Adding the Agent Filter to the IBM WebSphere Application Server 6.0 Administration Console

This required task more tightly integrates the IBM WebSphere Application Server 6.0 Administration Console with the Access Manager environment. This task is required only once for the IBM WebSphere Application Server 6.0 Administration instance (typically server1) where the Administration Console is installed.

The IBM WebSphere Portal Server 6.0 agent provides a servlet filter that can be added to the IBM WebSphere Application Server 6.0 Administration Console. This filter allows the enforcement of coarse grained URL policies defined within Access Manager to further control the access to protected resources on the IBM WebSphere Administration Console. The following steps detail how this filter can be installed.

To Add the Agent Filter to the IBM WebSphere Application Server 6.0 Administration Console

1. Ensure that the Administration instance of IBM WebSphere Application Server is stopped.

2. Locate the adminconsole/WEB-INF/web.xml file, which contains the deployment descriptors for the IBM WebSphere 6.0 Administration Console.

   The path to this web.xml file is:

   WAS-base/AppServer/systemApps/adminconsole.ear/adminconsole.war/WEB-INF/

   where WAS-base represents the directory where IBM WebSphere Application Server 6.0 was installed.

3. Backup the web.xml file.

   Because you will modify the deployment descriptor in the next step, creating a backup file at this point is important, especially if you need to uninstall the agent in the future.

4. Edit the web.xml file, as follows:

   <display-name>adminconsole</display-name>
   
   <filter id="Filter_PolicyAgent">
   <filter-name>Policy Agent</filter-name>
   <filter-class>
   com.sun.identity.agents.filter.AmAgentFilter
   </filter-class>
   </filter>
   
   ... //other filter definitions
   
   <filter-mapping id="FilterMapping_PolicyAgent">
   <filter-name>Policy Agent</filter-name>
   <url-pattern>/*</url-pattern>
   </filter-mapping>
   
   ... //other filter mappings
   
   </web-app>