To Update web.xml for the Worklist Manager Console (for LDAP)

The roles defined in web.xml are abstract roles are not used to match groups in the LDAP directory. The groups that are mapped to the roles in sun-web.xml are used to match LDAP groups.

1. In the NetBeans Projects window, expand the Worklist Manager Console folder (by default, WLMConsoleWeb).

2. Under the Worklist Manager Console folder, expand Web Pages and then expand WEB-INF.

3. Open the file web.xml.

   The XML Editor appears.

4. Click the XML tab.

5. Modify the realm-name ID attribute in the login configuration section to be LDAPRealm. It should look similar to the following:

   <login-config> <auth-method>FORM</auth-method> <realm-name id="LDAPRealm"/> <form-login-config> <form-login-page>/login.jsp</form-login-page> <form-error-page>/login-failed.jsp</form-error-page> </form-login-config> </login-config>

6. Click the Security tab and expand Login Configuration.

7. In the Realm Name field, enter LdapRealm.

8. Expand Security Roles, and define the necessary security roles (as described in To Define Security Roles for the Worklist Manager Console.

9. Expand Security Constraints, and click Add Security Constraint.

   A new constraint appears and is named Constraint with a number appended to the end.

10. Name the new constraint worklist.

11. Under Web Resource Collection, do the following:

    1. Click Add.

       The Add Web Resource window appears.

       

    2. For the Resource Name, enter worklist. For the URL Pattern, enter /worklist/*.

    3. Select All HTTP Methods, and then click OK.

    4. Repeat the above steps to add resources with the following names and URL patterns:

       Resource Name	URL Pattern
       TaskList	/GetTaskListServlet
       xforms-jsp	/xforms-jsp/*

12. Select Enable Authentication Constraint.

13. Next to Role Name, click Edit.

    The Edit Role Names dialog box appears.

14. Select all LDAP roles in the left column, and click the right arrow button to transfer them to the right column.

    

15. Click OK.

    The image below illustrates a defined security constraint.

    

16. Save and close web.xml.

17. Continue to To Map User Groups to Security Roles for the Worklist Manager Console (for LDAP).