Novell Access Manager 3.1 SP 2, Manual, Page: 97 / 126

Deploying the Sample Payroll Application 97
n
ov
do
cx (e
n)
16
Ap
ril 20
10
<servlet>
<servlet-name>LogoutServlet</servlet-name>
<servlet-class>
com.novell.nids.agent.auth.LogoutServlet
</servlet-class>
<init-param>
<param-name>postLogoutURL</param-name>
<param-value>/loggedOut</param-value>
</init-param>
<init-param>
<param-name>websphereLTPAMechanism</param-name>
<param-value>false</param-value>
<description>
This should be set to true in order to clear LTAP cookies and tokens
in
case of websphere with LTPA as authentication mechanism
</description>
</init-param>
</servlet>
<servlet-mapping>
<servlet-name>LogoutServlet</servlet-name>
<url-pattern>/logout</url-pattern>
</servlet-mapping>
7.3 Using the J2EE Server to Enforce
Authorization
The following procedure explains how you can configure Access Manager to use the authorization
policies of the J2EE server:
1 Deploy the sample payroll application on your J2EE server.
2 On your J2EE server, prepare the application to use the agent for login and logout. See
Section 4.1, “Preparing the Application for the Agent,” on page 67 .
These steps have already been performed for the sample application. See the
web.xml
file in
the application’s
WEB-INF
directory.
3 Complete any platform-specific configuration:
Š
JBoss: These tasks have already been performed for JBoss. To understand what was
modified, see Section 4.2, “Configuring Applications on the JBoss Server,” on page 69 .
Š WebSphere: You need to configure the RunAs Roles feature. See Section 4.3.2,
“Configuring for RunAs Roles,” on page 71 .
Š
WebLogic: You need to configure the RunAs Roles feature. See Section 4.4,
“Configuring Applications on the WebLogic Server,” on page 84 .
4 In Access Manager, create role policies for an Employee role and a Manager role.
For more information, see “
Creating Role Policies ” in the Novell Access Manager 3.1 SP2
Policy Guide .
5 Configure the agent for authentication. For more information, see Chapter 2, “Configuring the
Agent for Authentication,” on page 45 .
6 Make sure that the Enforce application server policy option is selected. In the Administration
Console, click Devices > J2EE Agents > Edit .