ���� � ����.

v 7 ���� ��� ������ ��� ���� Tivoli Access Manager ��

�� ����� ������.

v �� �� � � ��� �����. �� �� �� �� � �

����� �� ��� �� �� ��� 153 ���� � 10 �

�Windows �� �� ������ ������.

�� ���� ����� � �� ���� ��� �� ���� ���� ��,

�� �� �� � � ������. �� ��� �� �� ������ ��

� �� ���� Tivoli Access Manager� � �� � �� ���. �

�, ezinstall_ldap_server.bat� ���� IBM Directory Server� Tivoli Access

Manager ������ �� � �� ��, � ����� LDAP ��� � ��

�� ����� � ��� �����. � ����� �� ��� ��� ��� �

���� �� ���� ���� ����. � �, �� ezinstall_ldap_server.bat

� ��� � ����� ezinstall_pdmgr.bat� ���� Policy Server� ��

��, GSKit � IBM Directory Client� ����� ����.

�� �� � � �� ��� ����� ���� ��� �����. � ���

�� ��� �� ��� �� �� ���� ���� �����. ��� � �

��� �� �� �� ��, �� �� ��� �� � ��� �� �

© Copyright IBM Corp. 2001, 2003 97

Page 118: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� �� � ����. �� � � ��� �� ��� ��� ���� ��� �

� �� �� ����. ��� ��� 185 ���� � 11 � ��� �� ��

� ���� ������.

Windows ����� �� �� ����� �� �� ���� ���� �� �

� ���. �� ���� ���� ���� �� ���� �� �� �

���. � ��� ��� ��� ��� ����. �� ����� ������.

8� Windows ���� �� �� �� ��� �����. Windows� IBM

Tivoli Access Manager Web Portal Manager CD� �� �� �� ��

ezinstall_pdwpm.bat � � ��� � �� �� � � Windows� IBM Tivoli

Access Manager Base CD� �� �� �� ����.

8. Windows� �� �� ����

�� � �� ��

ezinstall_ldap_server.bat �� �� ����� ���� �� IBM Directory Server �

��� �����.

v IBM DB2

v IBM Global Security Toolkit

v IBM HTTP Server

v IBM Directory Client� ��� IBM Directory Server

�: �� ��� IBM Directory Server� � �� � ����

� ���� �� �����.

ezinstall_pdacld.bat �� �� ����� ���� �� Authorization Server ���

� �����.

v IBM Global Security Toolkit

v IBM Directory Client

v Access Manager Runtime

v Access Manager Authorization Server

ezinstall_pdauthadk.bat �� �� ����� ���� �� Tivoli Access Manager �

� ���� �����.

v IBM Global Security Toolkit

v IBM Directory Client

v Access Manager Runtime

v Access Manager Application Developer Kit

ezinstall_pdmgr.bat �� �� ����� ���� �� Tivoli Access Manager Policy

Server ���� �����.

v IBM Global Security Toolkit

v IBM Directory Client

v Access Manager Runtime

v Access Manager Policy Server

Windows

98 IBM Tivoli Access Manager: �� �� ���

Page 119: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

8. Windows� �� �� ���� (��)

�� � �� ��

ezinstall_pdwpm.bat �� �� ����� ���� �� Web Portal Manager ��

�� �����.

v IBM Global Security Toolkit

v IBM Directory Client

v Access Manager Runtime

v IBM WebSphere Application Server Single Server � ���

3

v Tivoli Access Manager Web Portal Manager

v Access Manager Java runtime

install_pdrte.exe �� �� ����� ���� �� Tivoli Access Manager

Runtime ���� �����.

v IBM Global Security Toolkit

v IBM Directory Client

v Access Manager Runtime

�� �� ��

��� ��

v IBM Tivoli Access Manager ���� ���� � ��� ��� ��

�� ��� ��� ���� � ����.

v ����� ��� 7 ���� ��� ������ ��� ���� Tivoli

Access Manager ���� ����� ������.

v �� �� � � ��� �����. �� �� ��� ��� 222

���� �Windows �� �� ���� ������.

� ��� �� ��� ����� ���� Tivoli Access Manager ���� �

��� ���� �� �� ��� ���� ����. �� ���� ���� �

�� ���� ��, � ��� � �� ��� � �� ���.

� �� ��� �� ����.

v 100 ���� �IBM Global Security Toolkit ���

v 100 ���� �IBM Directory Client ���

v 102 ���� �Tivoli Access Manager ��� �� � ���

v 104 ���� ���� JRE ���

Windows

� 7 � Windows� Tivoli Access Manager �� 99

Page 120: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v 104 ���� �Tivoli Access Manager JRE(Java Runtime Environment) �� �

���

v 105 ���� �Web Portal Manager ��� �� � ���

IBM Global Security Toolkit ��

Windows ���� GSKit� ����� �� �� �����.

1. ��� �� �� ���� ���� �������.

2. Windows� IBM Tivoli Access Manager Base CD� �����.

3. �� ����� CD� ��� ����� windows\gskit �� �� ����

��� ������.

setup.exe PolicyDirector

�� �� ��� ����.

4. �� �����. �� �� �� ��� ����.

5. �� �� ��� ��� ����� � �� ���� �� �� � ��

� ����. �� �� ��� ��� �� �� �� ����� �

�� �� �� ������.

6. GSKit� ����� �� �����. �� �� �� ��� ����.

7. ��� ��� �� ����� ������.

8. ���� �� ������.

GSKit� ��� ��� ��� ��� ��� ����.

iKeyman � �� ����(gsk5ikm)� GSKit ���� �� ���� ������.

� ����� ���� SSL � � , �-�� � � � ��� �� �� �

����. gsk5ikm� �� ��� ��� 193 ���� �� A �SSL(Secure Sockets

Layer) ��� � Secure Sockets Layer Introduction and iKeyman User’s Guide�

������.

IBM Directory Client ��

Windows ���� IBM Directory Client� ����� �� �� �����.

�: Active Directory� ������ ��� ��, IBM Directory Client� ���

����.

1. ��� �� �� ���� ���� �������.

2. Windows� IBM Tivoli Access Manager Base CD� �����.

3. �� �� ��� setup.exe � � ������.

windows\Directory\ismp

Windows

100 IBM Tivoli Access Manager: �� �� ���

Page 121: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�� �� �� ��� ����.

4. ��� �� ��� �� ��� �����.

5. �� �� ��� ����. ����� �� �����.

6. �� ��� �����. �� ��� ��� �� �� �����.

7. �� � � Windows ����� ���� ���� �� � �����

�. � �� ����� �� ��� ���� ��� ��� ��� ���

�. �� ��� ���� � �� �����.

8. �� � IBM Directory� ��� �� �� �� ������. �� ��

�� ����� �� � ��� ����� ����� � ����.

9. IBM Directory� ��� �� �� �����.

10. ��� �� IBM Directory� ������.

Windows

� 7 � Windows� Tivoli Access Manager �� 101

Page 122: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

11. Client SDK � DMT(Directory Management Tool) ��� � � ��

�����.

12. �� ��� � � � �� � � ��� ������.

13. � � ��� � README � � ����. README� � � � ��

� ������.

14. ���� �� �� �� ��� � � �� �� ���� �� ��

�����.

IBM Directory Client� ��� ��� ��� ��� ��� ����.

Tivoli Access Manager ���� �� � ��

��� ��

v IBM Tivoli Access Manager ���� ���� � ��� ��� ��

�� ��� ��� ���� � ����.

v ����� ��� 7 ���� ��� ������ ��� ���� Tivoli

Access Manager ���� ����� ������.

v �� �� � � ��� �����. �� �� ��� ��� 222

���� �Windows �� �� ���� ������.

Tivoli Access Manager ���� ����� �� �� �����.

1. ��� �� �� ���� Windows ���� �������.

2. Tivoli Access Manager ���� ����� �� ��� ������.

Windows

102 IBM Tivoli Access Manager: �� �� ���

Page 123: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v Windows� IBM Tivoli Access Manager Base CD� �����.

v Web Portal Manager ���� ���� Windows� IBM Tivoli Access

Manager Web Portal Manager CD� �����.

3. �� �� ��� setup.exe � � ������.

windows\PolicyDirector\Disk Images\Disk1

�� �� �� ��� ����.

4. ��� �� ��� �� ��� �����. �� �� ��� ����.

5. �� �����. �� �� �� ��� ����.

6. �� ��� �� ��� ��� ��, �� �����. ��� �� �

�� ����.

7. ���� �� ���� �� �� �����. Tivoli Access Manager

Runtime �� JRE(Java Runtime Environment)� ����� �� Tivoli

Access Manager Runtime �� �� ��� ����. ��� �� � � �

� �� ��� �� �� �����.

��� ���� Tivoli Access Manager �� �� �� ��� ����

Tivoli Access Manager Web Portal Manager �� JRE(Java Runtime

Environment) ���� ����� 105 ���� �Web Portal Manager

��� �� � ��� �� 104 ���� �Tivoli Access Manager JRE(Java

Runtime Environment) �� � ���� ����� �����.

8. ����� ���� ���� �� ������.

9. ���� �� ��� � �� → ���� → Access Manager for e-business

→ ��� ����. Access Manager for e-business �� �� ��� �

���.

10. �� ���� �� ��� �����. � ���� �� �� ��

���� �� ���.

11. � ���� �� �� ��� �� ���� ����. � �� ��

� ��� 222 ���� �Windows �� �� ���� ������. ���

��� ��� Access Manager for e-business �� �� ��� �� ���

�.

12. ��� � �� ��� �����. Access Manager for e-business �� �

� ��� ����. ���� ��� ���� �� ����� ���

� ��� ������.

Windows

� 7 � Windows� Tivoli Access Manager �� 103

Page 124: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

���� JRE ��

Tivoli Access Manager Java ��� ��� � �� �� ���� �� �� �

�� JRE� ����.

Tivoli Access Manager� �� �� JRE ���� ����� ��� �����

�.

1. CD� ��� ����� \windows\JRE �� �� ���� ��� �����

�.

install

2. ��� ����� �����. ��� JVM�� JRE(Java Runtime Environment)

� ����� ��� � Yes� �����.

3. � �� �� ��� ����� ��� ������.

set PATH=install_dir;%PATH%

� �, IBM Developer Kit for Windows, Java 2 Technology Edition, Version

1.3.1� C ����� �� �� �� ��� �� ��� ������.

set PATH=C:\Program Files\IBM\Java131\jre;%PATH%

Tivoli Access Manager JRE(Java Runtime Environment) �� �

��

Tivoli Access Manager JRE(Java Runtime Environment)� �� � ����� �

� �� �����.

1. ��� �� �� ���� Windows ���� �������.

2. Windows� IBM Tivoli Access Manager Base CD� �����.

3. ���� ��� JRE� ������. ��� ��� ���� JRE ����

������.

4. Tivoli Access Manager JRE� �����, �� �� ��� setup.exe �

� ������.

windows\PolicyDirector\Disk Images\Disk1\PDJRTE\Disk Images\Disk1

�� �� �� ��� ����.

5. ��� �� ��� �� ��� �����.

6. �� ��� ����. ����� �� �����.

7. �� ��� �� ��� ��� ��, �� �����. ���� ��� �

�� ���� ����, �� �� �� ��� ����.

8. �� �� ��� ��� ����� � �� ���� �� �� � ��

� ����. �� �� ��� ��� �� �� �� ����� �

�� �� �� ������.

Windows

104 IBM Tivoli Access Manager: �� �� ���

Page 125: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

9. �� ��� � ��� �����, �� �����. ��� � ��� ��

���, ��� �����.

�� �� �� ��� ����.

10. ��� ��� ����, �� �� ��� �� ������.

11. �� JRE ��� �� JRE� �����, install_dir\sbin �� �� �

��� �� ��� ������.

pdjrtecfg -action config

�: pdjrtecfg ��� �� ��� ��� IBM Tivoli Access Manager Command

Reference� ������.

Web Portal Manager ��� �� � ��

Web Portal Manager ���� �� � ����� �� �� �����.

1. GSKit� ������. ��� ��� 100 ���� �IBM Global Security Toolkit

���� ������.

2. IBM Directory Client� ������. ��� ��� 100 ���� �IBM

Directory Client ���� ������.

3. IBM WebSphere Application Server, Advanced Single Server 4.0� ����

��. ��� ��� 106 ���� �IBM WebSphere Application Server,

Advanced Single Server ���� ������.

4. IBM WebSphere Application Server, ��� 3� ����� 109 ���� �IBM

WebSphere Application Server ��� 3 ���� ������.

5. Tivoli Access Manager Java Runtime ���� ������. �� ����

�, �� �� ��� setup.exe � � ������.

windows\PolicyDirector\Disk Images\Disk1

��� ����� �� Access Manager Java Runtime ���� ������.

�: Tivoli Access Manager Java Runtime ���� �� �� ����.

��� ��� JRE� ��� �� �� ����. WebSphere�� �

�� JRE� ���� �� JRE ��� ���� � Tivoli Access

Manager JRE(Java Runtime Environment)� �����.

6. Tivoli Access Manager Runtime � Web Portal Manager ���� �� �

������. ��� ��� 102 ���� �Tivoli Access Manager ��� �

� � ���� ������.

�: Tivoli Access Manager Runtime � Web Portal Manager ���� IBM

WebSphere Application Server� � ���� �� ���. ���

Windows

� 7 � Windows� Tivoli Access Manager �� 105

Page 126: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Tivoli Access Manager Runtime� ��� �� IBM WebSphere Application

Server� ��� �� Tivoli Access Manager�� ���� GSKit ���

������ ������.

7. Web Portal Manager ������ ���� �� WebSphere Application

Server� �� �� ������. �� �����, �� → ���� → IBM

WebSphere → Application Server 4.0 → Application Server ��� ���

��.

�: �� ����� 443 �� � ��� IBM WebSphere Application

Server� SSL ��� �����.

8. �� SSL � � � �� � � � ����� IBM HTTP Server �� �

�� SSL ��� �����. �� � � ����� ����. ���

� ���� ���� �� � � �� ���.

C:\Program Files\Tivoli\Policy Director\keytab\pdwpm.kdb

� ������ � � �����. � ��� httpd.conf � ��

�����.

C:\Program Files\Tivoli\Policy Director\keytab\pdwpm.sth

��� � ������ �� � � �����.

9. IBM HTTP Server� ���� �� LDAP ��� ���� � ���� Web

Portal Manager� �� �� �� �� �� ��� ������. IBM

HTTP Server �� �� ����� C:\Program Files\IBM HTTP

Server\conf\httpd.conf � � ��� �� �� �� � 80� 8080

�� ������.

# Port: The port the standalone listens to. Port 8080

10. Web Portal Manager� ����� �� ��� ����� ������.

https://hostname/pdadmin

���, hostname� IBM HTTP Server� �� � ���� �����.

�: �� IBM HTTP Server�� �� ��� � http �� https� ��

���.

Web Portal Manager �� �� �� �� � �� ��� ����.

IBM WebSphere Application Server, Advanced Single Server �

IBM WebSphere Application Server� �����, �� �� �����.

1. ��� �� �� ���� ���� �������.

Windows

106 IBM Tivoli Access Manager: �� �� ���

Page 127: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

2. Windows� IBM Tivoli Access Manager Web Portal Manager CD� ���

��.

3. CD� ��� ����� windows\WebSphere �� �� ���� ��� ��

����.

setup.exe

�� �� �� ��� ����.

4. ��� �� ��� �� ��� �����.

5. �� � � Windows ����� ���� ���� �� � �����

�.

6. �� ��(�� ��)� �� �� �����.

7. �� �� ���, ��� �� � ��� ���� �� ����. ��

WebSphere� ��� �� � ��� �� �� ���� ��� ID � ��

� ���.

8. InstallShield ����� WebSphere Application Server �� �� � � IBM

HTTP Server� �� ��� �����. ���� �� IBM HTTP Server�

Windows

� 7 � Windows� Tivoli Access Manager �� 107

Page 128: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

���� �� ��, � ��� ��� ����. �� �� ����

����.

�: � ��� �����. WebSphere Application Server� ���� � �

��� ����� ���� ����. �� ��� �� ����.

v WebSphere Application Server: C:\WebSphere\AppServer

v IBM HTTP Server: WebSphere ��� �� ��� ��,

C:\IBM HTTP Server, Web Portal Manager� �� ��� ��,

c:\Program Files\IBM HTTP Server

9. Windows ���� �� �� : ���� IBM WebSphere\Application

Server V4.0 AES���. �� ����.

�� ����� �����.

10. ��� ���� Windows� �� ����� ���� ����. ���,

Windows �� ��� ����.� ����. ��� 3� ��� � �

��� �� �����.

Windows

108 IBM Tivoli Access Manager: �� �� ���

Page 129: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

11. IBM WebSphere Application Server� IBM HTTP Server� �����.

Windows� IBM Tivoli Access Manager Web Portal Manager CD� �� �

� �� �� �� ��� �� ���. �� ����� ��� �����

�.

http_1319_efix2.bat install_path

���, install_path� IBM HTTP Server� �� ��� �����. �� ��

� C:\Program Files\IBM HTTP Server���.

12. ���� �����, �IBM WebSphere Application Server ��� 3 ����

������.

IBM WebSphere Application Server ��� 3 ��

IBM WebSphere Application Server ��� 3� �����, �� �� ����

�.

1. WebSphere Application Server, HTTP Server � LDAP ��� �����

( � ���� ��� ��).

2. Windows� IBM Tivoli Access Manager Web Portal Manager CD� ���

��.

3. �� ����� CD� ��� ����� windows\WebSphere\ptf403 ��

�� ������.

4. ptf403 �� �� ��� ���� �� �� �� ���� �� �� �

� ������.

install.bat

5. IBM WebSphere Application Server � �� �� ���� Enter� ���

��. � �, ��� ������.

C:\WebSphere\AppServer

6. ������ ��� ����� �� ����.

7. JDK� ��� ����� �� ����.

8. iPlanet Directory� ������ �� ��, �� �� WebSphere�� �

���� iPlanet �� ��� ������. ��� ���, ���� �

���.

9. IBM HTTP Server� ����� �� ����.

10. IBM HTTP Server� �� ��, IBM HTTP Server � �� �� ����

Enter� �����. � �, ��� ������.

C:\Program Files\IBM HTTP Server

11. ������ �� �� �� �� ����� �� ����.

12. WebSphere Application Server � �� �� ��� ����� �� ��

��. ������ �����. ���� IBM JDK ����� � ����

Windows

� 7 � Windows� Tivoli Access Manager �� 109

Page 130: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

����. �� ������ � Windows� IBM Developer Kit�

WebSphere �� �� �����. �� ���� �� �� ��� ��� ��

��� ����.

������ ����, �� ���� ����.

�� �� ��� �������. ��� ��� �� ��� ���

���. ����� �� �� �����.

13. ����� � �� �����.

WebSphere Application Server Single Server 4.0 � ��� 3� ������

�.

14. ����� ���� ���� �� ������.

Tivoli Access Manager �� ��

��� ��

v ���� �� ���� �� � Tivoli Access Manager �������

������.

v Policy Server � ��� ���� �� ��� �� Tivoli Access

Manager ������( : WebSEAL)� �� �� �����.

v ����� Policy Server ���� �� ��� ������.

Tivoli Access Manager �� ��� � ���� ��� �������. �����

� ����� �� �� ����� �� ��� �� ���� �� �� �

�� ���.

� �� ��� �� ����.

v �Tivoli Access Manager ��� �� ��

v 111 ���� �Tivoli Access Manager ��� ���

Tivoli Access Manager ���� �� ��

Windows ���� Tivoli Access Manager ���� �� ���� �� ��

�����.

�: Tivoli Access Manager ���� �� �� �� ��, �� � ���

�� � �� ��� ����� ���� ��� ����. �� �����

� ��� ����.

1. ��� �� �� Windows ���� �������.

Windows

110 IBM Tivoli Access Manager: �� �� ���

Page 131: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

2. ����� �� � Policy Server� �� ��(Tivoli Access Manager Policy

Server� �� ���� ��) ������.

3. �� → ���� → Access Manager for e-business → ��� ��� ��

����� pdconfig ��� ������.

4. Access Manager for e-business �� �� ���� ��� Tivoli Access Manager

��� ��� �����. ���� �� �� ��� �� � �

��.

v Access Manager Authorization Server

v Access Manager Policy Server

v Access Manager Runtime

v Access Manager Web Portal Manager

�: Active Directory ����� ���� ��, Tivoli Access Manager Policy

Server� �� ��� �� �� � ������� �� ��� ����

��.

5. �� �� �����.

6. Authorization Server� �� ���� ��, Security Manager ���

������.

7. Policy Server� �� ���� ��, LDAP ��� ��( : cn=root)

� ��� ������. � ���� �� ��� �� ���� �� �

Tivoli Access Manager ��� �� �� � � ��� ��� ���� �

� ���� ����. ����� �� �����. � ��� ����� �

��� �����.

8. ��� ���� �� ���� 4 - 7�� ������.

9. Tivoli Access Manager JRE� �� ����, pdjrtecfg ��� ������.

� �, jre_path ��� � ��� JRE� �� ���� ��� ����

��.

pdjrtecfg -action unconfig -java_home jre_path

�: pdjrtecfg ��� �� ��� ��� IBM Tivoli Access Manager Command

Reference� ������.

Tivoli Access Manager ��� ��

Windows ����� ���� ����� �� �� �����.

1. ��� �� �� Windows ���� �������.

2. �� → �� → ���� � ��, ���� ��/�� �� � �����.

3. �� ��� ��� � ��, ��/��� �����.

v IBM Directory V4.1.1

Windows

� 7 � Windows� Tivoli Access Manager �� 111

Page 132: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v Access Manager Authorization Server

v Access Manager Application Development Kit

v Access Manager JRE(Java Runtime Environment)

v Access Manager Policy Server

v Access Manager Runtime

v Access Manager Web Portal Manager

v WebSphere Application Server

� �� � �� ��� ����.

4. Tivoli Access Manager �� ����� �� ��� �� ��� ���

��.

5. ���� �� �� ��� ���� �� �����.

Tivoli Access Manager ���� �����.

6. ���� �� ���� ��� ��� � ����� ������.

7. ����� GSKit� ����� �� ��� ������.

isuninst -f"c:\program files\ibm\gsk\ibm\gsk5\gsk5bui.isu"

���, c:\program files\ibm\gsk\ibm\gsk5� gsk5BUI.isu � � ��� �

�� �����.

�: �� Tivoli Access Manager ���� ��� ���� ��/�� ��

� ���� GSKit� �� �� � ����.

Windows

112 IBM Tivoli Access Manager: �� �� ���

Page 133: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� 8 � Tivoli Access Manager, �� 4.1� �����

� ���� Tivoli Access Manager �� 3.8 � �� 3.9 ���� Tivoli Access

Manager �� 4.1� ������� �� � �����. �� ��� � �� �

�� �� ���� �� � �� �����. ��� ��� � �����

��� �� ��� Tivoli Customer Support ����� IBM Tivoli Access

Manager ���� ��� ������.

�: �� ���� Tivoli SecureWay Policy Director �� 3.7.x �� ���� �

�������, �� 4.1� ���� �� �� Tivoli Access Manager �� 3.8

�� 3.9� ����� ���.

� ��� �� �� �� ��� ����.

v �LDAP ������ ����� �����

v 114 ���� �Policy Server ��� ������

v 116 ���� �� ���� ���� Policy Server ������

v 118 ���� ��� Tivoli Access Manager ��� ������

v 120 ���� �� Policy Server� � �� ���� ��� ���

�� 3.8 �� �� 3.9 Policy Server�� �������� ��, � Policy Server

����� �������� � ���(�� Policy Server ��� � �� 4.1� �

� � ���)� ����� � ����. � ���� ����, �� Policy

Server� ��� �� ����� ��� Policy Server �� 4.1 ���� ���

� ����. � ���� ��� ������ ��� �� ��, �� 4.1 ���

������ �� � ����.

LDAP ������ ����� ����

�� 4.1� ������� �� �� ����� � ����.

v �� � ����� �, ���� �� � Tivoli Access Manager ��� ��

����. ���, LDAP ��� ���� LDAP ���� ���� � � ��

�� �� ����. ��� ��� LDAP �� ���� ������.

v �� ���� � ���� �� 4.1 �� ����� �� ����. Policy

Server �� 4.1 ����� �� 3.8 � 3.9 ��� ��� ��� IBM Tivoli

Access Manager ���� ��� ������.

v ����� ����� ����� �� ��� ���� ����. � �, LDAP

������� Domino ������ ����� � ����.

© Copyright IBM Corp. 2001, 2003 113

Page 134: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v � Tivoli Access Manager ������� ��� ���� ������� �

�, Tivoli �� ���� ��� ������ ���� ����� ��

��� � ���� ������.

v UNIX ���� ��:

– � ��� root ����� �����.

– �� �� �� /tmp���.

– �� ��� /opt/PolicyDirector � /var/PolicyDirector���.

v Windows ���� ��:

– ��� ��� �� ���� � ��� �����.

– �� �� �� TMP ���� ��� ����. TMP ��� ��� TEMP

���� ��� �� �����. � �� �� �� ���� �� �� �

��� system �� �� �� �� ����.

– �� ��� �� � ��� �� �� �� � ��.

– IBM Directory Server� Tivoli Access Manager ���� �� ���� �

� ��� ���� Tivoli Access Manager ����� �� �� � ��

���� ����� � ����. � �� IBM Directory Client� ����

��� �� ������ ����� ���.

Policy Server ��� �����

� Policy Server ���� Tivoli Access Manager �� 4.1� ��������

�� �� �����.

1. � Tivoli Access Manager ���� ���� �� ��� ������.

v Windows ���� ��, �� → �� → ��� → � ��(Windows 2000

� ��)� �� ��� �� � � � �����. ������( :

WebSEAL)� ��� �� ����� �� � � Tivoli Access Manager

���� �����.

v UNIX ���� ��, pd_start ��� ������. � �, ��� ��

����.

pd_start stop

� Tivoli Access Manager ��� � ������� ����� ����

� ps ��� ������. �� �� � Tivoli Access Manager ���

�� ������� ��� kill ��� ���� ������.

2. Tivoli Access Manager, �� 4.1 �� �� ����� ��� �� �

� � ��� ��� ������. �� �� ����� �� � �� �

�� ��� �� ��� IBM Tivoli Access Manager ���� ��� ����

� ���� ������.

Tivoli Access Manager, �� 4.1� �����

114 IBM Tivoli Access Manager: �� �� ���

Page 135: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

3. ���� ��� IBM GSKit(Global Security Toolkit)� ���� IBM Directory

Client� ���������. ��� ��� �� ���� �� ″�� ��

��″ �� ������. �� �� �� �����, � ��� ������.

�:

v GSKit ����� �� ����� ���� ���, �� ��� ��

� ��� ������.

v IBM Directory Client� IBM Directory Server� � ���� �� �

�, ��� ����� ���. �� ������ �� ��� IBM

Directory ��� ������.

4. �� Policy Server�� � Tivoli Access Manager ��� �����, pdbackup

��� ������. � �, ��� ������.

pdbackup -action backup -file archive_name -list /path/pdbackup.lst

���, archive_name� Tivoli Access Manager ��� ���� � ���

�, /path/� pdbackup.lst � � ��� �� �� � �����.

v AIX ���� ��:

cd_drive/usr/sys/inst.images/migrate

v HP-UX ���� ��:

cd_drive/HP/migrate

v Red Hat Linux ���� ��:

cd_drive/linux/migrate

v zSeries� Linux ���� ��:

cd_drive/zSeries/migrate

v Solaris ���� ��:

cd_drive/solaris/migrate

v Windows ���� ��:

cd_drive\windows\migrate

�: pdbackup ��� �� ��� ��� IBM Tivoli Access Manager Command

Reference� ������.

5. LDAP ��� �� �� ���� Tivoli Access Manager �� 4.1 � ��

�� ������. ��� ��� �� ���� �� �� �� ��� �

�����.

6. Tivoli Access Manager policy Server� �� �� ������. Tivoli Access

Manager ������� ���� �� �� ��� ������.

Tivoli Access Manager, �� 4.1� �����

� 8 � Tivoli Access Manager, �� 4.1� ����� 115

Page 136: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� ��� ���� Policy Server �����

� Policy Server� �� ���� ����� � �� ���� � Policy Server

�� 4.1� ����� �� �� �����.

1. � Policy Server�� � Tivoli Access Manager ���� ���� ��

��� ������.

v Windows ���� ��, �� → �� → ��� → � ��(Windows 2000

� ��)� �� ��� �� � � � �����. ������( :

WebSEAL)� ��� �� ����� �� � � Tivoli Access

Manager ���� �����.

v UNIX ���� ��, pd_start ����� ������. � �, ���

������.

pd_start stop

� Tivoli Access Manager ��� � ������� ����� ���

�� ps ��� ������. �� �� � ��� �� ������� �

�� kill ��� ���� ������.

2. �� Policy Server�� � Tivoli Access Manager ��� �����,

pdbackup ��� ������. � �, �� ��� ������.

v �� 3.8� ��:

pdbackup -action backup -file archive_name -list mig38to41.lst -path path

v �� 3.9� ��:

pdbackup -action backup -file archive_name -list mig39to41.lst -path path

���, archive_name� UNIX� Tivoli Access Manager ��� ���� �

�� �� Windows� ���� �� � ����, path� ���� � �

� ���� �� �� ��� �����. pdbackup ��� ����,

Tivoli Access Manager ��� ���� � �� ��� ���� �� ��

��� ��� �����.

�: pdbackup ��� �� ��� ��� IBM Tivoli Access Manager

Command Reference� ������.

3. �� ��� ���� Policy Server ��(pdmgrd) �� ���� � 3.8

Policy Server�� �� ������.

v Windows ���� ��, �� → �� → ��� → � ��(Windows 2000

� ��)� �� ��� �� � � � �����. ������( :

WebSEAL)� ��� �� ����� �� � � Tivoli Access

Manager ���� ������.

v UNIX ���� ��, pd_start ����� ������. � �, ���

������.

Tivoli Access Manager, �� 4.1� �����

116 IBM Tivoli Access Manager: �� �� ���

Page 137: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

pd_start start

4. pdbackup ��� ��� ����� � Policy Server�� � 4.1 Policy Server

� ������. Windows ���� �� � ��, ���� �� � � �

��� � 4.1 Policy Server� ������. �� LDAP ��� ��

SSL� �� ��, � �� ���� � � � �� ��� ��� �

� �� �� � � ��� ���� SSL ����� � � � � ����

� ������.

�: � 4.1 Policy Server� �� �� ����� ���. � ���� ��

�� ����.

