This document covers the process of setting up Apache DS as an LDAP server for WebSphere Applicstion Server and then shows by example how to use LDAP as provided by Apache DS for use in in the two following scenarios
-
A Standalone LDAP server configuration
– WAS Administrative Security and User Security (Application Role Management) are both managed by a single LDAP server
-
A federated repository which contains an LDAP server and the default internal file registry
- WAS Administrative Security is managed by the file registry and User Security is managed by LDAP.
|
|
This guide is one of the Middleware Shop’s several security guides on the topic of WAS security This guide focuses on the configuration of registries used for security purposes and managed by the Virtual Member Manager. You can purchase the new WAS 8.5.5. Automation Guide, the WAS 8.5.5 Security Guide and the WAS 7 – WAS 8.x Guides from Q2 2015. |
This document, is a sample of the quality of the guides produced by Steve Robinso of the Middleware Shop.
The version of WebSphere Application Server (WAS) we are using in this guide is 8.5.5.x for Developers (WAS DEV) which at the time of writing is a “FREE No Charge” standalone product. It is essentially the same product as WAS Base, but free to download.
Topics Covered
Security is an important part of any application server configuration. In this chapter, we will cover how to secure the WebSphere Application Server’s administrative console, as well as how to configure different types of repositories containing the users and groups of authorized users who are given different levels of access to administer a WebSphere server.
In this guide, we will cover the following topics:
- Global security
- Standalone Lightweight Directory Access Protocol (LDAP) repository
- Federated repositories
- Administrative roles
Below is a list of topics which can be found.
Enjoy, Steve Robinson – Middleware Mentor and Thought Leader.
INTRODUCTION
JEE SECURITY
GLOBAL SECURITY
UNSECURE CONSOLE
TURNING ON GLOBAL SECURITY
Security Configuration Wizard
Virtual Member Manager
ROLE MANAGEMENT
Administrative roles
DISABLING GLOBAL SECURITY
SETTING THE INTERNAL REPOSITORY USING SCRIPTING
APACHEDS
Installing ApacheDS
Adding a new partition
ADDING LDAP TO A FEDERATED REPOSITORY
FEDERATED REPOSITORIES RECAP
Security settings
Wimconfig.xml
CHANGING THE OU FOR LDAP BIND
Looking at User Groups
STANDALONE LDAP
CONFIGURING THE STANDALONE LDAP SERVER
TESTING THE CONNECTION
REVIEW OF SECURITY.XML
SUMMARY
To learn more about the courses available from The Middleware Shop, please go to http://www.themiddlewareshop.com/products to see a full list of the current courses available.
Consulting
If you or your organization require support in architecture, performance tuning, automation or simply advice, then please contact me via my support site and request a conversation, where we can discuss your requirement.
About Steve
Steve is a seasoned passionate technology professional, strategist and leader.
An expert in technical communications, and adept in almost all forms of Internet and mobile related technology, Steve has time and time again proven his tenacity to improve systems around him and deliver.
Steve has worn many hats during his career such as Chief Technical Officer, Founding Member of several business ventures, Programmer, Systems Administrator, Architect, Blogger and Published Author to name a few.
Due to 20 years Industry experience in Middleware, Programming, Networks and Internet Technologies, He combines systems knowledge with efficient working methods and inter personal skills required to build effective relationship with clients and colleagues alike. Exceeding typical expectations in any role undertaken, Steve is certain to become a valuable asset within any organisation He joins.
Key Skills
• Leadership (Team, Project, Business, People).
• Architecture (Solutions, Information, Technical, Applications).
Simply, I help you deal with CANETI: Constant And Never Ending Technological Innovation
Specific IBM WebSphere skills:
WebSphere Application Server (WAS Base, WAS ND & Liberty Profile & Liberty Runtime)
- Automation
- Security, SSL
- Dev Ops
- Architecture
- Performance Tuning
Middleware Integration Skills:
- .NET programming, and Architecture
- Java Programming, and Architecture
- SOA, SOAP and XML messaging
- JBoss Fuse, WMQ, IIB, Mule
Integration Skills:
- SOA
- Process Improvement
- ICD’s
- Messaging Architecture
- Governance
General Digital Architecture & Governance
- Lightweight Architectures
- Digital Strategy, platform stacks for example IAAS, PAAS, SAAS
- PCI DSS
Industry Qualifications & Recognition
- TOGAF 9.1
- IBM Champion 2013