IBM WebSphere V5.0 Security - CGISecurity

The products depicted on the picture above are:►►►►►►►Tivoli Access Manager’s WebSEALWebSeal is a security reverse proxy that is used to authenticate the user,create and maintain a session with the user and provide URL levelauthorization. It also hides the internal structure of Web resources throughURL mapping. WebSeal supports multiple types of authentication andimplements stepping up to a stronger authentication type if necessary.IBM HTTP ServerThe Tivoli Access Manager can protect any static content on the Web serverincluding the server itself, so that non-authenticated users will not be able tocommunicate with the Web server behind the security reverse proxy,WebSEAL.WebSphere Application Server V5This server runs a main application logic of the ITSOBank sample application.For passing credentials between multiple application servers, otherWebSphere servers and Domino, WebSphere uses LTPA tokens.Lotus Domino Application ServerDomino Server runs a component of the ITSOBank sample application.WebSphere and Domino establish the Single Sign-On using LTPA tokens.SecureWay Directory ServerAccess Manager supports a number of LDAP directories. The IBMSecureWay LDAP Directory is shipped with the Tivoli Access Manager; itstores user information and user privileges, besides other applicationinformation.IBM DB2Internal systems are represented in our scenario by the application databasethat is stored on DB2 server.Tivoli Access ManagerTivoli Access Manager consists of the following runtime components:– Management ServerThe Management Server is used to manage the Access Manager securitypolicy. The Management Server receives updates from the console,Administration API or Administration command line interface.Chapter 11. Security in Patterns for e-business 363