WebSphere Application Server for NetWare

Getting Started

Last Updated: June 28, 2000

WebSphere Application Server Advanced Edition for NetWare

Version 3.02
CT678IE
5801-AAR

IMPORTANT: Before using this information and the product it supports, read the general information under Appendix D, Notices.


Table of Contents

About IBM WebSphere Application Server

Before you install WebSphere Application Server

Installing and configuring WebSphere Application Server

Enabling Security

Starting and stopping WebSphere Application Server

Checking and troubleshooting the installation

Tips for using administrative server and console

Getting assistance

Appendix A. Components available for installation

Appendix B. Installing and configuring NetWare Enterprise Web Server

Appendix C. Novell Directory Services 

Appendix D. Notices


About IBM WebSphere Application Server

About this information

This Getting Started Guide is designed to help you install, configure, and start using IBM WebSphere Application Server, Advanced Edition 3 for Novell NetWare. It also describes how to verify your installation and points you to additional information resources.  This book helps you to get started as quickly as possible by providing the information you need to install and configure WebSphere Application Server.

Additional information resources are available for learning to use WebSphere Application Server features. (See For More Information)

Developing to WebSphere If you are a programmer developing applications to run on WebSphere, consult the IBM WebSphere Application Server Web site or visit Novell at http://developer.novell.com/websphere for additional information.
Installing, configuring, or maintaining WebSphere Application Server If you are responsible for installing, configuring and administering WebSphere Application Server, read this document and visit http://www.ibm.com/software/webservers/appserv/ or http://www.novell.com/documentation for the latest Release Notes and related documentation.

This book is available in HTML and PDF formats on both IBM and Novell Web sites and on the product CD. Visit the Web sites listed above for the most updated version of this document.


What is WebSphere Application Server

WebSphere Application Server Advanced Edition enables Web transactions and interactions with a robust deployment environment for e-business applications. It provides a portable, Java-based Web application deployment platform focused on supporting and executing servlets, JavaBeans, JavaServer Pages (JSP) files, and enterprise beans. It builds on the Standard Edition of WebSphere Application Server to provide portability and control of server-side business applications along with the performance and manageability of enterprise beans to offer a comprehensive Java-based Web application platform. It extends the value and versatility of this platform with:

This WebSphere product is integral to managing and integrating enterprise-wide applications while leveraging open Java-based technologies and APIs. It enables powerful interactions with relational databases, transaction processing systems, and other applications. This Web application server provides deployment and management of Java, CORBA, and enterprise beans applications.


WebSphere Application Server components

WebSphere Application Server Version 3, Advanced Edition provides a powerful deployment environment and set of application services for managing Java applications and components. New features include:


WebSphere Application Server Version 3.0 features

The marketplace of the World Wide Web continues to grow rapidly. Increasingly, Web sites with dynamic HTML pages gain the competitive edge by offering interactivity and self-serve transactions. The business logic applications for this interactivity work behind the scenes to provide immediate access to data in response to user requests. 

Businesses are more frequently finding Java technologies that provide and support Web-based business logic. Web sites utilizing JavaServer Pages (JSP), servlets, and Java-enabled database connections support sophisticated transactions and dynamic interaction with customers. This growth introduces some challenges, such as:

IBM WebSphere Application Server Version 3.0 provides a solution to address these challenges, fitting your company's current needs and supporting its growth:

Each of these products separates Web authoring and design tasks from business logic programming tasks, allowing programmers and more traditional Web team members to work together with maximum efficiency and minimal interference.

The remainder of this section discusses the Java technologies supported by the WebSphere Application Server Advanced Edition and the environment it provides for deploying and managing the technologies:

Enterprise bean support is a primary feature of WebSphere Application Server Advanced Edition. This support combines transaction processing and distributed objects into a modern solution for complex enterprise information management problems.

