Cams Administrator's Guide

Cams Administrator's Guide
Version 2.1

This document provides links to information you use to learn about and integrate the Cams policy server.

Introduction

Centralized Web Security
The Cams Policy Server
Security Domains: The Authentication Service; The Access Control Service; Cams Auditing
Cams Web Agents: Cams Web Agent Components; Additional Cams Web Agent Features
Web Single Sign-on

Installation

Step1 - Obtain Cams

Step 2 - Unpack the distribution files

Step 3 - Install the license key

Step 4 - Install Java (if necessary)

Step 5 - Start the Cams policy server

Step 6 - Test

Integration Quick Start

Step 1 - Configure the security domain registry

Step 2 - Configure the system security domain

Step 3 - Configure a rule and permission

Setp 4 - Set the Cams policy server bind address

Step 5 - Configure a Cams web agent

Step 6 - Test

Security Domain Registry Configuration

Configuring the Security Domain Registry Factory

Configuring the Cams XML Security Domain Registry

Security Domain Registry Tag Reference

Access Control Services

Access Control Conceptual Model

Cams Security Domains

How Cams Access Control Works

Managing a Cams Access Control Policy

Configuring a Cams Access Control Policy

Access Control Policy Tag Reference

Configuring Permissions

Configuring Access Control Rules

Login Configuration

Active Directory Login Module

Customizing LoginException Messages

Support for Password Digests

Configuring "Automatic" HTTP User Login

Security Domain Configuration

Security Domain Tag Reference

Configuring Cams Policy Server

Cams Policy Server Name

Cams Cluster Name

Connections

Email Notification

Secret Key Encryption

Logger

Debug

Security Domain Registry

Policy Server Clustering Overview

Clustering Benefits

Clustering Requirements

System Requirements

Configuration Requirements

Network Requirements

Licensing Requirements

Recommended Topology

How Cams Policy Server Clustering Works

Cams Policy Server Configuration

Cams Web Agent Configuration

Cams Policy Server Failover

Cams Policy Server Recovery

Cams Policy Server Load Balancing

Managing Cams Policy Server Files in a Cluster

Clustering Limitations

Policy Server Clustering Quick Start

Prerequisites

Step 1 - Create master Cams cluster files

Step 2 - Register each Cams policy server

Step 3 - Create the cluster directory structure

Step 4 - Install cams-license-keys.xml files

Step 5 - Copy master files to Cams policy servers

Step 6 - Configure Cams web agents

Step 7 - Start Cams policy servers

Step 8 - Start the Cams web agent

Step 9 - Confirm proper Cams cluster operation

More Cams Clustering Information

Policy Server Clustering

Installation and Configuration Management Strategy

Cluster Requirements

Cluster Configuration Management Strategy

Cluster Installation Strategy Overview

Example: A Typical Cams Cluster Configuration

Registering Cams Policy Servers

The Default Cams Policy Server Registration

Configuring a Cams Web Agent for Cluster Use

Global, Per-Cluster, and Per-Server Directories and Files

How Cams Policy Server Configuration Properties are Set

How Cams License Files are Loaded

Managing Cams Policy Server Security Domain Files

Where Cams Policy Server Log Files are Written

Configuring where Security Domain-specific Log Files are Written

Configuring where the Cams Policy Server Trace Log File is Written

Starting and and Stopping Clustered Policy Servers

Support for Multi-homed Computer Systems

Debugging Cams Policy Server Cluster Settings

Debugging Cams Agent Cluster Settings

Confirming Cluster Failover and Load Balancing

Hardening Cams Security

Securing Cams Network Connections

Firewall Configuration

Securing Communications

Using SSL when accessing LDAP user directories

Securing Cams Files and Directories

Securing Cams Files and Directories under Unix/Linux

Securing Cams Files and Directories under Windows 2000/2003/XP

Changing the Cams keystore Password

Securing Cams Services and Web Agents

Cams Policy Server

Security Domains

Cams Web Agents

Securing Cams Web Agent Authentication

Securing Cams Web Agent Access Control

Using Cams Web Agent Session Hijacking Protection

XML Tag Library

Access Control Policy Tag Reference

Security Domain Tag Reference

Security Domain Registry Tag Reference

Troubleshooting

Troubleshooting Cams FAQ

Troubleshooting Cams Access Control

Appendix

Securing Cams Communications using Secret Keys

Support

Glossary

Back | Next | Contents

Cams Administrator's Guide Version 2.1

Table of Contents

Introduction

Cams Administrator's Guide
Version 2.1