IBM WebSphere V5.0 Security - CGISecurity

The ITSOBank application provided with this book has a J2EE application clientwhich requests service from an EJB operating in the remote EJB container. TheEJB’s home interface is called com.ibm.itsobank.ejbs.ConsultationHome whichthe client accesses be querying the JNDI namespace. The source code for theserver and client components is included in the application EAR file. The clientdoes not contain any code for logging in since this mechanism is provided by theclient runtime environment.The launchclient command (which is located in the /bindirectory) will configure the J2EE application client environment by examining theapplication client’s deployment descriptor (application-client.xml) which isprovided with the application client. The client runtime environment must provideaccess to the EJB JAR files that contain the classes used by the client. TheseJAR files should be referenced in the client’s MANIFEST.MF file. Therecommendation is to provide the application EAR file, which will contain theclasses for the entire application.ITSOBank J2EE clientThe ITSOBank application uses a Java application with a graphical interface toretrieve balance information for the accounts. The following steps describe howto start the application client in order to access the secured resources.1. Use the following command to launch the J2EE client.launchclient itsobank.ear -CCBootstrapHost=-CCBootstrapPort=If you do not specify host name and port number the client will connect to thelocalhost using the default port 2809.2. If Global Security has been enabled, a window should appear requesting userdetails (see Figure 6-9).Figure 6-9 J2EE client challenge3. Enter the user name and password of a user in the consultant group.4. Click OK.122 IBM WebSphere V5.0 Security Handbook