Step of 11: Create the Host Credential Mapper database

The Host Credential Mapper (HCM) (opens new browser) is one of the key players in the Web Express Logon process because it maps users' network IDs to their host IDs. Since the DCAS parameters supplied with Web Express Logon are designed to work with a JDBC database, the administrator in this scenario uses IBM DB2 to configure the HCM database. Using this type of network-accessible database provides a flexible and secure means of associating users' network IDs with their host IDs.

Using DB2, the administrator creates a table with column headings that correspond to the DCAS parameters that he will add to the servlet configuration file in the next step. The following four column headings are in all upper case and must exactly match the parameter values he will specify in the servlet configuration file:

• NETWORKID: This column contains the network IDs of the users. A user's network ID is the credential that uniquely identifies the user to the network security application (in this case, Tivoli Access Manager).
• HOSTADDRESS: The column contains the destination host address. This address can either be the host's IP address or the fully qualified URL, for example, amin.raleigh.ibm.com.
• APPLICATIONID: This column contains the application IDs of the users. Application IDs are used to map users' host IDs and to retrieve passtickets from the RACF (opens new browser) server.
• HOSTID: This column contains the users' host IDs. A host ID is the credential used to uniquely identify the user to the host being accessed.

For more information about IBM DB2, refer to the following Web site: http://www.ibm.com/software/data/db2/library/ (opens new browser)

Click Next to configure the Credential Mapper Servlet (CMS).