IBM WebSphere V5.0 Security - CGISecurity

3. In that window, under Security -> Cell Settings select the Enable Securitycheckbox.4. Below that checkbox, for Local OS Authentication, provide the details forServer ID, Server Password and Confirmed Password.5. Save this configuration.6. Open web.xml (Web Deployment Descriptor) under the itsobankWeb -> WebContent -> WEB-INF folder.7. Click the Pages tab of the deployment descriptor view.8. In this view, under Login in the drop-down list for Authentication method,select Basic. You can give a name to this Realm in the text box provided forthe Realm name.9. In the same window, switch to the Security tab.10.Add a new Security Role, for example: webservicesrole.11.Click the Security Constraints button just below the Security heading.12.Now add a Security Constraint. Under Web Resource Collections, you shouldsee an entry named (New Web Resource Collection). Select that and clickEdit. This opens a new window called Web Resource Collections.13.Under HTTP Methods, select GET and POST. We need to protect the URLswith HTTP Basic Authentication. First, let us protect the rpcrouter servlet. Todo this, add /servlet/rpcrouter to the URL section.14.Save the Web deployment descriptor.15.Under itsobank -> META-INF, open application.xml.16.Switch to the Security tab, click Gather; this will gather all the security rolesdefined for all the modules.17.Now click the security role that we have defined, webservicesrole, thenunder WebSphere Bindings select All authenticated users.18.Save and close the configuration.Go to the Server perspective to re-start the server. This is done so that the serverpicks up the security information that we have defined.We also need to modify the code that is generated by WebSphere Studio tomake this HTTP Basic Authentication work for us. For this, create a new proxyclient without WebSphere Security. Please refer to the redbook Web ServicesWizardry with WebSphere Studio Application Developer, SG24-6292 for moreinformation.Modify the Web Services proxy code generated by the wizard to enter BasicAuthentication credentials.144 IBM WebSphere V5.0 Security Handbook