IBM WebSphere V5.0 Security - CGISecurity

The ITSOBank application provided with this book has a J2EE application client
which requests service from an EJB operating in the remote EJB container. The
EJB’s home interface is called com.ibm.itsobank.ejbs.ConsultationHome which
the client accesses be querying the JNDI namespace. The source code for the
server and client components is included in the application EAR file. The client
does not contain any code for logging in since this mechanism is provided by the
client runtime environment.
The launchclient command (which is located in the /bin
directory) will configure the J2EE application client environment by examining the
application client’s deployment descriptor (application-client.xml) which is
provided with the application client. The client runtime environment must provide
access to the EJB JAR files that contain the classes used by the client. These
JAR files should be referenced in the client’s MANIFEST.MF file. The
recommendation is to provide the application EAR file, which will contain the
classes for the entire application.
ITSOBank J2EE client
The ITSOBank application uses a Java application with a graphical interface to
retrieve balance information for the accounts. The following steps describe how
to start the application client in order to access the secured resources.
1. Use the following command to launch the J2EE client.
launchclient itsobank.ear -CCBootstrapHost=
-CCBootstrapPort=
If you do not specify host name and port number the client will connect to the
localhost using the default port 2809.
2. If Global Security has been enabled, a window should appear requesting user
details (see Figure 6-9).
Figure 6-9 J2EE client challenge
3. Enter the user name and password of a user in the consultant group.
4. Click OK.
122 IBM WebSphere V5.0 Security Handbook