5. � ���� Tivoli Access Manager, �� 4.1 �� �� ����� �

�� �� �� � ��� ��� ������. �� �� ����� �

� � �� ��� ��� �� ��� IBM Tivoli Access Manager Command

Reference� ����� ���� ������.

6. LDAP ��� �� �� ���� Tivoli Access Manager �� 4.1 �

�� �� �� ������ � 4.1 Policy Server� ������. ��� ��

� �� ���� �� ″�� �� ��″ �� ������.

7. � 4.1 Policy Server� ����� ���� �����, pdbackup ��� �

�����. � �, ��� ������.

pdbackup -action extract -path restore_directory -file archive_name

���, restore_directory� ���� ���� �� � 4.1 Policy Server

� �� �� ���, archive_name� Tivoli Access Manager ��� ���

� � �� ���� �� � �����.

�: pdbackup ��� �� ��� ��� IBM Tivoli Access Manager

Command Reference� ������.

8. � 4.1 Policy Server�� Runtime� ������. LDAP ��� �� ��

�� ���, � Policy Server� ���� LDAP ��� ��� �����

�.

9. � 4.1 Policy Server� ������. ��������� policy� �� ��

� �� ���� ���, �� �� 7�� -path ���� ���

restore_directory� ������.

Tivoli Access Manager, �� 4.1� �����

� 8 � Tivoli Access Manager, �� 4.1� ����� 117

Page 138: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

��

�� ��� �� �� � ���� ��� ��� ����. ��� ��

�, � Policy Server� �� �� � ���� �����. � �

�� ��� 120 ���� �� Policy Server� � �� ���� ��

� ���� �� ����� �����. � ���� � ���� ���

��. �� � � ( : �� � )� ��� � ��� �

�� �����. � �, �� � � � Policy Server� /certs �

� �� �� �� � ������ /certs �� �� �� ���.

10. ���� �������. pdadmin� ���� ACL ������ � ����

�� ���� ��� ������.

11. �� �� � ���� �� Tivoli Access Manager ���� �� � ��

����.

12. ������ ���� ���� ����� ��� ��, ������ � �

�� Policy Server�� � 4.1 Policy Server� �� ���. �� �

� �� ��� �� ����.

v UNIX ���� ��: /var/PolicyDirector/db/master_authzn.db

v Windows ���� ��: install_dir\db\master_authzn.db

13. �� ���� �� 4.1� �������� �� �� ��� Tivoli Access

Manager ��� ������� �����. � Tivoli Access Manager �

��� ����� 120 ���� �� Policy Server� � �� ���� ��

� ���� ��� �� � Policy Server� � �� ���� ����.

�� Tivoli Access Manager ��� �����

�� �� �� Tivoli Access Manager ���(Policy Server� ��)� Tivoli

Access Manager �� 4.1� ����������.

1. ����� �� � Tivoli Access Manager ������ � ���� ��

�, �� ����� ������. � ������ � ���� ���� �

� ��� ������.

v Windows ���� ��, �� → �� → ��� → � ��(Windows 2000

� ��)� �� ��� �� � � � �����. ������( :

WebSEAL)� ��� �� ����� �� � � Tivoli Access Manager

���� �����.

v UNIX ���� ��, pd_start ����� ������. � �, ��� �

�����.

Tivoli Access Manager, �� 4.1� �����

118 IBM Tivoli Access Manager: �� �� ���

Page 139: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

pd_start stop

�: � Tivoli Access Manager ��� � ������� ����� ��

��� ps ��� ������. �� �� � Tivoli Access Manager

��� �� ������� ��� kill ��� ���� ������.

2. Tivoli Access Manager, �� 4.1 �� �� ����� ��� �� �

� � ��� ��� ������. �� �� ����� �� � �� �

�� ��� �� ��� IBM Tivoli Access Manager Command Reference� �

���� ���� ������.

3. ���� ��� IBM GSKit(Global Security Toolkit)� ���� IBM Directory

Client� ���������. ��� ��� �� ���� �� ″�� ��

��″ �� ������. ��� IBM Global Security Toolkit �� ��� ��

�� ����. �� �� �� �����, � ��� ���� ��

��� ������.

�:

v GSKit ����� �� ����� ���� ���, �� ��� ��

� ��� ������.

v IBM Directory Client� IBM Directory Server� � ���� �� �

�, ��� ����� ���. �� ������ �� ��� IBM

Directory ��� ������.

4. �� Policy Server�� � Tivoli Access Manager ��� �����, pdbackup

��� ������. � �, ��� ������.

pdbackup -action backup -file archive_name -list /path/pdbackup.lst

���, archive_name� Tivoli Access Manager ��� ���� � ���

�, /path/� pdbackup.lst � � ��� �� �� � �����.

v AIX ���� ��:

cd_drive/usr/sys/inst.images/migrate

v HP-UX ���� ��:

cd_drive/HP/migrate

v Red Hat Linux ���� ��:

cd_drive/linux/migrate

v zSeries� Linux ���� ��:

cd_drive/zSeries/migrate

v Solaris ���� ��:

cd_drive/solaris/migrate

v Windows ���� ��:

cd_drive\windows\migrate

Tivoli Access Manager, �� 4.1� �����

� 8 � Tivoli Access Manager, �� 4.1� ����� 119

Page 140: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�: pdbackup ��� �� ��� ��� IBM Tivoli Access Manager Command

Reference� ������.

5. LDAP �� � Policy Server� �� �� ���� Tivoli Access Manager

�� 4.1 ���� ������. ��� ��� �� ���� �� ��

�� ��� ������.

6. Tivoli Access Manager ������� ���� �� ��� ������.

�� Policy Server� � �� ���� ��� ��

� �� ��� �� ���� Policy Server� ������ ��, ��� �

�����/��� Policy Server �� 4.1 ����� ��� ������� �

� Policy Server� ����� �� �� ������.

1. �� � � Policy Server �� 4.1�� � Policy Server� �� �� ��

������.

v UNIX ���� ��: opt/PolicyDirector/sbin/pdmgr_ucf

v Windows ���� ��: pd_install_path/sbin/pdmgr_ucf.exe

���, pd_install_path� Tivoli Access Manager �� �����.

2. � Policy Server�� pdmgr_ucf(Windows� �� pfmgr_ucf.exe) �� �

� ������.

3. Tivoli Access Manager� �� ��� �� ������. �� �� ��� Tivoli

Access Manager �� 3.8 �� �� 3.9 ��� ������.

�: ����� ���� �� �� Policy Server �� � Policy Server� �

� ��� ����. � Policy Server �� � Policy Server� ���

��� Tivoli Access Manager ��� ��� �� ���.

��� �� ��� ��

��� � �� ���� �� 4.1� ������ � ���� ��� ���

� �� �� �� � ����. �� ����� �� �� �����.

�: � ��� �� � ���� ��� ������ �� ���� �� Tivoli

�� �� ������.

1. � Tivoli Access Manager ������ � �� ���� ����� ��

����.

2. Tivoli Access Manager, �� 4.1� ����� �� ��� ������.

v AIX ���� ��, smitty� ���� ����� Tivoli Access Manager �

��� ������.

v HP-UX ���� ��, �� ��� ���� ������.

Tivoli Access Manager, �� 4.1� �����

120 IBM Tivoli Access Manager: �� �� ���

Page 141: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

rm -f /opt/PolicyDirector/.configure/* swremove -x enforce_dependencies=false package_name rm -fR /opt/PolicyDirector rm -fR /var/PolicyDirector

v Linux� ��, �� ��� ������.

rm -f /opt/PolicyDirector/.configure/* rpm -e package_name rm -fR /opt/PolicyDirector rm -fR /var/PolicyDirector

v Solaris ���� ��, �� ��� ������.

rm -f /opt/PolicyDirector/.configure/* pkgrm package_name rm -fR /opt/PolicyDirector rm -fR /var/PolicyDirector

pkgrm ��� ���� � ���� ��� ��� ��� �� ��

�� �� ���� ����. ����� �� �����. �� ����

�( : WebSEAL)� ���� ��� ���� ��� ������� ��

�� Tivoli Access Manager base ���� �� �� ��� �� �

��� ����. ����� �� �����.

v Windows ���� ��, �� �� �����.

a. ��� �� �� Windows ���� �������.

b. �� → �� → ���� � ��, ���� ��/�� �� � ���

��.

c. ��/�� �� ���� Tivoli Access Manager ���� ������.

3. Tivoli Access Manager� �� ��� ������. ��� ��� �� ���

�� �� ���� ������.

�: AIX ���� ��, -F �� �� installp ��� �� ���. SMIT

� ���� �� 3.8 �� 3.9 ���� ���� ��, � �� �� �

��� ���� �� ���� �� ���� �� �� ������ �

�� �� ��� �� ����� ���� ������.

4. �� 4.1� ������� �� ���� � � Tivoli Access Manager �

��� ������.

5. �� ���� ����� pdbackup -action restore ��� ������.

pdbackup ��� �� � � ��� IBM Tivoli Access Manager Command

Reference� ������.

Tivoli Access Manager, �� 4.1� �����

� 8 � Tivoli Access Manager, �� 4.1� ����� 121

Page 142: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Tivoli Access Manager, �� 4.1� �����

122 IBM Tivoli Access Manager: �� �� ���

Page 143: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� 9 � UNIX �� �� ����

� ����� UNIX ����� �� �� ��� ��� �� ����� �

���.

v �IBM Directory Server ��� ���

v 130 ���� �Tivoli Access Manager Policy Server ��� ���

v 139 ���� �Tivoli Access Manager Runtime ��� ���

v 145 ���� �Web Portal Manager ��� ���

��� ��

v IBM Tivoli Access Manager ���� ���� � ��� ��� ��

�� ��� ��� ���� � ����.

v 7 ���� ��� ������ ��� ���� Tivoli Access Manager ��

�� ����� ������.

v ���� �� �� ��� ����� �� ���� Tivoli Access

Manager �� �� �� ″�� �� ��″ �� � ����.

�� ���� �� ����� ���� ����� � Tivoli Access Manager

Policy Server� ����. � ����� � �� ��� ����.

v IBM Directory Server� Tivoli Access Manager ������ �� � ����

���.

v IBM Directory Server� LDAP ����� �� SSL(Secure Sockets Layer)

��� �����.

IBM Directory Server ��� ��

�� ������� ezinstall_ldap_server ��� ���� IBM Directory

Server� Tivoli Access Manager ������ �� � �����. � ��� �

� �� ����� ��, Tivoli Access Manager ��� � ��� ��� ��

� �� � ������ ���� �� � �����.

Windows �� �� � � �� �� �� �� �� � �� ��� ����.

�� �� �� �� ����.

v AIX ���� ��:

– IBM DB2 - /usr/ldap/db2

© Copyright IBM Corp. 2001, 2003 123

Page 144: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

– IBM HTTP Server - /usr/HTTPServer

– LDAP - /usr/ldap

– GSKit - /usr/opt/ibm/gskkm

v Solaris ���� ��:

– IBM DB2 - /opt/IBMdb2

– IBM HTTP Server - /opt/IBMHTTP

– LDAP server - /opt/IBMldaps

– LDAP client - /opt/IBMldapc

– GSKit - /opt/ibm/gsk5

9� IBM Directory Server � �� �� ������ �� ��� ����

�. �� ����� ���� �� � ���� ��� �� �� ��� �

�� �����.

9. IBM Directory Server �� ���

IBM HTTP Server �� ��� ��� �

�� ID �� ����� ���� ����� � �

��� �� ID� �����. ____________________________

�� �� ____________________________

HTTP � 80 ____________________________

IBM Directory Server �� ��� ��� �

LDAP ��� ID(DN) cn=root ____________________________

LDAP ��� �� ____________________________

LDAP �� ��� ���� ����� ���� ��� ��� �

��� �����. ____________________________

GSO ������� LDAP DN ��:

o=ibm,c=tw ____________________________

LDAP �� � 389 ____________________________

LDAP SSL � � cd_drive/common/pd_ldapkey.kdb ____________________________

LDAP SSL � � �� gsk4ikm ____________________________

SSL ����� �� ��� PDLDAP ____________________________

IBM Directory Server � �� �� ������ �� � ����� ��

�� �����.

�: � ��� IBM Directory Server� ��� ������. �� �� ��� �

��� �� �� � � ����� ������.

1. root� ���� �������.

2. �� �� � �� SSL LDAP � � (pd_ldapkey.kdb)� ���� ���

��. SSL� �� �� �� SSL � � � �����, ����� SSL �

� � � ���� �� �� ��� �� ���.

UNIX �� �� ����

124 IBM Tivoli Access Manager: �� �� ���

Page 145: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

3. Tivoli Access Manager Base CD �� �� �� �� ezinstall_ldap_server

� � ������.

��� � ����� �� �� � � ��� � �� ��, ��� �� �

� ����� ���� ����. � ����� ����� N� ����

�. �� � � �� ��� ��� 219 ���� �� B �Tivoli Access

Manager �� ���� ������.

�� �� �� ����. � ���� IBM Directory Server� �� �

�� �� ��� ����. �� ����� �����, Enter� ��� �

��� ��� �� ��� �����.

�: �� ����� ���� ����� ���� ��� ����. ��

� �� �� �� ��� � �� �� � ����. ���� ���

��� ��� ��� ���� �� ��� � Enter� �����.

UNIX �� �� ����

� 9 � UNIX� �� �� ���� 125

Page 146: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

4. � ���� ����� � ���� root ID� ��� ��� ���� Enter

� �����.

5. ����� Y� ���� Enter� �����. �� ��, LDAP ��� ID�

�� ��� ���� ��� � �� ������.

UNIX �� �� ����

126 IBM Tivoli Access Manager: �� �� ���

Page 147: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

6. GSO ������� �� LDAP DN� ����� ���� ����. �

� LDAP �� �� � �� ��(DIT)�� GSO(Global Sign-On) �����

� �� ��� � �����. ���� ����� � LDAP DIT ��

� DN� �� � ����. � �, GSO ������ �� � ����

����� o=ibm,c=us� ������.

�: Tivoli Access Manager� �� �� � ���� ����� ��� �

��� GSO ������� LDAP DN� ����. GSO �������

LDAP DN� �� ��� ��� 21 ���� �LDAP �� �� ���

������.

7. GSO ������� LDAP DN� ��� � IBM Directory Server �� ��

� �� � �� ��� ����. � �, �� LDAP SSL � � (��

7)� ���� ���� 7� ��� � Enter� � �� ������. SSL

� � �� ��� ��, �� �� �� 8 � 9� �� ����� �����

�.

8. �� 7(LDAP SSL � � )� ���� ���� �� ��, Enter� ���

cd_drive/common/pd_ldapkey.kdb � � ���� var/ldap/keytab/

pd_ldapkey.kdb �� �� ����� ���� ����. ����� Y�

���� Enter� �����.

�:

UNIX �� �� ����

� 9 � UNIX� �� �� ���� 127

Page 148: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v �� 8(LDAP SSL � � ��)� �� pd_ldapkey.kdb � ��� �

����. � �� ��� gsk4ikm���. gsk5ikm ����� ���� �

��� �� ��, ��� �� �� ���.

v �� 7� �� pd_ldapkey.kdb � � ��� ��, � � � � ����

� ���� ��� ����.

UNIX �� �� ����

128 IBM Tivoli Access Manager: �� �� ���

Page 149: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

9. IBM Directory Server � �� �� ����� ��� �� �� ���

�� �����.

10. IBM Directory Server � �� �� ����� ��� �� �� � ��

���� ������. � ������ � � ��� �� � ����. �

���� ����� ������. ��� ���� ��� �� �� � �

�� ��� �����.

UNIX �� �� ����

� 9 � UNIX� �� �� ���� 129

Page 150: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�: �� � ��� ����, /var/ezinstall_ldap_server.log � �

� ����.

Tivoli Access Manager Policy Server ��� ��

LDAP ������ ��� ��� �� Policy Server� �����. �� ��

����� ezinstall_pdmgr ��� ���� Policy Server� �� � ����

�. � ���� �� �� ����� ��, Tivoli Access Manager ��� �

��� ��� ��� �� � ������ ���� �� � �����.

� ������� 123 ���� �IBM Directory Server ��� ���� ��� �

����� � ���� Policy Server� �����. �� ��� �� ����

� ������� ����� ��� � �����. �� �� ����� � �

�� �� ���� ���� �� ����. � ���� ���� �� � � �

��� �� ������ IBM Global Security Toolkit � IBM Directory Client

� ����� ����.

131 ���� 10� Tivoli Access Manager Policy Server � �� �� �

����� �� ��� �����. �� ����� ���� �� � ����

��� �� �� ��� � �� �����.

UNIX �� �� ����

130 IBM Tivoli Access Manager: �� �� ���

Page 151: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

10. Tivoli Access Manager Policy Server �� ���

IBM Tivoli Access Manager Runtime �

���� ��� �

� ������ ��� �� ldap � ��, LDAP� �����. ____________________________

LDAP �� ��� �� ____________________________

LDAP �� � 389 ____________________________

IBM Tivoli Access Policy Server �� ��� ��� �

LDAP �� ��� �� ____________________________

LDAP ��� ID(DN) cn=root ____________________________

LDAP ��� �� ____________________________

Policy Server� LDAP �� SSL ��? ���: Y ____________________________

LDAP ���� SSL ��� ��, � � �� �� �������.

LDAP SSL ����� � � ____________________________

LDAP ����� �� ����� SSL � � � �� �� �� �

�� ����. ____________________________

SSL � � �� gsk4ikm ____________________________

LDAP �� SSL � 636 ____________________________

GSO ������� LDAP DN LDAP ��� ���� � ���� �

DN� ������. ____________________________

AM Policy Server� SSL �� � 7135 ____________________________

Policy Server SSL �� ��� 365 ____________________________

�� ���� �� ���: Y ____________________________

Tivoli Access Manager Policy Server� �� � ����� �� �� ����

�.

1. root ���� ���� �������.

2. �� ��� ������.

v �� ���� Policy Server� �� �� LDAP ��� ���� � �

��� SSL � � � � ���� �� �� ��� ������. �

�, IBM Directory Server� var/ldap/keytab �� �� �� ��

pd_ldapkey.kdb � � � ���� /var/ldap/keytab �� �� ���

���.

v IBM Directory Server� ��� � ���� Policy Server� �� �

� 3�� ����.

3. Tivoli Access Manager Base CD �� �� �� �� ezinstall_pdmgr �

� ������.

��� � ����� �� �� � � ��� � �� ��, ��� �� �

� ����� ���� ����. � ����� ����� N� ����

�. �� � � �� ��� ��� 219 ���� �� B �Tivoli Access

Manager �� ���� ������.

UNIX �� �� ����

� 9 � UNIX� �� �� ���� 131

Page 152: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�� �� �� ����. �� ����� �����, Enter� ��� �

��� ��� �� ��� �����.

LDAP ��� � ���� Policy Server� �� ��, ezinstall_pdmgr

��� IBM Global Security Toolkit � IBM Directory Client� �� �

����� �����.

4. LDAP ��� ��� ��� ���� Enter� �����. �� IBM Directory

Server� ��� ��� ��� �����. � �, pdsun3� �� ����

�� IBM Directory Server� ��� ��� �����. ��� �� ��� �

�� ��( : pdsun3.dev.company.com)� �� � ����.

UNIX �� �� ����

132 IBM Tivoli Access Manager: �� �� ���

Page 153: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

5. ����� Y� ���� Enter� �����. ��� LDAP ��� SSL ��

� ���� �� ����. �� ����� Y� ���� Enter� �����.

��� ���, N� ���� 135 ���� 8�� ����.

UNIX �� �� ����

� 9 � UNIX� �� �� ���� 133

Page 154: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

6. 131 ���� 2��� LDAP SSL ����� � � � ��� ��� ��

� ��� � Enter� �����. � �, �� pd_ldapkey.kdb � �

/var/ldap/keytab �� �� ��� �� /var/ldap/keytab/pd_ldapley.kdb

� ������.

7. LDAP SSL ����� � � � ��� ���� Enter� �����. �� �

�� �� �� �� pd_ldapkey.kdb � � �� ��� gsk4ikm���.

ezinstall_ldap_server ��� ���� IBM Directory Server� �� � �

���� �� �� � � �� � � � ��� ���� � �� ��� �

�����. gsk5ikm ����� ���� � ��� �� ��, �� �

�� �� �� ���.

�: �� 7� LDAP ��� �� ����� ���� ����� GSKit �

������ � � ���� �����. ���� ���� SSL� �

�� � �� ��� ����. SSL �� � ����� ��� ��

�� ��� ����� � � � ��� �� ���� ����� ���

� � �� ����. �� LDAP ���� ����� .kdb � ��

� ��� ��� ��� ����.

UNIX �� �� ����

134 IBM Tivoli Access Manager: �� �� ���

Page 155: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

8. LDAP ��� �� � ��� LDAP ��� ID� ��� ���� Enter�

�����.

UNIX �� �� ����

� 9 � UNIX� �� �� ���� 135

Page 156: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

9. Security Master ID(sec_master)� �� ��� ���� ��� � �� �

�����. �� ID, �� � ��� ����� � �� ID� �����

�.

10. LDAP �� �� � ��� GSO ������ �� LDAP DN� ����

Enter� �����. � �, o=ibm,c=us� �� ������ ��� ��

����.

UNIX �� �� ����

136 IBM Tivoli Access Manager: �� �� ���

Page 157: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

11. Tivoli Access Manager Policy Server� ����� ��� �� Tivoli Access

Manager Runtime ��� �� ��� ���� pdcacert.b64�� �� SSL

�� � � � �����. Tivoli Access Manager Runtime ���� ��

���� ��� ���� � � � ��� ���� � ����. ���

���, ���� ���� �� � � � � �� Tivoli Access Manager

Runtime ���� ��� �� ���.

SSL �� � � � � ����� ����� Y� ���� Enter� ��

���.

�: � ����� ���� �� ��, SSL �� � � � �� �� �

� �����.

/var/PolicyDirector/keytab/pdcacert.b64

UNIX �� �� ����

� 9 � UNIX� �� �� ���� 137

Page 158: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

12. ����� Y� ���� Enter� �����. �� ����� �������.

��� ���� ��� �� �� � ��� ��� �����.

13. Policy Server� ��� �, ��� �� ���� �� Tivoli Access Manager

���� �� � ����. � �, ��� �� � ����.

UNIX �� �� ����

138 IBM Tivoli Access Manager: �� �� ���

Page 159: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v install_pdrte InstallShield ����� ���� �� ��� ��� ����

� ���� ������(Policy Server ��). ��� ��� �Tivoli Access

Manager Runtime ��� ���� ������.

v ezinstall_pdwpm ��� ���� Tivoli Access Manager Runtime �

����� Web Portal Manager ������ �� ������. ��� �

�� 145 ���� �Web Portal Manager ��� ���� ������.

v ezinstall_pdacld ��� ���� Authorization Server ���� ���

���.

v ezinstall_pdauthADK ��� ���� ADK(Application Development

Kit)� �� �� ���� ������.

�: �� � ��� ����, /var/ezinstall_pdmgr.log � � � �

���.

Tivoli Access Manager Runtime ��� ��

�� ������� install_pdrte InstallShield ���� ���� Tivoli Access

Manager Runtime ���� �� � �����. �� �� �� ���� ��

install_pdrte ������� InstallShield ���� ���� ��� ���� ��

� �����. ��� �� �� �� �� ����� JRE� ��� � �

� �� ����� �� � Tivoli Access Manager ���� �� � �����.

11� Tivoli Access Manager Runtime �� �� ������ �� ��

� �����. �� ����� ���� �� � ���� ��� �� ��

��� � �� �����.

�: ��� �� ������ InstallShield�� �� �� �� ����� ���

� ��� ����. �� �� ��� LDAP �� ������ �� ���

� �����.

11. Tivoli Access Manager Runtime ��� �� ���

IBM Tivoli Access Manager Runtime ��� ��� �

Policy Server ��� �� ____________________________

Policy Server SSL � 7135 ____________________________

Policy Server CA �� �

Policy Server �� � �� Tivoli Access

Manager Runtime ����� �� � �

���� � ��� � ���� ��

��� ����.

____________________________

LDAP �� ��� �� ____________________________

LDAP �� � 389 ____________________________

LDAP ���� SSL� ����� �����. � �� �������.

UNIX �� �� ����

� 9 � UNIX� �� �� ���� 139

Page 160: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

11. Tivoli Access Manager Runtime ��� �� ��� (��)

�� ��� �� � �

IBM Directory Server�� � ���� �

� �� �� pd_ldapkey.kdb � � �

�����.

____________________________

� � �� gsk4ikm ____________________________

LDAP SSL � � DN(�� ��) �� pd_ldapkey.kdb � � � �� �

� �� ��� ����. ____________________________

SSL � �� 636 ____________________________

�: GSKit � IBM Directory Client� �� �� �� ���� ��� ���

�. �� SSL� ��� IBM Directory Server� �� �����.

Tivoli Access Manager Runtime ���� �� � ����� �� �� ���

��.

1. LDAP �� � Policy Server� �� �� ���� root ���� ����

�� ������.

2. LDAP ��� ���� � ���� SSL � � � � ���� �� �� �

�� ������. � �, IBM Directory Server ����

/var/ldap/keytab �� �� �� pd_ldapkey.kdb � � � ����

/var/ldap/keytab �� �� ������.

3. ���� ��� JRE� ������. ��� ��� �� ��� ����

��.

v AIX ���� ��, 56 ���� ������.

v HP-UX ���� ��, 68 ���� ������.

v Red Hat Linux ���� ��, 78 ���� ������.

v Solaris ���� ��, 88 ���� ������.

4. ��� �� ��� �� ��� �����.

UNIX �� �� ����

140 IBM Tivoli Access Manager: �� �� ���

Page 161: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

5. Tivoli Access Manager Runtime� InstallShield ���� ����� �� �

����.

6. �� ��� �����. �� ��� ��� �� �� �����.

7. �� ��� ���� �� �����.

v Policy Server ��� �� - Policy Server� ��� ��� ������.

UNIX �� �� ����

� 9 � UNIX� �� �� ���� 141

Page 162: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v Policy Server SSL �� - Policy Server SSL �� �� ������

(7135). � ��� ����� � �� ������.

v Policy Server CA � �� - Tivoli Access Manager Runtime� ��, �

� �� Tivoli Access Manager ��� ����� �� � Policy Server

� ��� pdcacert.b64 � � ��� �� ���. �� ��� ��

����.

– pdcacert.b64 � � ���� � ��� Policy Server� ��� ��

�� ��� ����.

– Policy Server� � �� � � ���� � ��� Policy Server� �

�� �� � ���� pdcacert.b64 � � ��� �� ��� ���

���.

UNIX �� �� ����

142 IBM Tivoli Access Manager: �� �� ���

Page 163: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

8. LDAP �� ���� ��� ��� ������. LDAP �� �� �� �

�����(389). �� ��, � �� ���� �� � ������.

9. �� ��� � ����. ��� ����� �� ����.

UNIX �� �� ����

� 9 � UNIX� �� �� ���� 143

Page 164: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

10. �� ����� �����. � ������ � � ��� �� � ����.

11. Tivoli Access Manager Runtime� �� � �� �� ����� ��� ��

�������. ��� ���� ��� ��� ��� ������ �

���. � ����� ����� ��� �� �� ��� �����.

�� � ��� ����, /tmp/msg__amismp.log � � � ����.

UNIX �� �� ����

144 IBM Tivoli Access Manager: �� �� ���

Page 165: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Web Portal Manager ��� ��

�� ������� ezinstall_pdwpm ��� ���� Tivoli Access Manager

Runtime ���� Web Portal Manager ������ �� �� � �����. �

��� �� �� ����� ��, Tivoli Access Manager ��� � ���

��� ��� �� � ������ ���� �� � �����.

12� Web Portal Manager� �� �� ������ �� ��� ����

�. �� ����� ���� �� � ���� ��� �� �� ��� �

�� �����.

12. Web Portal Manager ��� �� ���

IBM HTTP Server �� ��� ��� �

�� ID �� ����� ���� ����� � �

��� �� ID� �����. ____________________________

�� �� ____________________________

HTTP � 80 ____________________________

IBM Tivoli Access Manager Runtime ��� ��� �

� ����� ��� ��� �� ldap ____________________________

LDAP �� ��� �� ____________________________

LDAP �� � 389 ____________________________

Access Manager Policy Server ��� �� ____________________________

SSL �� � 7135 ____________________________

Policy Server CA �� � ��

�� � � ���� � ��� Policy

Server� ��� �� �� ��� ���

�.

____________________________

IBM Tivoli Access Manager Web Portal

Manager ��� ��� �

PDADMIN ��� �� sec_master ____________________________

Security Master �� ____________________________

Tivoli Access Manager ���� Web Portal Manager ������ �� �� �

����� �� �� �����.

1. LDAP �� � Policy Server� �� �� ���� root ���� ����

�� ������.

2. Web Portal Manager ������ ���� ����� ����� ���

���. ���� ����� ��� IBM Tivoli Access Manager ���� �

�� ������.

3. �� UNIX ���� �� IBM Tivoli Access Manager Web Portal Manager

CD� �� �� �� �� ezinstall_pdwpm ��� ������.

UNIX �� �� ����

� 9 � UNIX� �� �� ���� 145

Page 166: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

��� � ����� �� �� � � ��� � �� ��, ��� �� �

� ����� ���� ����. � ����� ����� N� ����

�. �� � � �� ��� ��� 219 ���� �� B �Tivoli Access

Manager �� ���� ������.

�� �� �� ����. �� ����� �����, Enter� ��� �

��� ��� �� ��� �����.

�: ��� � ���� Tivoli Access Manager Runtime ���� ��� �

�, �� ��� IBM Global Security Toolkit, IBM Directory Client �

Tivoli Access Manager Runtime ���� �� ������ �� ��.

4. � ���� ����� � ���� root ID� ��� ��� ���� Enter

� �����. �� ����� IBM WebSphere Application Server� �� �

�� IBM HTTP Server ��� ��������. �� IBM HTTP Server �

�� �����.

�: �� 3� IBM HTTP Server�� ���� �� �����. IBM HTTP

Server� ���� �� LDAP ��� ���� � ���� Web Portal

Manager� �� �� �� ��� ������. ��� �� �� �

� �� � �� 3� �� ����� /usr/HTTP Server/conf/httpd.

conf � � ��� �� � 80� 8080�� �� � ����.

# Port: The port the standalone listens to. Port 8080

UNIX �� �� ����

146 IBM Tivoli Access Manager: �� �� ���

Page 167: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

5. ����� Y� ���� Enter� �����. �� ��, LDAP ��� ���

��� ���� Enter� �����. �� IBM Directory Server� ��� �

�� ��� �����. � �, pdsun3� �� ������ ��� IBM

Directory Server� ��� �����. ��� �� ��� ��� ��( :

pdsun3.dev.company.com)� �� � ����.

