title: wsadmin Web authentication behavior
body: <p>I've been scouring the IBM docs to try to find this but I keep coming up empty. Does anyone know the related script/command using wsadmin to configure the 'Web authentication behavior' for a WAS 7.0 setup?</p>
  
  <p>The setting I'm looking at can be reached from the console from <code>Security &gt; Global Security &gt; Web and SIP security &gt; General Settings &gt; Authenticate only when the URI is protected &gt; Use available authentication data when an unprotected URI is accessed</code></p>
  
  <p><strong>Update:</strong></p>
  
  <p>Based on comments I toggled the setting and found the config that changed in {profile}/security.xml. </p>
  
  <p>This is what it looked like with the "Use available authentication data when an unprotected URI is accessed" check-box unchecked:</p>
  
  <p><code>&lt;webAuthAttrs xmi:id="DescriptiveProperty_8" name="com.ibm.wsspi.security.web.webAuthReq" value="lazy" type="String" displayNameKey="" nlsRangeKey="" hoverHelpKey="" range="lazy,persisting,always" inclusive="false" firstClass="false"/&gt;</code></p>
  
  <p>and here is what it looked like once I checked it (which is what I'm trying to do with wsadmin):</p>
  
  <p><code>&lt;webAuthAttrs xmi:id="DescriptiveProperty_8" name="com.ibm.wsspi.security.web.webAuthReq" value="persisting" type="String" displayNameKey="" nlsRangeKey="" hoverHelpKey="" range="lazy,persisting,always" inclusive="false" firstClass="false"/&gt;</code></p>
  
  <p>So the question now is, how do I update this specific property using wsadmin?</p>