Custom Authentication & Authorization

[vb104437]

Hi,

I am running the Advanced Single server adition of Websphere 4.0 on Solaris. From the administration console, I can only see the setting up authentication as local OS ( solaris) as the user registry.

I have the following requirements

1. I want to execute some custom code to perform authentication and single sign on. The custom code will check for the presence of a cookie in the request. If the cookie is not present, the request is redirected to another servlet, which will display a page for the authentication. Submission of this will execute some custom code, which performs the actual authentication and then if sucessful sets the cookie in the response, and then redirect back to the original request.

What I have understood from the docs is that the authentication can be performed only againest with local OS or an LDAP complaint server as the user registry. Is there any way authentication can be performed with some custom applications as user registeries?

2. I also have the membership information in a custom application. I want to use this to perform the actual authorization of the application components ( servlets, EJB methods). Basically I want to map the users and groups in the custom application to the application roles defined in the deployment descriptor. To do this I some how need to get the application server to call my code get the role/roles for the current principal. I am not sure how do I make websphere to do this job.?

Thanks in Advance
Vasanth

 

[fearo]

Hi,

1. V4 of WebSphere onwards supports Custom User Registry (this option was not supported in previous versions) in addition to Local OS and LDAP.

2. Now I need a little help here as development is not my scene. You have a third party application which contains information about users. If you can use this application as your Custom User registry then you should be able to bind the Security Roles to "All Authenticated Users" in the AAT. The instructions are on 755 of the WAS v4 Handbook.

I may have misunderstood your 2nd point. If so then please give me an example of the problem so that I can get make another attempt.

Hope this helps!

Regards,

Fearo