Setting Global Security Options and Assigning the User Role

After establishing the connection with an LDAP server, you need to set the WebSphere global security option to enable client authentication for the applications.

In addition, you need to define which users (or groups of users) are allowed access to the web-based applications. If users are not explicitly given access via security roles, as described below, they will not be able to access the applications.

  1. Click Enable administrative security.

  2. Verify that Enable application security is selected.

  3. Clear (uncheck) Use Java 2 security to restrict application access to local resources.

  4. From the Available realm definitions list, verify that Standalone LDAP registry is selected.

  5. Click Apply.

  6. On the left side of the console (under Applications / Application Types), click WebSphere enterprise applications.

  7. In the Name column, click one of the following links, based on the application you are configuring:

    • webtop_war

    • webdashboard_war

  8. In the Detail Properties area on the right side of the console, click Security role to user/group mapping.

    The mapping information appears.

  9. Click the check box to the left of the fiperuser security role.

  10. Click Map Groups.

    Note: Individual users can be added to a security role by clicking the check box next to the role name and clicking the Map Users button.

    The Map users/groups screen appears.

  11. Click Search.

    A list of known groups in the LDAP directory appears.

  12. Select a group or multiple groups.

  13. Copy the groups to the list on the right side by clicking the button.

    You can also remove groups using the button. Contact your local system administrator for more information on the groups that you should be using.

  14. Click OK.

    You are returned to the Security role to user/group mapping screen, and the group you selected is now listed in the Mapped groups column.

  15. For the WebDashboard only, repeat step 9 through step 14 for the fiperadmin role.

    Note: Groups mapped to the fiperadmin role have access to more WebDashboard features than those groups mapped to the fiperuser role. For more information, see Using the WebDashboard.

  16. Click OK.