13.07.2015 Views

IBM WebSphere V5.0 Security - CGISecurity

IBM WebSphere V5.0 Security - CGISecurity

IBM WebSphere V5.0 Security - CGISecurity

SHOW MORE
SHOW LESS
  • No tags were found...

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

6. Provide the name for the class, in this case:com.ibm.itsobank.tai.CustomTAI.7. Click OK.8. Select the new interceptor, then click the Custom Properties link.9. Create the following custom properties from the table below.Table 8-3 Custom properties for the interceptorProperty nameproxyservervaluewsl01proxyport 443proxyuserproxypasswordwsl01userpasswordSave the configuration for <strong>WebSphere</strong> to make the changes effective.10.You will have to modify the application to use basic authentication for the Webapplication. You can either export the ITSOBank application, modify with theApplication Assembly Tool, then redeploy it; or stop the server open thedeployed application with the Application Assembly Tool (AAT) by selectingthe ITSOBank.ear directory in AAT, do the modification, then restart theserver.Note: This custom Trust Association Interceptor only works with basicauthentication.11.Restart the application server.12.Create a junction for the WebSeal proxy using the following command in thepdamin administration client:server task webseald-wsl01 create -t ssl -h appsrv01 -p 9443 -B -U“wsl01user” -W “password” -c all /customtaiWhere wsl01 is the name of the proxy server, appsrv01 is the name of the<strong>WebSphere</strong> application server, 9080 is the port number for the embedded<strong>WebSphere</strong> HTTP server, wsl01user is a user registered with the password inthe user registry that will be used to authenticate the proxy server to theapplication server.Note: You need to create the wsl01user in the user registry and set thepassword to password.Chapter 8. Programmatic security 193

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!