5 Configure the WebSphere Application Server

This chapter contains these topics:

5.1 Configuring the WebSphere Application Server for World JAX-WS Web Services (A9.3.1)

For A.9.3.1, the World Web Services were updated to use the Java API for XML Web Services (JAX_WS). In order to run these services on WebSphere Application Server, there are specific release levels and configuration steps that need to be used.

The functionality for the JAX-WS services requires PM70894, which ships in versions 7.0.0.27, 8.0.0.6, and 8.5.0.2 of WebSphere. If this functionality is required for a earlier release of WebSphere, you will need to contact your IBM representative to check on the availability of an ifix for your specific version.

Please refer to the certification information on myoraclesupport.com to determine the versions of WebSphere currently certified.

5.2 Create an Application Server

5.3 Set Up a Shared Library

The jt400.jar file needs to be set up in a shared library so that the web services process can authenticate a user. The jt400.jar can be downloaded and saved to an IFS folder.

To set up a shared library

  1. Access the WebSphere Integrated Solutions Console and select Environment->Shared libraries.

    Figure 5-1 Shared Libraries screen

    Description of Figure 5-1 follows
    Description of ''Figure 5-1 Shared Libraries screen''

  2. Select a scope from the drop-down and then click New.

    Figure 5-2 Shared Libraries screen

    Description of Figure 5-2 follows
    Description of ''Figure 5-2 Shared Libraries screen''

    Enter "WAS_A931" in the Name field, and for the classpath, enter "/path," where jt400 is saved as "/jt400.jar."

    Figure 5-3 Shared Libraries screen

    Description of Figure 5-3 follows
    Description of ''Figure 5-3 Shared Libraries screen''

    Click OK.

    Click Save.

5.4 Set Server Heap Size

To set server heap size

  1. From the WebSphere Integrated Solutions Console, select Servers_>Server Types_>WebSphere application servers.

    Figure 5-4 WebSphere Application Servers screen

    Description of Figure 5-4 follows
    Description of ''Figure 5-4 WebSphere Application Servers screen''

  2. Select your server.

    Figure 5-5 WebSphere Application Servers screen

    Description of Figure 5-5 follows
    Description of ''Figure 5-5 WebSphere Application Servers screen''

  3. Select Java and Process Management_>Process definition.

    Figure 5-6 WebSphere Application Servers screen

    Description of Figure 5-6 follows
    Description of ''Figure 5-6 WebSphere Application Servers screen''

  4. Select Java Virtual Machine.

    Figure 5-7 WebSphere Application Server screen

    Description of Figure 5-7 follows
    Description of ''Figure 5-7 WebSphere Application Server screen''

  5. For the Initial heap size, enter 1024.

  6. For the Maximum heap size, enter 2048.

  7. Click OK.

  8. Click Save.

  9. Restart the server.

5.5 Configure Application Security

To configure application security

  1. From the WebSphere Integrated Solutions Console, select the Security->Global Security option.

    Figure 5-8 Global Security screen

    Description of Figure 5-8 follows
    Description of ''Figure 5-8 Global Security screen''

  2. Check the Enable administrative security checkbox and uncheck Use Java 2 security to restrict application access to local resources.

  3. Select the Security Configuration Wizard button.

    Figure 5-9 Configure Security screen

    Description of Figure 5-9 follows
    Description of ''Figure 5-9 Configure Security screen''

  4. Click Next.

    Figure 5-10 Configure Security screen

    Description of Figure 5-10 follows
    Description of ''Figure 5-10 Configure Security screen''

  5. Select Federated repositories. Click Next.

    Figure 5-11 Configure Security screen

    Description of Figure 5-11 follows
    Description of ''Figure 5-11 Configure Security screen''

  6. Enter a user name and password to be used to administer this server.

  7. Click Next, and click Finish.

  8. Expand the Java Authentication and Authorization Service, and select System logins.

    Figure 5-12 Configure Security screen

    Description of Figure 5-12 follows
    Description of ''Figure 5-12 Configure Security screen''

  9. Click New.

    Figure 5-13 Global Security screen

    Description of Figure 5-13 follows
    Description of ''Figure 5-13 Global Security screen''

  10. Enter "worldBssvAuth" for the Alias, and click New under JAAS login modules.

  11. Enter "com.ibm.ws.wssecurity.impl.auth.module.PreCallerLoginModule" and click OK.

  12. Click New under JAAS login modules to add the following modules:

    • com.ibm.ws.wssecurity.impl.auth.module.UNTCallerLoginModule

    • com.oracle.world.security.WorldSecLogin_WAS

      (Check the Use login module proxy box when adding this class name)

    • com.ibm.ws.wssecurity.impl.auth.module.WSWSSLoginModule

    • com.ibm.ws.security.server.lm.ltpaLoginModule

    • com.ibm.ws.security.server.lm.wsMapDefaultInboundLoginModule

  13. Click Save.

    The worldBssvAuth system login should look like the screen shot below:

    Figure 5-14 Global Security screen

    Description of Figure 5-14 follows
    Description of ''Figure 5-14 Global Security screen''

  14. From the System logins screen click New.

    Figure 5-15 Global Security screen

    Description of Figure 5-15 follows
    Description of ''Figure 5-15 Global Security screen''

    Figure 5-16 Global Security screen

    Description of Figure 5-16 follows
    Description of ''Figure 5-16 Global Security screen''

  15. Enter "worldBssvLogin" for the Alias and click New under JAAS login modules.

    Figure 5-17 Global Security screen

    Description of Figure 5-17 follows
    Description of ''Figure 5-17 Global Security screen''

  16. Enter "com.ibm.ws.wssecurity.wssapi.token.impl.UNTConsumeLoginModule" for the Module class name, and click OK.

  17. Click New and enter "com.oracle.world.security.WorldLoginModule_WAS" for the Module class name.

  18. Click the Use login module proxy checkbox and click OK.

  19. Click Save.

    The worldBssvLogin system login should look like the screen shot below:

    Figure 5-18 Global Security screen

    Description of Figure 5-18 follows
    Description of ''Figure 5-18 Global Security screen''

5.6 Set Up Policies and Bindings

To set up policies and bindings

  1. From the Integrated Solutions Console, select Services->Policy sets->Application policy sets.

    Figure 5-19 Application Policy Sets screen

    Description of Figure 5-19 follows
    Description of ''Figure 5-19 Application Policy Sets screen''

  2. Select the box next to Username WSSecurity default and click Copy.

    Figure 5-20 Application Policy Sets screen

    Description of Figure 5-20 follows
    Description of ''Figure 5-20 Application Policy Sets screen''

  3. Enter "worldBssvPolicy" for the Name and click OK.

    Figure 5-21 Application Policy Sets screen

    Description of Figure 5-21 follows
    Description of ''Figure 5-21 Application Policy Sets screen''

  4. Select worldBssvPolicy.

    Figure 5-22 Application Policy Sets screen

    Description of Figure 5-22 follows
    Description of ''Figure 5-22 Application Policy Sets screen''

  5. Check the box next to WS-Addressing and click Delete.

  6. Click on WS-Security.

    Figure 5-23 Application Policy Sets screen

    Description of Figure 5-23 follows
    Description of ''Figure 5-23 Application Policy Sets screen''

  7. Click on Main policy.

    Figure 5-24 Application Policy Sets screen

    Description of Figure 5-24 follows
    Description of ''Figure 5-24 Application Policy Sets screen''

  8. Uncheck the box next to Message level protection.

  9. Click OK.

  10. Click Save.

  11. On the left hand menu, select General provider policy set bindings.

    Figure 5-25 General Provider Policy Set Bindings screen

    Description of Figure 5-25 follows
    Description of ''Figure 5-25 General Provider Policy Set Bindings screen''

  12. Check the box next to Provider sample and click Copy.

    Figure 5-26 General Provider Policy Set Bindings screen

    Description of Figure 5-26 follows
    Description of ''Figure 5-26 General Provider Policy Set Bindings screen''

  13. Enter "worldBssvBinding" in the Name field and click OK.

    Figure 5-27 General Provider Policy Set Bindings screen

    Description of Figure 5-27 follows
    Description of ''Figure 5-27 General Provider Policy Set Bindings screen''

  14. Select worldBssvBinding.

    Figure 5-28 General Provider Policy Set Bindings screen

    Description of Figure 5-28 follows
    Description of ''Figure 5-28 General Provider Policy Set Bindings screen''

  15. Check all the boxes EXCEPT WS-Security and click Delete.

  16. Click OK.

  17. Click Save.

  18. Select worldBssvBinding->WS-Security->Authentication and protection.

    Figure 5-29 General Provider Policy Set Bindings screen

    Description of Figure 5-29 follows
    Description of ''Figure 5-29 General Provider Policy Set Bindings screen''

  19. Under Authentication tokens select con_unametoken.

    Figure 5-30 General Provider Policy Set Bindings screen

    Description of Figure 5-30 follows
    Description of ''Figure 5-30 General Provider Policy Set Bindings screen''

  20. Select Callback handler.

    Figure 5-31 General Provider Policy Set Bindings screen

    Description of Figure 5-31 follows
    Description of ''Figure 5-31 General Provider Policy Set Bindings screen''

  21. Check the boxes next to the two Custom properties and click Delete.

    Figure 5-32 General Provider Policy Set Bindings screen

    Description of Figure 5-32 follows
    Description of ''Figure 5-32 General Provider Policy Set Bindings screen''

  22. Under Custom properties, enter" com.ibm.wsspi.wssecurity.token.UsernameToken.authDeferred" in the Name field.

  23. Enter "true" in the Value field.

  24. Click OK.

    Figure 5-33 General Provider Policy Set Bindings screen

    Description of Figure 5-33 follows
    Description of ''Figure 5-33 General Provider Policy Set Bindings screen''

