63.10 Modifying the Login Module Stack

You can modify the Login Module Stack.

1. Start the SAP Visual Administrator tool and log in. (/usr/sap/SID/InstanceName/j2ee/admin/go.sh).
2. Select the Security Provider service, click the Policy Configurations tab, and switch to edit mode.
3. In the Components list, select the ticket authentication template.
4. Delete all login modules except for the following:

   • com.sap.security.core.server.jaas.EvaluteTicketLoginModule

   • com.sap.security.core.server.jaas.CreateTicketLoginModule

5. Click Add New and select AmSAPEP70LoginModule from the list of modules.
6. Click Modify and move AmSAPEP70LoginModule between the two remaining login modules.

   The new ticket authentication template should match the values in the following table.

   Table 63-3 Ticket Authentication Values

   Login Module	Flag
   EvaluateTicketLoginModule	SUFFICIENT
   AmSAPEP70LoginModule	REQUISITE
   CreateTicketLoginModule	OPTIONAL