Agent Guide › Configuring the SiteMinder Agent, SiteMinder-Side › Configure the Login Module, SiteMinder-Side › Configure the Login Module to Handle Java Client Requests › Create a Realm for Java Client (RMI) Requests

Create a Realm for Java Client (RMI) Requests

Create a realm in which the Login Module authenticates identities associated with Java client (RMI) requests for EJB container resources.

Note: The following procedure provides an overview of the steps required to create the required policy objects with appropriate parameter settings. For detailed procedural information, see the Policy Server Configuration Guide.

To create a realm for Java Client requests.

1. Start the SiteMinder Administrative UI.
2. Configure a user directory connection to the same LDAP user store as the one used by WebSphere.
3. Create a domain and assign the user directory from Step 2 to this domain.
4. Create a realm with the following properties:

   Name

   SiteMinder RMI Realm.

   Description

   SiteMinder Login Module Java Client (RMI) Assertion Realm.

   Agent

   The SiteMinder Agent Identity you configured for the SiteMinder Agent for IBM WebSphere.

   Resource Filter

   /smrmirealm (any value is valid, but it must match the value of the RmiAuthResource Agent configuration parameter that you specify for the Login Module)

   For example, /siteminderrmirealm.

   Default Resource Protection

   Protected.

   Authentication Scheme

   Basic or any authentication scheme.

   Maximum Timeout

   Specify an appropriate value.

   Idle Timeout

   Specify an appropriate value.

   Persistent Session

   Non-persistent.

Configuring rules or policies for the RMI realm is typically unnecessary. However, to implement user mapping, set an authentication response attribute, and then configure appropriate rules and policies for the RMI realm.

More information:

Set the RmiAuthResource Agent Configuration Parameter