IBM WebSphere V5.0 Security - CGISecurity

Form login configurationThe following steps shows how to configure form-based login using theApplication Assembly Tool and Studio.Using Application Assembly Tool1. After importing the itsobank.ear file into AAT, expand the tree itsobank ->Web Modules and right-click the itsobankWeb Web module.2. In the pop-up menu, select Properties.3. Switch to the Advanced tab.4. Check the box Login Configuration.5. Clickthe drop-down list Authentication Method and select FORM.6. In the Realm Name field enter ITSOBank7. in the Login page field enter /login/login.html8. in the Error page field enter /login/loginerror.html9. Click OK to close the Web Modules Properties window.Using WebSphere Studio1. Expand the tree itsobankWeb -> Web Content -> WEB-INF and double-clickthe file web.xml. A Web Deployment Descriptor should be opened in adeployment descriptor editor window.2. Select the Pages tab then modify the Login section:a. Type in the realm name; we have used ITSOBank.b. Click the drop-down list and select FORM as the Authentication method.c. In the Login page, click Browse and select /login/login.html.d. In the Error page, click Browse and select /login/loginerror.html (wehave used the same page for login and error. You can define a customerror.jsp page that will present actual error code and error messages).3. Click File -> Save Deployment Descriptor.Setting the Authentication Method for the application Web module will create a section in a Web deployment descriptor XML file, as shown in thefollowing example.60 IBM WebSphere V5.0 Security Handbook