NonStop Servlets for JavaServer Pages (NSJSP) 7.0 System Administrator's Guide

Introduction to NSJSP
NonStop Servlets for JavaServer Pages (NSJSP) 7.0 System Administrator’s Guide—674372-005
1-10
Securing Web Applications
started, or restarted respectively. You can perform these operations on the iTP Secure
WebServer by using the scripts located in the iTP Secure Webserver conf directory or
by using the iTP Secure WebServer Admin application.
You can perform operations on the NSJSP installation server classes by using the
NSJSP Manager, PATHCOM, or PDMCOM.
Modifying the NSJSP Configuration
You can make changes to the NSJSP Server Class processes by using the NSJSP
Manager. Also, you can modify the NSJSP MBeans and any user-defined application
MBeans by using the NSJSP Manager.
For more information on Management in NSJSP, see Chapter 4, Managing NSJSP.
Securing Web Applications
NSJSP enables you to secure user web applications.
NSJSP can validate and authenticate users when they attempt to access a web
application, and authorize users to access resources. The user credentials required for
authentication and authorization are stored in an NSJSP repository.
NSJSP also provides the option of using the Java security manager. The Java security
manager is used to safeguard application data and services and ensure the security
and reliability of NSJSP.
NSJSP also provides advanced security features, such as locking and filtering of
requests. The locking feature ensures that users whose credentials are not valid and
who have exceeded the maximum allowed attempts are locked out. The filtering
feature ensures that only requests received from specified sources are allowed to
execute.
For more information on security, see Chapter 7, Migrating to NSJSP 7.0
.
NSJSP Features
NSJSP is distinguished by the following key features:

Scalability
Scalability in NSJSP refers to its ability to increase its capacity to process a large
number of servlet and JSP requests simultaneously, by adding resources, such as
Note. If you make changes to the configuration files in an NSJSP installation, you must restart
the iTP Secure WebServer for the changes to take effect.
Note. When the iTP Secure WebServer is configured for online-upgrade, each NSJSP
installation is split across the two PATHMONs. Only the new NSJSP Manager can manage the
NSJSP Server Class processes and configurations in both PATHMONs. The old Manager and
the Admin Web application can manage only one PATHMON.