With WebSphere Application Server enterprise bean support, application developers work in a simple, productive way, concentrating on the business rather than complex transaction processing or distributed objects. Enterprise beans support can handle these aspects of the work for the developers. For example, an application developer can use a simple command or methodology to transfer funds between bank accounts without worrying about where the actual behind-the-scenes data is located, or without being concerned about how to handle system failure during a transaction.

To learn more about any of the IBM WebSphere Application Server Version 3.0 editions, visit these Web sites:

http://www.ibm.com/software/webservers/appserv

http://developer.novell.com/websphere

http://www.novell.com/documentation/lg/websphere/docui/index.html

Servlet support for generating and accessing Web site content

To extend the server's capabilities, Java servlets run on a Java-enabled Web server similar to the way Java applets run on a browser to extend the browser's capabilities. Servlets, like other business logic components, can generate Web site content or communicate with enterprise beans to access content from a database, allowing a new level of responsiveness to user requests.

WebSphere Application Server Advanced Edition provides a Java-based servlet engine compatible with several Web servers and operating systems. The servlet engine supports:

Servlet configuration
To define configuration information and initialization parameters for individual servlets, such as the associated class file, whether the servlet loads at startup, and whether the Web server loads the servlet from a remote location
Virtual hosting
To specify alternate paths for servlets, allowing your Web server to serve different documents based on the domain specified by the client during a servlet request
Aliasing
To specify path-mapping rules allowing users to enter shortcut URLs to invoke specific servlets
Filtering
To associate servlets with MIME types so that each time a response with a specific MIME type is generated, a particular servlet is invoked

JavaServer Pages (JSP) support for separating Web content from business logic

Combining Web servers and application servers, a Web team can produce a truly interactive Web site on which customers can perform transactions on a self-serve basis. In addition to HTML, other technologies are available for describing and displaying the data that flow in and out of the Web site from users and back-end databases during these transactions. The core technologies used include JavaServer Pages (JSP) from Sun Microsystems and the eXtensible Markup Language (XML).

WebSphere Application Server helps you combine JSP, XML, business logic applications, and HTML to present a Web-based storefront for collecting user requests, summoning business logic applications to generate or access the data, and formatting and displaying the results.

The WebSphere Application Server provides a JSP engine and tag support. JSP combines server-side scripting and tagging while allowing you to separate presentation logic (such as HTML) from business logic (such as a servlet). Within each JSP file, you can include JSP syntax, HTML tags, servlet tags, NCSA tags, and inline Java code to process user requests, accessing reusable business logic components, such as servlets, beans, and Java-based Web applications as needed. JSP also lets you separate document structure, content, and presentation, allowing Web team members to work in parallel with minimal impact on one another's work. 

The WebSphere Application Server also provides XML Document Structure Services, which consist of a document parser, a document validation process, and a document generator for server-side XML processing. These features let you leverage the power of XML, a tagging alternative to HTML. XML makes it easier to:

A capable environment for Web-based applications

WebSphere Application Server provides a secure, scalable environment for deploying and managing Web-based applications.

Plug-ins for Web servers

WebSphere Application Server for NetWare includes a NetWare Enterprise Web server plug-in that extends the Web server's ability to serve up Java applications. The plug-in is loaded with the Enterprise server and provides communication between the Web server and WebSphere Application Server.

Flexible, scalable configurations

The WebSphere Application Server supports more configuration scenarios than ever. Selected configurations support workload management, JVM pooling, multiple servers on multiple machines, and multiple Web server brands dispatching requests to an WebSphere Application Server.

For maximum flexibility to distribute Application Server, the Advanced Edition offers a Java Object Request Broker (Java ORB) with Remote Method Invocation (RMI) over connections using the Internet Inter-ORB Protocol (IIOP). 

Security

WebSphere Application Server provides a security server that works with the servlet engine and your Web server to provide access control to Web resources, including HTML pages, servlets, JavaServer Pages (JSP) files, and enterprise beans. The security server provides centralized security policy control and security services, such as authentication and authorization.

