Configuring reference implementation properties

Business Process Portal Administrator's Guide

Managing users : Configuring user management : Using OEHybrid realm for Single Point of Authentication : Configuring reference implementation properties

The reference implementation uses a property file that contains information used to lock the authentication service. A SPA client reads a sealed client-principal file and then sends the file when it communicates with the authentication service. The authentication service validates the seal by using the domain password, and then validates the role of the client-principal to see if it matches.

A default property file spaservice.properties is provided in $DLC\src\samples\security. You must copy this property file to your working directory $WRKDIR.

The property file contains these default values:

Table 33. Property file parameters
Parameter	Default value	Description
Password	oech1::20333c34252a2137	Password is the encoded domain password of the sealed client-principal.
Role	SpaClient	Role is the role that the client-principal role is compared to.
DebugMsg	False	DebugMsg will enable log messages in the AppServer server log file for the SPA service.

The default client-principal file spadefault.cp located in your installation directory at $DLC\src\samples\security, uses a password that corresponds to the encoded "Password" value in the table, and the role "SpaClient". For information on generating your own client-principal file using the genspacp utility, see Generating a sealed client-principal file.