Skip to main content

By clicking Submit, you agree to the developerWorks terms of use.

The first time you sign into developerWorks, a profile is created for you. Select information in your developerWorks profile is displayed to the public, but you may edit the information at any time. Your first name, last name (unless you choose to hide them), and display name will accompany the content that you post.

All information submitted is secure.

  • Close [x]

The first time you sign in to developerWorks, a profile is created for you, so you need to choose a display name. Your display name accompanies the content you post on developerworks.

Please choose a display name between 3-31 characters. Your display name must be unique in the developerWorks community and should not be your email address for privacy reasons.

By clicking Submit, you agree to the developerWorks terms of use.

All information submitted is secure.

  • Close [x]

Data Web Services on WebSphere Application Server, Part 2: Enable transport-level security

Use IBM Data Web Services with basic HTTP authentication and authorization

Michael Schenker, Software Engineer, IBM
Michael Schenker is a software engineer at IBM's Silicon Valley Laboratory in San Jose, Calif. He joined IBM in 2002 and works in the IBM Data Server Tooling area. His subject of expertise is the Web service enablement of IBM's data servers. He holds a Master's degree in computer sciences from the University of Applied Sciences in Leipzig, Germany.
Namrata Misra (nammisra@us.ibm.com), Software Engineer, IBM
Namrata Misra is a software developer in the Information Management Group. She joined IBM in 2005 as an intern. Her specialties include Java, XML, Web services, and databases. She is one of the developers for Data Web Services, which come with IBM Data Studio.

Summary:  Part 1 of this series explored the basic development and deployment steps to use an IBM Data Web Service with WebSphere® Application Server. Now you are ready to explore more advanced topics. This tutorial shows you how to configure the sample Data Web Service application from Part 1 to use basic HTTP authentication and authorization.

View more content in this series

Date:  08 May 2008
Level:  Introductory PDF:  A4 and Letter (483 KB | 15 pages)Get Adobe® Reader®

Activity:  7378 views
Comments:  

Before you start

Learn what to expect from this tutorial, and how to get the most out of it.

About this series

IBM Data Studio makes it easy to service-enable your SQL statements or stored procedures to help fully integrate your data server into a Service-Oriented Architecture (SOA). This series introduces basic concepts, and shows you how to get started with implementing Data Web Services using Data Studio and WebSphere Application Server. IBM WebSphere Application Server is one of the possible target platforms for Data Web Services. This series of tutorials is designed to encourage you to unleash the full power of Data Web Services by using some of the enhanced features WebSphere Application Server provides related to security, performance, and reliability.

The first tutorial in the series showed you how to create a Web service that selects, updates, and inserts data in a DB2 database. In addition, it covered some troubleshooting and monitoring information.

Now in Part 2, you will learn how to enable Data Web Services for transport-level security. Future tutorials in the series will cover DB2 trusted context, Web service security, and Web service atomic transactions.


About this tutorial

What is transport-level security?

Security plays an important role in an SOA. When exposing data by using services, you must ensure that only clients with sufficient permissions may execute a service operation. Invocation of Data Web Service operations can be enabled for security using a J2EE security scheme, which is transport-level security. It requires application server-specific extensions inside the Data Web Services application. The following sections describe how to secure a Data Web Service application at the HTTP transport protocol layer and how to hook it into WebSphere's security framework.

Secure Socket Layer (SSL)

Transport-level encryption is not covered in this tutorial. WebSphere Application Server provides several SSL capabilities. A default WebSphere Application Server installation comes with an HTTPS port (default port is 9443). WebSphere Application Server also provides capabilities to setup and configure several SSL features, such as certificates.


Objectives

In this tutorial, you will learn how to configure transport-level security in WebSphere Application Server, how to apply a transport-level security setting to a Data Web Service application, and how to test transport-level security with a Data Web Service application.


Prerequisites

This tutorial is written for database programmers who are familiar with IBM Data Studio and know how to create a database connection, Data Development Project, SQL scripts, or stored procedures, and have completed "IBM Data Studio: Get started with Data Web Services tutorial." Basic knowledge of WebSphere Application Server and J2EE are recommended.


System requirements

To run the examples in this tutorial, you need the following:

1 of 8 | Next

Comments



Help: Update or add to My dW interests

What's this?

This little timesaver lets you update your My developerWorks profile with just one click! The general subject of this content (AIX and UNIX, Information Management, Lotus, Rational, Tivoli, WebSphere, Java, Linux, Open source, SOA and Web services, Web development, or XML) will be added to the interests section of your profile, if it's not there already. You only need to be logged in to My developerWorks.

And what's the point of adding your interests to your profile? That's how you find other users with the same interests as yours, and see what they're reading and contributing to the community. Your interests also help us recommend relevant developerWorks content to you.

View your My developerWorks profile

Return from help

Help: Remove from My dW interests

What's this?

Removing this interest does not alter your profile, but rather removes this piece of content from a list of all content for which you've indicated interest. In a future enhancement to My developerWorks, you'll be able to see a record of that content.

View your My developerWorks profile

Return from help

static.content.url=http://www.ibm.com/developerworks/js/artrating/
SITE_ID=1
Zone=Information Management, SOA and Web services, WebSphere
ArticleID=306885
TutorialTitle=Data Web Services on WebSphere Application Server, Part 2: Enable transport-level security
publish-date=05082008
author1-email=mschenk@us.ibm.com
author1-email-cc=
author2-email=nammisra@us.ibm.com
author2-email-cc=

Tags

Help
Use the search field to find all types of content in My developerWorks with that tag.

Use the slider bar to see more or fewer tags.

Popular tags shows the top tags for this particular content zone (for example, Java technology, Linux, WebSphere).

My tags shows your tags for this particular content zone (for example, Java technology, Linux, WebSphere).

Use the search field to find all types of content in My developerWorks with that tag. Popular tags shows the top tags for this particular content zone (for example, Java technology, Linux, WebSphere). My tags shows your tags for this particular content zone (for example, Java technology, Linux, WebSphere).

Try IBM PureSystems. No charge.