  25. In the JAAS login dropdown box, select worldBssvLogin.

  26. Click OK.

  27. Click Save.

    Figure 5-34 General Provider Policy Set Bindings screen

    Description of Figure 5-34 follows
    Description of ''Figure 5-34 General Provider Policy Set Bindings screen''

  28. In the breadcrumb menu, select WS-Security.

    Figure 5-35 General Provider Policy Set Bindings screen

    Description of Figure 5-35 follows
    Description of ''Figure 5-35 General Provider Policy Set Bindings screen''

  29. Select Caller.

    Figure 5-36 General Provider Policy Set Bindings screen

    Description of Figure 5-36 follows
    Description of ''Figure 5-36 General Provider Policy Set Bindings screen''

  30. Click New.

    Figure 5-37 General Provider Policy Set Bindings screen

    Description of Figure 5-37 follows
    Description of ''Figure 5-37 General Provider Policy Set Bindings screen''

  31. Enter "worldBssvCaller" in the Name field.

  32. Enter "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#UsernameToken" in the Caller identity local part field.

  33. In the JAAS login dropdown, select worldBssvAuth.

    Figure 5-38 General Provider Policy Set Bindings screen

    Description of Figure 5-38 follows
    Description of ''Figure 5-38 General Provider Policy Set Bindings screen''

  34. Click OK.

  35. Click Save.

    Figure 5-39 General Provider Poliicy Set Bindings screen

    Description of Figure 5-39 follows
    Description of ''Figure 5-39 General Provider Poliicy Set Bindings screen''

  36. Restart the server.

5.7 Deploy Services

To deploy services

  1. From the Integrated Solutions Console, select Applications->Application Types->WebSphere enterprise applications.

    Figure 5-40 Enterprise Applications screen

    Description of Figure 5-40 follows
    Description of ''Figure 5-40 Enterprise Applications screen''

  2. Click Install.

    Figure 5-41 Preparing for the Application Installation screen

    Description of Figure 5-41 follows
    Description of ''Figure 5-41 Preparing for the Application Installation screen''

  3. Click Choose File, navigate to folder where the .ear file was downloaded, and select the WorldWebServices_A931.ear file.

  4. On the Preparing for the application installation screen, click Next.

  5. On the Select installation options screen, click Next.

  6. On the Map modules to servers screen, click Next.

  7. On the Map virtual hosts for Web modules screen, click Next.

  8. On the Summary screen, click Finish.

    The following screen should be displayed:

    Note:

    This can take several minutes.

    Figure 5-42 Intallation screen

    Description of Figure 5-42 follows
    Description of ''Figure 5-42 Intallation screen''

  9. Click Save.

    Note:

    This can take several minutes.

    Figure 5-43 Enterprise Applications screen

    Description of Figure 5-43 follows
    Description of ''Figure 5-43 Enterprise Applications screen''

  10. Click WORLD_SOA_A931.

    Figure 5-44 Enterprise Applications screen

    Description of Figure 5-44 follows
    Description of ''Figure 5-44 Enterprise Applications screen''

  11. Click Shared library references.

    Figure 5-45 Enterprise Applications screen

    Description of Figure 5-45 follows
    Description of ''Figure 5-45 Enterprise Applications screen''

  12. Check WORLD_SOA_A931, and click Reference shared libraries.

    Figure 5-46 Enterprise Applications screen

    Description of Figure 5-46 follows
    Description of ''Figure 5-46 Enterprise Applications screen''

  13. In the Available box, select WAS_A931, and click the arrow key to move the library to the Selected box.

  14. Click OK.

    Figure 5-47 Enterprise Applications screen

    Description of Figure 5-47 follows
    Description of ''Figure 5-47 Enterprise Applications screen''

  15. Click OK.

    Figure 5-48 Enterprise Applications screen

    Description of Figure 5-48 follows
    Description of ''Figure 5-48 Enterprise Applications screen''

  16. Click Service provider policy sets and bindings.

    Figure 5-49 Enterprise Applications screen

    Description of Figure 5-49 follows
    Description of ''Figure 5-49 Enterprise Applications screen''

  17. Check the box next to WORLD_SOA_A931, and click Attach Policy Set->worldBssvPolicy.

    Note:

    This can take several minutes.

  18. Check the box next to WORLD_SOA_A931, and click Assign Binding->worldBssvBinding.

    Figure 5-50 Enterprise Applications screen

    Description of Figure 5-50 follows
    Description of ''Figure 5-50 Enterprise Applications screen''

  19. Click Save.

  20. On the left hand menu, select WebSphere enterprise applications.

    Figure 5-51 Enterprise Applications screen

    Description of Figure 5-51 follows
    Description of ''Figure 5-51 Enterprise Applications screen''

  21. Check the box next to WORLD_SOA_A931 and click Start.

    Figure 5-52 Enterprise Applications screen

    Description of Figure 5-52 follows
    Description of ''Figure 5-52 Enterprise Applications screen''