Question & Answer
Question
Can you disable the default behavior of redirecting Business Space from HTTP to HTTPS when administrative and application security are enabled?
Cause
The web.xml file in the BSpaceManager.ear file for WebSphere Business Monitor V6.1.2 and V6.2.x, and the BSpaceEAR.ear file in WebSphere Business Monitor V7.0.x file contain a <transport-guarantee> tag that defines a guaranteed level of data protection when transporting data between the client and the server. By default, this application specifies the data as CONFIDENTIAL so that SSL is used to guarantee that the data cannot be intercepted during transmission. This setting causes the URL redirection when security is enabled for Business Space. To enable security for Business Space, both administrative and application security must be enabled.
Answer
Complete the following steps to disable the redirection to HTTPS and use HTTP with Business Space regardless of whether security is enabled:
For WebSphere Business Monitor V6.1.2 and V6.2.x:
- Back up the BSpaceManager.ear file in the <INSTALL_ROOT>\installableApps directory to another location so that you can restore the original file later, if needed.
- From the <INSTALL_ROOT>\installableApps folder, extract the BSpaceManager.war file from the BSpaceManager.ear file.
- Extract the WEB-INF\web.xml file from the BSpaceManager.war file and open it in a text editor.
- Change the lines:
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
to:
<user-data-constraint>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
- Place the modified web.xml file back into the BSpaceManager.war file, under the WEB-INF directory.
- Place the modified BSpaceManager.war file back into the BSpaceManager.ear file.
- Use the administrative console to update the BusinessSpaceManager application with the modified BSpaceManager.ear file.
Details on the procedure to update applications are documented at the following location:
Updating applications with the console
Because dependencies exist between multiple applications, you might need to perform similar steps on additional applications to ensure proper communications and behavior. If the previous steps do not completely disable the redirection or if you experience issues when using specific Business Space widgets, you might need to perform the above steps for the RESTServiceGateway.ear application.
For WebSphere Business Monitor V7.0:
- Back up the BSpaceEAR.ear file in the <INSTALL_ROOT>\installableApps directory to another location so that you can restore the original file later, if needed.
- From the <INSTALL_ROOT>\installableApps folder, extract the BSpace.war file from the BSpaceEAR.ear file.
- Extract the WEB-INF\web.xml file from the BSpace.war file and open it in a text editor.
- Change the lines:
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
to:
<user-data-constraint>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
- Place the modified web.xml file back into the BSpace.war file, under the WEB-INF directory.
- Place the modified BSpace.war file back into the BSpaceEAR.ear file.
- Use the administrative console to update the BusinessSpaceManager application with the modified BSpaceEAR.ear file.
Details on the procedure to update applications are documented at the following location:
Updating applications with the console
Because dependencies exist between multiple applications, you might need to perform similar steps on additional applications to ensure proper communications and behavior. If the previous steps do not completely disable the redirection or if you experience issues when using specific Business Space widgets, you might need to perform the above steps for the RESTServiceGateway.ear application.
Was this topic helpful?
Document Information
Modified date:
23 June 2018
UID
swg21408274