Configuring Access Manager using TAI with a trusted user.
使用带信任用户的TAI配置Access manager。
Access Manager requires a suffix to maintain its metadata.
Access Manager需要一个后缀来维护它的元数据。
You have created the taiuser and imported it in Access Manager.
您已经创建了taiuser并将其导入到Access Manager中。
Figure 12 shows a simple architecture using Tivoli Access manager.
图12显示了使用TivoliAccess Manager的简单体系结构。
Configure tenant specific users and groups in Tivoli Access manager.
在TivoliAccess Manager中配置特定租户的用户和组。
Access Manager requires special LDAP attributes to be added to the LDAP Schema.
Access Manager要求向LDAP模式中添加特定的ldap属性。
Tivoli Access Manager contains a security policy which defines access to a domain.
TivoliAccess Manager包含一个安全策略，它定义了对域的访问。
ObjectGrid can be integrated with Tivoli Access Manager to achieve a secure distributed cache solution.
ObjectGrid可以与TivoliAccess Manager集成，以实现安全的分布式缓存解决方案。
To configure Tivoli Access Manager integration with the DataPower device, only a few steps need to be done.
要配置TivoliAccess Manager与DataPower设备的集成，只需几个步骤即可完成。
For this example, use the access Manager access control list (ACL) to manage the ObjectGrid authorization policies.
对于此示例，请使用Access Manager访问控制列表(Access Control List,ACL)来管理ObjectGrid授权策略。
Tivoli Access Manager Policy Server: Supports policies definition and security administration based on the policies.
TivoliAccess ManagerPolicyServer：支持策略定义和基于策略的安全管理。
This parameter indicates the network location of the remote Access Manager server when authorizing users at run time.
此参数在运行时向用户授权的时候指示远程Access Manager服务器的网络位置。
Now, let's go back and take a look at how we would solve our printer authorization problem using Tivoli Access Manager.
现在让我们回头看看如何使用TivoliAccess Manager解决我们的打印机授权问题。
You will see that it utilizes the JAAS authentication service to login to Access Manager using the configured login name.
您将会看到，其中利用了JAAS身份验证服务来使用登录名登录到Access Manager。
When the Access Manager credential is successfully retrieved, the login module creates a Subject object and a PDPrincipal object.
成功检索了Access Manager凭据后，登录模块将创建Subject对象和PDPrincipal对象。
Tivoli Access Manager for e-business is a mature product that provides robust, policy-based security to a corporate web environment.
TivoliAccess Managerfor e-business是一款成熟的产品，能够为企业web 环境提供强壮的、基于策略的安全性。
Create some test objects in Access Manager, such as users, groups, and protected resources, and then add an Access Control List policy.
在Access Manager中创建一些测试对象，如用户、组和受保护资源，然后添加访问控制列表策略。
The Subscriber is also authorized to invoke the subscribed service in the Tivoli Access Manager-based authorization policy decision point.
还授权订阅者在基于TivoliAccess Manager的授权策略决策点调用已订阅的服务。
The figure shows how Access Manager is connected to both the ESB Gateway and the actual ESB, offering security services to both as needed.
上图显示了Access Manager如何同时连接到esb网关和实际的ESB，从而根据需要同时为两者提供安全性。
This process configures Tivoli access Manager to update access control lists to allow the service subscriber to invoke the subscribed service.
该流程可配置TivoliAccess Manager来更新访问控制列表，以允许服务订阅者调用所订阅的服务。
When all the programs are in place, you can run the sample included with this article to see the ObjectGrid and Access Manager integration work.
所有程序就位后，可以运行本文所包括的示例来了解objectgrid和Access Manager集成工作情况。
Also, in an enterprise context, you might design the architecture around implementing an external security application, such as Tivoli Access Manager.
另外，在企业上下文中，您可以围绕实现外部安全应用程序(如TivoliAccess Manager)设计体系结构。
However, the requirement(s) will most likely not specify that the portal should use a credential vault versus another solution such as Tivoli Access Manager.
然而，这些需求很可能没有指定门户应该使用凭据库 ，而不要使用另一个方案，如 Tivoli Access Manager。
As we discussed earlier, enterprise security products, such as Tivoli Access Manager, are typically designed to solve sets of classes of authorization problems.
正如我们前面所讨论的，TivoliAccess Manager之类的企业安全产品通常设计用于解决一系列授权问题。
After completing the steps described above, you are ready to include all authentication and authorization activities through the configured Access Manager client in any AAA action.
完成上述步骤以后，您就准备好通过已配置的Access Manager客户端在任何AAA操作中包括所有身份验证和授权活动了。
Within such a platform, enforcing security constraints between applications and between application tenants is a critical requirement and Tivoli Access Manager can play a key role.
在此类平台中，在应用程序与应用程序租户之间实施安全约束是一个关键需求，TivoliAccess Manager能够扮演这个关键角色。
Note that in the Tivoli Access Manager architecture, the client and service provider must be members of the same Kerberos realm or of Kerberos realms that have a trust relationship.
注意，在TivoliAccess Manager体系结构中，客户端和服务提供者必须是同一kerberos域或具有信任关系的多个kerberos域的成员。
Tivoli access Manager WebSEAL server: a security proxy component that enforces access to web servers and manages the web space centrally, linking all web servers into one logical web space.
TivoliAccess ManagerWebSEALServer：一个安全代理组件，它实现对web服务器的访问和集中管理web空间，将所有web服务器链接到一个逻辑web空间。
Seamless integration with Tivoli access Manager for better management of access control policies and with WebSphere Services Registry and Repository for better management of service meta-data.
无缝集成TivoliAccess Manager以更好地管理访问控制策略，无缝集成WebSphereServicesRegistry andRepository以更好地管理服务元数据。
Seamless integration with Tivoli access Manager for better management of access control policies and with WebSphere Services Registry and Repository for better management of service meta-data.
无缝集成TivoliAccess Manager以更好地管理访问控制策略，无缝集成WebSphereServicesRegistry andRepository以更好地管理服务元数据。
应用推荐