Novell Access Manager 3.1 SP 2, Руководство пользователя, Страница: 68 / 126

68 Novell Access Manager 3.1 SP2 J2EE Agent Guide
n
ov
do
cx (e
n)
16
Ap
ril 20
10
The
<form-login-page>
and
<form-error-page>
elements need to be set to a URL that is
mapped to the following servlet class:
com.novell.nids.agent.auth.LoginServlet
The above
<login-config>
element specifies
/login
as the login page and the error page. The
/
login
URL needs a servlet mapping within the application's
web.xml
file:
<servlet>
<servlet-name>LoginServlet</servlet-name>
<servlet-class>
com.novell.nids.agent.auth.LoginServlet
</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>LoginServlet</servlet-name>
<url-pattern>/login</url-pattern>
</servlet-mapping>
4.1.2 Configuring for Logout
As part of single sign-on and single logout, the J2EE Agent supports the following:
Š
Notifying the Identity Server about application-level logout events.
Š
Informing the J2EE applications when the Identity Server logs a user out.
For global logout to function, you need to add a logout servlet and its servlet mapping to the
web.xml
file:
<servlet>
<servlet-name>LogoutServlet</servlet-name>
<servlet-class>
com.novell.nids.agent.auth.LogoutServlet
</servlet-class>
<init-param>
<param-name>postLogoutURL</param-name>
<param-value>/loggedOut</param-value>
</init-param>
<init-param>
<param-name>websphereLTPAMechanism</param-name>
<param-value>false</param-value>
<description>
This should be set to true in order to clear LTAP cookies and tokens
in
case of websphere with LTPA as authentication mechanism
</description>
</init-param>
</servlet>
<servlet-mapping>
<servlet-name>LogoutServlet</servlet-name>
<url-pattern>/logout</url-pattern>
</servlet-mapping>