03.05.2015 Views

IBM WebSphere V5.0 Security - CGISecurity

IBM WebSphere V5.0 Security - CGISecurity

IBM WebSphere V5.0 Security - CGISecurity

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

6. Provide the name for the class, in this case:<br />

com.ibm.itsobank.tai.CustomTAI.<br />

7. Click OK.<br />

8. Select the new interceptor, then click the Custom Properties link.<br />

9. Create the following custom properties from the table below.<br />

Table 8-3 Custom properties for the interceptor<br />

Property name<br />

proxyserver<br />

value<br />

wsl01<br />

proxyport 443<br />

proxyuser<br />

proxypassword<br />

wsl01user<br />

password<br />

Save the configuration for <strong>WebSphere</strong> to make the changes effective.<br />

10.You will have to modify the application to use basic authentication for the Web<br />

application. You can either export the ITSOBank application, modify with the<br />

Application Assembly Tool, then redeploy it; or stop the server open the<br />

deployed application with the Application Assembly Tool (AAT) by selecting<br />

the ITSOBank.ear directory in AAT, do the modification, then restart the<br />

server.<br />

Note: This custom Trust Association Interceptor only works with basic<br />

authentication.<br />

11.Restart the application server.<br />

12.Create a junction for the WebSeal proxy using the following command in the<br />

pdamin administration client:<br />

server task webseald-wsl01 create -t ssl -h appsrv01 -p 9443 -B -U<br />

“wsl01user” -W “password” -c all /customtai<br />

Where wsl01 is the name of the proxy server, appsrv01 is the name of the<br />

<strong>WebSphere</strong> application server, 9080 is the port number for the embedded<br />

<strong>WebSphere</strong> HTTP server, wsl01user is a user registered with the password in<br />

the user registry that will be used to authenticate the proxy server to the<br />

application server.<br />

Note: You need to create the wsl01user in the user registry and set the<br />

password to password.<br />

Chapter 8. Programmatic security 193

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!