NonStop Servlets for JavaServer Pages (NSJSP) 6.1 System Administrator's Guide

Introduction to NSJSP
NonStop Servlets for JavaServer Pages (NSJSP) 6.1 System Administrator’s Guide—596210-006
1-10
Securing Web Applications
Starting, Stopping, and Restarting the iTP Secure WebServer
Because NSJSP installations are created in an iTP Secure WebServer environment,
when the iTP Secure WebServer environment is stopped, started, or restarted, all the
NSJSP installations in the iTP Secure WebServer environment are also stopped,
started, or restarted respectively. You can perform these operations on the iTP Secure
WebServer by using the scripts located in the iTP Secure Webserver conf directory or
by using the iTP Secure WebServer Admin application.
You can perform operations on the NSJSP installation server classes by using the
NSJSP Manager, PATHCOM, or PDMCOM.
Modifying the NSJSP Configuration
You can make changes to the NSJSP Server Class processes by using the NSJSP
Manager and the Admin Web application. Also, you can modify the NSJSP MBeans
and any user-defined application MBeans by using the NSJSP Manager.
For more information on Management in NSJSP, see Chapter 4, Managing NSJSP.
Securing Web Applications
NSJSP enables you to secure user web applications.
NSJSP can validate and authenticate users when they attempt to access a web
application, and authorize users to access resources. The user credentials required for
authentication and authorization are stored in an NSJSP repository.
NSJSP also provides the option of using the Java security manager. The Java security
manager is used to safeguard application data and services and ensure the security
and reliability of NSJSP.
NSJSP also provides advanced security features, such as locking and filtering of
requests. The locking feature ensures that users whose credentials are not valid and
who have exceeded the maximum allowed attempts are locked out. The filtering
feature ensures that only requests received from specified sources are allowed to
execute.
For more information on security, see Chapter 7, Migrating to NSJSP 6.1.
Note. If you make changes to the configuration files in an NSJSP installation, you must restart
the iTP Secure WebServer for the changes to take effect.
Note. When the iTP Secure WebServer is configured for online-upgrade, each NSJSP
installation is split across the two PATHMONs. Only the new NSJSP Manager can manage the
NSJSP Server Class processes and configurations in both PATHMONs. The old Manager and
the Admin Web application can manage only one PATHMON.