Adding SPNEGO TAI properties using the wsadmin utility (deprecated)
You use the wsadmin utility to add properties for the Simple and Protected GSS-API Negotiation Mechanism (SPNEGO) trust association interceptor (TAI) in the security configuration for WebSphere® Application Server.
About this task

In WebSphere Application Server Version 6.1, a trust association interceptor (TAI) that uses the Simple and Protected GSS-API Negotiation Mechanism (SPNEGO) to securely negotiate and authenticate HTTP requests for secured resources was introduced. In WebSphere Application Server 7.0, this function is now deprecated. SPNEGO web authentication has taken its place to provide dynamic reload of the SPNEGO filters and to enable fallback to the application login method.
depfeatVerify that end-user desktop browsers are configured to support SPNEGO authentication, that the SPNEGO TAI is enabled, that the Java™ virtual machine (JVM) property is set and, that WebSphere Application Server is configured to enable the operation of the SPNEGO TAI.
Use the wsadmin utility to configure the SPNEGO TAI for WebSphere Application Server:Procedure
Results
Example
- Example 1
- The following example configures the SPNEGO TAI to intercept HTTP
requests that contain IE 6 in the user agent request
header. The SPNEGO TAI uses the SPN of HTTP/myhost.ibm.com@<default_realm>
to authenticate the request originator.
$AdminTask addSpnegoTAIProperties -host myhost.ibm.com -filter user-agent%=IE 6
- Example 2
- The following is an example of adding SPNEGOTAIProperties for SPN1 to use the default filterClass and to intercept all requests for the host, central01.austin.ibm.com.
wsadmin>$AdminTask addSpnegoTAIProperties -interactive Add SPNEGO TAI properties Add SPNEGO TAI configuration properties. *Host name in Service Principal Name (host): central01.austin.ibm.com Service Principal Name identifier (spnId): 1 HTTP header filter rule (filter): Name of class used to filter HTTP requests (filterClass): SPNEGO not supported browser response (noSpnegoPage): NTLM Token received browser response (ntlmTokenPage): Trim User Name browser response (trimUserName): Add SPNEGO TAI properties F (Finish) C (Cancel) Select [F, C]: [F] f WASX7278I: Generated command line: $AdminTask addSpnegoTAIProperties {-host central01.austin.ibm.com} com.ibm.ws.security.spnego.SPN1.hostName=central01.austin.ibm.com wsadmin>