Using Advanced Features

• Defining Security Roles in the LDAP Directory Server
• Enterprise Java Bean Security Role Configuration

Defining Security Roles in the LDAP Directory Server:

1. Launch the iPlanet Server Products Netscape Console.
2. When prompted, identify your user ID and password to login.
3. Select the Users and Groups tab.
4. Select the Create button across from the New User field to create a new user.
5. Select Organization Unit People to identify the specified user.
6. Enter the user information as desired.
7. Select the Create button across from the New Group field to create a new group.

Enterprise Java Bean Security Role Configuration

1. Make sure the security roles are properly defined in the LDAP directory server.
2. Create an Enterprise Java Bean.

   To define the Security Roles at the EJB level:

   1. From the Explorer, select the EJB you just created.
   2. Right click to display the context menu and select Properties.

      The EJB Properties dialog appears.

   3. Select the References tab.
   4. select the Security Role Reference field.

      The Security Role Reference Property Editor appears.

   5. Select Add to add a new security role reference.

      The Add Security Role Reference dialog appears.

   6. In the Name field, enter the security role groups you defined in the LDAP directory server.
   7. In the Description field, enter any description desired.
   8. In the Security Role Link field, enter the name for the group and user you defined in the LDAP directory server.
   9. Select OK to dismiss the Add Security Role Reference dialog.
   10. Select OK to dismiss the Add Security Role Reference Property Editor.
   11. Close the EJB Properties dialog.
3. Create an EJB module.

   To define the Security Roles at the EJB module level:

   1. From the Explorer, select the EJB module you just created.
   2. Right click to display the context menu and select Properties.

      The EJB module Properties dialog appears.

   3. Select the Properties tab.
   4. Select the Security Roles field.

      The Security Roles Property Editor appears.

   5. Select a Security Role link from the popup menu, or select Edit Module Roles to add a new role.
   6. Select OK to close the Security Roles Property Editor.
   7. Select the iPlanet AS tab.
   8. Select the Mapped Security Roles field.

      The Mapped Security Roles Editor appears.

   9. Select a Role Map.
   10. Add users to the Role Map just defined.
   11. Add a Group to the Role Map.
   12. Select OK to close the Mapped Security Roles Editor.
4. Add an EJB to the EJB module.

   To define the Security Roles at the Global Level:

   1. From the Tools menu, select Global Options.
   2. Select the iPlanet Application Server settings node.
   3. Enter the values for security role groups and users as defined in the LDAP Directory Server.