The main objective is to teach students how to code J2EE applications for maximum security. They will learn:
- Role based security
- Web application security
- EJB security
- LDAP integration
WebSphere Training Course duration
3 Days
WebSphere Training Course outline
- Chapter 1 - Configure WebSphere Security
- User registry
- LTPA and Single Sign On
- Configuring Local OS user registry
- Configuring LDAP OS registry
- Configuring Single Sign On
- Enable global security
- Configure administration rights
- Process level user ID
- Lab - Enable security and Single Sign On using the Domino LDAP
- Chapter 2 - Web Application Security
- Setting up servlet security.
- Setting up file security.
- J2EE role management
- Lab - Create a protected servlet.
- User context of a Servlet execution
- Accessing user credentials.
- The init method
- Programmatic role based security.
- Creating role sensitive views.
- Setup form based authentication.
- Handling login failure.
- Protect session with WebSphere security.
- Implementing a logout feature.
- Lab: Implement form based authentication and logout.
- Lab: Implement single sign on.
- Chapter 3 - EJB Security
- Setup EJB security
- Lab: Create a protected EJB and access from Servlet
- User context of a method execution.
- Accessing user credentials.
- Switching user context
- Programmatic role based security.
- Lab: Role based security
- The run as declaration.
- Implement logon in a stand alone Java client.
- Lab: Logon from a stand alone Java client.
- Chapter 4 - LDAP Integration
- Searching LDAP for additional user attributes.
-
Lab: Address book servlet.
-
Lab: Send an E-mail to the logged in user.
-
Implementing a registration feature.
- Chapter 5 - JDBC Security
- Configuring Data Source security.
- Encoding password in file
- Lab
- Prepared Statements
- Lab
- Chapter 6 - Legacy Integration
- Configuring Domino Single Sign On
- Implementing a custom user registry
- Lab: Implement a DB2 based user registry.
- Web Services Security
- Messaging Security
- J2C security
- Chapter 7 - Advanced Topics
- Hardening the file system.
- Configuring web server SSL
- Programming web site that uses SSL
- Implementing SSL based client authetication.
- Accessing client's SSL certificate data.
- Lab: Inspect SSL certificate.
- Using Java security.
- Lab: Configuring Java security in a web application.
- Encrypting data in database
