IBM WebSphere V5.0 Security - CGISecurity

As a next step, you have to make sure that the application is using the rightLDAP settings for the filter. Actually, you will have to change them in the .ear fileand redeploy the ITSOBank application in WebSphere. In order to avoid all thesecurity mappings, you can simply export the application from WebSphere anddo the modifications on the exported .ear file.Open the ITSOBank application in the Application Assembly Tool and selectitsobank -> Web modules -> itsobankWeb -> Filters -> PostLoginFilter ->Initialization Parameters. Modify the filter initialization settings: BaseDN,ServerName, ServerPort, UserAttr to reflect your runtime configuration, thenclick Apply and save the .ear file. Use this latest version of the .ear file anddeploy it in WebSphere.To test the custom login implemented in this section, open the sample ITSOBankapplication included with the book, using your browser at:http:///itsobank.Select the link on the main page which says: Modified Customer Transfer.When you have security enabled, the application returns the login page first.Once you have logged in with the right user, you will see the employeeTypevalue at the bottom of the customertransfer.jsp page.4.5.3 Form-based logoutOne of the IBM’s extensions to the J2EE Specification is the form-based logout.After logging out, the user is required to re-authenticate to have access toprotected resources again. This logout form can be on any page with calling aPOST action on the ibm_security_logout servlet. This form must exist within thesame Web application to which the user gets redirected after logging out.Example 4-7 Sample logout form from the ITSOBank applicationToday’s e-business Web applications require strict and well-designed security;providing the logout function is one of the important functions. Obviously, closingthe browser and destroying the session is always an option for the user, but it isnot the most intelligent solution to finish a session with an application.Combining the logout function with programmatic security, one can implementstep-up re-authentication, where the user can change credentials and can gethigher authority in the application.68 IBM WebSphere V5.0 Security Handbook