book

Liberty in IBM CICS: Deploying and Managing Java EE Applications

by Phil Wakelin, Carlos Donatucci, Jonathan Lawrence, Mitch Johnson, Michael Jones, Tito Paiva

January 2018

Intermediate to advanced

266 pages

7h 31m

English

IBM Redbooks

Read now

Unlock full access

Trademarks
AuthorsNow you can become a published author, too!Comments welcomeStay connected to IBM Redbooks
1.1 Getting your CICS region ready1.2 zFS file system configuration1.2.1 zFS configuration files1.2.2 Autoconfiguration1.2.3 zFS structure1.2.4 zFS output files1.2.5 zFS file permissions1.2.6 zFS file encodings and editing tools1.3 Setting up a Liberty JVM Server1.3.1 JVM profile1.3.2 Tailoring the JVM profile1.3.3 Liberty specific options1.3.4 IBM Language Environment runtime options1.3.5 Creating a JVMSERVER resource1.4 Tailoring server.xml1.4.1 Adding Liberty features1.4.2 Include files1.4.3 Configuring the HTTP and HTTPS endpoints1.4.4 CICS bundle deployed applications1.4.5 Default web application1.4.6 Liberty transaction log files1.4.7 Sample server.xml file1.4.8 Welcome page
2.1 Building the restapp sample2.1.1 Obtaining the sample code2.1.2 Creating the Eclipse projects2.2 Deploying a web application to Liberty2.2.1 Deployment by using Liberty dropins2.2.2 Deployment as an application element in server.xml2.2.3 Deployment in a CICS bundle2.2.4 Comparison of the deployment options2.3 Advanced deployment options2.3.1 Shared libraries2.3.2 Global libraries2.3.3 Deploying a prebuilt Java archive in a CICS bundle2.3.4 Pausing and resuming a server
3.1 Overview3.1.1 Prerequisites3.1.2 How it works3.2 Link to Liberty sample application3.2.1 Building the sample application3.2.2 Sample application3.2.3 Deploying the sample3.2.4 Running the sample3.2.5 Manual program definition3.2.6 Updating a Link to Liberty program3.3 Qualities of service3.3.1 Transactions3.3.2 Exception and abend processing3.3.3 Security3.3.4 Summary
4.1 JDBC overview4.1.1 JDBC drivers4.1.2 Data sources4.1.3 Static and dynamic SQL4.2 Installing the JDBC Employee application4.2.1 Liberty features4.2.2 Data source definition4.2.3 CICS resources4.3 Using JDBC type 2 connectivity4.3.1 Configuring CICS resources4.3.2 Configuring server.xml4.3.3 Binding the plan4.3.4 Running the application4.4 Using JDBC type 4 connectivity4.4.1 Configuring CICS resources4.4.2 Configuring server.xml4.4.3 Running the application4.4.4 Container managed security4.5 Transactional support with JDBC4.6 Tracing JDBC
5.1 Introduction to JMS5.1.1 Java Message Service5.1.2 Message Driven Beans5.1.3 Java Naming and Directory Interface5.1.4 Connection pooling5.2 JMS sample application5.2.1 Modifying the JMS sample application5.2.2 Deploying the JMS sample application5.2.3 Configuring Liberty for the JMS sample application5.2.4 Describing the JMS updates to the JVM server profile5.3 Required CICS resources5.3.1 BUNDLE resources5.3.2 URIMAP resource5.3.3 Transaction resources5.4 Required IBM MQ resources5.4.1 Configuring IBM MQ Explorer5.4.2 Defining the queues5.5 Testing the sample applications5.5.1 Testing the MQJMSDemo application5.5.2 Testing the MySimpleMDB application5.5.3 Use of the Execution Diagnostic Facility5.6 Security5.6.1 RACF resources5.6.2 JMS security scenarios5.6.3 Summary5.7 Transport Layer Security5.7.1 RACF resources5.7.2 TLS debugging hints and tips
6.1 JSSE and JCE6.1.1 Updating the JCE policy files6.2 TLS server authentication by using a Java keystore6.3 TLS server authentication by using a RACF key ring6.4 TLS client authentication6.5 Hints and tips when using TLS6.5.1 Tracing TLS6.5.2 Enforcing TLS for web applications6.5.3 HTTP persistent connections6.5.4 TLS session timeout6.5.5 Controlling the TLS version6.5.6 Controlling the cipher suite6.5.7 Restricting weak algorithms6.6 Using cryptographic hardware with JSSE6.6.1 Cryptographic hardware6.6.2 Cryptographic software6.6.3 Configuring TLS to use the cryptographic coprocessors6.6.4 Monitoring cryptographic hardware
7.1 Overview7.2 z/OS security configuration for Liberty JVM servers7.2.1 Starting the angel process7.2.2 Setting up access to the angel process7.2.3 Profile prefix and required SAF profiles7.3 Configuring a Liberty security registry7.3.1 Configuring a basic user registry7.3.2 Configuring a SAF registry7.3.3 Configuring an LDAP registry7.4 Authentication scenarios7.4.1 Basic authentication with a SAF registry7.4.2 Basic authentication by using LDAP credentials7.4.3 Form-based login7.4.4 Certificate-based client authentication7.5 Authorization scenarios7.5.1 URL-specific authorization by using EJBROLEs7.5.2 Programmatic role authorization by using EJBROLEs7.5.3 CICS transaction security with URIMAPs7.6 Configuring SSO by using Lightweight Third-Party Authentication7.6.1 Configuring LTPA7.6.2 Disabling SSO in Liberty7.6.3 Requiring TLS when using SSO7.7 JSON client code with cookie printer

8.1 Message and log files8.1.1 CICS logs8.1.2 Java logs8.1.3 Liberty server logs8.1.4 JVM server trace output8.2 Monitoring tools8.2.1 CICS statistics records8.2.2 CICS performance records8.2.3 CICS Performance Analyzer8.2.4 CICS Explorer8.2.5 IBM Health Center8.2.6 IBM Application Metrics for Java8.2.7 Runaway tasks8.2.8 CICS policies
9.1 Sharing ports9.1.1 Using WLMHEALTH9.2 Cloning regions9.2.1 Sharing application definitions9.2.2 Sharing SSL configuration9.2.3 Sharing feature configuration9.2.4 Sharing LTPA keys

Content preview from Liberty in IBM CICS: Deploying and Managing Java EE Applications

Securing web applications

In this chapter, we describe how to secure web applications that are running in a CICS Liberty JVM server. You learn how to configure Liberty with your preferred security provider, and the various ways you can request credentials from users.

Specifically, we describe the different registry types that are available to Liberty in CICS, along with some of the more popular methods of authentication and authorization.

This chapter includes the following topics:

•7.1, “Overview” on page 176

•7.2, “z/OS security configuration ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Start your free trial

IBM CICS and the JVM server: Developing and Deploying Java Applications

Chris Rayns, George Bogner, Tony Fitzgerald, Elisabetta Flamini, Jun Hua Gao, Ivan D Hargreaves, Phil Wakelin, Hongtao Wen, Bei Chun Zhou

IBM WebSphere Application Server Liberty Profile Guide for Developers

Miho Hachitani, Catalin Mierlea, Pete Neergaard, Grzegorz Smolko

IBM WebSphere Application Server 8.0 Administration Guide

Steve Robinson

IBM WebSphere Application Server V8.5 Administration and Configuration Guide for Liberty Profile

Anil Esen, Toshiyuki Iue, Neil Patterson, Jennifer Ricciuti

Publisher Resources

ISBN: 9780738442167Purchase book