Hi,

I have a working env consists of webseal -> IHS -> WAS.

I was told by webseal admin that he has configured webseal server with session timeout: 10hr and inactivity timeout: 10hr

Since WAS has session timeout setting as well, my question is where is the session originally created? On webseal server or was server?

Similarly, where is LTPA token created?

Thanks,

HI Eric
WebSphere Maintans the session and default session time out will be 30mins.

LTPA also generated at WebSphere level only. The LTPA will be configured in WebSeal for SSO(single sign on).So that the user login only once to an application and he will navigate to other sub applications easily without prompting for id/pwd again.

Correct me If I am wrong.

Hi Adminuppala,

Got some update on this topic.

LTPA key is generated on WAS but LTPA token is generated on WebSeal and passed on to WAS.

Hi Guys, Does  webseal form a part of webserver or is that a separate component from webserver.
                       Thank you. 

Hi Kasi,

  No, WebSEAL is not part of the webserver.  It's a reverse proxy that comes with Tivoli Access Manager (TAM) for e-business (another product).  Now called Access Manager for Web (v7)

  Normally is in front of the Web Servers or can substitute them.

  I don't remember well but from version 6.1 you have a license of TAM e-business  with WebSphere Application Server Network Deployment license.
 
  WebSphere Authorization (and if you want Authentication) can be externalize in TAM.
 
  You can get a license of TAM only too.

Regards