IBM WebSphere V5.0 Security - CGISecurity

Item Cell Node Server Appl.
CosNaming Roles
Administrative Role mappings
X
X
User to role mapping
X
J2C Authentication Data entries X (C)* X (A)**
SSL Repertoire entries X (C)* X (A)**
(C)* means that the item was configured on a particular level and it is available
on a different one.
(A)** means that the item is available on a particular level and was configured on
a different level.
Note:
J2C Authentication Data Entries are also used in the Resource Adapter
Settings.
The SSL Repertoire entries are also used in the Web container security,
CSIv2 and IBM SAS transport protocol security.
Global security
The global security settings for a cell are almost the same as the global security
settings for a server (not being in a cell). The difference is that only LTPA is
available as an authentication mechanism. The reason for this is that SWAM is
not capable of passing credentials between multiple application servers, so we
need an authentication mechanism that supports this feature; at this time, LTPA
is the only one that provides this function. As an alternative, you can develop and
use your own authentication mechanism; in future releases, Kerberos might
provide this functionality.
For all other global security settings refer to 10.2, “WebSphere Global Security”
on page 235.
SSL settings
The SSL Repertoire entries are exactly the same as for a server (not being in a
cell).
The entries defined for a cell are synchronized between the application servers
attached to the cell, so the entries are available for the whole cell or for individual
servers; refer to the individual server settings shown later.
340 IBM WebSphere V5.0 Security Handbook