UNIX �� �� ����

� 9 � UNIX� �� �� ���� 147

Page 168: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

6. Policy Server� ��� ��� ���� Enter� �����.

UNIX �� �� ����

148 IBM Tivoli Access Manager: �� �� ���

Page 169: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

7. Tivoli Access Manager Runtime� ��, �� �� Tivoli Access Manager

��� ����� �� � Policy Server�� ��� CA �� � ��� �

� ���.

�� ��� ������.

v pdcacert.b64 � � ���� � ��� Policy Server� ��� �� Enter

� �����. �� ��� ����.

v Policy Server� � �� � � ��� ���� � ��� Policy Server

� ��� �� � ���� pdcacert.b64 � � ��� ��� ��� �

��� Enter� �����.

8. ����� Y� ���� Enter� �����. �� ��, Policy Server ��

� ��� Security Master ID(sec_master) ��� ������. ����� Y

� ���� Enter� �����.

UNIX �� �� ����

� 9 � UNIX� �� �� ���� 149

Page 170: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

9. �� ����� �����. ��� ���� ��� �����.

���� ����, Web Portal Manager� �����. Tivoli Access Manager

JRE(Java Runtime Environment)� Web Portal Manager ���� �� �

�� �����.

UNIX �� �� ����

150 IBM Tivoli Access Manager: �� �� ���

Page 171: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

10. ��� ��� ��� �� �������. � ������ � � ��� �

� � ����. ����� ����� ������. ��� ���� ���

�� �� � ��� ��� �����.

11. Web Portal Manager ������ ���� �� WebSphere Application Server

� �� �� ������. �� �����, �� �� � ����

startServer.sh ��� ������.

v AIX ���� ��:

/usr/WebSphere/AppServer/bin

v Solaris ���� ��:

/opt/WebSphere/AppServer/bin

�: �� ����� 443 �� � ��� IBM WebSphere Application

Server� SSL ��� �����.

12. �� SSL � � � �� � � � ����� IBM HTTP Server �� �

�� SSL ��� �����. �� � � ����� ����. ���

� ���� ���� �� � � �� ���.

/var/PolicyDirector/keytab/pdwpm.kdb

� ������ � � �����. � ��� httpd.conf � ��

�����.

/var/PolicyDirector/keytab/pdwpm.sth

��� � ������ �� � � �����.

UNIX �� �� ����

� 9 � UNIX� �� �� ���� 151

Page 172: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

13. Web Portal Manager ������ ������ �� ��� ����� �

�����.

https://hostname/pdadmin

���, hostname� IBM HTTP Server� �� � ���� �����.

�: �� IBM HTTP Server�� �� ��� � http �� https� ��

���.

Web Portal Manager �� �� �� �� � �� ��� ����.

�: �� � ��� ����, /var/ezinstall_pdwpm.log � � � ����.

UNIX �� �� ����

152 IBM Tivoli Access Manager: �� �� ���

Page 173: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� 10 � Windows �� �� ����

� ����� Windows ����� �� �� ��� ��� �� ����� �

���.

v �IBM Directory Server ��� ���

v 161 ���� �Tivoli Access Manager Policy Server ��� ���

v 169 ���� �Tivoli Access Manager Runtime ��� ���

v 172 ���� �Web Portal Manager ��� ���

��� ��

v IBM Tivoli Access Manager for e-business ���� ���� � ��

� ��� ���� ��� ��� ���� � ����.

v 7 ���� ��� ������ ��� ���� Tivoli Access Manager ��

�� ����� ������.

�� ���� �� ����� ���� ����� � Tivoli Access Manager

Policy Server� ����. � ����� � �� ��� ����.

v IBM Directory Server� Tivoli Access Manager ������ �� � ����

���.

v IBM Directory Server� LDAP ����� �� SSL(Secure Sockets Layer)

��� �����.

IBM Directory Server ��� ��

�� ������� ezinstall_ldap_server.bat � � ���� IBM Directory

Server� Tivoli Access Manager ������ �� � �����. � �� �

� �� �� ����� ��, Tivoli Access Manager ��� � ��� ���

��� �� � ������ ���� �� � �����.

154 ���� 13� IBM Directory Server� �� �� ������ �� �

� ��� �����. �� ����� ���� �� ���� ��� �� �

� ��� � �� �����.

© Copyright IBM Corp. 2001, 2003 153

Page 174: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

13. IBM Directory Server �� ���

IBM DB2 �� ��� ��� �

�� ID db2admin ____________________________

�� �� ____________________________

�� �� � C:\Program Files\SQLLIB ____________________________

IBM HTTP Server �� ��� ��� �

�� ID �� ����� ���� ����� � �

��� �� ID� �����. ____________________________

�� �� ____________________________

HTTP � 80 ____________________________

�� �� � C:\Program Files\IBM HTTP Server ____________________________

IBM Global Security Toolkit ��� ��� �

�� �� � C:\Program Files\IBM\GSK ____________________________

IBM Directory Server �� ��� ��� �

LDAP ��� ID(DN) cn=root ____________________________

LDAP ��� �� ____________________________

LDAP �� ��� ���� ����� ���� ��� ��� �

��� �����. ____________________________

GSO ������� LDAP DN :

o=ibm,c=tw ____________________________

LDAP �� � 389 ____________________________

LDAP SSL � � cd_drive:\common\pd_ldapkey.kdb ____________________________

LDAP SSL � � �� gsk4ikm ____________________________

SSL ����� �� ��� PDLDAP ____________________________

�� �� � C:\Program Files\IBM\LDAP ____________________________

IBM Directory Server � �� �� ������ �� � ����� ��

�� �����.

�:

v � ��� IBM Directory Server� ��� ������.

v Windows ������ ���� �� ����� ���� ���� ���

�. �� ��� ���� �� �� � � ����� ������.

1. Windows ���� ��� ���� ������, ��� ��� ���� ID�

�������.

2. �� �� � �� SSL LDAP � � (pd_ldapkey.kdb)� ���� ���

��. SSL� �� �� �� SSL � � � �����, ����� SSL �

� � � ���� �� �� ��� �� ���.

3. Windows� IBM Tivoli Access Manager Base CD �� �� �� ��

ezinstall_ldap_server.bat � � ������.

Windows �� �� ����

154 IBM Tivoli Access Manager: �� �� ���

Page 175: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

��� � ����� �� �� � � ��� � �� ��, ��� �� �

� ����� ���� ����. � ����� ����� N� ����

�. �� � � �� ��� ��� 219 ���� �� B �Tivoli Access

Manager �� ���� ������.

�� �� �� ����. � ���� IBM Directory Server� �� �

�� �� ��� ����. �� ����� �����, Enter� ��� �

��� ��� �� ��� �����.

4. DB2 �� ID� �� ��� ���� ��� � �� ������.

�: � � ��� ����� ��� ���� ����.

Windows �� �� ����

� 10 � Windows� �� �� ���� 155

Page 176: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�: �� ����� ���� ����� ���� ��� ����. ��

6�� �� �� � �� �� �� ��� � �� �� � ���

�. ��� ��� ��� ���� �� ��� � Enter� ����

�.

5. ����� Y� ���� Enter� �����. �� ��, � ���� ����

� � ���� �� ID(�� 1� ��� �)� ��� ���� Enter� ���

��.

6. ����� Y� ���� Enter� �����. GSKit� �� �� �� ���

�� Y� ���� Enter� �����.

Windows �� �� ����

156 IBM Tivoli Access Manager: �� �� ���

Page 177: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

7. LDAP ��� ID� �� ��� ���� ��� � �� ������.

8. GSO ������� �� LDAP DN� ����� ���� ����. �

� LDAP �� �� � �� ��(DIT)�� GSO(Global Sign-On) �����

� �� ��� � �����. ���� ����� � LDAP DIT ��

� DN� �� � ����. � �, GSO ������ �� � ����

����� o=ibm,c=us� ������.

�: Tivoli Access Manager� �� �� � ���� ����� ��� �

��� GSO ������� LDAP DN� ����. GSO �������

LDAP DN� �� ��� ��� 21 ���� �LDAP �� �� ���

������.

Windows �� �� ����

� 10 � Windows� �� �� ���� 157

Page 178: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

9. GSO ������� LDAP DN� ��� � IBM Directory Server �� ��

� �� � �� ��� ����. � �, �� LDAP SSL � � (��

6)� ���� ���� 6� ��� � Enter� � �� ������. SSL

� � �� ��� ��, �� �� �� 7 � 8� �� ����� �����

�.

10. �� 6(LDAP SSL � � )� ���� ���� �� ��, Enter� �

cd_drive:\common\pd_ldapkey.kdb � � ���� c:\keytabs �� ��

����� ���� ����.

�:

v �� 7(LDAP SSL � � ��)� �� pd_ldapkey.kdb � ��� �

����. � �� ��� gsk4ikm���. gsk5ikm ����� ���� �

��� �� ��, ��� �� �� ���.

v �� 6� �� pd_ldapkey.kdb � � ��� ��, � � � � ����

� ���� ��� ����. � � � � LDAP �� ���� ��

� �� ���.

Windows �� �� ����

158 IBM Tivoli Access Manager: �� �� ���

Page 179: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

11. ����� Y� ���� Enter� �����. IBM Directory Server �

�� �� ����� ��� �� �� ����� �����. DB2� ��� �,

���� ��� �� ����� Enter� �����.

12. ���� �� ��� �, ��� �� �� �� LDAP ��� ���� IBM

Directory Server� �����. IBM Directory Server� ��� �, ���� �

� ����� Enter� �����.

Windows �� �� ����

� 10 � Windows� �� �� ���� 159

Page 180: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

13. ���� �� ��� � IBM Directory Server � �� �� �����

�� �� ���� ������. � ������ � � ��� �� � �

���. ����� ����� ������. ��� ���� ��� �� �

� � ��� ��� �����.

�� � ��� ����, %TEMP% ���� ��� �� �� �� ��

ezinstall.log � � � ����.

Windows �� �� ����

160 IBM Tivoli Access Manager: �� �� ���

Page 181: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Tivoli Access Manager Policy Server ��� ��

LDAP ������ ��� ��� �� Policy Server� �����. �� ��

����� ezinstall_pdmgr.bat � � ���� Policy Server� �� � ����

�. � �� � � �� �� ����� ��, Tivoli Access Manager ��

� � ��� ��� ��� �� � ������ ���� �� � ����

�.

� ������� 153 ���� �IBM Directory Server ��� ���� ��� �

����� � ���� Policy Server� �����. �� ��� �� ����

� ������� ����� ��� � �����. �� �� ����� � �

�� �� ���� ���� �� ����. � ���� ���� �� � � �

��� �� ������ IBM Global Security Toolkit � IBM Directory Client

� ����� ����.

14� Tivoli Access Manager Policy Server� �� �� ������ ��

��� �����. �� ����� ���� �� � ���� ��� �� �

� ��� � �� �����.

14. Tivoli Access Manager Policy Server �� ���

IBM Tivoli Access Manager Runtime �

���� ��� �

� ������ ��� �� ldap ____________________________

LDAP �� ��� �� ____________________________

LDAP �� � 389 ____________________________

GSO ������� LDAP DN LDAP ��� ���� � ���� �

DN� ������. ____________________________

LDAP ���� SSL �� ���: Y ____________________________

LDAP ���� SSL ��� ��, � � �� �� �������.

LDAP SSL � � ____________________________

LDAP SSL � � DN �� SSL � � � �� �� �� �

�� ����. ____________________________

LDAP SSL � � �� gsk4ikm ____________________________

LDAP �� SSL � 636 ____________________________

�� �� �C:\Program Files\Tivoli\Policy

Director ____________________________

IBM Tivoli Access Manager Policy Server

����� ��� �

LDAP �� ID (DN) cn=root ____________________________

LDAP �� �� ____________________________

Security Master �� ____________________________

SSL �� � 7135 ____________________________

Policy Server SSL �� ��� 365 ____________________________

Windows �� �� ����

� 10 � Windows� �� �� ���� 161

Page 182: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

14. Tivoli Access Manager Policy Server �� ��� (��)

�� ���� �� ���: Y ____________________________

Tivoli Access Manager Policy Server� �� � ����� ��� �� ���

��.

1. Windows ���� ��� ���� ������, ��� ��� ���� ID�

�������.

2. �� ��� ������.

v �� ���� Policy Server� �� �� SSL � � � � ���� �

� �� ��� ������. � �, IBM Directory Server ����

c:\keytabs �� �� �� �� pd_ldapkey.kdb � � � ����

c:\keytabs �� �� ������.

v IBM Directory Server� ��� � ���� Policy Server� �� �

� 3�� ����.

3. Windows� IBM Tivoli Access Manager Base CD �� �� �� ��

ezinstall_pdmgr.bat � � ������.

��� � ����� �� �� � � ��� � �� ��, ��� �� �

� ����� ���� ����. � ����� ����� N� ����

�. �� � � �� ��� ��� 219 ���� �� B �Tivoli Access

Manager �� ���� ������.

�� �� �� ����. �� ����� �����, Enter� ��� �

��� ��� �� ��� �����.

Windows �� �� ����

162 IBM Tivoli Access Manager: �� �� ���

Page 183: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

LDAP ��� � ���� Policy Server� �� ��, ezinstall_pdmgr.bat

� � IBM Global Security Toolkit � IBM Directory Client� �� ���

��� �����.

4. LDAP ��� ��� ��� ���� Enter� �����. �� IBM Directory

Server� ��� ��� ��� �����. � �, dliburdi2� �� ��

���� IBM Directory Server� ��� ��� �����. ��� �� ��

� ��� ��( : dliburdi2.dev.company.com)� �� � ����.

5. LDAP �� �� � ��� GSO ������ �� LDAP DN� ����

Enter� �����. � �, o=ibm,c=us� �� ������ ��� ��

����.

Windows �� �� ����

� 10 � Windows� �� �� ���� 163

Page 184: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

6. ��� LDAP ��� SSL ��� ���� �� ����. �� ����� Y

� ���� Enter� �����. ��� ���, N� ��� 165 ���� 9

�� ����.

7. 162 ���� 2��� LDAP SSL ����� � � � ��� ��� ��

� ��� � Enter� �����. � �, �� pd_ldapkey.kdb � �

c:\keytabs �� �� ��� �� c:\keytabs\pd_ldapkey.kdb� ����

��.

8. LDAP SSL ����� � � � ��� ���� Enter� �����. �� �

�� �� �� �� pd_ldapkey.kdb � � �� ��� gsk4ikm���. �

�� � � � ���� IBM Directory Server� �� � ��� ���� �

�� ��� �� � ����.

Windows �� �� ����

164 IBM Tivoli Access Manager: �� �� ���

Page 185: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�: �� 7� LDAP ��� �� ����� ���� ����� GSKit �

������ � � ���� �����. ���� ���� SSL� ��

�� � �� ��� ����. SSL �� � ����� ��� ��

�� ��� ����� � � � ��� �� ���� ����� ���

� � �� ����. �� LDAP ���� ����� .kdb � ��

� ��� ��� ��� ����.

9. ����� Y� ���� Enter� �����. �� ��, LDAP ��� ��

� ��� LDAP ��� ID� ��� ���� Enter� �����.

10. Security Master ID(sec_master)� �� ��� ���� ��� � �� �

�����. �� ID, �� � ��� ����� � �� ID� �����

Windows �� �� ����

� 10 � Windows� �� �� ���� 165

Page 186: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�.

11. ����� Y� ���� Enter� �����. Tivoli Access Manager Policy

Server� ����� ��� �� Tivoli Access Manager Runtime ��� ��

��� ���� pdcacert.b64�� �� SSL �� � � � �����.

Tivoli Access Manager Runtime ���� ������ ��� ���� �

� � ��� ���� � ����. ��� ���, ���� ���� ��

� � � � �� Tivoli Access Manager Runtime ���� ��� ��

���.

SSL �� � � � � ����� ����� Y� ���� Enter� ��

���.

�: � ����� ���� �� ��, SSL �� � � � �� �� �

� �����.

install_dir\keytab\pdcacert.b64

� �, �� ����.

c:\Program Files\Tivoli\Policy Director\keytab\pdcacert.b64

Windows �� �� ����

166 IBM Tivoli Access Manager: �� �� ���

Page 187: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

12. ����� Y� ���� Enter� �����. ��� ��� �� ����� �

����.

Windows �� �� ����

� 10 � Windows� �� �� ���� 167

Page 188: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

13. ���� ��� �� ����� Enter� �����.

14. ���� �� ��� � ��� ��� ���� ���� ������. Policy

Server� ��� ��� ��� ��� �����.

Windows �� �� ����

168 IBM Tivoli Access Manager: �� �� ���

Page 189: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

15. ��� ���� ��� �� �� � ��� ��� �����.

�� � ��� ����, TEMP ���� ��� �� �� �� ��

ezinstall.log � � � ����.

16. Policy Server� ��� �, ��� �� ���� �� Tivoli Access Manager

���� �� � ����. � �, ��� �� � ����.

v install_pdrte.exe InstallShield ����� ���� �� ��� ��� ��

��� ���� ������(Policy Server ��). ��� ��� �Tivoli

Access Manager Runtime ��� ���� ������.

v ezinstall_pdwpm.bat � � ���� Tivoli Access Manager Runtime �

����� Web Portal Manager ������ �� ������. ��� �

�� 172 ���� �Web Portal Manager ��� ���� ������.

v ezinstall_pdacld.bat � � ���� Authorization Server ���� ���

���.

v ezinstall_pdauthADK.bat � � ���� ADK(Application Development

Kit)� �� �� ���� ������.

Tivoli Access Manager Runtime ��� ��

�� ������� install_pdrte.exe InstallShield ���� ���� Tivoli Access

Manager Runtime ���� �� � �����. �� �� �� ���� ��

install_pdrte.exe ������� InstallShield ���� ���� ��� ���� �

�� �����. ��� �� �� �� ���� JRE� ��� � �� �

� ����� �� � Tivoli Access Manager ���� �� � �����.

170 ���� 15� Tivoli Access Manager Runtime �� �� ����

�� �� ��� �����. �� ����� ���� �� � ���� ��

� �� �� ��� � �� �����.

Windows �� �� ����

� 10 � Windows� �� �� ���� 169

Page 190: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�: ��� �� ������ InstallShield�� �� �� �� ����� ���

� ��� ����. �� �� ��� LDAP �� ������ �� ���

� �����.

15. Tivoli Access Manager Runtime ��� �� ���

IBM Global Security Toolkit ��� ��� �

�� � �� C:\Program Files\IBM\GSK ____________________________

IBM Directory Client ��� ��� �

�� � �� C:\Program Files\IBM\ldapc ____________________________

IBM Tivoli Access Manager Runtime ��� ��� �

�� � ��C:\Program Files\Tivoli\Policy

Director ____________________________

Policy Server ��� �� ____________________________

Policy Server SSL � 7135 ____________________________

Policy Server CA �� �

Policy Server �� � �� Tivoli Access

Manager Runtime ����� �� � �

���� � ��� � ���� ��

��� ����.

____________________________

��� ����� LDAP ____________________________

LDAP �� ��� �� ____________________________

LDAP �� � 389 ____________________________

GSO ������� LDAP DN LDAP ��� ���� � ���� �

DN� ������. ____________________________

IBM Directory Server�� SSL �� ���: ____________________________

LDAP ���� SSL ��� ��, � �� �������.

�� ��� �� � �

IBM Directory Server�� � ���� �

� �� �� pd_ldapkey.kdb � � �

�����.

____________________________

� � �� gsk4ikm ____________________________

LDAP SSL � � DN(�� ��) �� pd_ldapkey.kdb � � � �� �

� �� ��� ����. ____________________________

SSL � �� 636 ____________________________

Tivoli Access Manager Runtime ���� �� � ����� ��� �� ��

���.

1. LDAP �� � Policy Server� �� �� ���� Windows ���� ��

� ���� ������ ��� ��� ���� ID� ���� ������

������.

2. LDAP ��� ���� � ���� SSL � � � � ���� �� �� �

�� ������. � �, IBM Directory Server ���� c:\keytabs

�� �� �� �� pd_ldapkey.kdb � � � ���� c:\keytabs ��

�� ������.

Windows �� �� ����

170 IBM Tivoli Access Manager: �� �� ���

Page 191: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

3. ���� ��� JRE� ������. ��� ��� 104 ���� ����

JRE ���� ������.

4. ��� �� ��� �� ��� �����.

5. Tivoli Access Manager Runtime� InstallShield ���� ����� �� �

����.

6. �� ��� �����. �� ��� ��� �� �� �����.

7. GSKit� �� �� �� ����� �� �����.

8. IBM Directory Client� �� �� �� ����� �� �����.

9. Tivoli Access Manager Runtime ��� �� �� �� ����� �� �

����.

10. �� ��� ���� �� �����.

v Policy Server ��� �� - Policy Server� ��� ��� ������.

v Policy Server SSL �� - Policy Server SSL �� �� ������

(7135). � ��� ����� � �� ������.

v Policy Server CA � �� - Tivoli Access Manager Runtime� ��, �

� �� Tivoli Access Manager ��� ����� �� � Policy Server

� ��� pdcacert.b64 � � ��� �� ���. �� ��� ��

����.

– pdcacert.b64 � � ���� � ��� Policy Server� ��� ��

�� ��� ����.

– � �� � � ���� � ��� Policy Server� ��� �� � �

��� pdcacert.b64 � � ��� �� ��� ������.

�: ��� ����� � LDAP���. � ��� �� � ����.

11. �� ��� ���� �� �����.

v LDAP �� ��� �� - LDAP �� ���� ��� ��� ������.

v LDAP �� �� - LDAP �� �� �� ������(389). �� �

� � � ��� ������.

v GSO ������� LDAP DN - LDAP �� �� � ��� ��� �

� � DN �� ������. � �, o=ibm,c=us� �� ������

��� ������.

v IBM Directory Server�� SSL(Secure Sockets Layer) �� - ���

LDAP ���� SSL� ���� �� ����. SSL� ����� �

�� �� 12�� ��� SSL ��� �� ���� ���� ��

��. ��� ���, 13�� ����.

12. LDAP ���� SSL� ����� � �� �� ��� ���� ��

����.

Windows �� �� ����

� 10 � Windows� �� �� ���� 171

Page 192: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v �� �� �� � �� - LDAP SSL ����� � � � �� �� �

�� ������. � �, pd_ldapkey.kdb � � c:\keytabs ��

�� ��� �� c:\keytabs\pd_ldapkey.kdb� ������.

v � �� �� - � � ��� ��� ������. pd_ldapkey.kdb �

� �� ��� gsk4ikm���. ���� gsk5ikm ����� ���� �

��� �� ��, � �� ��� �� �� ���.

v LDAP SSL � �� DN(��� ��) - �� �� �� � �

(pd_ldapkey.kdb)� �� �� SSL �� ���� ��� ����.

v SSL �� �� - SSL � ��� �� ������(636). �� ��

� ��� ������.

13. �� �� ��� � ����. ��� ����� �� ����.

14. �� ����� �����. � ������ � � ��� �� � ����.

��� �� ����� ��� ��� ������.

15. ���� ��� �� ����� �� �����.

16. ���� �� ��� �, ��� ���� � �� ��� �� ���

�����.

17. Tivoli Access Manager Runtime� �� � �� �� ����� ��� ��

�������. ��� ���� ��� ��� ��� ������ �

���. � ����� ����� ��� �����.

�� � ��� ����, TEMP ���� ��� �� �� �� ��

msg__amismp.log � � � ����.

Web Portal Manager ��� ��

�� ������� ezinstall_pdwpm.bat � � ���� Tivoli Access Manager

Runtime ���� Web Portal Manager ������ �� �� � �����. �

�� � � �� �� ����� ��, Tivoli Access Manager ��� � �

�� ��� ��� �� � ������ ���� �� � �����.

16� Web Portal Manager� �� �� ������ �� ��� ����

�. �� ����� ���� �� � ���� ��� �� �� ��� �

�� �����.

16. Web Portal Manager ��� �� ���

IBM Global Security Toolkit �� ��� �

�� � �� C:\Program Files\IBM\GSK ____________________________

IBM HTTP Server �� ��� ��� �

�� ID �� ����� ���� ����� � �

��� �� ID� �����. ____________________________

Windows �� �� ����

172 IBM Tivoli Access Manager: �� �� ���

Page 193: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

16. Web Portal Manager ��� �� ��� (��)

�� �� ___________________ ____________________________ HTTP � 80 ____________________________ �� �� � C:\Program Files\IBM HTTP Server ____________________________

IBM Directory Client ��� ��� �

�� �� � C:\Program Files\IBM\LDAP ____________________________

IBM Tivoli Access Manager Runtime ��� ��� �

� ����� ��� ��� �� ldap ____________________________ LDAP �� ��� �� ____________________________ LDAP �� � 389 ____________________________

GSO ������� LDAP DN LDAP ��� ���� � ���� �

DN� ������. ____________________________

LDAP ���� SSL �� ���: Y ____________________________

LDAP ���� SSL ��� ��, � � �� �� �������.

LDAP SSL � � ____________________________

LDAP SSL � � DN �� SSL � � � �� �� �� �

�� ����. ____________________________

LDAP SSL � � �� gsk4ikm ____________________________ LDAP �� SSL � 636 ____________________________

�� �� �C:\Program Files\Tivoli\Policy

Director ____________________________

Access Manager Policy Server ��� �� ____________________________ AM Policy Server� SSL �� � 7135 ____________________________

Policy Server CA �� � ��

�� � � ���� � ��� Policy

Server� ��� �� �� ��� ���

�.

____________________________

Tivoli Access Manager ���� Web Portal Manager ������ �� �� �

����� �� �� �����.

1. LDAP �� � Policy Server� �� �� ���� Windows ���� ��

� ���� ������ ��� ��� ���� ID� ���� ������

������.

2. LDAP ��� ���� � ���� SSL � � � � ���� �� �� �

�� ������. � �, IBM Directory Server ���� c:\keytabs

�� �� �� �� pd_ldapkey.kdb � � � ���� c:\keytabs ��

�� ������.

3. Web Portal Manager ������ ���� ����� ����� ���

���. ���� ����� ��� IBM Tivoli Access Manager for e-business

���� ��� ������.

4. Windows� IBM Tivoli Access Manager Web Portal Manager CD �� ��

�� �� ezinstall_pdwpm.bat� ������.

Windows �� �� ����

� 10 � Windows� �� �� ���� 173

Page 194: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

��� � ����� �� �� � � ��� � �� ��, ��� �� �

� ����� ���� ����. � ����� ����� N� ����

�. �� � � �� ��� ��� 219 ���� �� B �Tivoli Access

Manager �� ���� ������.

�� �� �� ����. �� ����� �����, Enter� ��� �

��� ��� �� ��� �����.

�: ��� � ���� Tivoli Access Manager Runtime ���� ��� �

�, �� ��� IBM Global Security Toolkit, IBM Directory Client, Tivoli

Access Manager Runtime ���� �� ������ �� ��. � �

�, 180 ���� 15�� ����.

Windows �� �� ����

174 IBM Tivoli Access Manager: �� �� ���

Page 195: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

5. GSKit� �� �� �� ����� Y� ���� Enter� �����.

6. � ���� ����� � ���� �� ID(�� 1� ��� �)� ��� �

��� Enter� �����. �� ����� IBM WebSphere Application Server

� �� ��� IBM HTTP Server ��� ��������. �� IBM HTTP

Server ��� �����.

�: IBM HTTP Server�� ���� � �� 3� ������. IBM HTTP

Server� ���� �� LDAP ��� ���� � ���� Web Portal

Manager� �� �� �� �� �� ��� ������. ���

�� �� �� �� � �� 3� �� ����� C:\Program Files\IBM

HTTP Server\conf\httpd.conf � � ��� �� � 80� 8080�

� �� � ����.

# Port: The port the standalone listens to. Port 8080

Windows �� �� ����

� 10 � Windows� �� �� ���� 175

Page 196: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

7. ����� Y� ���� Enter� �����. �� ��, IBM Directory Client

� �� �� �� ����� Enter� �����.

8. LDAP ��� ��� ��� ���� Enter� �����. �� IBM Directory

Server� ��� ��� ��� �����. � �, dliburdi2� �� ��

���� ��� IBM Directory Server� ��� �����. ��� �� ��

Windows �� �� ����

176 IBM Tivoli Access Manager: �� �� ���

Page 197: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� ��� ��( : dliburdi2.dev.company.com)� �� � ����.

9. LDAP �� �� � ��� GSO ������ �� LDAP DN� ����

Enter� �����. � �, o=ibm,c=tw� �� ������ ��� ��

����.

Windows �� �� ����

� 10 � Windows� �� �� ���� 177

Page 198: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

10. LDAP ���� SSL� ����� Y� ���� Enter� �����.

11. LDAP SSL ����� � � � �� �� ��� ���� Enter� ����

�. � �, pd_ldapkey.kdb � � c:\keytabs �� �� ��� ��,

c:\keytabs\pd_ldapkey.kdb� ���� Enter� �����.

12. LDAP SSL ����� � � � ��� ���� Enter� �����. �� �

�� �� �� pd_ldapkey.kdb � � �� ��� gsk4ikm���.

ezinstall_ldap_server.bat � � ���� IBM Directory Server� �� � �

���� �� �� � � �� � � � ��� ���� � �� ��� �

�����.

Windows �� �� ����

178 IBM Tivoli Access Manager: �� �� ���

Page 199: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�: gsk5ikm ����� ���� � ��� �� ��, �� ��� �

� �� ���.

13. ����� Y� ���� Enter� �����. �� ��, Policy Server� ��

� ��� ���� Enter� �����.

14. Tivoli Access Manager Runtime� ��, �� �� Tivoli Access Manager

��� ����� �� � Policy Server�� ��� CA �� � ��� �

� ���.

�� ��� ������.

v Policy Server�� pdcacert.b64 � � ���� � ��� � �� Enter

� �����. �� ��� ����.

Windows �� �� ����

� 10 � Windows� �� �� ���� 179

Page 200: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v � �� � � ��� ���� � ��� Policy Server� ��� ��

� ���� pdcacert.b64 � � ��� �� ��� ���� Enter� �

����.

15. ����� Y� ���� Enter� �����. �� ��, � ���� ����

� � ��� �� ID(�� 1� ��� �)� ��� ���� Enter� ���

��.

16. ����� Y� ���� Enter� �����. �� ����� �����. �

�� ���� ��� �����. IBM WebSphere Application Server� ��

Windows �� �� ����

180 IBM Tivoli Access Manager: �� �� ���

Page 201: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� ���� �� � ���� �� �� ����.

17. ��� ���� ����, Web Portal Manager� �����. Tivoli Access

Manager JRE(Java Runtime Environment)� Web Portal Manager ����

�� ��� �����.

