IBM WebSphere V5.0 Security - CGISecurity

Security server
Security server is a component of WebSphere Application Server that runs in
each application server process. If multiple application server instances are
executed on a single node, then multiple security servers exist on that node.
Security Server component is responsible for managing authentication and it
collaborates with the authorization engine and the user registry.
Security collaborators
Security collaborators are application server processes responsible for enforcing
security constraints specified in deployment descriptors. They communicate with
security server every time when authentication and authorization actions are
required. The following security collaborators are identified:
► Web security collaborator residing in the Web container.
Web collaborator provides the following services to the application:
– Checks authentication
– Performs authorization according to the constraint specified in the
deployment descriptor
– Logs security tracing information
► EJB security collaborator residing in the EJB container.
EJB collaborator uses CSIv2 and SAS to authenticate Java client requests to
enterprise beans. It works with the security server to perform the following
functions:
– Check authorizations according to the specified security constraint
– Support communication with local user registry
– Log security tracing information
– Communicate external ORB using CSIv2 when a request for a remote
bean is issued
JMX MBeans
Java Management Extension Beans are used in WebSphere Application Server
V5.0 for management and administration related tasks. Please refer to 9.1.3,
“Java Management Extension Architecture (JMX)” on page 220 for a more
detailed architecture view.
Figure 9-7 briefly shows how these components interact in three different
communication scenarios.
Chapter 9. WebSphere Application Server security 227