IBM WebSphere V5.0 Security - CGISecurity

As a next step, you have to make sure that the application is using the right
LDAP settings for the filter. Actually, you will have to change them in the .ear file
and redeploy the ITSOBank application in WebSphere. In order to avoid all the
security mappings, you can simply export the application from WebSphere and
do the modifications on the exported .ear file.
Open the ITSOBank application in the Application Assembly Tool and select
itsobank -> Web modules -> itsobankWeb -> Filters -> PostLoginFilter ->
Initialization Parameters. Modify the filter initialization settings: BaseDN,
ServerName, ServerPort, UserAttr to reflect your runtime configuration, then
click Apply and save the .ear file. Use this latest version of the .ear file and
deploy it in WebSphere.
To test the custom login implemented in this section, open the sample ITSOBank
application included with the book, using your browser at:
http:///itsobank.
Select the link on the main page which says: Modified Customer Transfer.
When you have security enabled, the application returns the login page first.
Once you have logged in with the right user, you will see the employeeType
value at the bottom of the customertransfer.jsp page.
4.5.3 Form-based logout
One of the IBM’s extensions to the J2EE Specification is the form-based logout.
After logging out, the user is required to re-authenticate to have access to
protected resources again. This logout form can be on any page with calling a
POST action on the ibm_security_logout servlet. This form must exist within the
same Web application to which the user gets redirected after logging out.
Example 4-7 Sample logout form from the ITSOBank application
Today’s e-business Web applications require strict and well-designed security;
providing the logout function is one of the important functions. Obviously, closing
the browser and destroying the session is always an option for the user, but it is
not the most intelligent solution to finish a session with an application.
Combining the logout function with programmatic security, one can implement
step-up re-authentication, where the user can change credentials and can get
higher authority in the application.
68 IBM WebSphere V5.0 Security Handbook