Windows �� �� ����

� 10 � Windows� �� �� ���� 181

Page 202: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Web Portal Manager� �� ��� ����� ��� ��� ����� Enter

� � ���� ��� �� ������.

18. Web Portal Manager ������ ���� �� WebSphere Application Server

� �� �� ������. �� ����� �� → ���� → IBM

WebSphere → Application Server 4.0 → Application Server ��� ���

��.

�: �� ����� 443 �� � ��� IBM WebSphere Application

Server� SSL ��� �����.

19. �� SSL � � � �� � � � ����� IBM HTTP Server �� �

�� SSL ��� �����. �� � � ����� ����. ���

� ���� ���� �� � � �� ���.

C:\Program Files\Tivoli\Policy Director\keytab\pdwpm.kdb

� ������ � � �����. � ��� httpd.conf � ��

�����.

C:\Program Files\Tivoli\Policy Director\keytab\pdwpm.sth

��� � ������ �� � � �����.

20. Web Portal Manager ������ ������ �� ��� ����� �

�����.

https://hostname/pdadmin

���, hostname� IBM HTTP Server� �� � ���� �����.

Windows �� �� ����

182 IBM Tivoli Access Manager: �� �� ���

Page 203: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�: �� IBM HTTP Server�� �� ��� � http �� https� ��

���.

Web Portal Manager �� �� �� �� � �� ��� ����.

�: �� � ��� ����, TEMP ���� ��� �� �� �� ��

ezinstall.log � � � ����.

Windows �� �� ����

� 10 � Windows� �� �� ���� 183

Page 204: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Windows �� �� ����

184 IBM Tivoli Access Manager: �� �� ���

Page 205: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� 11 � �� �� � �� ��

Tivoli Access Manager� �� � � ���� �� �� ���� �� � ��

� ��� �� � �� ���. �� � � ���� ���� ���� �

�� �� � ��� ��� � �� ��� � ���. �� � ��� ���

� � �����. �� ����� ����� �� ����� ����� �� �

� � ��� ��� ����. �� ��� ���� ���� ����� ��

� ���� �� ���� ��� �� � �� � � ��� �� ����.

� ��� �� �� �� ��� ����.

v ��� � ���

v 186 ���� ��� � � ���� ��� ���

v 186 ���� ��� � �(ezinstall)�

v 189 ���� ��� � ���

�: �� � � �� ����� �� ��� ��� ���.

� �� ��

��� ��� ���� ��� �� � � �����, ezinstall ��� �

��� �� �� ��� ���� ��� �� � � �� � ����.

UNIX ������ ���� ��� ���� ���� �� � � ��� ����

�. � � ezinstall_ldap_servere ��� ���� ��, ���� �� �

� ��� ezinstall_ldap_server.rsp���. ���� � ���� �� �� � �

/var/tmp �� �� �����.

Windows �����, �� �� � ezinstall.rsp�� �� � � �����. � �

� � � %TMP% ���� ��� �� �� �� �� �����. � �

ezinstall_ldap_server.bat � � ���� ��, ���� �� � � ���

%TEMP%\ezinstall.rsp���.

install_pdrte InstallShield ����� ezinstall �� � �� � �� �

�� ����. Tivoli Access Manager Runtime �� � � �����, Tivoli

Access Manager Base CD� �� ����� �� ����� ���� �

� � ���. ����� ��� �� � � �� �� ��� ��� ��

��.

v UNIX ���� ��:

/common/unixismp.rsp.template

© Copyright IBM Corp. 2001, 2003 185

Page 206: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v Windows ���� ��:

\common\winismp.rsp.template

� �� ���� ���� ��

�� � � ���� Tivoli Access Manager ���� ����� ��� ��

�� ������.

1. �� � � ��� ��� ���� ��� ���� ������. �� � �

���� �� ��� 189 ���� ��� � ���� ������. �

ezinstall ����(install_pdrte ��)� ��, �� �� �� ��� ����

ezinstall� �� � �� �� �� ��� ����� ���� �� �

�� ��� � ����. install_pdrte� �� �� � �� �� �

���. ��� ���, ����� �����.

2. �� �� ��� ���� �� � � ������. � �, �� ��

��.

v UNIX ���� ��, ��� ������.

ezinstall_ldap_server /tmp/ezinstall_ldap_server.rsp

���, /tmp/ezinstall_ldap_server.rsp� �� � � ��� �����.

v Windows ���� ��, ��� ������.

ezinstall_ldap_server c:\temp\ezinstall.rsp

���, c:\temp\ezinstall.rsp� �� � � ��� �����.

3. �� � � install_pdrte ����� ����� ��� ������.

install_pdrte -options response_file

���, response_file� �� � � ��� �����. � ���� Windows �

�� UNIX ��� ��� ����.

�: �� ��� ��� �� � � � ����� �� �� ����.

� �� ��(ezinstall) �� � � ��=� �� ���� ��� ����. ���� ���( : [LDAPS])

� �� ��� ��� ��� ��� ���� ���� �� ��� ��� ��

�� ���� � �� � � �� �� � ����. � ����� 0� ���

��=� �� � ����. �� � �� ��� ��� � � �� ��� � �

���. �� � � # ��� ���� ��� �� � ����.

�� ���� �� �� ��� ��� �� � � � �����. ��

�� ��� ����� ��� �� ����� ���.

�� �� �� �� ��

186 IBM Tivoli Access Manager: �� �� ���

Page 207: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�: IBM Directory Client� �� �� � � ��� gsk4ikm���.

UNIX ��

[HTTPD] http-admin-id = root http-admin-pwd = secret http-port = 80 [LDAPS] ldap-adminid = cn=root ldap-password = secret suffix = o=ibm,c=tw host = ldapserv.tivoli.com port = 389 ldap-ssl-client-keyfile = /cdrom/common/pd_ldapkey.kdb ldap-ssl-client-keyfile-pwd = gsk4ikm ldap-label = PDLDAP [PDRTE] ldap-or-domino = 1 host = ldapserv.tivoli.com port = 389 ldap-server-ssl-port = 636 master-host = pdmgr.tivoli.com pd-cacert = enable-ssl = Y ssl-client-keyfile = /var/ldap/keytab/pd_ldapkey.kdb ssl-keyfile-pwd = gsk4ikm ssl-port = 7135 [PDMGR] ldap-adminid = cn=root ldap-password = secret ssl-life = 365 ssl-port = 7135 sec-master-pwd = secret enable-cert-download = Y prompt-languages = N

Windows ��

[PDRTE] registry-type=ldap ldap-server=ldapserv.tivoli.com ldap-port=389 ldap-ssl-port=636 pdmgr-host=pdmgr.tivoli.com cacert= enable-ssl=Y ssl-client-keyfile=c:\keytabs\pd_ldapkey.kdb ssl-client-keyfile-dn= suffix=o=ibm,c=tw pdmgr_ssl_port=7135 pdc_dir=C:\Program Files\Tivoli\Policy Director ssl-client-keyfile-pwd=gsk4ikm

�� �� �� �� ��

� 11 � �� �� �� � �� 187

Page 208: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

[PDMGR] ldap-admin-id=cn=root ldap-admin-pwd=secret ssl-port=7135 cert-life=365 enable-cert-download=Y sec-master-pwd=secret [DB2] admin-pwd=db2admin install_dir=C:\SQLDIR [HTTPD] admin-id=administrator admin-pwd=secret port=80 install_dir=C:\Program Files\IBM HTTP Server [LDAPS] admin-id=cn=root admin-pwd=secret hostname=ldapserv.tivoli.com server-port=389 suffix=o=ibm,c=tw ssl-client-keyfile=c:\keytabs\pd_ldapkey.kdb ssl-client-keyfile-pwd=gsk4ikm label=PDLDAP [PDACLD] admin-id=cn=root admin-pwd=secret sec-master-pwd=secret [LDAP] install_dir=C:\Program Files\IBM\LDAP

� �� ��(install_pdrte) �� � � -w ��=� �� ��� ����. ��� ��� � Bean ��, �

�, �� ���� �����. Bean ��� install_pdrte ����� ���� �

�� �� � ����. �� � � # ��� ���� ��� �� � ����.

�� ���� /common �� �� CD� �� �� ����� � �����.

�� �� ��(<) ��� � (>) �� ��� �� �� ��� �����. ��

���� ��(=)� ���� ������.

�: IBM Directory Client� �� �� � � ��� gsk4ikm���.

UNIX ��

# To run the process in silent mode, specify -silent either here or on the cmd line. -silent -W AMRTE_ServerOptions_Panel.hostName=<Policy Server Hostname> -W AMRTE_ServerOptions_Panel.listeningPort=7135 -W AMRTE_ServerOptions_Panel.certFile= -W AMRTE_LDAP_Options_Panel.ldapHostName=<LDAP Server Hostname>

�� �� �� �� ��

188 IBM Tivoli Access Manager: �� �� ���

Page 209: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

-W AMRTE_LDAP_Options_Panel.ldapPortNumber=389 -W AMRTE_LDAP_Options_Panel.enableSSL=N -W AMRTE_LDAPSSLOptions_Panel.sslPort=636 -W AMRTE_LDAPSSLOptions_Panel.keyFile= -W AMRTE_LDAPSSLOptions_Panel.keyFilePasswd= -W AMRTE_LDAP_Options_Panel.ldapDNGSO=<dn for gso database - example: o=ibm,c=tw>

Windows ��

# To run the process in silent mode, specify -silent either here or on the cmd line. -silent -W GSKIT_Panel.installDirectory=c:\Program Files\IBM\gskit -W LDAPC_Panel.installDirectory=c:\Program Files\LDAP -W AMRTE_Panel.installDirectory=c:\Program Files\Tivoli\Policy Director -W AMRTE_ServerOptions_Panel.hostName=<Policy Server Hostname> -W AMRTE_ServerOptions_Panel.listeningPort=7135 -W AMRTE_ServerOptions_Panel.certFile= -W AMRTE_LDAP_Options_Panel.ldapHostName=<LDAP Server Hostname> -W AMRTE_LDAP_Options_Panel.ldapPortNumber=389 -W AMRTE_LDAP_Options_Panel.enableSSL=N -W AMRTE_LDAPSSLOptions_Panel.sslPort=636 -W AMRTE_LDAPSSLOptions_Panel.keyFile= -W AMRTE_LDAPSSLOptions_Panel.keyFilePasswd= -W AMRTE_LDAP_Options_Panel.ldapDNGSO=<dn for gso database - example: o=ibm,c=tw>

� �� �

�� ��� �� � � �� � �� � ���-��� ��� �����. �

�� ��� UNIX ����� �� � �����.

UNIX � �� ��

��� �� ��� ��

[HTTPD] http-admin-id ��� ��� ��� �����. ����

Administrator���.

[HTTPD] http-admin-pwd ��� ��� �����.

[HTTPD] http-port HTTPD �� �� �����.

[LDAPS] ldap-adminid LDAP ��� ID �� � ��(DN)� �

����. ���� cn=root���.

[LDAPS] ldap-password LDAP ��� ��� �����.

[LDAPS] host LDAP �� ��� ��� �����. ���

� �� � ���� ��� �����.

[LDAPS] server-port LDAP �� �SSL � ��� �����.

�� � ��� 389���.

[LDAPS] suffix GSO ������� �� LDAP � ��

� �����( : o=ibm,c=tw).

[LDAPS] ldap-ssl-client-keyfile LDAP SSL � � � ��� �����. �

��� CD� �� /common/pd_ldapkey.

kdb���. � � � ��� ��, ��

gsk4ikm � ��� ��� PDLDAP� �

���.

�� �� �� �� ��

� 11 � �� �� �� � �� 189

Page 210: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

��� �� ��� ��

[LDAPS] ldap-ssl-client-keyfile-pwd � � ��� ��� �����. ���

media/common/pd_ldapkey.kdb� �� �

�, ��� gsk4ikm���.

[LDAPS] ldap-label SSL � � ��� ���� �����. �

�� media/common/pd_ldapkey.kdb� ��

�� ��, ���� PDLDAP���.

[PDMGR] ldap-adminid LDAP ��� ID� �����. ����

cn=root���. � ID� LDAP ��� ��

�� � �����.

[PDMGR] ldap-password LDAP ��� ��� �����.

[PDMGR] port LDAP �� �SSL �� �����. ��

� ��� 389���.

[PDMGR] ssl-life �� � (pdcacert.b64)� ���� ��

���. ���� 365 ���.

[PDMGR] enable-cert-download �� ����� Tivoli Access Manager

Runtime ��� �� � (pdcacert.b64)�

��� ������� �����. ���

Y(�� ��) �� N(�� ���)���.

[PDMGR] sec-master-pwd Security Master ��� �����.

[PDACLD] ldap-adminid LDAP ��� ID� �����. ����

cn=root���. � ID� LDAP ��� ��

�� � �����.

[PDACLD] ldap-password LDAP ��� ��� �����.

[PDACLD] sec-master-pwd Security Master ��� �����. � ��

� Policy Server� ���� � �����.

Windows � �� ��

��� �� Win32 ��� ��

[DB2] admin-pwd ��� ��� �����. Windows ����

Administrator� ���� ��, �� �� db2admin� �

�����.

[DB2] admin-uid ��� ��� ��� �����. Windows ����

Administrator� ���� ��, �� �� db2admin� �

�����.

[DB2] install_dir �� �� �� �����(WIN32 ��). ���� � �

� �� �����( : C:\SQLDIR).

[HTTPD] admin-id ��� ��� ��� �����. ���� Administrator

���.

[HTTPD] admin-pwd ��� ��� �����.

[HTTPD] port HTTPD �� �� �����.

[HTTPD] install_dir �� �� �� �����. ���� � �� �� ��

���( : C:\Program Files\IBM HTTP Server).

�� �� �� �� ��

190 IBM Tivoli Access Manager: �� �� ���

Page 211: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

��� �� Win32 ��� ��

[LDAP] install_dir �� �� �� �����(WIN32 ��). ���� � �

� �� �����( : C:\Program Files\IBM\LDAP).

LDAP ����� � �� ������ � �� �� �

����.

[LDAPS] admin-id LDAP ��� ID �� � ��(DN)� �����. ��

�� cn=root���.

[LDAPS] admin-pwd LDAP ��� ��� �����.

[LDAPS] hostname LDAP �� ��� ��� �����. ���� ��

� ���� ��� �����.

[LDAPS] server-port LDAP �� �SSL � ��� �����. ��� �

��� 389���.

[LDAPS] suffix GSO ������� �� LDAP � ��� �����

( : o=ibm,c=tw).

[LDAPS] ssl-client-keyfile LDAP SSL � � � ��� �����. ���� CD�

�� /common/pd_ldapkey.kdb���. � � � ��

� ��, �� gsk4ikm � ��� ��� PDLDAP� �

���.

[LDAPS] ssl-client-keyfile-

pwd

� � ��� ��� �����. ��� media/

common/pd_ldapkey.kdb� �� ��, ��� gsk4ikm

���.

[LDAPS] label SSL � � ��� ���� ����� . ���

media/common/pd_ldapkey.kdb� ���� ��, ���

� PDLDAP���.

[GSKIT] install_dir �� �� �� �����(WIN32 ��). ���� � �

�� �����( : C:\Program Files\IBM\GSK).

[PDMGR] ldap-admin-id LDAP ��� ID� �����. ���� cn=root���.

� ID� LDAP ��� ���� � �����.

[PDMGR] ldap-admin-pwd LDAP ��� ��� �����.

[PDMGR] ssl-port LDAP �� �SSL �� �����. ��� � ��

� 389���.

[PDMGR] cert-life �� � (pdcacert.b64)� ���� �����. ���

� 365 ���.

[PDMGR] e n a b l e - c e r t -

download

�� ����� Tivoli Access Manager Runtime ���

�� � (pdcacert.b64)� ��� ������� ��

���. ��� Y(�� ��) �� N(�� ���)���.

[PDMGR] sec-master-pwd Security Master ��� �����.

[PDACLD] admin-id LDAP ��� ID� �����. ���� cn=root���.

� ID� LDAP ��� ���� � �����.

[PDACLD] admin-pwd LDAP ��� ��� �����.

[PDACLD] sec-master-pwd Security Master ��� �����. � ��� Policy

Server� ���� � �����.

�� �� �� �� ��

� 11 � �� �� �� � �� 191

Page 212: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

��� �� Win32 ��� ��

[WEB] install_dir Web Portal Manager� �� �� ������ IBM

WebSphere Application Server, Advanced Single Server

� �� �� �� �����. ���� � �� �� �

����( :, C:\WebSphere\AppServer).

�� �� �� �� ��

192 IBM Tivoli Access Manager: �� �� ���

Page 213: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�� A. SSL(Secure Sockets Layer) ��

LDAP �� Domino ��� IBM Tivoli Access Manager ������ ���� IBM

Directory Client �� SSL(Secure Sockets Layer)� ���� �� ����.

�: �� ��� ���� IBM Directory Server� ��� ���� � ��� ��

��� ������. ezinstall_ldap_server ��� SSL� �� ���

� �� �� LDAP �� � �� �� ������ ���� ���� ��

��� �� �����.

SSL ��� �����, �� ��� SSL� ��� � IBM Directory Client� SSL

� �� ���. SSL �� � �� �� �� ��� ��� ����

����.

�� �

��� ������ ���� ��� ������ ��� �����.

�� � ��� �

��� ������ ���� ��� ������ �� ��� ��, ���

������ ��� ����. � ��, ���� ��� ����� ���

� ��� ��� ��� ���.

�� ��� ����� �� SSL ���� �� �� � IBM Directory Client

� �� ���. �� �� � ����� ��� ����� �� ��� SSL

� ���� ������ SSL� ��� � 212 ���� �LDAP �� � ����

� �� ���� ����� �� ���.

� �� ��� �� ����.

v 194 ���� �SSL ���� �� IBM Directory Server ���

v 200 ���� �SSL ���� �� iPlanet Directory Server ���

v 205 ���� �SSL ���� �� Novell eDirectory Server ���

v 208 ���� �SSL ���� �� IBM Directory Server ���

v 203 ���� �SSL ���� �� OS/390 � z/OS LDAP �� ���

v 212 ���� �LDAP �� � ����� �� ���

v 217 ���� �Domino� SSL ���

© Copyright IBM Corp. 2001, 2003 193

Page 214: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

SSL ���� �� IBM Directory Server ��

Tivoli Access Manager ��� LDAP �� ��� ��� ���� � SSL� �

� � ����. � �� LDAP ��� IBM Directory Client� ��� ��

� ���� ���� ���.

��� LDAP �� �� LDAP ��� �� SSL ���� ��� ��, SSL �

��� ���� ��� �� Tivoli Access Manager ����� ����� � ��

� �� �� ���.

LDAP ���� SSL ���� �� ��, GSKit� ���� SSL � ��� ��

����. GSKit� gsk5ikm��� ��� � � � �� ����� ����.

�: gsk4ikm ����� ���� SSL� �� ���� �� �� �� ��� �

�� ��� IBM SecureWay �� � �� ���� ������.

IBM Directory Server�� SSL ���� ����� �� ����� ������.

v 194 ���� �� ������ � � ��� ���

v 196 ���� �CA(Certificate Authority)��� �� ��� ��� �� 196 ��

�� ��� ��� ��� �� � ���

v 197 ���� �SSL ��� ���

� ���� �� � ��� ��

LDAP ���� SSL ��� ����� ��� ��� ��� �� ���� ��

� �� ���� ��� �� ���. � �� ���� ������ ��� �

� � ��� ��� ������ ��� ������. ���� � � �� �

�� � ������ � � �����. ��� ���� CA(Certificate

Authority)( : VeriSign)��� ��� ���� �����.

��, ���� �� ��� ���� �� �� ����. ���� �� ��� �

��� ���� ��, ���� ���� ���� CA(Certificate Authority)� ��

�.

gsk5ikm ����� ���� � ������ � � ���� ������. � �

����� � � ���(�� ����� ���)� ����� �� �� ���

��.

1. GSKit � gsk5ikm� ���� ��� SSL� ���� LDAP ��� IBM

Directory Client� �� ���� ��� ������.

�: SuSE SLES-7 2.4 � ���� ��, GSKit ������ ��� C++ �

���� ����� ������. �� ����� �� ��� ����

��.

SSL - IBM Directory Server

194 IBM Tivoli Access Manager: �� �� ���

Page 215: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

export LD_PRELOAD=/usr/lib/libstdc++libc6.1-2.so.3

2.2 � ����� gsk5ikm� �� �� � �� ��� ��� ��

��.

2. �� �� �� �� ��� gsk5ikm ����� ������.

��� ��

AIX /usr/opt/lpp/ibm/gsk5/bin/gsk5ikm

HP-UX /opt/ibm/gsk5/bin/gsk5ikm

Linux /usr/local/ibm/gsk5/bin/gsk5ikm

Solaris /opt/IBM/GSK5/bin/gsk5ikm

Windows C:\Program Files\IBM\GSK5\bin\GSK5ikm.exe

�: zSeries� Linux�� : gsk5ikm ����� ����� X-windows �

�� ��� IBM Java, �� 1.3.1� �� �� PATH �� ��� �

��� � �� ���.

export PATH=/opt/IBMJava2-s390-131/jre/bin:$PATH

�� ��� Linux� IBM Java ����� IBM JRE(Java Runtime

Environment), �� 1.3.1� ���� � ����.

http://www6.software.ibm.com/dl/lxdk/lxdk-p

3. � � ������ � � ����� � ������ �� → �� ���

����.

4. CMS � ������ ��� � � ������ ���� ������.

5. �� �� � �� ��� � ������ � � �� �� ��� ����

��. � ������ � � ���� .kdb���.

6. ��� �����.

7. � ������ � ��� ���� �� ������. � ������ �

� � ���� � ��� �� ����.

8. �� �� ��� ��� ���� �� ������.

9. ��� ���� �� � � ����� �� ��� ��� ����.

������� ��� ��� � ������ � � �� � ��� �� �

� � �������� �� � ����. �� � � �� � ��� �

������ � �� ���� .sth���.

10. ��� �����. �� � ������ � � ��� �����. �� ��

� ��� ��� ����. � ��� ���� ���� �� CA(Certificate

Authority)���.

SSL - IBM Directory Server

�� A. SSL �� 195

Page 216: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

CA(Certificate Authority)�� �� ��� ��

�� ��� ��� �� CA(Certificate Authority)���� ���� �� ��,

CA(Certificate Authority)��� ���� ��� ��� �� �� ���.

�� ��� ���� �� ���� � �� ���� ��� ��� ��� �� �

���� �����.

���� ��� ���� �� �� �����.

1. gsk5ikm� ���� CA(Certificate Authority)��� ���� �� � � �

��� � ������ � � �����.

2. � ������ � � �� �� �� ��� �����.

3. �� ��� �����.

4. CA(Certificate Authority)� �� � �� �� ����� ��� ��� � �

�� �����.

5. CA(Certificate Authority)�� ���� ��� � �� � ������ � �

����� �� �� ��� �� � ��� �����.

6. LDAP ��� ���� � ������ � � �� ��� SSL� �����

LDAP ��� ������.

197 ���� �SSL ��� ����� ������.

�� ��� ��� �� � ��

�CA(Certificate Authority)��� �� ��� ����� ��� �� ��

CA(Certificate Authority)��� ���� ����� � �� ���� 197 ���

� �SSL ��� ����� �����.

�� ��� ���� �� ���� � ������ � � ����� �� ��

�����.

1. �� → � �� ��� ��� ����.

2. GSKit� � �������� � � ���� ��� � �� � �� ��

� � ��� ��� ������. � �, ���� LDAP ��� ��� �

� � ����.

3. �� ��� �� ���(X509 V3) � � �� ��� �� ���� ��

��.

4. � ���� �� �� �� ���� �� ��� ��� ��� �� �

��� ������.

5. �� ��� �� ��� ������.

6. ��� ��� ��� ����.

SSL - IBM Directory Server

196 IBM Tivoli Access Manager: �� �� ���

Page 217: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

7. �� ��� �� ��� ��� �� ��� � 365� ���, �

� ���� �� ������.

8. ��� �����. GSKit� � � � �� � �� ���� ���� ���

��.

� � ��� �� ���� � ������ � � �� ��, GSKit� � �

� �������� �� �� ���� �����. � ��� ���

�� � ����. �� ���� �� ��� �� ���� �

�� �� ��� ��� � �� ���� �����.

LDAP ��� �� ��� ��� �����. � ������ � � �� �

�� ��� ����. � �� ����� � ��� ���� � ����

�� � � �� ��� �� ���� ����.

���� � ������ � � ��� ��� ���� ����. � ���

���� ��� ��� ��� �� � � ���� ��� ��� ������.

�� �� LDAP ��� ���� Base64 ��� ASCII ��� � � ��

���.

9. gsk5ikm� ���� LDAP ��� ���� Base64 ��� ASCII ��� �

� ������. � � � 210 ���� ���� ��� ����� ����

�.

10. � ��� �� ��� ���� �������.

11. �� ��� �����.

12. ��� ����� Base64 ��� ASCII ���� �����.

13. �� ��� ���� �� ��� � ��� ������. ��� � � �

��� �� .arm���.

14. ��� ���� �� ��� ������.

15. ��� �����.

16. ��� ���� IBM Directory Client ����� ������.

�� SSL� ����� LDAP ��� �� � ����. �SSL ��� �����

������.

SSL ��� ��

SSL� ����� LDAP ��� ����� LDAP ��� ���� ��� �, ��

�� �����.

zSeries� Linux�� : ��� slapd32.conf � � ���� SSL� ��

� ��� LDAP ��� ������. LDAP ��� ����� �� �� ���

slapd32.conf � � cn=SSL,cn=Configuration ��� ������.

SSL - IBM Directory Server

�� A. SSL �� 197

Page 218: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

��� � �� ��� ����.

zSeries� Linux ��� �� ���� �� ��� ������.

1. �� ��� �� IBM Directory Server �� ��� �������.

http://servername/ldap

���, servername� LDAP �� ���� �����.

2. � ����� ���� LDAP ���( : cn=root)� �������.

3. �� → SSL → ���� ����.

4. SSL � � SSL� ����� �� SSL ��� � SSL ��� ���

��.

5. �� �� � ��� ����.

dn: cn=SSL, cn=Configuration cn: SSL ibm-slapdSecurePort: 636 #ibm-slapdSecurity must be one of none/SSL/SSLOnly ibm-slapdSecurity: SSL #ibm-slapdSslAuth must be one of serverAuth/serverClientAuth ibm-slapdSslAuth: serverauth ibm-slapdSslCertificate: ldapcert #ibm-slapdSslCipherSpecs must be decimal value of bits in the mask 0x3F00 ibm-slapdSslCipherSpecs: 12288 #ibm-slapdSslKeyDatabase must be location of the key database # If a password stash file is present, the password need not be specified ibm-slapdSslKeyDatabase: /usr/ldap/etc/key.kdb objectclass: top objectclass: ibm-slapdSSL

SSL - IBM Directory Server

198 IBM Tivoli Access Manager: �� �� ���

Page 219: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v �� �

�� ��� ��, ��� ������ ���� ��� ������ ���

�����.

v �� � ��� �

�� � ����� ��� ��, ��� ������ ���� ��� ���

��� �� ��� � ��� ������ ��� ����. � ��, ��

�� ��� ����� ���� ��� ��� ��� ���.

212 ���� �LDAP �� � ����� �� ����� ������ ��

SSL ���� �� � ������ �� ���� � ���.

6. � ��� ����� �� � ��� 636� ����.

7. 194 ���� �� ������ � � ��� ����� ��� � �����

� �� � � ��� ������.

� ������ � � ���� .kdb���.

8. � ������� LDAP ��� ���� �� � �� ��� � ���

��� � ��� ��� ������. � �, ���� LDAP ��� ��

� �� � ����.

9. � ������ � ��� ���� �� ������. LDAP ��� �� �

� ����� � �� ��� ��� � � ����.

10. ��� �����.

11. �� �� �� � � LDAP ��� �� ���� � ����� ��

� ����.

SSL� �� ���� ������ LDAP �� ����� �� ��� �����

�.

ldapsearch -h servername -Z -K keyfile -P key_pw -b "" -s base objectclass=*

�� ��� �� ����.

� ��

servername LDAP ��� DNS ��� ��

keyfile ��� � � �� �� ��

key_pw ��� � � ��

ldapsearch ��� LDAP ��� ���� ��� LDAP �� ��� �����.

�� LDAP �� SSL ��� �������.

�� ��, SSL ���� �� IBM Directory Client� ������. 208 ����

�SSL ���� �� IBM Directory Server ����� ������.

SSL - IBM Directory Server

�� A. SSL �� 199

Page 220: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

SSL ���� �� iPlanet Directory Server ��

SSL� Tivoli Access Manager ���� iPlanet Directory Server ��� ����

���� ����� ���� ����� � �� ����. ���� SSL� �

��� ��( : ��� �� � ��� ���)� ���� �� ����. �� Tivoli

Access Manager� ��� � SSL� ��� �� �� ����.

� ��� iPlanet Directory Server� IBM Directory Client ��� SSL ���

��� ��� ��� ���� ���. SSL ��� ����� iPlanet Directory

Server� IBM Directory Client� �� �� ���.

iPlanet Directory Server��� SSL ��� ��� �� ��� ��� iPlanet

Directory Server ��� ������.

�� �� �� ����� ������.

v 200 ���� ��� ��� ���

v 201 ���� ��� ��� ���

v 202 ���� �SSL ��� ���

�� ��� ��

SSL ��� ����� iPlanet Directory Server�� ����� ���� ��� ID

� ���� ���� ����. ��� ������ ���� �� ������ �

�� ��� � �� ���. � ���� Server-Cert� ���.

iPlanet Console 5.0 � ��� �� ���� ���� Server-Cert� �����.

1. iPlanet Console 5.0� ������.

2. LDAP ���� �� ��� ID� ������.

3. ��� ������.

4. �� ��� ������.

5. Tivoli Access Manager� �� ���� ����.

6. �� ��� �����.

7. Server Group� �����.

8. ���� Directory Server� ��� ����.

iPlanet Directory Server� eo� �� ��� ����.

9. Open� �����. iPlanet Directory Server� ������.

10. Configuration �� �����.

11. Encryption �� �����.

12. Enable SSL for this server �� �� �� ��� ������.

13. Task �� �� � Manage Certificates� �����.

SSL - iPlanet Directory Server

200 IBM Tivoli Access Manager: �� �� ���

Page 221: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�: ���� �� �� �� ��� ���� ���� �� �� �����

�����. ��� Manage Certificates �� �� � � �� ��

� ����� ���� ����.

14. �� ��� � � ��� � OK� �����. Manage Certificates ��

����.

15. �� ���� ����� internal(software)� �� �� Server Certs �

� �� ��� ������.

