Preparing The Applications And The J2Ee Servers; Preparing The Application For The Agent; Configuring For Login - Novell ACCESS MANAGER 3.1 SP1 - AGENT GUIDE Manual

Preparing the Applications and the
4
J2EE Servers
After installing a J2EE Agent and configuring it to use an Identity Server for authentication, you
need to configure your applications to use the Identity Server authentication and to configure the
security of the J2EE server to interact with the J2EE Agent for authentication and authorization.
Section 4.1, "Preparing the Application for the Agent," on page 67
Section 4.2, "Configuring Applications on the JBoss Server," on page 69
Section 4.3, "Configuring Applications on the WebSphere Server," on page 71
Section 4.4, "Configuring Applications on the WebLogic Server," on page 73

4.1 Preparing the Application for the Agent

For each Web application that you want to use with the J2EE Agent, you need to configure the Web
application to use the J2EE Agent for login and for logout. You do this by configuring the
application's file:
web.xml
Section 4.1.1, "Configuring for Login," on page 67
Section 4.1.2, "Configuring for Logout," on page 68
The file of the sample application (
web.xml
location of this application is platform-specific:
On a Linux J2EE server, this application is copied to the
directory.
examples
On a Windows J2EE server, this application is copied to the
<Install_Directory>\sampleapp

4.1.1 Configuring for Login

The Web application needs to be able to log in to the Identity Server that you have configured the
J2EE Agent to trust. You accomplish this by specifying that the Web application uses FORM
authentication. This is specified in the
file. For example:
WEB-INF/web.xml
<login-config>
<auth-method>FORM</auth-method>
<form-login-config>
<form-login-page>/login</form-login-page>
<form-error-page>/login</form-error-page>
</form-login-config>
</login-config>
The
<form-login-page>
mapped to the following servlet class:
com.novell.nids.agent.auth.LoginServlet
PayrollApp.ear
directory.
<login-config>
and
<form-error-page>
) has these modifications. The
/opt/novell/nids_agents/
section of the application's descriptor in the
elements need to be set to a URL that is

Preparing the Applications and the J2EE Servers

4
67