Thursday 1 November 2012

GLOBAL SECURITY


        GLOBAL SECURITY

-----> It provides Authentication and Authorization for WEBSPHERE APPLICATION SERVER




STEP1  :  Enable GLOBAL SECURITY.

STEP2  : Config application to user security.

STEP3  : Users and Groups Permission.

STEP4  :  Deploy

STEP5   :  Go to Bin

STEP6   : Goto Console Security [WebSphere Security]

STEP7   : Goto Admin, Monitor, Operator, Configurator 

STEP8   : Goto Mycomputer ------> Right Click -----> Manage -----> Local User -----> User

STEP9   : Create User ID and Password for above roles

STEP10 : Create roles for Monitor ----> Mon , Configurator ----> Conf Operator ----> op

STEP11 : Goto Groups -----> Conf -----> Add check names

STEP12 : In Console Goto Security ----> Enable ----> Change Local OS -----> Config ----->  User ID -----> Server ----> Was Admin ----> Ok ----> Save 

STEP13 : Restart Server.

STEP14 : Goto Users and Groups

STEP15 : Manage Users

STEP16 : Manage Groups

-----> It will not work for Local OS Security we need to Federate

STEP17 : Goto Admin User roles

STEP 18 : Add Users and Groups

STEP19 : In Admin User role

STEP20 : Add Users and Groups

STEP21 : Start with Operator -----> User ID and Password

STEP22 : Start and Stop Operator

STEP23 : Login with Monitor in Admin Console

STEP24 : Config all we will not have option to Start , Stop Groups

STEP25 : Login Admin Add Group name




USER ROLES IN WAS : 



There are 4 types of USER ROLES 



1) MONITOR : Gives Least Privilege . It allows user to view  WebSphere Configuration and Current Application Server state.



2) OPERATOR : Monitor privilege plus the ability to change runtime state, 
such as starting or stopping servers 


3) CONFIGURATOR Monitor privilege plus the ability to change the WebSphere Configurations.

4) ADMINISTRATOR : Operator , Configurator , Monitor plus additional privileges like Modify User and Password



----> Modifying the primary administrative user and password

 ----> Mapping users and groups to the administrator role

 ----> Enabling or disabling administrative and Java 2 security 



0 comments:

Post a Comment