Network Deployment (Distributed operating systems), v8.0 > Secure applications and their environment > Configure multiple security domains
Configure inbound trusted realms for multiple security domains
We can configure which realms to grant inbound trust to for multiple security domains. The trust relationship between realms is used when communicating with Lightweight Third-Party Authentication (LTPA) tokens. Once a LTPA token is decrypted by the receiving server, the realm in the token is checked to see if it is trusted. If it is not, the validation of the token fails. A realm represents a user registry in WAS. For information on cross realm communications, read the section in Multiple security domains.
Only users assigned to the administrator role can configure multiple security domains. Enable global security in the environment before configuring multiple security domains.
Perform the following steps to grant inbound trusted realms for multiple security domains using the admin console:
Procedure
- Click Security > Security domains.
- Select a domain to edit or create a new one. Under Security Attributes, click User realm.
- Click Customize for this domain.
- Under Related Items, select Trusted authentication realms - inbound.
- Select Trust all realms (including those external to this cell) or Trust realms as indicated below. If Kerberos authentication is enabled, and we have cross realms or trusted realms, add the Kerberos trusted realm by selecting Trust realms as indicated below.
- Click Apply.
What to do next
The realms you selected to trust accept messages from other trusted realms but do not accept messages from untrusted realms. Select Add External Realm to add trust for realms that are external to this cell.
Multiple security domains
Copy multiple security domains
Create new multiple security domains
Delete multiple security domains
Configure security domains using scripting
Configure multiple security domains using scripting
Remove security domains using scripting
Map resources to security domains using scripting
Configure multiple security domains
Related
Administrative roles