Download PDF - IBM Redbooks

for the specified security token type. For example, if you select Username
as the token type, you have to select the UsernameTokenGenerator class
as the token generator class.
c. For the security token, expand the drop-down list and select the security
token defined on the WS Extension page (BasicAuthToken).
d. Select Use value type. Select the value type from the drop-down list that
matches your selection. This selection fills the local name and callback
handler. If you specify a token generator for a custom token, select
Custom Token as the value type and enter the URI and local name
manually. In our example, we select Username Token for basic
authentication.
e. Select the callback handler class or input your custom callback handler
class name manually (for a custom token). Some provided callback
handler classes can be selected from the list. The provided default
callback handler classes are as follows:
NonPromptCallbackHandler: Enter the user ID and password
manually.
GUIPromptCallbackHandler: Request the user ID and password by
displaying a GUI prompt dialog box. This is useful for a J2EE
application client.
X590CallbackHandler: Get an X.509 certificate for a key store file.
PkiPathCallbackHandler: Create an X.509 certificate and binary data
without CRL using PKIPath encoding.
PKCS7CallbackHandler: Create an X.509 certificate and binary data
with or without CRL using PKCS#7 encoding.
LTPATokenCallbackHandler: Get user credentials from the LTPA
token.
StdinPromptCallbackHandler: Prompt the user for a user ID and
password on the command line.
We select the NonPromptCallbackHandler for basic authentication. The
user ID and password must be known in the server user registry.
f. If the token generator is the NonPromptCallbackHandler, enter the user ID
and password of the client. We use a user ID and password of WINSERV.
g. If the selected callback handler requires a key store (for example, the
X509CallbackHandler, PkiPathCallbackHandler, and
PKCS7CallbackHandler), select Use key store and specify the key
store-related information. You have to specify the key store storepass
(password to access the key store), key store path, and key store type
from the list.
122 Security in WebSphere Application Server Version 6.1 and J2EE 1.4 on z/OS