IBM WebSphere V5.0 Security - CGISecurity

Item Cell Node Server Appl.CosNaming RolesAdministrative Role mappingsXXUser to role mappingXJ2C Authentication Data entries X (C)* X (A)**SSL Repertoire entries X (C)* X (A)**(C)* means that the item was configured on a particular level and it is availableon a different one.(A)** means that the item is available on a particular level and was configured ona different level.Note:J2C Authentication Data Entries are also used in the Resource AdapterSettings.The SSL Repertoire entries are also used in the Web container security,CSIv2 and IBM SAS transport protocol security.Global securityThe global security settings for a cell are almost the same as the global securitysettings for a server (not being in a cell). The difference is that only LTPA isavailable as an authentication mechanism. The reason for this is that SWAM isnot capable of passing credentials between multiple application servers, so weneed an authentication mechanism that supports this feature; at this time, LTPAis the only one that provides this function. As an alternative, you can develop anduse your own authentication mechanism; in future releases, Kerberos mightprovide this functionality.For all other global security settings refer to 10.2, “WebSphere Global Security”on page 235.SSL settingsThe SSL Repertoire entries are exactly the same as for a server (not being in acell).The entries defined for a cell are synchronized between the application serversattached to the cell, so the entries are available for the whole cell or for individualservers; refer to the individual server settings shown later.340 IBM WebSphere V5.0 Security Handbook