16. � � � � �� Request �� �����. ��� � ��� �� �

���.

17. Request certificate manually �� �� ��� ��� � Next� ��

���.

18. �� ��� ��� � Next� �����. � ��� ��� ����� �

�����. ���� �� ���� ��� Yes� �����.

19. Active Encryption token ��� internal(software)� �� ��� ����

��.

20. �� ���� ��� ��� � Next� �����.

21. ��� �� � � ����� Save to File� �����. �� ����

����� Copy to Clipboard� �����. �� ��, Done� � ��

������.

22. �� �� � �� ���� ��� � � ���� CA(Certificate Authority)

����� �� �����.

�� ��� ��

CA(Certificate Authority)��� ���� �� ��� �� �� ������.

1. iPlanet Directory Server Console� ����.

2. Task �� �� � Manage Certificates� �����.

3. Server Certs� �� ��� ��� � Install� �����.

4. �� ��� ������.

v � ��� ���� ����� In this local file� ����.

v �� ���� ������ In the following encoded text block� �

� ���� ���� ��� � Paste from Clipboard� �����.

5. Next� �����.

6. ��� ��� ���� ���� Next� �����.

7. This certificate will be named ��� ��� ��� ����� �� ���

server-cert� � � Next� �����.

SSL - iPlanet Directory Server

�� A. SSL �� 201

Page 222: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

8. � ��� ��� � Done� �����. �� ��� ��� �� �

� ��� Server Certs � � � �� ��� ��� �����.

9. �SSL ��� ����� ������.

SSL ��� ��

��� �� ���� ���� ��� �� �� iPlanet Console 5.0� Encryption

��� ���� ���.

1. Enable SSL� ����.

2. RSA Cipher Family� ����.

3. ��� ��� ����� ��� � ��� ���� Do not allow client

authentication� ����.

4. Save� �����.

5. ����� ���� iPlanet Directory Server� �� ������.

�: ��� ��� ��� �� ������ ��� �� ���.

�� iPlanet Directory Server�� SSL� �� � ����. �� ��, iPlanet

Directory Server� �� LDAP ������� �� IBM Directory Client �

���� SSL� �� ���.

��� ��� 208 ���� �SSL ���� �� IBM Directory Server ���

� ������.

SSL - iPlanet Directory Server

202 IBM Tivoli Access Manager: �� �� ���

Page 223: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

SSL ���� �� OS/390 � z/OS LDAP �� ��

Tivoli Access Manager � LDAP ���� � �� ���� �� ��, LDAP

�� � Tivoli Access Manager ������ ���� ����� �� SSL ��

� ���� �� ����. � �� �� � ��� ����� ��� ��� ��

�� ��� ����. Tivoli Access Manager� �� � � �� ��� ��

��� ��� �� � �����.

SSL ��� � OS/390 �� z/OS� LDAP ��� ����� OS/390 �� z/OS

� �� ���� �� LDAP Server �� � �� ���� ������. � ��

� �� ��� ����.

http://www-1.ibm.com/servers/eserver/zseries/zos/bkserv/

��� 1.2�� 1.4��� z/OS� LDAP� �� SSL ��� �� ���� ���

�� �� �� �� �� ����. � ���� LDAP �� � ���

�� �� � ���� z/OS Cryptographic Services System SSL� ��� ���

�����.

1. �� �� � �� ����� ��� � SSL ��� LDAP �� �

���� LDAP ��� ������.

2. LDAP �� �� � � �� ���� ���� � ������� �����

����, ���� sslCertificate �� � ���� ������.

3. LDAP ��� �� ������.

�� �� ��

slapd.conf � � SSL� �� ��� �� � ����.

listen ldap_URL

LDAP URL ���� IP ��(�� ��� ��)� ���� LDAP ���

��� ����� �� ���� � ��� �����. �� � � �

����� � � �� �� � ����.

sslAuth {serverAuth | serverClientAuth}

SSL �� ���� �����. serverAuth ���� ���� LDAP ��

���� ������ �� �� �� � � LDAP ��� ��� ��

� ����. serverAuth ���� ������.

sslCertificate {certificateLabel | none}

�� ��� ���� ���� ���� �����. �� gskkyman ���

���� �� � ���� � ������ � � �����.

sslCipherSpecs int

������� �� SSL �� ��� �����.

SSL - OS/390 � z/OS Servers

�� A. SSL �� 203

Page 224: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

17. ���� ��

�� 16� � 10�� �

SLAPD_SSL_RC4_MD5_US 0x0800 2048

SLAPD_SSL_RC4_SHA_US 0x0400 1024

SLAPD_SSL_TRIPLE_DES_SHA_US 0x0100 256

SLAPD_SSL_DES_SHA_EXPORT 0x0200 512

SLAPD_SSL_RC2_MD5_EXPORT 0x1000 4096

SLAPD_SSL_RC4_MD5_EXPORT 0x2000 8192

sslCipherSpecs ���� �� ���� �� �� 17� 16� ��� �

�� 0Red �� ��� 10�� ����. � �, ���� �� ��

� � ��� ����� �� 15104� ���. �� ��� ���� �

� � �� ��� ���� �� 12288���. � ��, � �� �

�� ���� ������ ���� SSL �� �� � ����.

sslKeyRingFile �� ��

��� �� SSL � ������� �� � � ��� �����. � �

�� gskkyman ��� ���� � ������ � �� � �

��.

sslKeyRingFilePW ���

SSL � ������ � � �� ���� ���� ��� �����. �

� ���� gskkyman ��� ���� ��� � ������ � � �

�� � ���.

�: sslKeyRingFilePW �� ��� ��� ��� ����. �� RACF

� �� �� sslKeyRingPWStashFile �� ��� ������. �

� ���� � ��� �����.

sslKeyRingPWStashFile �� ��

��� � ������ � � �� ��� ��� � ��� �����.

� ��� ��� � �� � � ��� sslKeyRingFilePW �� ��(

��� ��)� �����. � ������ �� �� � � ����� -s

�� �� gskkyman ����� ������.

� ���� �� ��

�� ���� gskkyman ����� ���� � ������ � � ����

�� �����.

1. �� �� � ���(OMVS �� rlogin ��)�� gskkyman ����� �

�����.

$ gskkyman

SSL - OS/390 � z/OS Servers

204 IBM Tivoli Access Manager: �� �� ���

Page 225: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

gskkyman ����� �� �� ������ ����. ��� ����� �

� ����� �� ��� ���� �� ��� ����.

2. � � ������ � � ����� �� 1� ����.

3. � ������ � ��� ������(key.kdb� ������).

4. � ������� �� ��� ������.

5. ��� � ��� �� ������.

6. �� �� ��( )� ����� Enter� � �� � ��� �����.

7. ������ ��� ��� ����� Enter� � 2500� ������.

� ������� ���� � ��� � �� ��� ���� ���� �

���.

8. � �� ���� �� 6� �� �� ��� ���� ���� ���� �

����.

9. ���� ��� � LDAP ����� ���� ���� ����� CA ���

� �� � ��� � ���� �� ���. �� ����� �� ��

�����.

a. � � ���� ����� �� 1� ����.

b. � � ��� ���� ��� ��� ������.

c. � � ��� ���� ���� � � ����� �� 6� ������.

d. �� � �� �� ���� �� ��� ����. � �, Binary

ASN.1 DER� ����� �� 1� ����.

���� �����. �� ��� � � LDAP ����� ���� ���

� ����� CA ���� �� � ����. �� � binary DER� �

��� ���� ���, �� ��� �� �� LDAP ����� ����

gsk5ikm ������ � � ��� �� ���.

SSL ���� �� Novell eDirectory Server ��

SSL� Tivoli Access Manager ���� NDS eDirectory ��� ���� ����

����� ���� ����� � �� ����. ���� SSL� ���� �

�( : ��� �� � ��� ���)� ���� �� ����. �� Tivoli Access

Manager� ��� � SSL� ��� �� �� ����. Tivoli Access Manager

��� SSL� ��� �� �� � �� ������.

Tivoli Access Manager� NDS eDirectory� �� ��� ��� �����. SSL�

NDS eDirectory Server� ����� ConsoleOne ��� ���� ��� ����

�� �� ������.

v 206 ���� �� CA(Certificate Authority) ���� ���

v 207 ���� ��� ��� ��� ���

SSL - OS/390 � z/OS Servers

�� A. SSL �� 205

Page 226: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v 207 ���� �LDAP ��� �� �� ��� ���

v 208 ���� �SSL ���

v 208 ���� ��� ��� ���� IBM � � � ���

�: ��� ��� Novell �� ���� ������.

http://www.novell.com/documentation/lg/ndsedir86/index.html

�� CA(Certificate Authority) ��� ��

eDirectory �� � ���� NDSPKI:CA(Certificate Authority) ����� �

����(���� �� ��� �� ��). ���� ��� ��� �� ���

��� ���� ���. �� ���� Tivoli Access Manager�� ��� ���

�� � �� � �� � �� ��� �� ���. �� �� ��� �� �

���.

0=<organizational entry name>.OU=Organizational CD

�� ��� ��� ����. �� ����� ��� �� ���� CA(Certificate

Authority) ����� �� �� ���. �� ����� �� �� ����

�.

1. ConsoleOne� ������.

2. �� ��� ����� ����. �� ��� � �� ����� ��

��.

3. � CA ����� �� ������.

4. �� ��� ����� �� ��� ��� �� ��� �� �� → �

�� �����.

5. � ���� �� ��� �� ���� NDSPKI: CA(Certificate Authority)

� � � �����. � CA(Certificate Authority) ���� �� �� ���

����. ��� ����� �����.

6. �� ��� �� eDirectory ���� ��� ������. � �, ��

����.

��� �� �� = C22Knt_NDS.AM

���� �� �� = C22KNT-CA

7. �� ����� ��� ��� �� �� �����.

8. �� ��� ��� ���� ������. � �, ��� ������.

.o=ibm.c=tw

9. ConsoleOne� � CA(Certificate Authority)� C22KNT-CA� ����.

SSL - Novell eDirectory Server

206 IBM Tivoli Access Manager: �� �� ���

Page 227: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�� ��� ��� ��

�� ��� ���� ����� ��� ������.

1. � CA(C22KNT-CA)� ���� �����. �� �� ����.

2. ��� �� � �� �� �� ���� �� ��� ���� ����.

3. ���� ��� ������.

4. ���� ������. ��� �� �� ����.

5. ���� �� �� ��� ���� ��� ��� �����. � �,

�� ����.

c:\c22knt\CA-SelfSignedCert.der

6. � � Tivoli Access Manager ��� �� �� ��(FTP)����. � �,

�� ����.

c:\Program Files\Tivoli\Policy Directory\keytab

�� � � 2� � ���� ������.

LDAP ��� �� �� ��� ��

Novell eDirectory Server� �� ���� ����� �� �� �����.

1. LDAP ��� �� ���� ����� � ��� ��� ��� �� ��

� �� �� → � �� �����. � ���� �� ����.

2. NDSPKI: � ��� � �� ��� �����. �� ��� ��(� ��)

�� ����.

3. ��� ��( : AM)� ���� �� �� � ��� ��� � �, �

� �����.

4. CA(Certificate Authority) �� ��� � ���� ���� ���� ���

� �� �����.

5. � �(��� 1024��)� ���� �� � ��� � ���� ��� �,

�� �����.

6. ��� ���� �� ��� �� �� �� �� �� �� �� �����.

�� � �� ����.

7. �� ��� ������. ��� � � �� ��� ��� ��� �� ��

� �����. �� �� ��� ���� �� ��� ��(� ��) �� ��

��. ����� �� �����.

8. �� ��� ���� ��� �� � � �� �� ��� � � ���

������.

��� �� �� ��� ����. � �� ���� ConsoleOne� ��� �

�� AM��� � �� ���� �����. ��� �� ������.

SSL - Novell eDirectory Server

�� A. SSL �� 207

Page 228: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

SSL ��

Novell LDAP ��� SSL� ����� ��� ������.

1. ConsoleOne� ��� � ��� LDAP Server - hostname��� ��� ��

��� ��� �� �����.

2. �� �� ���� ��� ����. �� ����� SSL �� �� �

���.

3. SSL ��� �� �� �� �� �� �� � �����. SSL ��� �

� ����. SSL ��� �� � �� �� �� ���� ����.

4. AM ���� �� ��� �����. LDAP ��� �� - hostname ��

��� SSL ��� ��� �� �� ����.

�: �� �� �� � ��� �� ����.

�� ��� ���� IBM � ��� ��

�� ��� ���� Tivoli Access Manager ��� IBM � � � ����� �

� �� �����.

1. gsk5ikm ����� ������. IBM Key Manager �� ����.

2. � ������ �� → �� ��� ����. �� �� �� ����.

3. ��� �� ��� ��� �� ��� �����.

� ������ ��: CMS � ������ ���� ��: key.kdb �: /var/PolicyDirector/keytabs

�� ��� �� ����.

4. ��� � ��� � � ���� ��� ��� �� ��� �����. ��

� ��� �� ��� �� IBM Key Manager �� ����.

5. �� �� �����. � �� CA ��� �� �� ����. �� ���

��� �� ��� �����.

��� ��: Binary der data ��� �� ��: <hostname>CA-SelfSignedCert.der �: /var/PolicyDirector/keytabs

��� ��� �� ��� AM��� ���� �����.

SSL ���� �� IBM Directory Server ��

SSL ���� �� LDAP ������ ���� �� SSL ���� �� LDAP

��� �� �� ���. SSL ���� �� LDAP ��� � ���� ��

�� 194 ���� �SSL ���� �� IBM Directory Server ����� ���

��.

SSL - Novell eDirectory Server

208 IBM Tivoli Access Manager: �� �� ���

Page 229: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

��� � ������ � � ���� � �����, ����� ���� � �

����� � � �� ���. ������ LDAP ��� �� � ����

������ LDAP ��� ���� ��� CA(���)� �� ���. LDAP

��� �� ��� ���� ���� ��, ������ ����� ��(trusted

root)(CA)�� LDAP ��� ���� ��� ���� �� � �� ���.

LDAP ���� SSL ���� �� LDAP ������ ����� �� �� ��

��� ������.

v 209 ���� �� ������ � ���

v 210 ���� ���� ��� ���

v 211 ���� �SSL ��� ����

� ���� �� ��

gsk5ikm ����� ���� � ������ � � ���� ������. � �

����� � � ���(�� ����� ���)� ����� �� �� ���

��.

1. GSKit � gsk5ikm ����� SSL� �� LDAP ��� LDAP �����

� �� ���� ��� ������.

2. �� �� �� � ��� ��� gsk5ikm ����� ������.

��� ��

AIX /usr/opt/lpp/ibm/gsk5/bin/gsk5ikm

HP-UX /opt/ibm/gsk5/bin/gsk5ikm

Linux /usr/local/ibm/gsk5/bin/gsk5ikm

Solaris /opt/IBM/GSK5/bin/gsk5ikm

Windows C:\Program Files\IBM\GSK5\bin\GSK5ikm.exe

�: zSeries� Linux�� : gsk5ikm ����� ����� X-windows �

�� ��� IBM Java, �� 1.3.1� �� �� PATH �� ��� �

��� � �� ���.

export PATH=/opt/java/IBMJava2-s390-131/jre/bin:$PATH

�� ��� Linux� IBM Java ����� IBM Java Runtime

Environment, �� 1.3.1� ���� � ����.

http://www6.software.ibm.com/dl/lxdk/lxdk-p

�� SuSE SLES-7 31�� ���� gsk5ikm ������ ��� C++ �

���� ����� ����� LD_PRELOAD �� ��� �� �� �

� ���.

LD_PRELOAD=/usr/lib/libstdc++libc6.1-2.so.3

SSL - iPlanet Directory Client

�� A. SSL �� 209

Page 230: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

3. � � ������ � � ����� � ������ �� → �� ���

����.

4. CMS � ������ ��� � � ������ ���� ������.

5. �� �� � �� ��� � ������ � � �� �� ��� ����

��. � ������ � � ���� .kdb���.

6. ��� �����.

7. � ������ � ��� ���� �� ������.

� ������ � � � ���� � ��� �� ����.

8. �� �� ��� ��� ���� �� ������.

9. ��� ���� �� � � ����� �� ��� ��� ����.

������� ��� ��� � ������ � � �� � ��� �� �

� � �������� �� � ����. �� � � �� � ��� �

������ � �� ���� .sth���.

10. ��� �����. �� � ������ � � ��� �����. �� ��

� ��� ��� ����. � ��� ���� ���� �� CA(Certificate

Authority)���.

������ LDAP ��� �� � ���� ������ LDAP ��� �

��� ��� CA(���)� �� ���. LDAP ��� �� ��� ��

�� ���� ��, ������ ����� ��(trusted root)(CA)�� LDAP

��� ���� ��� ���� �� � �� ���.

11. � ������ � � ��� ��� � ������ � � � ���

ivmgr� ������. � �� ��� �� �� ��� ��� ���

���. � � UNIX ���� ��, ��� ������.

# chown ivmgr keyfile

��� ��� ��

� ������� ��� � ��� ���� ����� �� �� �����.

1. LDAP ��� � �� ��� ���� �� � ��, 196 ���� ���

��� ��� �� � ����� � ������ � ��� ��� ���� �

���� ����� ������ ������. ���� ���� �� ���

���. ��� ���, LDAP ��� ���� ��� CA(Certificate Authority)

� ���� ��� ��� ������.

2. ������ CMS � ������ � � ��� �� ��� �����.

3. ��� �����.

4. Base64 ��� ASCII ���� � ��� ��� ������.

5. ���� � �� � ��� �����. ��� � � ���� ��

.arm���.

SSL - iPlanet Directory Client

210 IBM Tivoli Access Manager: �� �� ���

Page 231: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

6. ��� �����.

7. ���� �� ��� ���� �� ���� ������. � �, LDAP

��� ��� ��� ���� �� � ����. CA(Certificate Authority)

� � LDAP ��� ���� ��� ��, CA(Certificate Authority)� ��

� ���� �� � ����.

8. ��� �����. ������ � �������� ��� ����� �� �

�� ���� ����.

9. �� ��� ��� ���� ���� � ��/��� �����.

10. ���� ����� ��(trusted root)� ���� �� ����� ��

��� �� ��� ������.

�� CA(Certificate Authority)� � LDAP ��� ���� ��� ��,

CA(Certificate Authority)� ��� ����� ���� ���� ����� �

�� ��� ���� ������. ��� ���, CA(Certificate Authority)

� ���� ��� ���� ���� ��� ����� ���� ������.

�� ������ LDAP ���� SSL ��� � � ����.

SSL ��� ���

SSL ���� �� ���� ������ LDAP ������� �� ��� ��

����.

ldapsearch -h servername -Z -K client_keyfile -P key_pw -b "" -s base objectclass=*

�� ��� �� ����.

� ��

servername LDAP ��� DNS ��� ��

client_keyfile ��� ����� � � �� �� ��

key_pw ��� � � ��

� ��� LDAP ��� ���� ��� LDAP �� ��� �����.

194 ���� �SSL ���� �� IBM Directory Server ����� LDAP �� �

� � �� � �� �� � ��� �� �� �� ����.

v �� �� ��� �� SSL ��� ��� ����.

v �� � ��� �� ��� 212 ���� �LDAP �� � �����

�� ����� �����.

SSL - iPlanet Directory Client

�� A. SSL �� 211

Page 232: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

LDAP �� � ����� �� ��

197 ���� �SSL ��� ���� ��� �� SSL ���� ���� �� LDAP

�� �� � �� � �� �� � ��� � ��� ��� ��

�� ����.

�� �� � ���� SSL ��� �������.

�� � ��� �� ��� �� ����� ���� �� ���� �

���. � �� ����� ��� ������ ���� ��� �� ���

� ������ ID� �����.

����� ���� �� ���� ���� �� ����� ������.

v 212 ���� �� ������ � ���

v 213 ���� �CA(Certificate Authority)��� �� ��� ���

v 214 ���� ��� ��� ��� �� � ���

v 215 ���� ���� ��� ���

v 216 ���� �SSL ��� ����

� ���� �� ��

����� � ������ � � � ���� ���� gsk5ikm ����� �

��� � ������ � � ���� ������. � ������ � � ��

����� 213 ���� �CA(Certificate Authority)��� �� ��� ���� �

����.

� ������ � � ���(�� ����� ���)� ����� �� �� �

����.

1. GSKit � gsk5ikm� SSL� ���� LDAP ��� ������ �� ���

� ��� ������.

2. �� �� �� � ��� ��� gsk5ikm ����� ������.

��� ��

AIX /usr/opt/lpp/ibm/gsk5/bin/gsk5ikm

HP-UX /opt/ibm/gsk5/bin/gsk5ikm

Linux /usr/local/ibm/gsk5/bin/gsk5ikm

Solaris /opt/IBM/GSK5/bin/gsk5ikm

Windows C:\Program Files\IBM\GSK5\bin\ GSK5ikm.exe

3. � ������ �� → �� ��� ����.

4. CMS � ������ ��� � � ������ ���� ������.

SSL - Server � Client Authentication

212 IBM Tivoli Access Manager: �� �� ���

Page 233: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

5. �� �� � �� ��� � ������ � � �� �� ��� ����

��. � ������ � � ���� .kdb���.

6. ��� �����.

7. � ������ � ��� ���� �� ������. � ������ �

� � ���� � ��� �� ����.

8. �� �� ��� ��� ���� �� ������.

9. ��� ���� �� � � ����� �� ��� ��� ����.

������� ��� ��� � ������ � � �� � ��� �� �

� � �������� �� � ����. �� � � �� � ��� �

������ � �� ���� .sth���.

10. ��� �����.

�� � ������ � � ��� �����. �� ��� ��� ��� �

���. � ��� ���� ���� �� CA(Certificate Authority)���.

11. � ������ � � ��� ��� � ������ � � � ���

ivmgr� ������. � �� ��� �� �� ��� ��� ���

���. � � UNIX ���� ��, ��� ������.

# chown ivmgr keyfile

CA(Certificate Authority)�� �� ��� ��

�� ��� ��� �� CA(Certificate Authority)( : VeriSign)���� ����

�� ��, CA(Certificate Authority)��� ���� ��� ��� �� ��

���.

�� ��� ���� �� ���� � �� ���� 214 ���� ��� ���

��� �� � ���� �����.

���� ��� ���� �� �� �����.

1. gsk5ikm� ���� CA(Certificate Authority)��� ���� �� � � �

��� � ������ � � �����.

2. � ������ � � �� �� �� ��� �����.

3. �� ��� �����.

4. CA(Certificate Authority)� �� � �� �� ����� ��� ��� � �

�� �����.

5. CA(Certificate Authority)�� ���� ��� � �� � ������ � �

����� �� �� ��� �� � ��� �����.

6. LDAP ������ ���� � ������ � � �� ��� LDAP ���

������ ���� ��� CA(Certificate Authority)� ���� �� � �

���.

SSL - Server � Client Authentication

�� A. SSL �� 213

Page 234: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

7. 215 ���� ���� ��� ���� ������.

�� ��� ��� �� � ��

213 ���� �CA(Certificate Authority)��� �� ��� ����� ��� ��

�� CA(Certificate Authority)��� ���� ����� � �� ���� 215

���� ���� ��� ���� �����.

��� �� ��� ���� ���� � ������ � � ����� �� �

� �����.

1. �� �� �� � ��� ��� gsk5ikm ����� ������.

��� ��

AIX /usr/opt/lpp/ibm/gsk5/bin/gsk5ikm

HP-UX /opt/ibm/gsk5/bin/gsk5ikm

Linux /usr/local/ibm/gsk5/bin/gsk5ikm

Solaris /opt/IBM/GSK5/bin/gsk5ikm

Windows C:\Program Files\IBM\GSK5\bin\GSK5ikm.exe

2. �� → � �� ��� ��� ����.

3. GSKit� � �������� � � ���� ��� � �� � �� ��

� � ��� ��� ������.

� �, ���� LDAP ������ ��� �� � ����.

4. �� ��� �� ���(X509 V3) � � �� ��� �� ���� ��

��.

5. � ���� �� �� �� ���� �� ��� ��� ��� �� �

��� ������.

6. �� ��� �� ��� ������.

7. ��� �� ����� ��� ����.

8. �� ��� �� ��� ��� �� ��� � 365� ���, �

� ���� �� ������.

9. ��� �����. GSKit� � � � � �� � �� ���� ���� �

����.

� � ��� �� ���� � ������ � � �� ��, GSKit� � �

� �������� �� �� ���� �����. � ��� ���

�� � ����. �� ���� �� ��� �� ���� �

�� �� ��� ��� � �� ���� �����.

LDAP ������ �� ��� ��� �����. � ������ � � �

� ��� ��� ����. � �� ����� � ��� ���� � ��

���� � � �� ��� �� ���� ����.

SSL - Server � Client Authentication

214 IBM Tivoli Access Manager: �� �� ���

Page 235: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

���� � ������ � � ��� ��� ���� ����. � ���

���� ��� ��� ��� �� � � ���� ��� ��� ������.

�� ��, LDAP ��� ���� Base64 ��� ASCII ��� � � ��

���.

10. gsk5ikm� ���� LDAP ��� ���� Base64 ��� ASCII ��� �

� ������.

11. � ��� �� ��� ���� �������.

12. �� ��� �����.

13. ��� ����� Base64 ��� ASCII ���� �����.

14. �� ��� ���� �� ��� � ��� ������. ��� � � �

��� �� .arm���.

15. ��� ���� �� ��� ��� � ��� �����.

16. �� ��� ���� LDAP �� ����� ������.

LDAP ���� ������ �� ���� ���� ������ � ������

� � ��� ��� ����� ���� ��� CA(Certificate Authority)�

����� ��(trusted root)�� ���� ���.

��� ��� ��

LDAP ���� � �� �� ���.

� ������� ��� � ��� ���� ����� �� �� �����.

1. �� ��� ������.

v ������ �� �� ��� ���� �� � ��, 214 ���� ���

��� ��� �� � ����� � ������ � ��� ��� ����

�� ����� ������ ������. ���� ���� �� ����

�� �� ������.

v CA(Certificate Authority)� � ����� ���� ��� ��, ��

�� ���� CA(Certificate Authority)� ���� ����� ����� �

�����.

2. ������ CMS � ������ � � ��� �� ��� �����.

3. ��� �����.

4. Base64 ��� ASCII ���� � ��� ��� ������.

5. ���� � �� � ��� �����. ��� � � ���� ��

.arm���.

6. ��� �����.

SSL - Server � Client Authentication

�� A. SSL �� 215

Page 236: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

7. ���� �� ��� ���� �� ���� ������. � �, ����

� ������ ���� ��� CA(Certificate Authority)� ��� � LDAP

������ ��� ��� �� � ����.

8. ��� �����. ������ � �������� ��� ����� �� �

�� ���� ����.

9. �� ��� ��� ���� ���� � ��/��� �����.

10. ���� ����� ��(trusted root)� ���� �� ����� ��

��� �� ��� ������.

�� CA(Certificate Authority)� � LDAP ������ ���� ��� �

�, CA(Certificate Authority)� ��� ����� ���� ���� ����

� ���� ��� ���� ������. ��� ���, CA(Certificate

Authority)� ���� ��� ���� ���� ��� ����� ���� �

�����.

�� ��� LDAP ������ SSL ��� � � ����.

11. �SSL ��� ����� ������.

SSL ��� ���

LDAP ��� ������ �� ���� ��� �� ��� ��� ��� LDAP

������� �� ��� ���� SSL ���� �������.

ldapsearch -h servername -Z -K client_keyfile -P key_pw -N \ client_label -b "" -s base objectclass=*

�� ��� �� ����.

� ��

servername LDAP ��� DNS ��� ��

client_keyfile ��� ����� � � ��� �� ��

key_pw ��� � � ��

client_label �� ��� ���(�� ��). � ��� �� ��

� ����� ��� �� ����� LDAP ��� �

��� ���� ����.

ldapsearch ��� LDAP ��� ���� ��� LDAP �� ��� �����.

-N ����� ������ �� ���� ������ � ������ � � �

���� � ��� ���� �� ��.

�: LDAP ��� ��� ��� ���� ���� ����. -N ��� � � �

� ����� ���� ��� ������ GSKit� ����. ���� ��

�� ��� ��� ������ ���� � � �� �� ���� ���

��.

�� SSL ��� �������.

SSL - Server � Client Authentication

216 IBM Tivoli Access Manager: �� �� ���

Page 237: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Domino� SSL ��

Lotus Domino ��� Tivoli Access Manager ������ ���� IBM Directory

Client �� SSL(Secure Sockets Layer)� ���� �� ����.

� ��� �� �� �� ��� ����.

1. �SSL � � ���

2. �SSL ��� ���

3. 49 ���� �Tivoli Access Manager for Domino ��� ���

SSL � � �� ��

Domino ���� SSL� �����, �� ��� ��� ���� � �� Domino

� � � �� ���. �� � �� �� �����.

1. Domino ���� Notes ������ ���� �� → ������ → ���

����. Domino ���� �� �� � ������� ����.

�: Domino Designer ������ Notes ����� ���� �� ���.

2. ��� ��, �� ��� ������.

v SSL � � ���� ���� ����.

� � ��, �� �� ��, � �� �� � � �� �� �� ���

������.

v ���� � �� �� ���� �� � � ������.

�� ��� �� �� � � �� ��� � � �����. � � ��

� �� � �� ��� ����. �� ��� �� �� � � ��

�� � ����� ������.

� � � ��� � � �� Domino �� ��� ������.

\Lotus\Domino\Data

SSL ��� ��

Domino� ������ ���� �����. SSL� ����� �� �� ���

��.

1. Domino Administrator ������ ����, �� �� ����.

2. GUI ��� �� ��� �� �� �� ��� ����. LDAP� ��

�� ��� ����.

3. �� ��� � �� �� ��� ������.

4. �� ���� �� �� ����.

Domino� SSL ��

�� A. SSL �� 217

Page 238: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

5. ��� �� �� �� 217 ���� �SSL � � ����� ���

Domino �� � � ��� ������. SSL ��� ��� �� ��

����.

6. � �� �� LDAP ��� ��� �� SSL � ���� ���

����. �� ��� ������.

v ����� ���� ���� ������.

v �� � ��� �� ������.

v ��� � �� ���� ������.

7. �� ��� ����� ��� �����. LDAP SSL ��� ������.

Domino �� ���� �� Domino �� ����� ���� � ���� ��

��, Domino �� � � � ���� �� ���. �� ����� ��

�� �����.

1. �� ��� ����� ���� �� ��� �����.

2. ��� ���� ��� ��� ����.

3. Domino �� � � � �� ��� � ��� ��� �� ����� �

�����.

