IBM Security Verify

 View Only
  • 1.  ISAM Support for Local junction

    IBM Champion
    Posted Fri February 22, 2019 04:49 PM

    Hello Community

     

    I was under the impression that "Local" junction type was still supported in ISAM 9 but somewhat discourage. But we have some application still expecting us (ISAM WRP) to host some static content. This is legacy but still I need to keep supporting it for a while.

     

    Just did a bit on research to find that the ISAM REST-API makes no reference about Junction-type = Local https://www.ibm.com/support/knowledgecenter/SSPREK_9.0.6/com.ibm.isam.doc/develop/rapi/index.html

     

    But digging elsewhere in the server task command I could still find a reference about Local junction type: https://www.ibm.com/support/knowledgecenter/SSPREK_9.0.6/com.ibm.isam.doc/cmdref/reference/ref_st_cre.html

     

    What is the real status about Local junction type support ?

     

    If we create local jct type with via pdadmin "server task" cmd how will the LMI/REST-API behave ?

     

    Thanks

     

    Sylvain Gilbert, p. ing., Conseiller Technique Infrastructures Securité/Security Infrastructures Technical Advisor

    Intact Corporation Financière | 1935 des Cascades, Saint-Hyacinthe, QC J2S 8K9

    (T) 855.646.8228, x 86667 | (M) 450.223.9537

    sylvain.gilbert@intact.net | www.intactfc.com

     



  • 2.  RE: ISAM Support for Local junction

    IBM Champion
    Posted Fri February 22, 2019 05:04 PM

    OK, I just did a bit of testing with pdadmin server task cmds.

     

    1. Creation of the local junction with pdadmin cmd

     

    pdadmin sec_master@tenant0> s t test_default2-webseald-xxxxxxxxxx create -t local  /local

    Created junction at /local

    pdadmin sec_master@tenant0>

     

    pdadmin sec_master@tenant0> s t test_default2-webseald- xxxxxxxxxx show /local

        Junction point: /local

        Type: Local

        Junction hard limit: 0 - using global value

        Junction soft limit: 0 - using global value

        Active worker threads: 0

    pdadmin sec_master@tenant0>

     

    1. LMI

     

    It does not list at all the "/local" junction.

     

    1. Conclusion ?

     

    1. We must abandon the idea to use LMI/REST-API to manage/create Local junction type ? Or if there is a secret dirty flag somewhere hidden ? Please confirrm.  (-;

     

    1. We could rely instead on a set of "pdadmin" cmds that we will submit via the Ansible role "execute_pdadmin" and it still allows us to version things in Git.

     

    1. Now trying to figure out where to upload our static content in the Appliance.

     

    Your comments are welcomed.

     

    Sylvain Gilbert, p. ing., Conseiller Technique Infrastructures Securité/Security Infrastructures Technical Advisor

    Intact Corporation Financière | 1935 des Cascades, Saint-Hyacinthe, QC J2S 8K9

    (T) 855.646.8228, x 86667 | (M) 450.223.9537

    sylvain.gilbert@intact.net | www.intactfc.com

     






  • 3.  RE: ISAM Support for Local junction

    Posted Mon February 25, 2019 12:55 AM
    Sylvain,

    WebSEAL on the appliance has a single pre-created local junction at the root of the Web space (i.e. /).  This junction can be used to store static Web pages, but cannot be used for any dynamic content (i.e. it doesn't support the execution of scripts).  The document root of this local junction can be managed using the LMI (look at the 'Junction Management' screen, and the junction-root directory).  The appliance does not support the creation of additional local junctions.

    I hope that this helps,

    Scott.

    ------------------------------
    Scott Exton
    IBM
    Gold Coast
    ------------------------------



  • 4.  RE: ISAM Support for Local junction

    Posted Fri May 10, 2019 06:26 AM
    Sylvain,

    I just would like to notice, that it is still possible to create a local junction:
    s t <server> c -t local /localdocs
    though it will point on the same junction-root.
    It could be usefull in case of using VHJ.

    Regards,
    Ivan

    ------------------------------
    Ivan Yartsev
    ------------------------------



  • 5.  RE: ISAM Support for Local junction

    Posted Fri March 04, 2022 04:32 AM
    Hello,

    I confirm that it is still possible to create local junctions (http and https) even for virtual hosts.

    Here is the reference I found

    What's missing is the ability to point to the contents of a folder instead of the root.
    Do you know if there is a way to do it?

    Thanks

    ------------------------------
    Patrizio
    ------------------------------