4
In the second maintenance release for SAS 9.2, the Rebuild Web Applications option in the SAS
Deployment Manager automatically extracts all EAR files and places them in the SAS-configuration-
directory\Lev1\Web\Staging\exploded directory. If you need to extract an EAR file manually,
follow steps 1 and 2. If the .ear file is already extracted, you can skip to step 3 and edit the file that is
in SAS-configuration-
directory\Lev1\Web\Staging\exploded\sas.wip.apps9.2.ear\sas.svcs.logon.war.
1. In a temporary directory, extract the SAS-config-dir/Web/Staging/sas.wip.apps9.2.ear
(EAR) file so that you can access the Logon Manager WEB-INF directory. You can use the jar
command to extract the file:
jar xvf sas.wip.apps9.2.ear
File sas.svcs.logon.war is available in the extracted directory.
2. In a second temporary directory, extract the Logon Manager sas.svcs.logon.war (WAR) file:
jar xvf sas.svcs.logon.war
Within this particular directory, you can now access the Logon Manager WEB-INF directory.
3. Edit the web.xml file in the WEB-INF directory to add information about security constraints, an
authentication method, and security roles. For example, above the closing </web-app> tag, you
might add these elements:
<security-constraint>
<web-resource-collection>
<web-resource-name>All resources</web-resource-name>
<url-pattern>/*</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>SASWebUser</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>BASIC</auth-method>
<realm-name>myrealm</realm-name>
</login-config>
<security-role>
<role-name>SASWebUser</role-name>
</security-role>
In this example, all pages are protected and can be accessed only by users who have been
assigned the SASWebUser role.
4. Edit the weblogic.xml file in the WEB-INF directory. In this sample configuration, you use this
file to define a security role assignment that maps the SASWebUser role to a principal named
SASUsers. Later in this example, you create the SASUsers group and add members to the
group. File content should resemble this example:
<?xml version='1.0' encoding='UTF-8'?>
<weblogic-web-app xmlns=”http://www.bea.com/ns/weblogic/90”
Commenti su questo manuale