Ansicht
Dokumentation

login/certificate_mapping_rulebased - enable / disable rule-based X.509 certificate mapping

login/certificate_mapping_rulebased - enable / disable rule-based X.509 certificate mapping

BAL Application Log Documentation   Vendor Master (General Section)  
This documentation is copyright by SAP AG.
SAP E-Book
------------------------------------------------------------------------
| Parameter : login/certificate_mapping_rulebased |
------------------------------------------------------------------------
------------------------------------------------------------------------
| Short Description : Activate rule-based certificate logon |
------------------------------------------------------------------------
------------------------------------------------------------------------
| Parameter description : |
| ----------------------- |
| NetWeaver 7.1 Enhancement Pack 1 allows a rule-based certificate |
| logon (this requires the use of a new version of the SAPCRYPTOLIB): |
| |
| |
| Until now, you needed to create a mapping entry in table USREXTID |
| (type DN) for every user or every certificate; you could also use |
| the report RSUSREXTID to generate these entries. However, you then |
| needed to start this report again for newly-created users. You could |
| also use transaction EXTID_DN to manually maintain individual |
| mapping entries. |
| |
| |
| The rule-based approach, on the other hand, requires only the |
| definition of a rule, which is then dynamically evaluated at |
| runtime. It is also possible to include irregular mapping entries in |
| an exception table (USRCERTMAP). This exception table is always |
| searched first; only then does the system check the available |
| mapping rule to see if it can be used. |
| |
| If you are using the rule-based procedure (and the new |
| SAPCRYPTOLIB), certificates that contain Unicode characters are |
| also supported. |
------------------------------------------------------------------------
------------------------------------------------------------------------
| Application area: Logon |
------------------------------------------------------------------------
------------------------------------------------------------------------
| Unit : none |
------------------------------------------------------------------------
------------------------------------------------------------------------
| Default Value : 0 (inactive) |
------------------------------------------------------------------------
------------------------------------------------------------------------
| Who permitted to make changes: The customer |
------------------------------------------------------------------------
------------------------------------------------------------------------
| Limitations of operating systems: none |
------------------------------------------------------------------------
------------------------------------------------------------------------
| Limitations for database systems : none |
------------------------------------------------------------------------
------------------------------------------------------------------------
| Other Parameters Affected or Dependent: |
------------------------------------------------------------------------
------------------------------------------------------------------------
| Valid Input, Formats, Areas: |
| 0 = inactive (use of the mapping table USREXTID, type DN) |
| 1 = active (use of tables USRCERTMAP and USRCERTRULE) |
------------------------------------------------------------------------

------------------------------------------------------------------------
| Short Description : enable / disable rule-based X.509 certificate mapping
------------------------------------------------------------------------

------------------------------------------------------------------------
| Applications Area : Login
------------------------------------------------------------------------

------------------------------------------------------------------------
| Parameter Type : B
------------------------------------------------------------------------

------------------------------------------------------------------------
| Changes allowed : X
------------------------------------------------------------------------

------------------------------------------------------------------------
| Valid for Operating System : *
------------------------------------------------------------------------

------------------------------------------------------------------------
| Dynamic switchable : X
------------------------------------------------------------------------

------------------------------------------------------------------------
| Same on all Servers : X
------------------------------------------------------------------------


BAL Application Log Documentation   Fill RESBD Structure from EBP Component Structure  
This documentation is copyright by SAP AG.

Length: 5966 Date: 20240426 Time: 164857     sap01-206 ( 5 ms )