113 lines
6.6 KiB
HTML
113 lines
6.6 KiB
HTML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE html
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html lang="en-us" xml:lang="en-us">
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
|
<meta name="security" content="public" />
|
|
<meta name="Robots" content="index,follow" />
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
|
<meta name="DC.Type" content="task" />
|
|
<meta name="DC.Title" content="Configuring JGSS to use the native iSeries JGSS provider" />
|
|
<meta name="abstract" content="IBM JGSS uses the pure Java provider by default. You also have the option to use the native iSeries JGSS provider." />
|
|
<meta name="description" content="IBM JGSS uses the pure Java provider by default. You also have the option to use the native iSeries JGSS provider." />
|
|
<meta name="DC.Relation" scheme="URI" content="rzahajgsscfg13.htm" />
|
|
<meta name="DC.Relation" scheme="URI" content="rzahajgsscfglinkjava.htm" />
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2006" />
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" />
|
|
<meta name="DC.Format" content="XHTML" />
|
|
<meta name="DC.Identifier" content="rzahajgsscfg1320" />
|
|
<meta name="DC.Language" content="en-us" />
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
|
<!-- US Government Users Restricted Rights -->
|
|
<!-- Use, duplication or disclosure restricted by -->
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
|
<title>Configuring JGSS to use the native iSeries JGSS provider</title>
|
|
</head>
|
|
<body id="rzahajgsscfg1320"><a name="rzahajgsscfg1320"><!-- --></a>
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
|
<h1 class="topictitle1">Configuring JGSS to use the native iSeries JGSS provider</h1>
|
|
<div><p>IBM<sup>®</sup> JGSS
|
|
uses the pure Java™ provider by default. You also have the option to
|
|
use the native iSeries™ JGSS
|
|
provider.</p>
|
|
<div class="section"><p>For more information about the different providers, see <a href="rzahajgsscfg15.htm">JGSS providers</a>. </p>
|
|
<p><strong>Software requirements</strong></p>
|
|
<p>The
|
|
native iSeries JGSS
|
|
provider must be able to access classes in IBM Toolbox for Java. For instructions about how to access IBM Toolbox
|
|
for Java,
|
|
see <a href="rzahajgsscfglinkjava.htm#rzahajgsscfglinkjava">Enabling the native iSeries JGSS provider to access IBM Toolbox for Java</a>.</p>
|
|
<p>Make
|
|
sure that you have configured the network authentication service. For more
|
|
information, see <a href="../rzakh/rzakh000.htm" target="_blank">Network
|
|
authentication service</a>.</p>
|
|
<p><strong>Specifying the native iSeries JGSS
|
|
provider</strong></p>
|
|
<p>Before you use the native iSeries JGSS provider with J2SDK, version
|
|
1.3, ensure that you have configured your server to use JGSS. For more information,
|
|
see <a href="rzahajgsscfg13.htm">Configuring your iSeries server to use JGSS with J2SDK,
|
|
version 1.3</a>. If you are using J2SDK, version 1.4 or subsequent versions,
|
|
JGSS is already configured.</p>
|
|
<div class="note"><span class="notetitle">Note:</span> In the following instructions, ${java.home}
|
|
denotes the path to the location of the version of Java that you are using on your server.
|
|
For example, if you are using J2SDK, version 1.4, ${java.home} is /QIBM/ProdData/Java400/jdk14.
|
|
Remember to replace ${java.home}in the commands with the actual path to
|
|
the Java home
|
|
directory.</div>
|
|
<p>To configure JGSS to use the native iSeries JGSS
|
|
provider, complete the following tasks: </p>
|
|
<p><strong>Adding a symbolic link</strong></p>
|
|
<p>To
|
|
add a symbolic link to the extension directory for the ibmjgssiseriesprovider.jar
|
|
file, on an iSeries command
|
|
line, type the following command (on a single line) and press <strong>ENTER</strong>:</p>
|
|
<pre> ADDLNK OBJ('/QIBM/ProdData/OS400/Java400/ext/ibmjgssiseriesprovider.jar')
|
|
NEWLNK('${java.home}/lib/ext/ibmjgssiseriesprovider.jar')</pre>
|
|
<p>After
|
|
you add a symbolic link to the extension directory for the ibmjgssiseriesprovider.jar
|
|
file, the extension class loader will load the JAR file. </p>
|
|
<p><strong>Adding
|
|
the provider to the security provider list</strong></p>
|
|
<p>Add the native provider
|
|
to the security provider list in the java.security file. </p>
|
|
</div>
|
|
<ol><li class="stepexpand"><span>Open ${java.home}/lib/security/java.security for editing.</span></li>
|
|
<li class="stepexpand"><span>Find the security provider list. It should be near the top of the
|
|
java.security file and should look something like: </span> <pre> security.provider.1=sun.security.provider.Sun
|
|
security.provider.2=com.sun.rsajca.Provider
|
|
security.provider.3=com.ibm.crypto.provider.IBMJCE
|
|
security.provider.4=com.ibm.security.jgss.IBMJGSSProvider</pre>
|
|
|
|
</li>
|
|
<li class="stepexpand"><span>Add the native iSeries JGSS provider to the security provider list
|
|
before the original Java provider. In other words, add com.ibm.iseries.security.jgss.IBMJGSSiSeriesProvider
|
|
to the list with a lower number than com.ibm.jgss.IBMJGSSProvider, then update
|
|
the position of IBMJGSSProvider. For example:</span> <pre> security.provider.1=sun.security.provider.Sun
|
|
security.provider.2=com.sun.rsajca.Provider
|
|
security.provider.3=com.ibm.crypto.provider.IBMJCE
|
|
security.provider.4=com.ibm.iseries.security.jgss.IBMJGSSiSeriesProvider
|
|
security.provider.5=com.ibm.security.jgss.IBMJGSSProvider</pre>
|
|
|
|
<p>Notice that the IBMJGSSiSeriesProvider became the fourth entry in the
|
|
list and IBMJGSSProvider became the fifth entry. Also, check that entry numbers
|
|
in the security provider list are sequential and that each entry increments
|
|
the entry number by only one.</p>
|
|
</li>
|
|
<li class="stepexpand"><span>Save and close the java.security file.</span></li>
|
|
</ol>
|
|
</div>
|
|
<div>
|
|
<ul class="ullinks">
|
|
<li class="ulchildlink"><strong><a href="rzahajgsscfglinkjava.htm">Enabling the native iSeries JGSS provider to access IBM Toolbox for Java</a></strong><br />
|
|
</li>
|
|
</ul>
|
|
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzahajgsscfg13.htm" title="When you use the Java 2 Software Development Kit (J2SDK), version 1.3 on your iSeries server, you need to prepare and configure your server to use JGSS. The default configuration uses the pure Java JGSS provider.">Configuring your iSeries server to use JGSS with J2SDK, version 1.3</a></div>
|
|
</div>
|
|
</div>
|
|
</body>
|
|
</html> |