Step of 9: Create the Host Credential Mapper database

The Host Credential Mapper (HCM) (opens new browser) is one of the key players in the Web Express Logon process because it maps users' network IDs to their host IDs. Since the Vault parameters supplied with Web Express Logon are designed to work with a JDBC database, the administrator in this scenario uses IBM DB2 to configure the HCM database. Using this type of network-accessible database provides a flexible and secure means of associating users' network IDs with their host IDs.

Using DB2, the administrator creates a table with column headings that correspond to the Vault parameters that he will add to the servlet configuration file in the next step. The following five column headings are in all upper case and must exactly match the parameter values he will specify in the servlet configuration file:

• NETWORKID: This column contains the network IDs of the users. A user's network ID is the credential that uniquely identifies the user to the network security application (in this case, Tivoli Access Manager).
• HOSTADDRESS: The column contains the destination host address. This address can either be the host's IP address or the fully qualified URL, for example, amin.raleigh.ibm.com.
• APPLICATIONID: This column contains the application IDs of the users. Application IDs are used to map users' host IDs and to retrieve passwords from the vault-style database.
  

  The APPLICATIONID column is not required for FTP sessions.

• HOSTID: This column contains the users' host IDs. A host ID is the credential used to uniquely identify the user to the host being accessed.
• PASSWORD: This column contains the users' host passwords. Similar to a DCAS passticket, this password is used to map the users' network IDs to the host IDs; however, it requires an additional parameter in the servlet configuration file, which you will edit in Step 5.

For more information about IBM DB2, refer to the following Web site: http://www.ibm.com/software/data/db2/library/ (opens new browser)

Click Next to configure the Credential Mapper Servlet (CMS).