IBM WebSphere V5.0 Security - CGISecurity

3. On the back-end server, the Bouncer session EJB captures the message,
attaches its own message with the caller’s user name, and returns the
message to the front-end server.
4. The PassThrough session EJB gets the response, attaches its own message
together with the caller’s user name; client is the caller.
5. The client gets the response back from the front-end server and dumps it out
to the standard out.
J
J2EE client
PassThrough
Bean
Bouncer
Bean
Figure 6-2 Identity Assertion application
There is a .properties file for the application, which stores the information for the
EJB clients, where to find the EJB server. It is stored in the
IDAssertionCommon.jar file, called ejblocations_en_US.properties. You can
modify the settings using the Application Assembly Tool, WebSphere Studio or
editing the file in the deployed application. Specify the following properties for the
application, for example:
ejb.front.server.hostname=server01
ejb.front.server.port=2809
ejb.back.server.hostname=server02
ejb.back.server.port=2809
Leave the bean names unchanged.
The sample application is running in a three machine environment; scenario 2
might require a second client machine, unless you reconfigure the first client.
In this environment, the client machine is running the WebSphere Client runtime,
installed from the WebSphere Client CD, while the other two systems are running
the WebSphere Application Server base server.
Chapter 6. Securing Java clients 109