IBM WebSphere V5.0 Security - CGISecurity

Configuring Client01
Client01 requires message layer authentication with an SSL transport; follow the
steps to configure Client01.
1. The client needs to point to the sas.client.props file using the property in the
command line, see 6.3, “Configuring the Java client” on page 103 for more
information on this; you can use the following parameter:
com.ibm.CORBA.ConfigURL=file:/c:/websphere/appclient/properties/sas.client.
props.
2. All further configuration involves setting properties within the sas.client.props
file, open it in a text editor at the /properties
directory.
3. Enable SSL for the connection; in this case, SSL will be supported but not
required: com.ibm.CSI.performTransportAssocSSLTLSSupported=true,
com.ibm.CSI.performTransportAssocSSLTLSRequired=false.
Enable client authentication at the message layer. In this case, client
authentication is supported but not required:
com.ibm.CSI.performClientAuthenticationRequired=false
com.ibm.CSI.performClientAuthenticationSupported=true
4. Use all of the rest of the defaults in the sas.client.props file. Save the file then
close it.
Configuring Server01
In the Web Console, Server01 will be configured for incoming requests to
support message layer client authentication and incoming connections to support
SSL without client certificate authentication. Server01 will be configured for
outgoing requests to support identity assertion. Follow the steps to configure
Server01:
1. Configure Server01 for incoming connections. Start the Administrative
Console for Server01, then navigate to the Security -> Authentication
Protocol section.
a. Select CSIv2 Inbound Authentication.
i. Enable Basic Authentication, by selecting Supported.
ii. Disable Client Certificate Authentication by selecting Never.
iii. Disable Identity Assertion.
b. Select CSIv2 Inbound Transport.
Enable SSL, by selecting SSL-Supported.
Chapter 6. Securing Java clients 111