Skip to main content

By clicking Submit, you agree to the developerWorks terms of use.

The first time you sign into developerWorks, a profile is created for you. Select information in your developerWorks profile is displayed to the public, but you may edit the information at any time. Your first name, last name (unless you choose to hide them), and display name will accompany the content that you post.

All information submitted is secure.

  • Close [x]

The first time you sign in to developerWorks, a profile is created for you, so you need to choose a display name. Your display name accompanies the content you post on developerworks.

Please choose a display name between 3-31 characters. Your display name must be unique in the developerWorks community and should not be your email address for privacy reasons.

By clicking Submit, you agree to the developerWorks terms of use.

All information submitted is secure.

  • Close [x]

Data Web Services on WebSphere Application Server, Part 3: Leverage DB2 trusted context support using Data Studio

Use IBM Data Web Services together with the DB2 trusted context feature

Michael Schenker, Software Engineer, IBM
Michael Schenker is a software engineer at IBM's Silicon Valley Laboratory in San Jose, Calif. He joined IBM in 2002 and works in the IBM Data Server Tooling area. His subject of expertise is the Web service enablement of IBM's data servers. He holds a Master's degree in computer sciences from the University of Applied Sciences in Leipzig, Germany.
Namrata Misra (nammisra@us.ibm.com), Software Engineer, IBM
Namrata Misra is a software developer in the Information Management Group. She joined IBM in 2005 as an intern. Her specialties include Java, XML, Web services, and databases. She is one of the developers for Data Web Services, which come with IBM Data Studio.

Summary:  Common problems in J2EE applications that access databases occur around end-to-end authentication and authorization, as well as the end-to-end audit path. The concepts of data sources and connection pools provide many advantages, but they can also lead to security breaches. This vulnerability happens because, after the security layer of the application server has been passed, all requests are usually mapped to one common user ID to access the database. A new feature called trusted context, available in DB2® 9.5, allows users to leverage the benefits of connection pooling without sacrificing security. This tutorial describes how you can use that feature with a Data Web Services Web application.

View more content in this series

Date:  22 May 2008
Level:  Intermediate PDF:  A4 and Letter (353 KB | 15 pages)Get Adobe® Reader®

Activity:  8023 views
Comments:  

Before you start

Learn what to expect from this tutorial, and how to get the most out of it.

About this series

IBM® Data Studio helps you to service-enable your SQL statements or stored procedures to help fully integrate your data server into an SOA. Part 1 in this series showed you how to create a Web service that selects and updates data in a DB2 database. Part 2 of this series described how to enable the Web service for transport-level security. In this tutorial, you will learn how to leverage the trusted context feature of DB2 to provide end-to-end authorization and authentication for your Web services.

IBM WebSphere® Application Server is one of the possible target platforms for Data Web Services. This series of tutorials helps you to leverage the full power of Data Web Services in combination with WebSphere Application Server by using some of the enhanced features that are provided by WebSphere Application Server and DB2 for security, performance, and reliability.


About this tutorial

In this tutorial, you will learn how to leverage the trusted context feature of DB2 to provide end-to-end authorization and authentication for your Web services. This tutorial takes approximately one hour to complete. Two more tutorials will follow to discuss Web service security and Web service atomic transactions.


Objectives

This tutorial provides the following information:

  • A brief introduction to the DB2 trusted context feature
  • Information about how to set up WebSphere Application Server to use DB2 trusted context
  • A demonstration of how DB2 trusted context works together with WebSphere Application Server and the Data Web Services application by turning on the JCC trace in WebSphere Application Server

Prerequisites

This tutorial is written for database programmers who are familiar with IBM Data Studio and know how to create a database connection, a data development project, and SQL scripts or stored procedures. Before you start this tutorial, you should also complete "IBM Data Studio: Get started with Data Web Services" (developerWorks, Nov 2007) and "Enable transport-level security" (developerWorks, May 2008). Basic knowledge of WebSphere Application Server and J2EE are recommended.


System requirements

To run the examples in this tutorial, you must install IBM Data Studio 1.1.2 and WebSphere Application Server Version 6.1 (Fix Pack 11). You must also install DB2 for z/OS Version 9 or DB2 for Linux, UNIX, and Windows Version 9.5 and create the sample database.

1 of 7 | Next

Comments



Help: Update or add to My dW interests

What's this?

This little timesaver lets you update your My developerWorks profile with just one click! The general subject of this content (AIX and UNIX, Information Management, Lotus, Rational, Tivoli, WebSphere, Java, Linux, Open source, SOA and Web services, Web development, or XML) will be added to the interests section of your profile, if it's not there already. You only need to be logged in to My developerWorks.

And what's the point of adding your interests to your profile? That's how you find other users with the same interests as yours, and see what they're reading and contributing to the community. Your interests also help us recommend relevant developerWorks content to you.

View your My developerWorks profile

Return from help

Help: Remove from My dW interests

What's this?

Removing this interest does not alter your profile, but rather removes this piece of content from a list of all content for which you've indicated interest. In a future enhancement to My developerWorks, you'll be able to see a record of that content.

View your My developerWorks profile

Return from help

static.content.url=http://www.ibm.com/developerworks/js/artrating/
SITE_ID=1
Zone=Information Management, Java technology, SOA and Web services, WebSphere
ArticleID=309626
TutorialTitle=Data Web Services on WebSphere Application Server, Part 3: Leverage DB2 trusted context support using Data Studio
publish-date=05222008
author1-email=mschenk@us.ibm.com
author1-email-cc=
author2-email=nammisra@us.ibm.com
author2-email-cc=

Tags

Help
Use the search field to find all types of content in My developerWorks with that tag.

Use the slider bar to see more or fewer tags.

Popular tags shows the top tags for this particular content zone (for example, Java technology, Linux, WebSphere).

My tags shows your tags for this particular content zone (for example, Java technology, Linux, WebSphere).

Use the search field to find all types of content in My developerWorks with that tag. Popular tags shows the top tags for this particular content zone (for example, Java technology, Linux, WebSphere). My tags shows your tags for this particular content zone (for example, Java technology, Linux, WebSphere).

Try IBM PureSystems. No charge.