4. �� ��� ����� ��� & �� ��� �� �� �� � �

Domino ��� ���� ��� ��� ��� ����� ������.

5. �� ��� ������.

6. Domino �� ���, �� ��� ���� LDAP ��� �� ������.

tell ldap quit

load ldap

Domino� SSL ��

218 IBM Tivoli Access Manager: �� �� ���

Page 239: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�� B. Tivoli Access Manager �� ��

� ��� �� �� ���� ����.

v �UNIX �� �� ���

v 222 ���� �Windows �� �� ���

UNIX �� �� �

� ���� �� �� ���� �� �� ��� �����. �� ���

� ��� �� � �� ��� �� ����. SSL� ����� �� �� ��

� �� ����. SSL(Secure Sockets Layer)� ���� ��, �� �� �� �

�� ����.

Policy Server� �� ��� �� Tivoli Access Manager ��� ��� ���

��.

Tivoli Access Manager Runtime

AIX, HP-UX, Linux �� Solaris ����� Tivoli Access Manager Runtime �

� �� ��� ����� ���� ����.

v ����� ��� - Tivoli Access Manager� � ��� ����� ���

��� �����. LDAP ������ ���� � � �����.

v LDAP �� ��� �� - LDAP ��� ��� ��� ��� �����. �

�, �� ����.

ldapserver.tivoli.com

v LDAP �� �� - LDAP ��� ���� � ��� �����. �� � �

�� 389���.

Tivoli Access Manager Policy Server� Tivoli Access Manager Runtime

� ���� ���� �� ��, �� ��� �� ���� ����.

v Policy Server ���� ��� �� - Policy Server� ��� ��� ��� �

����. � �, �� ����.

pdmgr.tivoli.com

v Policy Server�� ��� SSL �� �� - Policy Server� SSL �� ��

�� � ��� �����. �� � ��� 7135���.

© Copyright IBM Corp. 2001, 2003 219

Page 240: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Tivoli Access Manager Policy Server

AIX, HP-UX, zSeries� Linux �� Solaris ����� Policy Server �� �

� ��� ����� ���� ����.

v LDAP �� DN - LDAP ���� � ��� �����. �� ��� cn=root

���.

v LDAP �� �� - LDAP ��� ID� ��� �����.

v Access Manager Policy Server� LDAP �� �� SSL �� �� - SSL� �

� ���(� �� ���)� �����. �� ����, �� ��� ����.

– LDAP SSL ��� � �� �� - Policy Server�� ����� LDAP

� ������ � � ��� �� ��� �� ��� �����. Policy

Server� LDAP �� �� SSL ��� ���� � Tivoli Access Manager

Base CD� � �� �� �� � � � ����.

/common/pd_ldapkey.kdb

� � � ���� ���� ����. �� ��� ����� 193 ���� �

� A �SSL(Secure Sockets Layer) ���� �� � ������ � � �

�� ��� �� ��� ������.

– SSL ��� � ���(��) - ��� �� ����� ���� ���

�� LDAP � ������ � �� ���� �����. SSL �� � �

���� ��� ���� ��� ����� � � � ��� �� ����

����� ��� � ���� ����. ezinstall_ldap_server ��

� �� � � (pd_ldapkey.kdb)� ���� ��, ���� �� �� �

��. �� LDAP ���� ����� .kdb � �� � ��� ��� �

�� ����. �� SSL ����� � � ���� ��� �� ��,

Policy Server� �� � � ��� �� ����.

– LDAP SSL ��� � �� �� - ����� LDAP � ������ �

� ��� �����. �� ��� �� �� pd_ldapkey.kdb � � �

� ��� gsk4ikm���. � ���� ezinstall_ldap_server ��� �

��� IBM Directory Server� ���� ���� �� �����. gsk5ikm

����� ���� � ��� �� ��, �� ��� �� �� �

��.

– LDAP �� SSL �� �� - LDAP ��� SSL �� ���� � ��

� �����. �� � ��� 636���.

v GSO ������� LDAP DN - LDAP �� �� � �� ��(DIT)��

GSO(Global Sign-On) ������� ��� �� � ��� �����. �

�, �� ����.

o=ibm,c=tw

220 IBM Tivoli Access Manager: �� �� ���

Page 241: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

GSO ���� �� ��� ��� 21 ���� �LDAP �� �� ��� ��

����.

v Access Manager �� �� - sec_master �� ��� ID� ��� ����

�. ��� � ��� �� ����� ���� ����.

v Access Manager Policy Server� �� SSL �� � - Policy Server� SSL

�� ���� � ��� �����. �� � ��� 7135���.

v Policy Server SSL � ���� - SSL �� � � �� ��( )� ���

��. �� ��� 365 ���.

v � CA � ���� �� - SSL �� � � � � ����� ����

� �� ������. � �� ��� �� ��� ����, SSL �� � �

� �� �� �� �����.

/var/PolicyDirector/keytab/pdcacert.b64

� ��� ���� ��� ��, pdcacert.b64 � � �� ���� � Tivoli

Access Manager Runtime ���� �� ���.

Tivoli Access Manager Authorization Server

AIX, HP-UX, zSeries� Linux �� Solaris ����� Authorization Server ��

�� ��� ����� ���� ����.

v LDAP �� DN - LDAP ���� � ��� �����. �� ��� cn=root

���.

v LDAP �� ��� �� - LDAP ��� ID� ��� �����.

v Access Manager Policy Server� LDAP �� �� SSL �� �� - SSL� �

� ���(� �� ���)� �����. �� ����, �� ��� ����.

– LDAP SSL ��� � �� �� - Policy Server�� ����� LDAP

� ������ � � ��� �� �� �� ��� �����. Policy

Server� LDAP �� �� SSL ��� ���� � Tivoli Access Manager

Base CD� ����� �� �� � � � ����.

/common/pd_ldapkey.kdb

� � � ���� ���� ����. �� ��� ����� 193 ���� �

� A �SSL(Secure Sockets Layer) ���� �� � ������ � � �

�� ��� �� ��� ������.

– SSL ��� � ���(� �) - ��� �� ����� ���� ��

��� LDAP � ������ � �� ���� �����. SSL �� �

����� ��� ���� ��� ����� � � � ��� �� ���

� ����� �� � ���� ����. ezinstall_ldap_server �

� � �� � � (pd_ldapkey.kdb)� ���� ��, LDAP �� ��� �

�� B. Tivoli Access Manager �� �� 221

Page 242: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

��� PDLDAP� ���. �� LDAP ���� ����� .kdb � �

� � ��� ��� ��� ����.

�: SSL ����� � � ���� ��� �� ��, Policy Server� �

� � � ��� �� ����.

– LDAP SSL ��� � �� �� - ����� LDAP � ������ �

� ��� �����. �� ��� �� �� pd_ldapkey.kdb � � �

� ��� gsk4ikm���. � ���� ezinstall_ldap_server ��� �

��� IBM Directory Server� ���� ���� �� �����. gsk5ikm

����� ���� � ��� �� ��, �� ��� �� �� �

��.

– LDAP �� SSL �� �� - LDAP ��� SSL �� ���� � ��

� �����. �� � ��� 636���.

v Access Manager ��� �� �� - sec_master �� ��� ID� ��� �

����.

Windows �� �� �

� ���� �� �� ���� �� �� ��� �����. �� ���

� ��� �� � �� ��� �� ����. SSL� ����� �� �� ��

� �� ����.

Policy Server� �� ��� �� Tivoli Access Manager ��� ��� ���

��. GSKit, IBM Directory Client, ADK �� Web Portal Manager ����

�� �� �� ���� ��� ����.

Tivoli Access Manager Runtime

Tivoli Access Manager Runtime ���� �� �� ��� ����� �

��� ����.

v ����� ��� - Tivoli Access Manager� � ��� ����� ���

��� �����. ��� �� ����.

– LDAP �����(�LDAP ������ ��)

– Active Directory(224 ���� �Active Directory� ��)

– Domino(225 ���� �Lotus Domino� ��)

LDAP �����

Windows�� Tivoli Access Manager Runtime �� �� ��� ����� �

��� ����.

v LDAP �� ��� �� - LDAP ��� ��� ��� ��� �����. �

� �� ����.

222 IBM Tivoli Access Manager: �� �� ���

Page 243: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

ldapserver.tivoli.com

v LDAP �� �� - LDAP ��� ���� � ��� �����. �� � �

�� 389���.

v GSO ������� LDAP DN - LDAP �� �� � �� ��(DIT)��

GSO(Global Sign-On) ������� ��� �� � ��� �����. �

� �� ����.

o=ibm,c=tw

GSO ���� �� ��� ��� 21 ���� �LDAP �� �� ��� ��

����.

v Tivoli Access Manager� LDAP �� SSL �� - SSL� �� ���(� �

� ���)� �����. �� �� ��, �� �� ��� ����.

– LDAP SSL ��� � �� - ����� ����� ����� LDAP �

������ � � ��� �� ��� �� ��� �����.

LDAP ��� Tivoli Access Manager ������ ���� IBM Directory

Client �� SSL ��� ����� ��, C:\keytabs\pd_ldapkey.kdb �

� LDAP ��� ���� ����� ���� �� �� ��� ��

���.

– SSL ��� � ���(� �) - ��� �� ����� ���� ��

��� LDAP � ������ � �� ���� �����. SSL �� �

����� ��� ���� ��� ����� � � � ��� �� ���

� ����� �� � ���� ����. ezinstall_ldap_server �

� � �� � � (pd_ldapkey.kdb)� ���� ��, LDAP �� ��� �

��� PDLDAP� ���. �� LDAP ���� ����� .kdb � �

� � ��� ��� ��� ����.

�: ��, SSL ����� � � ���� ��� �� ��, ���� ��

� � ��� �� ����.

– SSL � �� �� - ����� LDAP � ������ � � ��� ���

��. �� ��� �� �� pd_ldapkey.kdb � � �� ��� gsk4ikm

���. � ���� ezinstall_ldap_server ��� ���� IBM

Directory Server� ���� ���� �� �����. gsk5ikm ����� �

��� � ��� �� ��, �� ��� �� �� ���.

– LDAP �� SSL �� - LDAP ��� SSL �� ���� � ��� �

����. �� � ��� 636���.

v �� � - Tivoli Access Manager� �� �� �� �����.

Tivoli Access Manager Policy Server� Tivoli Access Manager Runtime

� ���� ���� �� ��, �� ��� �� ���� ����.

�� B. Tivoli Access Manager �� �� 223

Page 244: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v Policy Server ��� �� - Policy Server� ��� ��� ��� �����.

� �, �� ����.

pdmgr.tivoli.com

v SSL �� �� - Policy Server� SSL �� ���� � ��� �����.

�� � ��� 7135���.

v Tivoli Access Manager CA � �� �� - Tivoli Access Manager Policy

Server �� CA �� � � � ������� ��� �� � ��� �

�� ����. Tivoli Access Manager Runtime� �� � ��� ����

�.

CA �� � � � ����� ����� �� �� ��, Policy Server

����� SSL �� � � �� ���. �� ����� � �� ���

�( : ftp)� ���� � � ��� � ��� ������. Policy Server

�� �� � � �� ��� ����.

/var/PolicyDirector/keytab/pdcacert.b64

Runtime Environment� ��� � ���� �� � � � �� ���.

Active Directory Active Directory� ������ � ��, �� ��� ����� ����

����.

v �� ��� - � ���� ����� �� ��, ���� �����

���� ����.

– � ���� ���� � �� � ��, �� �� ��� �� ��

�� ����.

- ��� � �� - Kerberos �� �� AD ��� �� �� �� ��

� ������ �� ��� �����. �� �� ����

����. Kerberos� ����� �� ����.

– � ��� ��� � ���� � ��, �� �� ��� �� ��

�� ����.

- ��� �� - Active Directory ��� ��� �� ��� �����.

� �, �� ����.

adserver.tivoli.com

- ��� �� - ��� ��� �����. � �, �� ����.

dc=adpd,dc=com

- ��� � �� - Kerberos �� �� AD ��� �� �� �� ��

� ������ �� ��� �����. �� �� ����

����. Kerberos� ����� �� ����.

224 IBM Tivoli Access Manager: �� �� ���

Page 245: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v Active Directory �� �� - 46 ���� �Active Directory ��� �����

��� �� ID � ��� ���� �� �����.

�:

– � ��� ��� � ���� ��� ��, Active Directory ��� ��

�� ����. Tivoli Access Manager ���� �� ��� � ��

� ������. � �, �� ����.

dc=wsm,dc=com

– Active Directory� ������ ���� ��, activedir.conf � � ��

�� �� �����.

%PD_INSTALL_DIR%\etc

���, PD_INSTALL_DIR� Tivoli Access Manager� ��� �� ���

�. C:\Program Files\Tivoli\Policy Director� �� �� ����.

Lotus Domino Domino� ������ � ��, �� ��� ����� ���� ����.

v ��� Domino �� �� - Domino ��� ��� ��� �����. � �

�� ����.

Domino/tivoli

v Domino �� TCP/IP ��� �� - Domino ��� TCP/IP ��� ��� ��

���. � �, �� ����.

domino.tivoli.com

v Domino LDAP �� �� - Domino ��� ���� LDAP �� �� ���

��. SSL� ����� ��, � ��� 636���. �SSL ��� ��, ��

� ��� 389���.

v Domino ��� � SSL �� �� - � �� ���� �� Domino ��

� SSL ����� ��� ����� ������. �� �� ����

����. Domino �� ����� ���� ��� ��, �� ��

��. SSL ��� ��� �� ��� ��� 193 ���� �� A �SSL(Secure

Sockets Layer) ���� ������.

�� ��� ��, �� ��� �� ���� ����.

– �� �� - SSL � ��� �����. �� � ��� 636���.

– �� �� �� � �� - SSL� ����� �� � ��� ����� �

� � �����. Domino �� � � � �� ���� ���, LDAP

����� � ������ � � ��� �����. � �, �� �

���.

d:\cert\dominoc.kdb

�� B. Tivoli Access Manager �� �� 225

Page 246: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

– � ��� - SSL ����� �� ���� �����. � ���� ���

�� ���. �� ������ ��� ��� �� �� �� ���

���� ��� ��� ����.

– � �� �� - � � ��� ��� �����.

v Notes ��� �� - Domino ������� ����� �� Notes ���

�� ��� �����.

v Tivoli Access Manager ����� ������ �� - Tivoli Access Manager

���� ��� ������ ��� �����. � �, �� ����.

PDdata.nsf

Tivoli Access Manager Policy Server

Windows�� Policy Server ��� �� �� ��� ����� ����

����.

v LDAP �� ID(DN) - LDAP ���� � ��� �����. �� ���

cn=root���.

v LDAP �� �� - LDAP ��� ID� ��� �����.

v Security Master �� - sec_master �� ��� ID� ��� �����.

v Policy Server� �� SSL �� �� - Policy Server� SSL �� ����

� ��� �����. �� � ��� 7135���.

v Policy Server � ���� - SSL �� � � �� ��� �����. ��

��� 365 ���.

v � ���� �� - SSL �� � � � � ����� ����� �� �

�����. � �� ��� �� ��� ����, SSL �� � � � �� �

� �� �����.

install_dir/keytab/pdcacert.b64

� ��� ���� ��� ��, pdcacert.b64 � � � Tivoli Access Manager

Runtime ���� �� ���.

Tivoli Access Manager Authorization Server

Windows�� Authorization Server ��� �� �� ��� ����� ��

�� ����.

v LDAP �� ID(DN) - LDAP ���� � ��� �����. �� ���

cn=root���.

v LDAP �� �� - LDAP ��� ID� ��� �����.

v Security Master �� - sec_master �� ��� ID� ��� �����.

226 IBM Tivoli Access Manager: �� �� ���

Page 247: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�� ��

�� � ��� �� ����.

v LDAP �� �SSL �: 389

v LDAP �� SSL �: 636

v Policy Server SSL �: 7135

v WebSphere Application Server SSL �: 443

�� B. Tivoli Access Manager �� �� 227

Page 248: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

228 IBM Tivoli Access Manager: �� �� ���

Page 249: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�� C. OS/390 � z/OS LDAP �� ��

� ���� �� �� ��� ��� ����.

v ��� LDAP ���

v 230 ���� �SPUFI� �� DB2 ������ � ��� � ���

v 236 ���� �SPUFI� �� DB2 �� ���

v 239 ���� ��� CLI ��� �� ���

v 240 ���� ��� CLI ��� � �

35 ���� �z/OS � OS/390 �� �� ����� ��� �� �� ����

� ��� ������.

�� LDAP ��

######################################################################## ## The values provided in this configuration file may reflect the ## generic values given in the example DB2 setup files. Make sure you ## use values appropriate for a production installation. ######################################################################## ######################################################################## ##Global definitions ######################################################################## adminDN "cn=root" adminPW password1 ######################################################################## ## port & securePort directives deprecated, now using listen ######################################################################## listen ldap://:389 listen ldaps://:636 ######################################################################## ## tdbm database definitions ######################################################################## database tdbm GLDBTDBM servername LOC1 dbuserid LDAPSRV databaseName LDAPR10 dsnaoini SUADMIN.DSNAOINI.DB2INI suffix "o=ibm,c=us" suffix "secAuthority=Default" AttrOverflowSize 80 ######################################################################## ## Native (SAF) Authentication for TDBM ######################################################################## useNativeAuth SELECTED nativeAuthSubtree "o=ibm,c=us" nativeUpdateAllowed YES ######################################################################## ##SSL definitions

© Copyright IBM Corp. 2001, 2003 229

Page 250: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

######################################################################## sslAuth serverAuth sslKeyRingFile "/usr/lpp/ldap/etc/ldapserver.kdb" sslKeyRingPWStashFile "usr/lpp/ldap/etc/ldapserver.sth" sslCertificate ldapcert sslCipherSpecs 15104 ######################################################################## ##Replica definitions ######################################################################## masterServer "ldap://jeff.endicott.ibm.com:3389" masterServerDN cn=master masterServerPW password1

SPUFI� �� DB2 ������ � ��� �� ����

--*********************************************************************/ --* This file contains sample code. IBM PROVIDES THIS CODE ON AN */ --* ’AS IS’ BASIS WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS */ --* OR IMPLIED, INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES */ --* OF MERCHANT ABILITY OR FITNESS FOR A PARTICULAR PURPOSE. */ --*********************************************************************/ -- Use the following statements to create your LDAP Server DB2 database -- and tablespaces in SPUFI. The database and tablespace names you -- create will be used to update the database section of the LDAP -- Server configuration file. You also need to make DB2 decisions, -- in terms of buffer pool size selection for tablespaces and column -- size selection, all of which will be directly related to the data that -- will be stored in the database. See the instructions below for -- more information. -- -- ************************* -- Database Name Information -- ************************* -- Change LDAPR10 to the name of the LDAP database name you want to create. -- Be sure this name is updated to match what is defined for databasename in -- the server configuration file. -- -- ************************** -- DataBase Owner Information -- ************************** -- Change the LDAPSRV to the MVS database owner id. This ID will be the -- highlevel qualifier for the tables -- -- ********************** -- Tablespace Information -- ********************** -- -- ********************************************************************* -- NOTE: Refer to the DB2 manuals for a complete listing of valid buffer -- pool names. -- ********************************************************************* -- -- Change the ENTRYTS to the LDAP entry tablespace name you want to create. -- -- Change the BP0 to the buffer pool name for the LDAP entry tablespace. -- The size of the buffer pool can be determined with the formula: -- -- result = 62 bytes + <dn column trunc size (from below)> +

OS/390 � z/OS LDAP �� ��

230 IBM Tivoli Access Manager: �� �� ���

Page 251: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

-- <maximum full size of a DN (from below)> + -- <size of entry data (which includes creator’s DN and modifiers DN)> -- -- There is also a concept of a "spill over" table, where if the entry -- data does not fit into the row size, it will be broken up in order -- to fit into a row. Entry data may be spread across multiple rows -- if needed. So in the above formula, the <size of entry data> -- does not need to be the maximum size of the data, maybe the median -- size of the data would be a better choice. See the long entry -- tablespace description below. -- -- The default suggested size is 4K. -- -- Change the LENTRYTS to the LDAP long entry tablespace name you want to -- create. -- -- Change the BP0 to the buffer pool name for the LDAP long entry -- tablespace. The long entry table space will hold "spill over" rows -- for entry data that does not fit into the entry table tablespace. -- To minimize the number of spill over rows, choose a large buffer -- pool size. -- -- The default suggested size is 4K. -- -- Change the LATTRTS to the LDAP long attribute tablespace name you want to -- create. -- -- Change the BP0 to the buffer pool name for the LDAP long attribute -- tablespace. The long attribute table space will hold "spill over" rows -- for attribute data that does not fit into the entry table tablespace. -- To minimize the number of spill over rows, choose a large buffer -- pool size. -- -- The default suggested size is 4K. -- -- Change the MISCTS to the LDAP miscellaneous tablespace name you want to -- create. -- -- Change the DESCTS to the LDAP descendants tablespace name you want to -- create. -- -- Change the SEARCHTS to the LDAP search tablespace name you want to create. -- -- Change the BP0 to the buffer pool name for the LDAP search tablespace. -- The size of the buffer pool can be determined with the simple formula: -- -- result = 16 bytes + <search column trunc size (from below)> + -- <maximum size of attribute value you would like to search for> -- -- The result value is the maximum number of bytes a row in the search -- table containing an attribute value will occupy. Choose a buffer pool -- size which will accommodate this size. -- -- The default suggested size is 4K. -- -- Change the REPTS to the LDAP replica tablespace name you want to create. -- -- ********************************* -- Column Size Selection Information -- ********************************* -- All searchable attributes of a given entry will be stored in two forms. -- The first will be a truncated version, which will be used as part of

OS/390 � z/OS LDAP �� ��

�� C. OS/390 � z/OS LDAP �� �� 231

Page 252: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

-- a DB2 index. The second version will be the entire attribute value, -- potentially truncated by the buffer pool size you choose. The reason -- two versions are stored is so that LDAP/DB2 can use indexes to increase -- search performance. The reason we do not index the entire searchable -- attribute value is because the cost (in terms of DASD) associated with -- having indexes on a large column where there is a large amount of data. -- -- The choice of the search column trunc size should take into account system -- limits you may have (as described in the above), and should account -- for the typical size of the attribute values that are stored in -- LDAP. For example, if most of your data is only 20 bytes long, -- choosing 20 for this trunc size would be wise. -- -- Change 32 to the search column trunc size you determine best fits your -- attribute data. -- -- The default suggested size is 32. -- -- Another search performance enhancement is related to the DN attribute. -- The DN attribute value is stored separately from the entry data to allow -- a fast path lookup. It is also stored in two versions as well. The -- reasons are similar to those mentioned above for the attribute column. -- Since the DN data is stored in it’s own column, you need to define the -- maximum DN attribute value size here. You also need to choose a dn -- column trunc size that best fits your data. -- -- Change 32 to the dn trunc size you determine best fits your dn data. -- -- The default suggested size is 32. -- -- Change 512 to the maximum size of a DN. This value includes the null -- terminator, so the actual maximum length of a DN will be one less than -- this value. -- -- The default suggested size is 512. -- -- -- ************************* -- Storage Group Information -- ************************* -- Change the SYSDEFLT to the storage group you want to contain the -- LDAP DB2 tablespaces. Use SYSDEFLT to choose the default storage group. -- NOTE: The values provided below for PRIQTY and SECQTY probably need to be -- modified depending on the projected size of the Directory information to -- be stored. -- -- *************************************************************************** -- Use the following statements if you need to delete your LDAP Server DB2 -- database and tablespaces in SPUFI. You need to remove the ’--’ -- from each line before you can run these statements. -- Change the ENTRYTS to the LDAP entry tablespace name you want to delete. -- Change the LENTRYTS to the LDAP long entry tablespace name you want to -- delete. -- Change the LATTRTS to the LDAP long attr tablespace name you want to -- delete. -- Change the MISCTS to the LDAP miscellaneous tablespace name you want to -- delete. -- Change the SEARCHTS to the LDAP search tablespace name you want to delete. -- Change the REPTS to the LDAP replica tablespace name you want to delete. -- Change the DESCTS to the LDAP descendants tablespace name you want to -- delete.

OS/390 � z/OS LDAP �� ��

232 IBM Tivoli Access Manager: �� �� ���

Page 253: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

-- Change the LDAPR10 to the LDAP database name you want to delete. -- *************************************************************************** --DROP TABLESPACE LDAPR10.ENTRYTS; --DROP TABLESPACE LDAPR10.LENTRYTS; --DROP TABLESPACE LDAPR10.LATTRTS; --DROP TABLESPACE LDAPR10.MISCTS; --DROP TABLESPACE LDAPR10.SEARCHTS; --DROP TABLESPACE LDAPR10.REPTS; --DROP TABLESPACE LDAPR10.DESCTS; --DROP DATABASE LDAPR10; --COMMIT; -- ************************ -- Create the LDAP database -- ************************ CREATE DATABASE LDAPR10 STOGROUP SYSDEFLT; -- ******************************** -- Create the LDAP entry tablespace -- ******************************** CREATE TABLESPACE ENTRYTS IN LDAPR10 USING STOGROUP SYSDEFLT BUFFERPOOL BP0; -- ************************************* -- Create the LDAP long entry tablespace -- ************************************* CREATE TABLESPACE LENTRYTS IN LDAPR10 USING STOGROUP SYSDEFLT BUFFERPOOL BP0; -- ************************************ -- Create the LDAP long attr tablespace -- ************************************ CREATE TABLESPACE LATTRTS IN LDAPR10 USING STOGROUP SYSDEFLT BUFFERPOOL BP0; -- ***************************** -- Create the LDAP 4K tablespace -- ***************************** CREATE TABLESPACE MISCTS IN LDAPR10 SEGSIZE 4 USING STOGROUP SYSDEFLT BUFFERPOOL BP0; -- ********************************* -- Create the LDAP search tablespace -- ********************************* CREATE TABLESPACE SEARCHTS IN LDAPR10 USING STOGROUP SYSDEFLT BUFFERPOOL BP0; -- ********************************* -- Create the LDAP replica tablespace -- ********************************* CREATE TABLESPACE REPTS IN LDAPR10 USING STOGROUP SYSDEFLT BUFFERPOOL BP0; -- *****************************

OS/390 � z/OS LDAP �� ��

�� C. OS/390 � z/OS LDAP �� �� 233

Page 254: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

-- Create the LDAP descendants tablespace -- ***************************** CREATE TABLESPACE DESCTS IN LDAPR10 USING STOGROUP SYSDEFLT BUFFERPOOL BP0; -- ********************* -- Create the DB2 tables -- ********************* -- ************************** -- Create the DIR_ENTRY table -- ************************** CREATE TABLE LDAPSRV.DIR_ENTRY ( EID DECIMAL(15 , 0) NOT NULL, PEID DECIMAL(15 , 0), ENTRY_SIZE INTEGER, LEVEL INTEGER, ACLSRC DECIMAL(15 , 0), ACLPROP CHAR(1), OWNSRC DECIMAL(15 , 0), OWNPROP CHAR(1), CREATE_TIMESTAMP TIMESTAMP, MODIFY_TIMESTAMP TIMESTAMP, DN_TRUNC CHAR(32) FOR BIT DATA, DN VARCHAR(512) FOR BIT DATA, ENTRYDATA LONG VARCHAR FOR BIT DATA, PRIMARY KEY( EID ) ) IN LDAPR10.ENTRYTS; -- ****************************** -- Create the DIR_LONGENTRY table -- ****************************** CREATE TABLE LDAPSRV.DIR_LONGENTRY ( EID DECIMAL(15 , 0) NOT NULL, SEQ INTEGER NOT NULL, ENTRYDATA LONG VARCHAR FOR BIT DATA, PRIMARY KEY( EID, SEQ ) ) IN LDAPR10.LENTRYTS; -- ***************************** -- Create the DIR_LONGATTR table -- ***************************** CREATE TABLE LDAPSRV.DIR_LONGATTR ( EID DECIMAL(15 , 0) NOT NULL, ATTR_ID INTEGER NOT NULL, VALUENUM INTEGER NOT NULL, SEQ INTEGER NOT NULL, ATTRDATA LONG VARCHAR FOR BIT DATA, PRIMARY KEY( EID, ATTR_ID, VALUENUM, SEQ ) ) IN LDAPR10.LATTRTS; -- ***************************** -- Create the DIR_MISC table -- ***************************** CREATE TABLE LDAPSRV.DIR_MISC ( NEXT_EID DECIMAL(15 , 0), NEXT_ATTR_ID INTEGER, DB_VERSION CHAR(10), DB_CREATE_VERSION CHAR(10) ) IN LDAPR10.MISCTS;

OS/390 � z/OS LDAP �� ��

234 IBM Tivoli Access Manager: �� �� ���

Page 255: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

-- ************************** -- Create the DIR_CACHE table -- ************************** CREATE TABLE LDAPSRV.DIR_CACHE ( CACHE_NAME CHAR(25) NOT NULL, MODIFY_TIMESTAMP TIMESTAMP NOT NULL, PRIMARY KEY( CACHE_NAME, MODIFY_TIMESTAMP ) ) IN LDAPR10.MISCTS; -- *************************** -- Create the DIR_ATTRID table -- *************************** CREATE TABLE LDAPSRV.DIR_ATTRID ( ATTR_ID INTEGER, ATTR_NOID VARCHAR(200) NOT NULL, PRIMARY KEY( ATTR_NOID ) ) IN LDAPR10.MISCTS; -- ************************* -- Create the DIR_DESC table -- ************************* CREATE TABLE LDAPSRV.DIR_DESC ( DEID DECIMAL(15 , 0) NOT NULL, AEID DECIMAL(15 , 0) NOT NULL, PRIMARY KEY( DEID, AEID ) ) IN LDAPR10.DESCTS; -- *************************** -- Create the DIR_SEARCH table -- *************************** CREATE TABLE LDAPSRV.DIR_SEARCH ( EID DECIMAL(15 , 0) NOT NULL, ATTR_ID INTEGER NOT NULL, VALUE CHAR(32) FOR BIT DATA, LVALUE LONG VARCHAR FOR BIT DATA ) IN LDAPR10.SEARCHTS; -- ***************************** -- Create the DIR_REGISTER table -- ***************************** CREATE TABLE LDAPSRV.DIR_REGISTER ( ID INTEGER NOT NULL, SRV VARCHAR(125) NOT NULL, PRIMARY KEY( ID, SRV ) ) IN LDAPR10.MISCTS; -- ***************************** -- Create the DIR_PROGRESS table -- ***************************** CREATE TABLE LDAPSRV.DIR_PROGRESS ( ID INTEGER NOT NULL, PRG VARCHAR(125) NOT NULL, SRV VARCHAR(125) NOT NULL, PRIMARY KEY( ID, PRG, SRV ) ) IN LDAPR10.MISCTS; -- *************************** -- Create the DIR_CHANGE table -- *************************** CREATE TABLE LDAPSRV.DIR_CHANGE ( ID INTEGER NOT NULL, TYPE INTEGER NOT NULL,

OS/390 � z/OS LDAP �� ��

�� C. OS/390 � z/OS LDAP �� �� 235

Page 256: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

LONGENTRY_SIZE INTEGER, DIN VARCHAR(512) NOT NULL, LDIF LONG VARCHAR NOT NULL, PRIMARY KEY( ID ) ) IN LDAPR10.REPTS; -- ******************************* -- Create the DIR_LONGCHANGE table -- ******************************* CREATE TABLE LDAPSRV.DIR_LONGCHANGE ( ID INTEGER NOT NULL, SEQ INTEGER NOT NULL, LDIF LONG VARCHAR, PRIMARY KEY( ID, SEQ ) ) IN LDAPR10.REPTS; -- *********************************** -- Commit all the above SQL statements -- *********************************** COMMIT;

SPUFI� �� DB2 �� ����

--*********************************************************************/ --* This file contains sample code. IBM PROVIDES THIS CODE ON AN */ --* ’AS IS’ BASIS WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS */ --* OR IMPLIED, INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES */ --* OF MERCHANT ABILITY OR FITNESS FOR A PARTICULAR PURPOSE. */ --*********************************************************************/ -- -- Use the following statements to create your LDAP Server DB2 -- indexes in SPUFI. See the instructions below for more information. -- -- ************************** -- DataBase Owner Information -- ************************** -- Change the LDAPSRV to the MVS database owner id. This ID will be the -- highlevel qualifier for the tables. This value should correspond -- with the value chosen in the LDAP Server DB2 database and tablespace -- SPUFI script. -- -- ************************* -- Storage Group Information -- ************************* -- Change the SYSDEFLT to the storage group you want to contain the -- LDAP DB2 indexes. Use SYSDEFLT to choose the default storage group. -- NOTE: The values provided below for PRIQTY and SECQTY probably need -- to be modified depending on the projected size of the Directory -- information to be stored. -- -- ************************* -- Miscellaneous Information -- ************************* -- All indexes have been defined DEFER YES, which means they need to be -- recovered at some point. It is suggested to do the recovery after -- the database has been populated for databases with large amounts of -- data. Use of this option is strictly optional though.

