Resource authentication
Before implementing any security, review WAS V6.1 Security Handbook, SG24-6316.
The res-auth setting found in the Web and EJB deployment descriptors sets the party responsible for authentication and authorization...
res-auth=Application
res-auth=ContainerThese settings can be configured during application assembly using Rational Application Developer or the Application Server Toolkit. They can also be set or overridden during application installation.
Authentication type Set at assembly
Authorization typeSet during installation
Resource authorizationApplication managed:
res-auth=ApplicationPer_Connection_Factory Per application WebSphere managed:
res-auth=ContainerContainer Container