Create files with user information
  1. Create directory D:\localAuth (or wherever you like).
  2. Create file users.props in that directory. There is one line per user in this file. Each line contains userid, password, uid (numerical), groupIds(numerical), and optional description, separated by colons. For example (note trailing colon required in the case of no description): 
lainhart:ADMIN:1:100:
chaney:ADMIN:2:100:
The UIDs are unique - the group ids map to ids described in groups.props.

  1. Create file groups.props in that directory. There is one line per group in this file. Each line contains groupName, groupId (numerical), comma-separated userid list (no spaces), group description separated by colons. See a good starting point for Jazz (including our four roles) below: 
JazzAdmins:100:lainhart,chaney:JazzAdmins role
JazzDWAdmins:200::JazzDWAdmins role
JazzUsers:300::JazzUsers role
JazzGuests:400::JazzGuests role
Notice that there is some redundant information here. In order to ensure that the user lainhart (e.g.) is a member of JazzAdmins, you need to add the JazzAdmins groupid (100) to users.props and you have to add lainhart to the JazzAdmins line in groups.props.

Set up security realm in WAS
  1. Log into the WAS console
  2. Security -> Secure administration, applications, and infrastructure
  3. Select Enable administrative security and Enable application security. Do not select Java 2 security.
  4. Under User account repository, select Standalone custom registry. Click Configure.
  5. Set the Primary administrative user name to a name that you defined in users.props above (e.g. "lainhart" or "chaney").
  6. Choose Automatically generated server identity
  7. Leave default value of com.ibm.websphere.security.FileRegistrySample for Custom registry class name.
  8. Click Custom Properties
  9. Add these two properties:
    • usersFile = D:/localAuth/users.props
    • groupsFile = D:/localAuth/groups.props
  10. restart WAS

Role mapping for Jazz application
  1. Log into the WAS console
  2. Applications -> Enterprise Applications
  3. Select the Jazz application
  4. Security role to user/group mapping
  5. For each of the four roles, select the table row by clicking the left checkbox, then click Look up groups
  6. Set Search String to "*" and click Search
  7. The four roles defined in groups.props should show up under Available. Select the appropriate one and click on ">>".
  8. Click "OK".
  9. Save changes.
이 게시물을...