securing SMA on Websphere

 securing SMA on Websphere

 

 

  1. Refer to following PDN article for more details:

           https://pdn.pega.com/security/implementing-authentication-for-prsysmgmt-and-prdbutil

          Add the following security contraint entry in your web.xml and repackage the EAR:

          

<security-constraint>
<web-resource-collection>
<web-resource-name>System Management Application - DB utility Application </web-resource-name>
<description>secure all urls for this application</description>
<url-pattern>/*</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>PegaDiagnosticUser</role-name>
</auth-constraint>
</security-constraint>


<login-config>
<auth-method>BASIC</auth-method>
<realm-name>PegaRULES</realm-name>
</login-config>


<security-role>
<role-name>PegaDiagnosticUser</role-name>
</security-role>

2. Make sure Administrative security is enabled on Websphere and set of users or groups who will have access to SMA configured:

      

        1.png

    3.  Deploy the repackaged war on Websphere and pick an appropriate User or Group

 

        1.png

            1.png

      4. Now when you try and access the prsysmgmt URL, you’ll be prompted for the credentials

Comments

Popular posts from this blog

Split For Each shape in pega - Parallel processing in Pega

Queue processor FAQ

Tickets in PEGA – its Configuration, Usage & Execution