File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
The moose likes Websphere and the fly likes WAS 5 - Sharing same login between multiple WARs Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Products » Websphere
Bookmark "WAS 5 - Sharing same login between multiple WARs" Watch "WAS 5 - Sharing same login between multiple WARs" New topic

WAS 5 - Sharing same login between multiple WARs

Jason Brawner
Ranch Hand

Joined: Dec 19, 2001
Posts: 66
I've created an EAR which contains several web applications, all of which will require authentication. I've noticed with the Websphere extensions that I'm able to share the session context but it doesn't appear share the login information (which is contained in the session, right?).
I'm using the j_security_check with Local OS Auth. and have the same Security Role defined in all WARS but when the user switches from one WAR to another within the same EAR they are prompted again for a login. So my questions are...
Is it possible to share login info?
Does the 'Shared session context' WebSphere Ext. allow for this and I've just got it configured incorrectly?

Jason E. Brawner<br />Sun Certified Java Programmer<br />Sun Certified Web Component Developer
Kyle Brown
Ranch Hand

Joined: Aug 10, 2001
Posts: 3892
This sounds like you're not creatign a LTPA Token (which is a cookie shared by all the WebSphere applications). I think (but don't have the references at hand to check) that you do this by selecting LTPA instead of SWAM as your authentication method. This requires you, however, to use LDAP, a Windows Domain, or a custom registry intead of Local OS authentication. Check the WebSphere v5 security handbook redbook to be sure.

Kyle Brown, Author of Persistence in the Enterprise and Enterprise Java Programming with IBM Websphere, 2nd Edition
See my homepage at for other WebSphere information.
I agree. Here's the link:
subject: WAS 5 - Sharing same login between multiple WARs
It's not a secret anymore!