OS/390 � z/OS LDAP �� ��

236 IBM Tivoli Access Manager: �� �� ���

Page 257: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

-- -- To NOT use the DEFER YES option, simply remove DEFER YES globally. -- -- **************************** -- Create the DIR_ENTRY indexes -- **************************** CREATE UNIQUE INDEX LDAPSRV.DIR_ENTRYX0 ON LDAPSRV.DIR_ENTRY( EID ) USING STOGROUP SYSDEFLT DEFER YES; CREATE INDEX LDAPSRV.DIR_ENTRYX1 ON LDAPSRV.DIR_ENTRY( PEID, EID ) USING STOGROUP SYSDEFLT DEFER YES; CREATE INDEX LDAPSRV.DIR_ENTRYX2 ON LDAPSRV.DIR_ENTRY( EID, DN_TRUNC ) USING STOGROUP SYSDEFLT DEFER YES; CREATE INDEX LDAPSRV.DIR_ENTRYX3 ON LDAPSRV.DIR_ENTRY( DN_TRUNC, EID ) USING STOGROUP SYSDEFLT DEFER YES; -- ******************************** -- Create the DIR_LONGENTRY indexes -- ******************************** CREATE UNIQUE INDEX LDAPSRV.DIR_LONGENTRYX1 ON LDAPSRV.DIR_LONGENTRY( EID, SEQ ) USING STOGROUP SYSDEFLT DEFER YES; -- ******************************* -- Create the DIR_LONGATTR indexes -- ******************************* CREATE UNIQUE INDEX LDAPSRV.DIR_LONGATTRX1 ON LDAPSRV.DIR_LONGATTR( EID, ATTR_ID, VALUENUM, SEQ ) USING STOGROUP SYSDEFLT DEFER YES; -- **************************** -- Create the DIR_CACHE indexes -- **************************** CREATE UNIQUE INDEX LDAPSRV.DIR_CACHEX1 ON LDAPSRV.DIR_CACHE( CACHE_NAME, MODIFY_TIMESTAMP ) USING STOGROUP SYSDEFLT DEFER YES; -- ***************************** -- Create the DIR_ATTRID indexes -- ***************************** CREATE UNIQUE INDEX LDAPSRV.DIR_ATTRIDX1 ON LDAPSRV.DIR_ATTRID( ATTR_NOID ) USING STOGROUP SYSDEFLT DEFER YES; -- *************************** -- Create the DIR_DESC indexes -- *************************** CREATE UNIQUE INDEX LDAPSRV.DIR_DESCX1 ON LDAPSRV.DIR_DESC( DEID, AEID )

OS/390 � z/OS LDAP �� ��

�� C. OS/390 � z/OS LDAP �� �� 237

Page 258: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

USING STOGROUP SYSDEFLT DEFER YES; -- ***************************** -- Create the DIR_SEARCH indexes -- ***************************** CREATE INDEX LDAPSRV.DIR_SEARCHX1 ON LDAPSRV.DIR_SEARCH( ATTR_ID, VALUE, EID ) USING STOGROUP SYSDEFLT DEFER YES; CREATE INDEX LDAPSRV.DIR_SEARCHX2 ON LDAPSRV.DIR_SEARCH( EID, ATTR_ID ) USING STOGROUP SYSDEFLT CLUSTER DEFER YES; -- ******************************* -- Create the DIR_REGISTER indexes -- ******************************* CREATE UNIQUE INDEX LDAPSRV.DIR_REGISTERX1 ON LDAPSRV.DIR_REGISTER( ID, SRV ) USING STOGROUP SYSDEFLT DEFER YES; -- ******************************* -- Create the DIR_PROGRESS indexes -- ******************************* CREATE UNIQUE INDEX LDAPSRV.DIR_PROGRESSX1 ON LDAPSRV.DIR_PROGRESS( ID, PRG, SRV ) USING STOGROUP SYSDEFLT DEFER YES; -- ***************************** -- Create the DIR_CHANGE indexes -- ***************************** CREATE UNIQUE INDEX LDAPSRV.DIR_CHANGEX1 ON LDAPSRV.DIR_CHANGE( ID ) USING STOGROUP SYSDEFLT DEFER YES; -- ********************************* -- Create the DIR_LONGCHANGE indexes -- ********************************* CREATE UNIQUE INDEX LDAPSRV.DIR_LONGCHANGEX1 ON LDAPSRV.DIR_LONGCHANGE( ID, SEQ ) USING STOGROUP SYSDEFLT DEFER YES; -- *********************************** -- Commit all the above SQL statements -- *********************************** COMMIT;

OS/390 � z/OS LDAP �� ��

238 IBM Tivoli Access Manager: �� �� ���

Page 259: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�� CLI ��� �� ��

//DSNTIJCL JOB (DB2), // ’PGMRNAME’, // CLASS=A,MSGCLASS=H,MSGLEVEL=(1,1), // REGION=4M //* //*********************************************************************/ //* This file contains sample code. IBM PROVIDES THIS CODE ON AN */ //* ’AS IS’ BASIS WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS */ //* OR IMPLIED, INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES */ //* OF MERCHANT ABILITY OR FITNESS FOR A PARTICULAR PURPOSE. */ //*********************************************************************/ //*********************************************************************/ //* JOB NAME = DSNTIJCL */ //* DESCRIPTIVE NAME = INSTALLATION JOB STREAM */ //* LICENSED MATERIALS - PROPERTY OF IBM */ //* 5655-DB2 */ //* (C) COPYRIGHT 1982, 1997 IBM CORP. ALL RIGHTS RESERVED. */ //* STATUS = VERSION 5 */ //* FUNCTION = SAMPLE CLI BIND */ //* PSEUDOCODE = BINDCLI STEP BIND CLI DEFAULT PACKAGES AND PLAN */ //* DEPENDENCIES = CLI MUST BE INSTALLED */ //* MEMBER DSNCLIQR CAN ONLY BE BOUND SUCCESSFULLY TO DRDA SERVERS */ //* THAT SUPPORT QUERY RESULT SET SQL (I.E. DESCRIBE PROCEDURE). */ //* CURRENTLY THAT IS DB2 FOR OS/390 V5. */ //* */ //* NOTES = */ //* BEFORE RUNNING THIS JOB: */ //* - CHANGE ALL OCCURRENCES OF DSN5 TO THE PREFIX OF YOUR DB2 V5.1 */ //* SDSNLOAD AND SDSNDBRM DATA SETS */ //* - CHANGE THE SYSTEM(DSN5) STATEMENT TO MATCH YOUR DB2 V5.1 SSID */ //* */ //* CLI CAN BE BOUND TO REMOTE SERVERS BY INCLUDING THE LOCATION NAME.*/ //* */ //* FOR REMOTE SERVERS OTHER THAN DB2 FOR OS/390, ALSO ADD THE */ //* APPROPRIATE BIND PACKAGE MEMBER STATEMENTS, LISTED BELOW, */ //* BASED ON THE SERVER TYPE: */ //* BIND PACKAGE (<COMMON SERVER V1 LOCATION NAME>.DSNAOCLI) - */ //* MEMBER(DSNCLIV1) */ //* BIND PACKAGE (<COMMON SERVER V2 LOCATION NAME>.DSNAOCLI) - */ //* MEMBER(DSNCLIV2) */ //* BIND PACKAGE (<AS400 LOCATION NAME>.DSNAOCLI) - */ //* MEMBER(DSNCLIAS) */ //* BIND PACKAGE (<SQLDS LOCATION NAME>.DSNAOCLI) - */ //* MEMBER(DSNCLIVM) */ //* ALSO INCLUDE ANY ADDED PACKAGE NAMES TO THE PKLIST KEYWORD OF */ //* BIND PLAN STATEMENT FOLLOWING THE BIND PACKAGE STATEMENTS. */ //* */ //*********************************************************************/ //JOBLIB DD DISP=SHR, // DSN=DB2710.SDSNLOAD //BINDCLI EXEC PGM=IKJEFT01,DYNAMNBR=20 //DBRMLIB DD DISP=SHR, // DSN=DB2710.SDSNDBRM //SYSTSPRT DD SYSOUT=* //SYSPRINT DD SYSOUT=*

OS/390 � z/OS LDAP �� ��

�� C. OS/390 � z/OS LDAP �� �� 239

Page 260: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

//SYSUDUMP DD SYSOUT=* //SYSTSIN DD * DSN SYSTEM(DSN5) BIND PACKAGE (DSNAOCLI) MEMBER(DSNCLICS) ISOLATION(CS) BIND PACKAGE (DSNAOCLI) MEMBER(DSNCLINC) ISOLATION(NC) BIND PACKAGE (DSNAOCLI) MEMBER(DSNCLIRR) ISOLATION(RR) BIND PACKAGE (DSNAOCLI) MEMBER(DSNCLIRS) ISOLATION(RS) BIND PACKAGE (DSNAOCLI) MEMBER(DSNCLIUR) ISOLATION(UR) BIND PACKAGE (DSNAOCLI) MEMBER(DSNCLIC1) BIND PACKAGE (DSNAOCLI) MEMBER(DSNCLIC2) BIND PACKAGE (DSNAOCLI) MEMBER(DSNCLIF4) BIND PACKAGE (DSNAOCLI) MEMBER(DSNCLIMS) BIND PACKAGE (DSNAOCLI) MEMBER(DSNCLIQR) BIND PLAN(DSNACLI) - PKLIST(DSNAOCLI.DSNCLICS - DSNAOCLI.DSNCLINC - DSNAOCLI.DSNCLIRR - DSNAOCLI.DSNCLIRS - DSNAOCLI.DSNCLIUR - DSNAOCLI.DSNCLIC1 - DSNAOCLI.DSNCLIC2 - DSNAOCLI.DSNCLIF4 - DSNAOCLI.DSNCLIMS - DSNAOCLI.DSNCLIQR ) END /*

�� CLI ��� ��

; This is a comment line... ;/*********************************************************************/ ;/* This file contains sample code. IBM PROVIDES THIS CODE ON AN */ ;/* ’AS IS’ BASIS WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS */ ;/* OR IMPLIED, INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES */ ;/* OF MERCHANT ABILITY OR FITNESS FOR A PARTICULAR PURPOSE. */ ;/*********************************************************************/ ; Example COMMON stanza ; ; The MVSDEFAULTSSID option indicates what DB2 ; subsystem should be used for interacting with ; DB2 tables. This value is installation dependent. ; It is assumed to be DSN5 for this example. [COMMON] MVSDEFAULTSSID=DSN5 ; Example SUBSYSTEM stanza for DSN5 subsystem ; ; NOTE: the PLANNAME option below must match the ; plan name that was specified when running the ; DSNTIJCL batch job to create the plan. It is ; assumed to be DSNACLI for this example. [DSN5] ;MVSATTACHTYPE=CAF MVSATTACHTYPE=RRSAF

OS/390 � z/OS LDAP �� ��

240 IBM Tivoli Access Manager: �� �� ���

Page 261: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

PLANNAME=DSNACLI ; Example DATA SOURCE stanza ; ; The DATA SOURCE name is installation dependent. ; It is assumed to be LOC1 for this example. [LOC1] AUTOCOMMIT=0 CONNECTTYPE=1

OS/390 � z/OS LDAP �� ��

�� C. OS/390 � z/OS LDAP �� �� 241

Page 262: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

OS/390 � z/OS LDAP �� ��

242 IBM Tivoli Access Manager: �� �� ���

Page 263: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�� D. �� ��

� ��(CC) � ���� IT ��� ���� ��� � ���� ��

ISO �(ISO 15408)� � ��� �� ��� ������. IBM Tivoli Access

Manager �� 4.1(��� 5 �)� CC �� � EAL3+� ���� �� ��

� ��� ����. �� ���� �� ��� ��� � ������ CC

� ������ ���.

�: CC ��� ���� �� �� � ���� ���� � ��� �� ����

� IBM Tivoli Access Manager �� 4.1, ��� 5� readme � �� ��

� ����.

� ��� ���� �� ��� � �� ������. � ��� ���� �

�� �� ���� ���. �� �� � ��� ��� ������ �����

����. � ��� ��� ��� ��� ��� ����� ���� �� ��

���.

� ����� CC �� ���� ���� �� ���� ����� � �

����. CC � ���� IBM Tivoli Access Manager �� 4.1� ��� Tivoli

Access Manager ���� �� ����.

Policy Server(pdmgrd)

�� ���� ���� �� ���.

v Tivoli Access Manager Runtime

v Tivoli Access Manager Policy Server

v IBM Directory Client

v IBM Global Security Kit(GSKit)

WebSEAL Server(webseald)

�� ���� ���� �� ���.

v Tivoli Access Manager Runtime

v Tivoli Access Manager WebSEAL server

v IBM Directory client

v IBM Global Security Kit(GSKit)

�� ���� � ��� � � ��� CC �� ����� ���� �� �

�����.

© Copyright IBM Corp. 2001, 2003 243

Page 264: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Tivoli Access Manager� �� policy Tivoli Access Manager� CC ��� �� ��� ���� ������ � ��

�� �� policy� � ��.

�� �� policy

�� ��� ���� ���� ���� ��� �� ��� ���� ���� �

���. ��, Tivoli Access Manager �� �� �� �� � ����

��� ��� ��� �� ��� ������ ���� �� ���.

��� �� policy�� ��� ����� CC� ���� ��� Tivoli

Access Manager� � � �� ���.

v ���� �� ��� � �� � ��� �� ���� ����� ����

��� ID� ����.

v ��� � ���� ��� ��� ��� �� ���(��� �� � �

�� ��� ��� � ���).

v ��� � ���� ��� ��� ���� ����� ����.

v ���� ��� ��� ��� ��� �� � � ����, ���� �� �

� ��� ���.

v ���� ��� ����� ���� ��� ��� ��� ����� ����

���.

v ���� policy Server� ��� �� � �� �� �� �� �����

� ����� �� �� �� ������ ��� ��� �� �� ���

� �� ���. police Server� �� ���� ����� �� �� �

��� ��� �����. ��� ���� pdadmin ��� ������ ���

� �����.

��� �� policy

Tivoli Access Manager� ��� � ���� ��� � ������ ��� �

� policy��� ��� �� �� policy� �� �� �� �� policy�� ��

���.

v Tivoli Access Manager� ��� ���� Tivoli Access Manager �� ���

�� ���(Tivoli Access Manager ������� � � � �� ����

� ���� � � �������� ���).

�: � Tivoli Access Manager� ���� ���� � ��� �� ���

���� �� � ��� ���� � ���.

v ���� �� ��� �� �� �� �� �� ���.

�� ��

244 IBM Tivoli Access Manager: �� �� ���

Page 265: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v ����� Tivoli Access Manager ������� ��� ��� �� �

��.

v Tivoli Access Manager �� � � ��/�� � � ��� ��� �� �

���� ���� �� ���.

v LDAP ���� SSL �� 3 �� TLS �� 1� ���� �� ���.

v LDAP ��� ��� ��� � ���� ��� �� ���� ���

�� ���.

� � ��� ���� �� �� �� � ����� ��� � ���� ��

�� ����.

Tivoli Access Manager �� policy

�� ��� � ���� �� ��� � �� �����. � �� ��� � Tivoli

Access Manager� ���� ��� � ��� ���� � ���.

���, WebSESL� �� ��� policy� ���� ��� ���� ��

���. �� Tivoli Access Manager� ���� ��� ���� ����� ��

�� ��� �����. ���� �� ����� �� �� �� ��

���.

v Policy Server(pdmgrd)

– Tivoli Access Manager ��

– LDAP�� �������

v WebSEAL Server(webseald)

– �� ���� ��, HTTPS�

– HTTPS�� ��� ����

– ��, ������ ��, �� � �� �� Tivoli Access Manager ��

– LDAP�� �������

�� ��

�� D. � �� 245

Page 266: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�� �������� ��� policy� �� ����.

�: � policy� ��� �� ��� ��� ��� ����. Best Practices� �

� �� � �� ��� ������ ���� ���� HTTPS ���� �

� ������ �� ���. �� ��� ��� ���� �� ���

��� ��� � ��� ���.

��� ��� �� ��

� �� ���� ��(�, ��)� ���� �� ��� ���� �� ����.

Tivoli Access Manager ��� �� ���� � ��� �� �� ��� �

����.

v �������� �� �� ���� ���� ��� �� �� ����.

v Tivoli Access Manager�� �� � � �� ���� ���� �� �� ��

�� ���� �� �� �� ������ �����.

v ���� ��� �� �� �� ��� ��� ��� ����(�, ��� policy

� � ����� �� ����). ��, ��� �� ��� � ���� �

��� �����.

� �� ���� ���� ��, �� � ���� ��� �� ��

�� �� ��� �� �� ���� ���� ���� ����� �� ����

� ���.

CC �� �� �� � ��

CC �� � ���� ��� �� �� ��� �� ����. �� � �� ��

�� �� ����.

�� ��

246 IBM Tivoli Access Manager: �� �� ���

Page 267: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

v Tivoli Access Manager� �� ��� ��� � �� ″���″ ���� ��

�� ��� ������. �� ���� �� ����� ������� � ��

���� ���� � ��� ��� �� � ����.

v pdmgrd � webseald ���� �� �� ���� �� ���.

v � ���� ���� Tivoli Access Manager ���� �����. �

�� ��� ��� �����. � �, pdmgrd� webseald �� AIX �

��� ������.

v Web Portal Manager(WPM)� �� ���� ���� ����. pdadmin �

�� ����� � C API�� �����.

v �� � ��� ����� � LDAP� �����. Active Directory �� ��

�� �� ���� ����.

v LDAP ���� ���� ����.

v ���� ��� ����� ���� ����.

v � ��� ������.

v CC � ��� � �� �� ����� �����.

v � WebSEAL ���� �� ��� ���� ���� � Policy Server

�� ����. ���, WebSEAL ���� �� ��� � �� ��� �

���� ���� ����.

Tivoli Access Manager ��

Tivoli Access Manager �� ���� CC� ����� ���� �� � ��

���� ����. WebSEAL ���� ���� �� IBM Tivoli Access

Manager WebSEAL �� ���� ���� ����.

Tivoli Access Manager ���� � ��� �� CC �� ��� �� ��

� �� ��� ����.

��

��� �� Tivoli Access Manager ���� �� �� ��� �� ��

�����. �� ��� �� ����� ��� ���� � �� �� ��

� ������ ����.

WebSEAL ��

� ��� WebSEAL� ��� � HTTPS� �����. webseald.conf� �

� �� �� �� ���� �� �����.

�� ��

�� D. � �� 247

Page 268: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

[server] http = no https = yes

����� ����, WebSEAL��� �� �� � HTTPS �� �� �

� ����.

[server] https-port = 443

� ��� SSL �� 2� ��� ����. �� �� SSL �� 3 � TLS �

� 1� �����.

[ssl] disable-ssl-v2 = yes disable-ssl-v3 = no disable-tls-v1 = no

�: WebSEAL�� ��� ����� �� SSL� ���� ���(SSL �

� 3 �� TLS �� 1). SSL �SSL� ���� �� � WebSEAL� junction

� �� URL� �� ��� ����.

WebSEAL �� ��� ��

� ��� ��� �� ����� �� �� ���� �����.

v ���� ���� �� ��

v ��� ID � ��� ���� �� ��

���, �� �� ����� webseald.conf�� �� ���.

[ba] ba-auth = https [forms] forms-auth = https [certificate] accept-client-certs = optional [authentication-mechanisms] cert-ssl = ssl_client_side_certificate_authentication_library

���� cipersuite

� ����� �� �� SSL �� 3 / TLS �� 1 ciphersuite� �� �

��.

v SSL_RSA_WITH_RC4_128_SHA

v SSL_RSA_WITH_RC4_128_SHA

v SL_RSA_WITH_3DES_EDE_CBC_SHA

�� ����� webseald.conf� �� ���.

�� ��

248 IBM Tivoli Access Manager: �� �� ���

Page 269: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

[ssl-qop-mgmt-default] default = RC4-128 default = DES-168

� ��

��� �� ����� �� � �� ��� ��� ��� �����.

webseald �� pdmgrd�� �� � � �� ��� �� ���.

logcfg = audit.azn: file=audit_file,\ log_id=audit,\ flush_interval=1,\ rollover=size=-10000000,\ buffer_size=0,\ queue_size=1,\ hi_water=1 logcfg = audit.authn:file log_id=audit logcfg = audit.mgmt:file log_id=audit logcfg = audit.http:file log_id=audit

��� audit_file� �� �� � � ��� �����.

� �� �� � �� ���� ��� �� �� � � ��� ����. �

�� �� � � ���� �� � � �� 10,000,000����� �� � ��� �

� 24���� ����. ����� �� � � �����.

�� �� �� � ���� �� ��� �� ��� ���� �� �

��. � ���� ��� ���� � ��� �� � �� �� ����

�.

�� WebSEAL ��

��� �� ��� ����� ����� �� ����� �� ���.

[ltpa] ltpa-cache-enabled = no

��� policy

CC ���� ����, pdadmin ��� ���� ��� � �� ID� �� ��

��� policy� �� �� ������.

policy set max-login-failures 3

���� 10�� ��� � � ���� �� � ��� policy� ���� ��

���. 180��� �� ��� �� �� ��� �� �����.

�: WebSEAL �� ���� � �� � ��� �� � ����. � �����

��� ��� ��� �� � �� ���� ��� ����. � ��

��� �� � �� �� �� ��� ����� �� ���. � �

�� ��

�� D. � �� 249

Page 270: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�, �� WebSEAL �� ��� �� ���. � �, �� �� �� �

� �� �� ��� ��� ����� �� �� ��� � �� �� ���.

CC ��� � �� WebSEAL ����� ��� ����. WebSEAL �

� ��� � ���� ��� �� ���� �� CC ��� �������

WebSEAL ����� 5� �� ���� �� �� ����.

WebSEAL �� ��� �� ��� ��� IBM Tivoli Access Manager

WebSEAL Administration Guide� ������.

�� policy

CC ���� ����, pdadmin ��� ���� �� �� policy� �� ��

������.

policy set password-spaces no

�� � ��

Tivoli Access Manager �� �� � �� �� ����. �� Tivoli Access

Manager ����(mgrsslcfg, bassslcfg � svrsslcfg)� ���� �� �� ���

����� �� �����. � �, ���� ��� ���( : WebSEAL ��

���)�� �� 1024�� ��� �� �� ���. WebSEAL ��� ��� �

� ��� ��� IBM Tivoli Access Manager WebSEAL Administration Guide�

������.

CC �� �� ��

�� �� � � Tivoli Access Manager� CC �� ������. ��� � �

��� ��� �� � � � �� ��� IBM Tivoli Access Manager �� �

�� ���� ������. webseald.conf � � ��� IBM Tivoli Access

Manager WebSEAL ��� ���� ������.

v ivmgrd.conf

v ldap.conf

v pd.conf

v webseald.conf

�� ��

250 IBM Tivoli Access Manager: �� �� ���

Page 271: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�� E. ����

� ��� ���� ��� �� � ������ ��� ����. IBM� �� �

���� � ��� ��� ��, ��� �� ��� ��� �� �� ����. �

� �� � �� �� � ���� �� ��� �� IBM ���� �����

�. � ��� IBM ��, ���� �� ���� ���� �� IBM ��, �

��� �� ����� �� � ��� �� ����� ����. IBM� � �

� ��� �� �, ��� �� ��, ���� �� ���� �� �� �

����. �� �IBM ��, ���� �� ���� �� �� � � ���

���� �����.

IBM� � ��� ��� �� �� ��� � ��� ���� ��� �� ��

�� � ����. � �� ���� � ��� �� ����� ����

�� ����. ���� �� ����� ���� ������.

135-270

���� ��� �� 467-12, �������

�� ��.�.� ����

�����

����: 080-023-8080

2���(DBCS) ��� �� ��� ��� �� IBM ������ �����

�� ��� �� ����� ���.

IBM World Trade Asia Corporation

Licensing

2-31 Roppongi 3-chome, Minato-ku

Tokyo 106, Japan

� ��� ���� ��� ���� �� ����� ��� ����. IBM�

��� � ��, ��� � �� ��� ��� �� �� ��� ���

(, �� ��� ��) ��� ��� ��� ��� ���� � �� ��

��� ����. � ����� �� � �� �� �� �� ��� ���

�� ���� ����, � ��� ��� �� �� ����.

� ���� ���� ���� ���� � �� ��� �� � ����. � �

�� ���� ����, � ����� ���� �����. IBM� � ��� �

�� �� �(��) ����� �� ���� �� � � �(��) �� � ��

��.

© Copyright IBM Corp. 2001, 2003 251

Page 272: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

� ���� ���� �IBM ���� � �� �� ���, �� ���

� ���� ����� �� �� ����. ���� ��� � IBM

�� ��� �� ���� ��� ���� �� ��� ��� ��� �

� ���.

IBM� ��� �� ��� �� � ��� ���� ���� ��� ��

� �� ��� ����� � � ����.

(1) ��� ��� ���� �� ����(� ���� �) �� �� � �

(2) �� ��� �� ��� ��� ��� ��� ���� ��� ����

�� ��� ������.

135-270

���� ��� �� 467-12, �������

�� ��.�.� ����

�����

�� ��� �� � ��( � �, ��� �� �)� �� �� � ��

��.

� ��� ��� ���� �� ���� � � ����� � �� ��� �

���� �� ��� IBM� IBM �� ��, IBM ���� ��� ��(IPLA)

�� �� �� ��� �� �� ����.

�IBM ��� �� ��� ��� ���, � �� �� �� � ���

�� �� ����. IBM��� �� �IBM ��� ����� �����, �

�� ��� ��� ���, ��� �� �� ��� ��� �� � ����.

�IBM ��� ��� �� ����� ��� ���� ������.

IBM� �� � �� ��� �� � ��� �� ���� ��� � ���

�.

� ���� �� ���� ��� ���� �� � ���� �� �� �

����. � ��� ��� ��� ���� ���� � ��, ��, � �

��� ��� ��� � ����. � ��� �� �� ��� �� ��� ��

� ��� ������ �� ��� �����.

��:

� ���� � � ������ ��� � ��� ���� ��� � �� �

������ � ����. ��� �� �� ����� �� ��� � � �

��� ������ ��� � �����(API)� ���� ������� ��, �

�, �� �� � ��� �� ���� � �� ����� ��� ���

��, �� � � � ����. �� �� ����� � ����� �� �

252 IBM Tivoli Access Manager: �� �� ���

Page 273: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

��� �� ����. ��� IBM� � �� ����� ���, ��� ��� �

� ��� ����� ���� ����. ��� IBM� ������ ��� � �

����(API)� ���� ������� ��, ��, �� �� � ��� �

� ���� �� �� ������� ��� ��� ��, �� � � � �

���.

�� �� ���� �� �� ��� � ���� � ��� ��� �� ��

�� �� ��� ���.

© (��� ���) (��). � ��� �� IBM Corp. �� ������ ����

�. © Copyright IBM Corp. _��_. All rights reserved.

� ��� ������ �� ���� �� � �� ��� ���� �� �

� ����.

�� �� ��� � ��� ����� ���, �� ��� ��� ��

��. ��� �� ����.

XML Parser Toolkit ����

Copyright © 1998, 1999, 2000 Thai Open Source Software Center Ltd

Permission is hereby granted, free of charge, to any person obtaining a copy of

this software and associated documentation files (the ″Software″), to deal in the

Software without restriction, including without limitation the rights to use, copy,

modify, merge, publish, distribute, sublicense, and/or sell copies of the Software,

and to permit persons to whom the Software is furnished to do so, subject to

the following conditions:

The above copyright notice and this permission notice shall be included in all

copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED ″AS IS″, WITHOUT WARRANTY OF ANY

KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE

WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR

PURPOSE AND NONINFRINGEMENT.

IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE

LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER

IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,

OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR

OTHER DEALINGS IN THE SOFTWARE.

�� E. ���� 253

Page 274: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Pluggable Authentication Module ����

Copyright © 1995 by Red Hat Software, Marc Ewing Copyright (c) 1996-8,

Andrew G. Morgan <[email protected]>

All rights reserved

Redistribution and use in source and binary forms, with or without modification,

are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the above copyright notice, and the

entire permission notice in its entirety, including the disclaimer of warranties.

2. Redistributions in binary form must reproduce the above copyright notice, this

list of conditions and the following disclaimer in the documentation and/or

other materials provided with the distribution.

