IBM WebSphere V5.0 Security - CGISecurity

Configuring Client01
Client01 requires message layer authentication with an SSL transport. follow the
steps below to configure Client01.
1. The client needs to point to the sas.client.props file using the property
com.ibm.CORBA.ConfigURL=file:/c:/websphere/appclient/properties/sas.
client.props.
2. All further configuration involves setting properties within the sas.client.props
file, open it in a text editor in the /properties
directory.
3. Enable SSL for the connection, in this case, SSL will be supported but not
required: com.ibm.CSI.performTransportAssocSSLTLSSupported=true,
com.ibm.CSI.performTransportAssocSSLTLSRequired=false.
4. Enable client authentication at the message layer. In this case, client
authentication is supported but not required:
com.ibm.CSI.performClientAuthenticationRequired=false,
com.ibm.CSI.performClientAuthenticationSupported=true.
5. Save the file then close it.
Configuring Server01
In the Administrative console, Server01 will be configured for incoming requests
to support message layer client authentication and incoming connections to
support SSL without client certificate authentication. Server01 will be configured
for outgoing requests to support identity assertion. Follow the steps below to
configure Server01:
1. Configure Server01 for incoming connections. Start the Administrative
Console for Server01, then navigate to the Security -> Authentication
Protocol section.
a. Select CSIv2 Inbound Authentication.
i. Enable Basic Authentication by selecting Supported.
ii. Disable Client Certificate Authentication by selecting Never.
iii. Disable Identity Assertion.
b. Select CSIv2 Inbound Transport.
Enable SSL by selecting SSL-Supported.
2. Configure Server01 for outgoing connections.
a. Select CSIv2 Outbound Authentication.
i. Enable Basic Authentication by selecting Supported.
ii. Disable Identity Assertion.
118 IBM WebSphere V5.0 Security Handbook