WA1155 WebSphere v5 Security Programming
Course Outline
Chapter 1 - Configure WebSphere Security
  • User registry
  • LTPA and Single Sign On
  • Configuring Local OS user registry
  • Configuring LDAP OS registry
  • Configuring Single Sign On
  • Enable global security
  • Configure administration rights
  • Process level user ID
  • Lab - Enable security and Single Sign On using the Domino LDAP
Chapter 2 - Web Application Security
  • Setting up servlet security.
  • Setting up file security.
  • J2EE role management
  • Lab - Create a protected servlet.
  • User context of a Servlet execution
    • Accessing user credentials.
    • The init method
  • Programmatic role based security.
    • Creating role sensitive views.
  • Setup form based authentication.
  • Handling login failure.
  • Protect session with WebSphere security.
  • Implementing a logout feature.
  • Lab: Implement form based authentication and logout.
  • Lab: Implement single sign on.
Chapter 3 - EJB Security
  • Setup EJB security
  • Lab: Create a protected EJB and access from Servlet
  • User context of a method execution.
    • Accessing user credentials.
    • Switching user context
  • Programmatic role based security.
  • Lab: Role based security
  • The run as declaration.
  • Implement logon in a stand alone Java client.
  • Lab: Logon from a stand alone Java client.
Chapter 4 - LDAP Integration
  • Searching LDAP for additional user attributes.
  • Lab: Address book servlet.
  • Lab: Send an E-mail to the logged in user.
  • Implementing a registration feature.
Chapter 5 - JDBC Security
  • Configuring Data Source security.
  • Encoding password in file
  • Lab
  • Prepared Statements
  • Lab
Chapter 6 - Legacy Integration
  • Configuring Domino Single Sign On
  • Implementing a custom user registry
  • Lab: Implement a DB2 based user registry.
  • Web Services Security
  • Messaging Security
  • J2C security
Chapter 7 - Advanced Topics
  • Hardening the file system.
  • Configuring web server SSL
  • Programming web site that uses SSL
  • Implementing SSL based client authetication.
  • Accessing client's SSL certificate data.
  • Lab: Inspect SSL certificate.
  • Using Java security.
  • Lab: Configuring Java security in a web application.
  • Encrypting data in database