User guide

Developing Java Applications
7-31
Registering Protection Resources
For a servlet application that receives authentication information from a client, the SSO administrator
must register the servlet application path in the SSO repository as a protection resource and set its role
name or role set name to enable its use.
For details, refer to “Registering Protection Resources” and “Using an LDIF File.”
Information about the registered resource must then be stored in the business server. The business
server administrator must use the Interstage Management Console to select [System] > [Security] >
[Single Sign-on] > [Business system] > [Business system Name] > [Update access control information]
tab and click [Update]. For details on Interstage Management Console definition, refer to the Operator’s
Guide.
For information on updating access control information, refer to “Amending Role Configuration” and
“Amending Protection Resource” in Chapter 4 – Operation and Maintenance.
Protection resource to be registered:
Business-server-name:port-number/servlet-application-path
Exceptions and Exception Handling
When an exception occurs in a single sign-on JavaAPI, check the exception object type and detailed
message obtained with the exception object getMessage method and take the required action after
referring to the Messages manual.
Example
Message displayed for an incorrect password
Error: Authentication failed
If an OutOfMemoryError occurs in a Java application that receives a user ID/password from a client to
perform authentication, the following Interstage HTTP Server messages may be displayed:
ERROR: ihs66999: SSL: unexpected error
(SSL_ServerHandshake,00700002,00020014)
Or
ERROR: ihs66038: SSL: chipher handshake error
(SSL_ServerHandshake,00700001,00020028)
Required Action If An OutOfMemoryError Error Occurs
If an OutOfMemoryError error occurs when a Java application is executed, the following causes are
possible.
• The memory (heap area) used in Java is insufficient