IBM WebSphere V5.0 Security - CGISecurity

Configuring the SSL settings and adding a new entry on a cell level will be
reflected in the server’s security settings; but only the configuration is
synchronized. It is the administrator’s responsibility to make sure that the keys
are copied to the right location for the application servers. It is very important that
the SSL settings refer to certain directory paths, which are not the same on each
server, simply because the WebSphere root directory is not (or may not be) the
same on every machine, especially when heterogenous (UNIX, Windows)
platforms are attached to the cell.
The solution to this problem is to use the WebSphere environment variables in
path definitions on the server level and specify the platform and installation
dependent directories there. Once an environment variable with the same name
is defined for each server, you can refer to that variable on the cell level. This is
what happens when you use the ${WAS_ETC_DIR} variable, for example.
For SSL settings, refer to 10.8, “Configuring SSL” on page 258.
User registries
The user registry configured for the cell will be the user registry for each server in
the cell.
The user registry for the cell should be a centralized repository, an LDAP
Directory, OS users from a domain, or a custom user registry reading from a
centralized, common user repository.
For user registry settings, refer to 10.4, “Configuring a user registry” on
page 244.
Authentication mechanisms
As mentioned before, in a cell LTPA is the only available authentication
mechanism at the moment.
When you configure LTPA for the cell with the deployment manager, you will
have to generate the LTPA key and secure it with a password. The LTPA private
and public keys are stored in the security configuration file, security.xml. Since
the configurations in this file are synchronized, you do not have to worry about
distributing the LTPA keys on each server; the deployment manager will take
care of that.
For information on LTPA configuration, refer to 10.6, “LTPA” on page 250.
Chapter 10. Administering WebSphere security 341