Novell Access Manager 3.1 SP 2, Руководство пользователя, Страница: 67 / 126

Preparing the Applications and the J2EE Servers
4
67
n
ov
do
cx (e
n)
16
Ap
ril 20
10
4
Preparing the Applications and the
J2EE Servers
After installing a J2EE Agent and configuring it to use an Identity Server for authentication, you
need to configure your applications to use the Identity Server authentication and to configure the
security of the J2EE server to interact with the J2EE Agent for authentication and authorization.
Š
Section 4.1, “Preparing the Application for the Agent,” on page 67
Š Section 4.2, “Configuring Applications on the JBoss Server,” on page 69
Š
Section 4.3, “Configuring Applications on the WebSphere Server,” on page 71
Š Section 4.4, “Configuring Applications on the WebLogic Server,” on page 84
4.1 Preparing the Application for the Agent
For each Web application that you want to use with the J2EE Agent, you need to configure the Web
application to use the J2EE Agent for login and for logout. You do this by configuring the
application’s
web.xml
file:
Š Section 4.1.1, “Configuring for Login,” on page 67
Š
Section 4.1.2, “Configuring for Logout,” on page 68
The
web.xml
file of the sample application (
PayrollApp.ear
) has these modifications. The
location of this sample payroll application is platform-specific:
Š
On a Linux J2EE server, this application is copied to the
/opt/novell/nids_agents/
examples
directory.
Š
On a Windows J2EE server, this application is copied to the
<Install_Directory>\sampleapp
directory.
For more information on the sample payroll application, see Section 1.2, “Overview of the Sample
Payroll Application,” on page 12 and Chapter 7, “Deploying the Sample Payroll Application,” on
page 95 .
4.1.1 Configuring for Login
The Web application needs to be able to log in to the Identity Server that you have configured the
J2EE Agent to trust. You accomplish this by specifying that the Web application uses FORM
authentication. This is specified in the
<login-config>
section of the application's descriptor in the
WEB-INF/web.xml
file. For example:
<login-config>
<auth-method>FORM</auth-method>
<form-login-config>
<form-login-page>/login</form-login-page>
<form-error-page>/login</form-error-page>
</form-login-config>
</login-config>