i am a security analyst and i was testing one of the IBM WebSphere portal in our office.The version of IBM websphere we are using is v5.1.During searching for vulnerabilites related to the IBM websphere portal in the internet, i found that there is authentication by pass vulnerability where i could elevate my prvileges to an administrator.I checked in the internet to see how this is done,but was unsuccessful.Could u please help me on this??

Thanks in Advance,

Girish K G

We do have a browser-based intranet application running on Websphere Application server hosted on Linux machine.

- Authentication / Authorization for the intranet application is done using the username / password stored in encrypted format in Oracle Database.

- Now we want to enable the SSO, so that the username and password for the Client login [Active Directory login] is used.

- So that within the AD, when the user opens the applicaton URL, the browser should automatically login without prompting for the username / password screen.

Please give some insights on the possible implementations for the above.

Cheers,
-Srini

With this post: -

http://vivekagarwal.wordpress.com/2008/04/06/how-do-you-rename-the-windows-machine-name-for-a-db2-v91x-database/#more-96

you’ve made my life much much easier. I had to recover a Portal/Mashups server where a colleague had installed Active Directory and changed the DNS domain name, meaning that DB2 UDB 9.x would no longer start.

I’ll blog my own findings more fully in the next day or so, but wanted to thank you personally.

See you at Lotusphere ( if I’m very very lucky )

Dave Hay

I have not run into this issue with renaming a WebSphere Portal v6 VM, where I have WAS v6 running. I have successfully changed hostnames without issues with WAS/WPE. This is odd to me! Can you send me the exception stacktrace?

One thing you might consider doing is to add a “hosts” file entry pointing the old hostname to 127.0.0.1.

If the problem persists, you could look into using wsadmin to explicitly change the host name in the WAS config by following the instructions in the WAS InfoCenter. The issue with this approach is that each time somebody clones your master VM, they have to run this task.

Do let me know how it works out for you. All the best!

Can you please tell me how to get multiple instances of websphere running? I will try to explain what am I exactly asking.

1. Create a VM on win2k.
2. Install websphere 6.0 and all fix packs.
3. The VM created above is master VM.
4. I want to give this VM to a colleague but i want to change the name of the VM to avoid machine name conflict.
5. Now my websphere won’t start.
6. Can you please tell me how to get rid of this problem? plzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz.

If possible CC my email doshi.jinesh@gmail.com

My company has developed an application from the LR Code Base and are looking to hire a resource to help make updates/changes to it.
-Malcolm
512-637-5163