Altering Web Container Security to Deployed Web Application

[Former Member]

Hi all,

I was wondering if it is possible to add or change security settings on a Web Application once it is deployed. I have found instructions for configuring web.xml and web-j2ee-engine.xml prior to deployment (such as here http://help.sap.com/saphelp_nw04/helpdata/en/dc/dd3e4045796913e10000000a1550b0/frameset.htm) but nothing for adding/changing security config once deployed. I have found in the Visual Admininistrator, under Cluster -> Server -> Services -> Web Container that you can <i>view</i> the config but it is all read only. Is there a way of changing this config (such as altering the "Authentication Method" from BASIC to something else) without having to redeploy?

Many thanks,

Chris

Message was edited by: Chris Probert

[Former Member · Accepted solution]

Yes you can do this using:

Visual Administrator, under Cluster -> Server -> Services -> Security Provider.

For example if you want to change the authentication method you have to use:

under Security Provider

"Policy Configurations" tab and then in the right pane "Authentication" tab.

Here is more about this topic:

<a href="http://help.sap.com/saphelp_nw04/helpdata/en/8c/5e3ad2de454601b196a6668a2eacb1/frameset.htm">http://help.sap.com/saphelp_nw04/helpdata/en/8c/5e3ad2de454601b196a6668a2eacb1/frameset.htm</a>

<a href="http://help.sap.com/saphelp_nw04/helpdata/en/8c/5e3ad2de454601b196a6668a2eacb1/frameset.htm">http://help.sap.com/saphelp_nw04/helpdata/en/8c/5e3ad2de454601b196a6668a2eacb1/frameset.htm</a>

Regards,

Violeta

[Former Member · Accepted solution]

Thanks Violeta

I am still not entirely sure though, that this solves my problem so far as making fundemental changes to the security settings of a Web Container. I can make alterations there which are useful and work, such as changing the users who have access and such. But other alterations I would like to make seem not to be possible.

E.g. imagine I have loaded in a Web Application, with a web container for JSP's. In the deployment descriptors I gave no security related info. Now I want, through the visual administrator, to add basic authentication to this web container.

The only way I have <i>actually</i> found to do this, is to change the deployment descriptors and redeploy. If there is a way of doing this through the "Security Provider" screens that I am missing please do let me know!