NonStop Servlets for JavaServer Pages (NSJSP) 7.0 System Administrator's Guide

Managing NSJSP
NonStop Servlets for JavaServer Pages (NSJSP) 7.0 System Administrator’s Guide—674372-005
4-14
NSJSP Manager Security
2. Add the corresponding security rule for the role in the web.xml file. The
snapshot of a modified web.xml file appears as follows:
<security-constraint>
<web-resource-collection>
<web-resource-name>Server-Mbeans-Read-Only URLs</web-resource-name>
<url-pattern>/scope/*</url-pattern>
<url-pattern>/cluster/*</url-pattern>
<url-pattern>/mbeans/*</url-pattern>
<url-pattern>*.html</url-pattern>
<url-pattern>*.jsp</url-pattern>
<url-pattern>*.xml</url-pattern>
<url-pattern>*.htm</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>viewer</role-name>
</auth-constraint>
</security-constraint>
3. Use the tool to add the viewer role. For more information, see How to Use the
Tool to Manage the Users of NSJSP Manager on page A-2.
4. Add the new role to the host-access.properties file, to enable the role to
access the NSJSP installation instances.
Defining a new user
To define a new user, perform the following steps:
1. Use the command line tool to create a new user.
2. Use the command line tool to generate encrypted password for users.
3. Use the command line tool to assign roles to the new user.
For example, to define a new user with viewer role, perform the following steps:
1. Enter the name of the user in the prompt provided by the tool. You cannot specify
an existing user.
2. Enter the password for the user you want to create.
3. Specify the digest algorithm for the password you provided.
4. Assign the viewer role to the user. If the viewer role does not exists, then
create the role first.
Note. The new users and roles created will be available only when the NSJSP Manager
application is restarted.