Novell Access Manager 3.1 SP 2, Manual

Page: 55 / 126

Configuring the Agent for Authentication 55
n
ov
do
cx (e
n)
16
Ap
ril 20
10
Path. Specify the path for J2EE server. For this example, this is
/j2ee
.
Web Server IP Address: Specify the IP address of the application server. For the
configuration in Figure 2-3 , enter 10.10.10.40.
Host Header: Select Web Server Host Name .
Web Server Host Name: Specify the DNS name of the application server.
4 Click OK .
5 To create a protected resource for the application server, select the name of the parent proxy in
the
Proxy Service List .
6 Click Protected Resources, then click New.
7 Specify a name for the resource, then click OK .
Specify a name that allows you to associate this protected resource with your path-based
service.
8 Configure the resource for the type of protection you want.
Public Access to the First Page: If you want users to be able to access the first page of the
application without authentication, select None for the type of contract and accept the default
path of
/*
in the URL Path List . Click OK and continue with Step 9 . If you have already
created this type of protected resource, you don’t need to create another one.
J2EE Agent configuration allows you to set up authentication and access restrictions to the
pages in the application.
Authentication Required for the First Page: If you want users to authenticate before they
have access to the first page of the application, you need to create two protected resources: one
to prompt for authentication and one to allow public access to the nesp application. A path-
based service can only have multiple protected resources if the multi-homing path exists on the
Web server and the path is not removed when the request is sent to the Web server (see
Step 10 ). To create the multiple resources:
8a For this first protected resource, select None for the contract.
8b In the URL Path List , specify the path to the nesp application. For this example:
/j2ee/nesp
8c Click OK twice.
8d
To add a second protected resource, click New , specify a name, then click OK .
8e For the contract, select the contract you want to use for authentication.
8f
In the URL Path List , specify the path to the application. For the sample payroll
application, this is the following path:
/j2ee/payroll
8g Click OK three times.
9
In the Proxy Service List , select the path-based proxy service.
10 Configure the Remove Path on Fill option.
Š If the path you specified for the proxy service exists on the Web server and specifies the
location of the Web resource, do not select this option.
Š
If the path you specified for the proxy service does not exist on the Web server, select this
option. The
Reinsert Path in “set cookie” Header option is also selected.