3. The name of the author may not be used to endorse or promote products

derived from this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED ″AS IS″’ AND ANY EXPRESS OR IMPLIED

WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED

WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE

LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,

EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT

LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;

LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER

IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE

OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS

SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

Apache Axis Servlet Copyright ©2002 The Apache Software Foundation. All rights reserved.

Redistribution and use in source and binary forms, with or without modification,

are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the above copyright notice, this list

of conditions and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright notice, this

list of conditions and the following disclaimer in the documentation and/or

other materials provided with the distribution.

254 IBM Tivoli Access Manager: �� �� ���

Page 275: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

3. The end-user documentation included with the redistribution, if any, must include

the following acknowledgment: ″This product includes software developed by

the Apache Software Foundation (http://www.apache.org/).″ Alternately, this

acknowledgment may appear in the software itself, if and wherever such

third-party acknowledgments normally appear.

4. The names ″Apache Forrest″ and ″Apache Software Foundation″ must not be

used to endorse or promote products derived from this software without prior

written permission. For written permission, please contact [email protected].

5. Products derived from this software may not be called ″Apache″, nor may

″Apache″ appear in their name, without prior written permission of theApache

Software Foundation.

THIS SOFTWARE IS PROVIDED ``AS IS’’ AND ANY EXPRESSED OR

IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A

PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE

APACHE SOFTWARE FOUNDATION OR ITS CONTRIBUTORS BE LIABLE

FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR

CONSEQUENTIAL DAMAGES (INCLU- DING, BUT NOT LIMITED TO,

PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,

DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED

AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT

LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN

IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

This software consists of voluntary contributions made by many individuals on

behalf of the Apache Software Foundation. For more information on the Apache

Software Foundation, please see http://www.apache.org/.

JArgs command line option parsing suite for Java Copyright ©2001, Stephen Purcell All rights reserved.

Redistribution and use in source and binary forms, with or without modification,

are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the above copyright notice, this list

of conditions and the following disclaimer.

�� E. ���� 255

Page 276: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

2. Redistributions in binary form must reproduce the above copyright notice, this

list of conditions and the following disclaimer in the documentation and/or

other materials provided with the distribution.

3. Neither the name of the copyright holder nor the names of its contributors

may be used to endorse or promote products derived from this software without

specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND

CONTRIBUTORS ″AS IS″ AND ANY EXPRESS OR IMPLIED WARRANTIES,

INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF

MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE

DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS

BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,

EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT

LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;

LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER

IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE

OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS

SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

Java DOM implementation Copyright © 2000-2002 Brett McLaughlin & Jason Hunter. All rights

reserved.Redistribution and use in source and binary forms, with or without

modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the above copyright notice, this list

of conditions, and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright notice, this

list of conditions, and the disclaimer that follows these conditions in the

documentation and/or other materials provided with the distribution.

3. The name ″JDOM″ must not be used to endorse or promote products derived

from this software without prior written permission. For written permission,

please contact [email protected].

4. Products derived from this software may not be called ″JDOM″, nor may

″JDOM″ appear in their name, without prior written permission from the JDOM

Project Management ([email protected]).

5. In addition, we request (but do not require) that you include in the end-user

documentation provided with the redistribution and/or in the software itself an

256 IBM Tivoli Access Manager: �� �� ���

Page 277: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

acknowledgement equivalent to the following: ″This product includes software

developed by the JDOM Project (http://www.jdom.org/).″

6. In addition, we request (but do not require) that you include in the end-user

documentation provided with the redistribution and/or in the software itself an

acknowledgement equivalent to the following: ″This product includes software

developed by the JDOM Project (http://www.jdom.org/).″ Alternatively, the

acknowledgment may be graphical using the logos available at

http://www.jdom.org/images/logos.

THIS SOFTWARE IS PROVIDED ``AS IS’’ AND ANY EXPRESSED OR

IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A

PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE

JDOM AUTHORS OR THE PROJECT CONTRIBUTORS BE LIABLE FOR ANY

DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR

CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,

PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,

DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED

AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT

LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN

IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

This software consists of voluntary contributions made by many individuals on

behalf of the JDOM Project and was originally created by Brett McLaughlin

([email protected]) and Jason Hunter ([email protected]). For more information on

the JDOM Project, please see http://www.jdom.org/.

��

�� ��� �� �� �� ���� ���� IBM Corporation� � �� ��

����.

AIX

DB2

IBM

IBM ��

MVS

OS/390

SecureWay

Tivoli

�� E. ���� 257

Page 278: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Tivoli ��

Universal Database

WebSphere

zSeries

z/OS

Lotus, Lotus Notes � Notes� Lotus Development Corporation �/�� IBM

Corporation� ����.

Domino� �� �� �� ���� ���� IBM Corporation � Lotus Development

Corporation� ����.

Java � � Java �� �� ��� Sun Microsystems, Inc.� � �� ���

���.

Microsoft, Windows, Windows NT � Windows ��� �� �� �� ����

���� Microsoft Corporation� ����. Java � � Java �� �� ��

� Sun Microsystems, Inc.� � �� ������.

UNIX� �� �� �� ���� ���� Open Group� ������.

�� ��, �� � ��� ��� ��� � �� ������.

258 IBM Tivoli Access Manager: �� �� ���

Page 279: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

��

�� ���(virtual hosting). ���� � ��� ���� �

���� �� ��� ��

�� �(private key). �� ����, ����� �� � �

� �. � �� ��

�� �(public key). �� ����, � �� �� �

�� �. �� �� ��

� ��(management server). � �� ���� ����.

Policy Server ��

� ���(administration service). Access Manager ��

��� �������� �� �� ���� � �� �

�� � API ��� ���. admin ���� ��( : �

� ���� �� �� �� �� � � ���� ��)� �

��� � pdadmin ��� � �� �� �����. �

�� � ADK� ���� �� ���� �� � ���

�.

�� ��(DN: Distinguished Name). �� � ��� ��

� ��� �� ��. � ��� ��:��� ����, �

� �����.

��(configuration). (1) �� � ���� ���� � �

����� ���� �� ��� �. (2) ���, ����

� �� ���� ���� ���� � ����

�� ��� ����(authorization service plug-in). � API

��� ��� ������ ���� ��� ���� �, �

�� � Access Manager � API ��� ������� �

� � �� �� �� ��� ����(DLL �� �

����). �� �� ��� ��� ������� ��, �

� �, � �� ��, � � PAC �� ������ ��

��. ��� � ADK� ���� �� ���� �� �

����.

�� �� �� ���(credentials modification service).

Access Manager � ��� ���� � �� � ��

� API ��� ���. ��� ���� ��� � �� �

� ���� � �� �� ��� ���� � ���� ��

�� ��� ����� ����, �� ��� ��� ����

����� �����.

�� ��(credentials). �� � � �� ��� ���, ��

�, �� �� � �� �� �� ID ��� � �����.

� ��� ���� ��� ���( : �, �� � ��)�

�� � ����.

��(authorization). (1) �� ����, �� ��� �

���� �� ���� �� � ��� ����� ���

� �. (2) ����, �� �� ��� �� ����� ��

� ���� ����� ���� ����

��(entitlement). ���� �� policy ��� ��� �

�� ��. ��� �� �������� � � ��

��� ���� �� �� policy ���� ����.

��(permission). �� ����( : � �� �� �)� �

�� � �� ��. ����� �� � �� ��� �

�� �� ���� �����.

�� �(basic authentication). �� ��� ��� ���

� �� �� ����� ��, ���� ��� ��� �

� � ��� �� �� �� �

���� �� �(network-based authentication). ���

� IP(Internet Protocol) ��� ���� ���� ���� �

��� �� ���� policy(POP). POP(Protect Object Policy)

��

�� �� �(multi-factor authentication). ���� � �

��� �� �� ���� ����� �� ���� �� �

��� policy(POP). � �, �� ��� �� ��� ��

�� ���� ��� ��/��� ��� ��/ � �� ��

��� �� ���. POP(Protected Object Policy) ��

��� ��(domain name). ��� �� ����, ��� �

��� ��. ��� ��� ����� ���� �� �� �

© Copyright IBM Corp. 2001, 2003 259

Page 280: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

��� �����. � �, ��� ���� ��� ���

��� ralvm7.vnet.ibm.com ��, ��� ��� ��� �

����.

v ralvm7.vnet.ibm.com

v vnet.ibm.com

v ibm.com

���(domain). (1) ��� � ��� � �� �� ��

�� ��� ��. (2) ��� �� ��

� ���(directory schema). �� �� ��� � �

� ��� �� �� � ���� � �. �� �� � ���

� � �� �� � ��( � �, �� ��� � �

��, ��� �� �� � �� ��� � � ���)�

�����.

�(daemon). � ���� ���� � ��� ���

� ����. � ��� ��� ���� � ��

� �����, ��� ��� ���� ����.

�� ��(digital signature). e-commerce��, ��� �

� ����� ��� �� �� ��� �� ����, �

�� � ���� �� � � ��� ���� �� �

��� �� � �� ���.

�� ��(routing file). ��� ��� ���� ���

��� ASCII �

���(run time). �� ����� ���� ��. ��� �

�� �� �����.

�����(registry). (1) �� ���� �� � �� ��

� � ��� �� �� ��� ������ ��� ���. (2)

���, ����, ��� ������ � ����� �� �

�� �� ��� ��� ������

������(migration). �� �� �� ���� ��� �

����� � �� �� ���� ���� �

�����(metadata). ��� ���� ��� ���� ��

��(bind). ID� ���� �� �� ����� ����

�. � �, ID� �, �� �� �� ID� �����, ��

� ���� � �� ����� ���� �

�� �(security management). �� �� � �

�� � ������� ���� ���� �� �� ���

���� �� ��

�� ���(secure domain). � ���� ��� ��

��� ��� ���� ���, ��� � �� ��

�� ��(quality of protection). ��, � � ����

� �� ���� ��� ��� �� ��

�� � � ��(protected object space). ACL � POP

� ��� � ���� � ����� ���� �� �

�� ��� �� ���� �

���(replica). �� ��� �� � ��� ��� ��.

���� �� �� �� ��� ����� ��� �� �

��� � ��� �����.

����(blade). ������ �� ��� � ���� �

�� ���

���� ��(business entitlement). ��� �� � �

�� �� � �� ��� ��� ���� ��� � ��

� �� ��

��� �����(user registry). ����� ��

���(user). �� ��, �, ����, ����, ����,

�� � �� ����� ��� ���� ���� � �

�, �, ����, ����, ����, �� � �� ���

���(service). ���� ���� ��. ���� ���� �

��� ���� �� �� ����(� ��, HTTP �

�, �� � �� � �� ����), � ��� ��( : �

�� �� ���� ��� ���) � ����.

� �(attribute list). Tivoli Access Manager��, �

� ��� � ���� �� ��� ��� � ��.

�� ��� ��� = � ��� �����.

260 IBM Tivoli Access Manager: �� �� ���

Page 281: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

���(schema). ������ ��� ���� ���� ��

� ���, DDL(Data Definition Language)� ����.

����� �(trusted root). SSL(Secure Sockets Layer)

��, CA(Certificate Authority)� � � � ��� � �

���(encryption). �� ����, � ���� ��

� ������ ���� � ��� �� ��� ���

� ����

��(cipher). �� ���� �� ���� ��(�� �)�

� ��� �� � ��� ���� ���

�� ��(access permission). �� ����� ��� �

�� � �� �� ��� � �� ��� �

�� �� ��(access control groups). ��� ��� �

� ��. � ���� ��� � ���� ��� � �

��� ���� . ��� �� ��� ���� � ��

AccessGroup���.

�� �� �(access control list). �� ����, ��

��� ��� � �� � ��� �� ��� ��

���, ����� ��� ��. � �, ��� �� �

�� � � ��� � �� ���� ���, � � � �

���� ��� �� ��� �� ���, � ��

� �����.

�� ��(access control). �� ����, �� �� �

���� �� ��� ��� �� ��� ��� ���

� ��� ���� ����

�� ��(role assignment). ���� � � ��� �

���� � �� ��� �� �� ��, ����� �

� ���� ����

�� ���(role activation). � � ��� �� ���

����

�(connection). (1) ��� ����, �� ��� �� �

� �� ��� ���� ��. (2) TCP/IP��, �� � �

� ��� ��� �� ���� ��� � �� �� � �

����� ��� ��. �����, �� � ���� TCP

�������� �� ���� TCP �������� ���

��. (3) ��� ����, � ��� �� �� ��� ��

�� ��� ���� �� � �� �

�� �� ���(external authorization service). Access

Manager � � ��� �� ������ �� �� �

� � �� � �� � �� � API ��� ��

�. ��� � ADK� ���� �� ���� �� � �

���.

�� ��(response file). ������ ��� ��� ��

����� �� ��� ���, � �� ��� �� ���

� �� ���� �

��. �� ����, � �� ��� ���� ID� �

���� ��� ���� ���� ��� ��. ����

CA(Certificate Authority)�� �����.

�(authentication). (1) �� ����, ��� ID �� �

��� ���� ��� �� ���� �. (2) �� ���

�, ���� �� �� ���� ���� ���� �. (3)

�� ����, �� ��� �� �� ��� ���� ���

� � ���� ����. �� � � ��, ��� �

� �� � � ��� ������.

����� ���(entitlement service). �!��(���) �

� �� ��� �� ����� �� ���� � �� �

�� � API ��� ���. �� �� �� ��� �

� ��� �������� ����� � � � �����

� ���� � �!��� � ��� ��� ������

�� ������. ��� � ADK� ���� �� ��

�� �� � ����.

��� ���(Internet suite of protocols). �����

���� � ���� IETF(Internet Engineering Task Force)

� � RFC(Requests for Comment)� �� �� � ��

�� ��(silent installation). ���� �� ��� ���

�� �� � � ��� � ��� ���� ��. �� �

����� ��� ��� � �� � � �� � ���

�. �� � ��

�� � �(resource object). �� ��� ��( : ��

�, � � ����)� �

�� ��(self-registration). ���� �� ���� ��

� �� ���� ���� ��� Tivoli Access Manager �

��� � � �� ����

�� 261

Page 282: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

��� �(step-up authentication). �� ��� �� �

� ��� ���, ��� policy ��� �� �� ��

��� �� ���� �� ���� policy(POP). � ��

POP� ���� ���� ��� ��� ����� � �

�� ��� ���� ��� ���, ���� ��� ���

���� policy�� ��� ��� �� ���.

��(suffixes). ��� ���� �� � � ���� �

� ��� ��� � ��. LDAP(Lightweight Directory

Access Protocol)�� ���� �� ���� ��� �, �

���� �� � � �� �� �� � ��� ���

�. �� � ���� ��� ���� �� � � �� �

�� ��� � �� ���� �� � ����.

��(action). ACL(Access Control List) � ��

� �� � �(container object). Object Space� ��

�� region� ���� �� ��

��(cookie). ��� ����� ���� ���� �� ��

�� ����� ��. ��� ��� ������ �� �� �

�� �� � �� ���.

�� �� �(scalability). ��� ����� ��� �� �

�� ���� �� ��� ��� ��

� ������ ��(key database file). � ��

� �(key ring). �� ����, � �, �� �, ���

�� ��(trusted root) � ��� ��� �

� �(key pair). �� ����, � � � �� �. ��

�� � �� �� �, ���� � �� ���� ���

� �����, ���� �� �� ���� ���� ��

����. ��� � �� �� �, ���� �� �� ��

�� ��� �� �����, ���� � �� ���� �

� ��� � ��� �� �� ����.

� ��(key file). � ��

�(key). �� ����, ��� ��� � �� �� �

��� ����� ���� �� ��. �� � � � �

��

�(token). (1) �� ��"��, ����� ��� �� �

� �� �� ��� ��� � ��� ���� �� ��

�� ���� � ��. ��� ��� ������ ���

���� � �� ���� �� ��� ����. ��

�� �� �� �� ��� �� �� �����. (2)

�� ��"(LAN)��, �� ��� �� ���� �� ���

� �� ���. �� ���� ��� ��, � �� ��

�� ���.

��(portal). �� ���� ��� �� ����, �� �

��� �� ��� ��( : , �� �� ���)� �

�� �� ��� �� ���� �� ���

��(polling). ���� �� �� ���� ���

�(CAM) �� �. ���/��� ������, ���� �

�� ��� ����� �� ���� ��� ��� ��

���. ���� �� ���� ��� ����, ����

� ���� �� � ����. ���� �� ���� �

�� ����, ���� ��� �� ��� ����� �

���. ����� �� �����. Tivoli Access Manager

� ��, WebSEAL ��� �� ��� � ���� ��

� �(policy) ������� ���� �� � ����.

���(host). ���( : ��� �� SNA ���)� �

�� �� ���� ����� ��� ��� �

�. �� ���� ��� �� ���� � � �� ��

� � �� ����. ���� ������ ��, ��

�� ������ �� ��� � � ����.

A

ACL. ��� �� �� ��

B

BA. �� �� ��

C

CA. CA(Certificate Authority) ��

262 IBM Tivoli Access Manager: �� �� ���

Page 283: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

CA(Certificate Authority). e-commerce��, ���� ��

�� ��. CA(Certificate Authority)� ��� ���� ID�

� ����� �� �� ��� ��� ��, � ��� �

�, � ��� ���, �� �� � �� �� ����

��� �� �� �����.

CDAS. CDAS(Cross Domain Authentication Service) ��

CDAS(Cross Domain Authentication Service). ��

WebSEAL �� �����, Tivoli Access Manager ID�

WebSEAL� ���� ��� �� ����� �� ����

�� � ���� ����� ��� WebSEAL ���.

WebSeal ��

CDMF. CDMF(Cross Domain Mapping Framework) ��

CDMF(Cross Domain Mapping Framework). ����

WebSEA e-Community SSO ��� �� � ��� ID �

� � ��� �� �� ���� �� �� � �� ��

��� � �����

CGI. CGI(Common Cateway Interface) ��

CGI(Common Cateway Interface). ���� ����

CGI(Common Gateway Interface)� ���� �� ���

� ���� �� ��( : ������ ��� � �� �)

� ���� �� ����. CGI ��� �� ��(

: Perl)� ��� CGI �������.

D

DN. � �� ��

E

EAS. �� � ��� ��

F

FTP(File Transfer Protocol). ��� �� ����, ��

� �� ��� ��� �� ��� � � ���� � TCP

� Telnet ���� ���� ������ � �� �

G

GSO. GSO(Global Sign-On) ��

GSO(Global Sign-On). ���� ��� ������ �

�� �� ��� �� � ��� � � �� ��� ��

�� � ������. ��� �� �� ���� �

���� �� �� �� �� ��� ��� � �

� ���. ���� � �� �� ��� � ��� �

�������� ��� � ��� ������� ��� �

�� GSO� ���� ���� � ��� �� � ���

���� ��� ���. �� � ��

H

HTTP. HTTP(Hypertext Transfer Protocol) ��

HTTP(Hypertext Transfer Protocol). ��� �� ���

�, ������ ��� ���� ��� � ���� ��

I

IP. IP(Internet Protocol) ��

IPC. IPC(Interprocess Communication) ��

IPC(Interprocess Communication). ����� ����

� �� ���� �� ���� ����� �� � �

��� �� �� ��� �� � � �� �� �

IP(Internet Protocol). ��� �� ����, ���� ��

� �� �� �� ���� � ����� �� ��

� � �� ��� ��� � � � �� � ��

�� �

J

junction. ����� WebSEAL ��� ��� ����

�� �� �� HTTP �� HTTPS �. junction� ��� �

�� �� WebSEAL ��� � ���� �

�� �� ���� �� ��� �����. junction�

WebSEAL� ��� �� �� �� ���� ��� ���.

WebSEAL� junction� � �� ��� ��� ��

�� �� � �� ��� �� � �� �� � ��

��. junction��� ������ junctioned ��� ����

�� �� ��� �� � ���� �����.

L

LDAP. LDAP(Lightweight Directory Access Protocol) ��

�� 263

Page 284: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

LDAP(Lightweight Directory Access Protocol). (a) X.500

��� ���� �� �� ��� � �� �� ���

� TCP/IP� ����, (b) � ��� X.500 DAP(Directory

Access Protocol)� �� ���� ���� � �� �.

LDAP� ���� ������(�� � �� �� �����

����� �)� �� �� ���� �� ��( : �� �

��, � � �� ��� �� �� ����) ��� �

� ��� ���� �� �� �� � ����. LDAP� �

RFC 1777� ���� �����. LDAP �� 3� RFC

2251� ���� ���, IETF� ��� �� � ��� �

���� ����. IETF�� ��� � LDAP� � �

��� RFC 2256�� � ����.

LTPA. LTPA(Lightweight Third Party Authentication) ��

LTPA(Lightweight Third Party Authentication). ��� �

��� �� �� ���� �� �� ���� �

� ����

M

MPA(Multiplexing Proxy Agent). � ����� ���

� ���� �����. � ������ �� ������

WAP� ���� �� ���� ��� ��, WAP(Wireless

Access Protocol) �������� ���. ������ �

��� ��� � ���, � ����� � �

��� � � � ″�″���.

P

PAC. PAC(Privilege Attribute Certificate) ��

PAC(Privilege Attribute Certificate). �!��(���)� �

� � �� ��, ��� ��� ��� ��� ���� �

��� ���, ��� ���� Tivoli Access Manager �

� ��� ���� �����.

PAC(Privilege Attribute Certificate) ���(privilege

attribute certificate service). (1) Tivoli Access Manager

��, � �� �� ���� ��� �� ���� �� ��

� ���� Tivoli Access Manager � ��� ������

��� �� ���� �� ��� ���� ����� � �

����. ��� ASN1 ��� MIME ���� ����.

���� Tivoli Access Manager � API� �����. (2)

��� �� ��� PAC� Access Manager � ��� �

� � ��� ���� � API ��� ����� ���.

�� ���� �� ���� �� ����� ���� �

Access Manager � ��� ������ �� ���� �

� � ����. ��� � ADK� ���� �� ���

� �� � ����.

policy. �� ��� ��� � ��

Policy Server. �� ����� �� ��� �� �� ��

� ������ Tivoli Access Manager ��

policy ���(policy data). �� �� policy ���� ��

� ��� ��� ����.

POP. POP(Protect Object Policy) ��

POP(Protect Object Policy). �� ACL policy �� �,

�� ��� ����� �� �� ��� ���� �� policy

��. POP� �� �� �� � �� ���� ����.

R

RSA ���(RSA encryption). ��� � ��� ����

� � ��� ���. 1977� Ron Rivest, Adi Shamir �

Leonard Adleman� � ��� ��� ������. � �

� � ��� �� ����� ���� ��� ��, ���

��� �����.

S

SSL. SSL(Secure Sockets Layer) ��

SSL(Secure Sockets Layer). �� ������ ��� �

� �� �. SSL� �����/�� ������� ��, ��

� ��� ��� ��� � ��� ��� �� �

�� ���. SSL� Netscape Communications Corp. � RSA

Data Security, Inc.�� ������.

SSO. SSO(Single Signon) ��

SSO(Single Signon). ���� � � ����� ��� �

������ ��� ����� ��� � ������

� ��� � �� ��. GSO(Global Sign-On) ��

T

Tivoli Access Manager for Business Integration. Tivoli

Access Manager �����, IBM MQSeries� �� ��

�� ���� ����. ���� ��-�-�� ��� ���

� � MQSeries ��� �����.

264 IBM Tivoli Access Manager: �� �� ���

Page 285: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Tivoli Access Manager for Operating Systems. Tivoli

Access Manager �����, Tivoli Identity Director ���

�� ��� ����. �� ��� � ��� �� �

�� ��( : � ���� ��)� ����.

U

URI. URI(Uniform Resource Identifier)� ������.

URI(Uniform Resource Identifier). ����� �� ���

��� � ���� �. URL(Uniform Resource Locator)

� ��� ��� ��� ��� URI �����. URI�

��� (a) ��� ����� � ���� ����( :

HTTP, HTTPS, FTP), (b) ��� ���� �� ��( :

www.webserver.org), ��� ���� ��� �� ��( :

.../products/images/serv.jpg)� �����.

URL. URL(Uniform Resource Locator) ��

URL(Uniform Resource Locator). �� �� ���(

: ���)�� �� ��� ��� �� ���. � �� ��

��� (a) �� ��� ����� � ���� �� �� �

�� �� (b) �� ��� �� � �� ��� ����

��� ����. � �, ��� ������ �� ��

� �� ��� ����� � ���� �� �� ��� �

����( : http, ftp, gopher, telnet, news). IBM � ���

� URL� http://www.ibm.com���.

W

WebSEAL. Tivoli Access Manager ����. WebSEAL�

�� ���� �� �� policy� ��� ���� ���

�� �����. WebSEAL� �� � ���� �

�� ��� ������ �� ��� �� policy�

�� � ����.

WPM. Web Portal Manager ��

WPM(Web Portal Manager). �� ����� Tivoli Access

Manager Base � WebSEAL �� policy� ���� � ��

�� �� � � ������. pdadmin ��� ����

�� �� ����, � GUI� �� ��� ���� ����

��, ���� ��� ��� ���� ���� � ���� �

� ���� �� � �� ���.

�� 265

Page 286: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

266 IBM Tivoli Access Manager: �� �� ���

Page 287: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

��

����

IBM Global Security Toolkit 5

LDAP �� �� 21

�� ��� 194, 196, 213

����

� �� 185

�� ��

�� 219, 222

�� �� 219, 222

�� � xiii

�� ��

�� �� 69, 93, 110

��

�� � 186

� ��/���, GSO 21

��

IBM Directory Server 22

IBM WebSphere Application Server 59

�� �� 219, 222

�� �

UNIX 69, 93

���

IBM Global Security Toolkit �� 5

Web Portal Manager �� 6

�� ��, Windows 17

�, ��� 196, 213

� � ��� �����(GUI)

�� �� 24

�� 198

����� � �� 22

������ ��

�� �� 69, 93, 110

�����

DCE ����� �� 47, 49, 217

LDAP ����� �� 47, 49, 217

��

60, 92, 110

�� �� 18

�� ��

UNIX 18

Windows 18

�� 21

���������

Policy Server 47, 49, 217

��� ����

�� �� � 19

��� �� 19

����� 21

��

dmt 28

����

�� �� 17

LANG

UNIX 18

Windows 18

NLSPATH

�� 19

��, �� �� 18

������ ���

���

��� 210, 215

�� �� ����� 24

�� � ����� �� 193, 198, 212

�� �� 193, 198

�� ��� 200, 201

��

�� � 186

IBM WebSphere Application Server 59

�� �� ���

AIX�� 61

© Copyright IBM Corp. 2001, 2003 267

Page 288: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

�� �� ��� (��)

HP-UX�� 70

Solaris�� 94

Tivoli Access Manager 69, 93, 110

Windows�� 110

��� � 21

��� 186

������ �� ��(ACL)

LDAP �� �� �� 22

�� ��, �� 17

�� ��

� 12

�� �� 17

�� ��, �� 18

�� ��

UNIX 18

Windows 18

��� ���� 19

�� �� 19

�����

IBM JDK 1.2.2 92

��

�� 219, 222

���� 20

�� �

�� 186

�� 185

���� ���� 21

��

�� 193, 198

�� � ����� 193, 198, 212

�� ADK

�� �� 69, 93, 110

���

�� 194, 196, 213

� 196, 213

�� 200, 201

�� ��� 196, 214

������ ��

�� �� 17

�� �� 18

��� ���� 19

��� �� (��)

�� �� 12

�� �� 19

� ��

���� 185

�� � 185

�� ��� ��� 196, 214

�� ��� ��� �� 196, 214

�� ��� ��� �� 196, 214

��� 21, 25

��

�� �� �� 69, 93, 110

����� ��

�� �� 19

� �� � 20

� ������ � 194, 209, 212

� 199

� � 199

������ ���

�� �� �� 19

����

��� 21

�� 185

� ������ 209, 212

� ������ � (.kdb) 195

� ������(.kdb) 194

gsk5ikm.exe 195, 209, 212, 214

httpd.conf 23

�� 227

WebSEAL 23

����, �� � 22

�� 60, 92, 110

268 IBM Tivoli Access Manager: �� �� ���

Page 289: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

AAIX

��� �� �� 61

��

GSKit 54

IBM Directory Client 54

Tivoli Access Manager ��� 55

Authorization Server

�� �� 69, 93, 110

CCD

Web Portal Manager� 6

DDCE �����, ������ 47, 49, 217

Directory Information Tree(DIT) 21

Directory Management Tool(DMT) 28

Ggsk5ikm � 195, 209, 212, 214

GSO

GSO(Global Sign-On) �� 21

GSO(Global Sign-On)

� ��/��� 21, 26

�� 21

HHP-UX

��

GSKit 65

IBM Directory Client 66

Tivoli Access Manager ��� 67

�� �� 70

httpd.conf � 23

IIBM Developer Toolkit 92

IBM Directory

��

�� 22

SSL �� 194

IBM Directory (��)

�����

�� �� 69, 93, 110

SSL �� 208

IBM Global Security Toolkit

�� 5

�� �� 69, 93, 110

IBM JDK 1.2.2 92

iKeyman � �� ����

�� 5

� ������ � �� 209

SSL �� 194

iPlanet Directory Server

�� ��� 30

SSL �� 200, 202

LLANG ��

� 17

UNIX 18

Windows 18

LDAP �����, ������ 47, 49, 217

LDAP ��

�� 21

SSL �� 197

NNLSPATH ��

�� 19

PPolicy Server

������ 47, 49, 217

Rruntime

�� 219, 220, 221, 222, 226

SsecAuthority=Default 21, 25, 33

Solaris

��

GSKit 86

�� 269

Page 290: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

Solaris (��)

�� (��)

IBM Directory Client 86

Tivoli Access Manager ��� 87

�� �� 94

SSL

SSL(Secure Sockets Layer) �� 5

SSL(Secure Sockets Layer)

�� 193

��� 211, 216

IBM Directory Client�� �� 208

IBM Global Security Toolkit 5

iPlanet Directory Server �� 200, 202

LDAP ��� ��� �� 197

UUNIX

�� �� 18

UNIX, ��� �� � 69, 93

UTF-8 ��� 20

WWeb Portal Manager 6

Web �� ����� 198

Windows

��� �� �� 110

��

GSKit 100

IBM Directory Client 100

Tivoli Access Manager 102

�� �� 18

��� ���.kdb 195

270 IBM Tivoli Access Manager: �� �� ���

Page 291: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating
Page 292: IBM Tivoli Access Manager:publib.boulder.ibm.com/.../ko_KO/PDF/am41_install.pdfv IBM Tivoli Access Manager for Operating Systems (SA30-1842-00) v IBM Tivoli Access Manager for Operating

���

Printed in Denmark by IBM Danmark A/S

SA30-1854-01