IBM WebSphere V5.0 Security - CGISecurity

2. We will first configure LTPA authentication. To do so, enter a password to
use with LTPA in the Password and Confirm Password fields, and then click
the OK button. The Global Security panel will then display. Return to the LTPA
panel, and select Trust Association. The following panel will then be
displayed.
Figure 12-10 WebSphere Trust Association panel
3. Check the Trust Association Enabled box, and then click the OK button.
You will be returned to the LTPA panel. Select Trust Association again, and
return to this panel. Select the Interceptors link, the Interceptors panel will
then be displayed.
4. On the Interceptors panel, select the WebSEAL interceptor,
com.ibm.security.Web.WebSealTrustAssociationInterceptor. The
com.ibm.security.Web.WebSealTrustAssociationInterceptor panel will then be
displayed.
5. On the WebSealTrustAssociationInterceptor panel, click Custom Properties.
From this panel, we will define the properties for our WebSEAL TAI
connection.
Note: These properties can also be defined in a properties file.
6. In this example, we will define the trust association properties using custom
properties. To begin, click the New button.
7. From this panel, we will define our properties. In the Name field, enter
com.ibm.Websphere.security.Webseal.id. This property defines the HTTP
header value WebSphere is to use to obtain the actual user id for this request.
In the Value field, enter iv-user. If you wish, you may also enter a description
in the Description field. When done, select OK.
8. Repeat the previous two steps and add the following properties:
398 IBM WebSphere V5.0 Security Handbook