Application Server can authenticate users against the users already defined by your Lightweight Directory Access Protocol (LDAP) service, NetWare Directory Services (NDS), or Lightweight Third Party Authentication (LTPA) service. 

Both basic and certificate authentication are available, depending on your Web server capabilities and other factors. Certificate authentication provides a highly secure, unobtrusive mechanism for protecting Web resources.

LTPA support provides the framework to achieve the convenient single-sign on. In other words, after authenticating themselves at the beginning of a session, users can access resources on various WebSphere Application Servers and Web servers within the enterprise without authenticating again.

Security information in the WebSphere Application Server user assistance discusses additional security features and guides you through the security set-up.

Session tracking

WebSphere Application Server supports user profiles and session tracking for clustered or stand-alone Web servers. These features help you maintain information about Web site users and to group requests from the same user into a session.

Connection pooling

WebSphere Application Server provides a connection pooling feature that caches and reuses connections to your Java Database Connectivity (JDBC)-compliant databases. When a servlet needs a database connection, it can get one from the pool of available connections, eliminating the overhead required to open a new connection for each request. 

Extensive monitoring

WebSphere Application Server provides extensive monitoring capabilities to track resources including servlets, enterprise beans, threads, system resources, database connection pools, and user sessions. The monitoring interface provides chart and table views that make it simpler to diagnose the health and performance of the system.

Tracing and logging are also provided.

Tivoli monitoring

WebSphere Application Server Advanced Edition and Standard Edition provide Tivoli Ready Certified code. For instructions on installing and configuring Tivoli Ready Enablement, see Documentation Center.

Samples

WebSphere has samples gallery that includes a set of of small generic samples. The samples give you a quick way to add common function to your own Web sites, teach the basic concepts of the WebSphere Java programming model, and demonstrate handy techniques for getting the most out of the Application Server. The gallery also has a complete intranet Web site for a fictitious company, YourCo. The YourCo Web site shows you how you can apply and adapt the simple samples in the gallery to an (almost) real life situation.

After you have started the Application Server, see the IBM WebSphere Studio Web site for more information about the samples:

http://domain_name/WebSphereSamples/index.html

To use the samples, you need a Web browser that supports HTML 4, Cascading Stylesheets (CSS), and Java applets. Examples of such browsers are Netscape Navigator 4.07 and Microsoft Internet Explorer 4.01 or higher.


NOTE: Consult the Novell WebSphere Web site, or the IBM WebSphere Application Server Web site for corrections and additions to this information before installing WebSphere Application Server. Visit one of the following Web sites to view the latest Release Notes:

http://www.novell.com/websphere

http://www.ibm.com/software/webservers/appserv/


For more information

There are several places to get the most recent information about WebSphere Application Server and developing for it:

If you want to . . . Visit . . .
Install, configure, or maintain the WebSphere Application Server on NetWare
  • Novell WebSphere Web site
  • IBM Documentation Center
  • WebSphere Administrative Console Help
Develop and deploy servlets on WebSphere Application Server on NetWare
  • Novell Developer Web site
  • IBM Documentation Center
  • WebSphere Administrative Console Help

IBM Documentation Center

The Documentation Center, which resides on the server where you installed WebSphere, provides easy access to the product programming documentation, Administrative Console Help, Javadoc, the Web site, and other product resources.

To access the Documentation Center, you need a Web browser that supports HTML 4, Cascading Stylesheets (CSS), and Java applets. Compatible browsers include Netscape Navigator 4.07 and Microsoft Internet Explorer 4.01 or higher.

To access the Documentation Center from a Web browser:

  1. From a client computer in your network, open a Web browser.
  2. In your Web browser's Address field, type http://domain_name/IBMWebAS/doc/begin_here.
  3. Press Enter.

You can also open the Documentation Center by mapping a drive to your NetWare server and opening the following path:

as_root\web\doc\begin_here\index.html

WebSphere Administrative Console Help

The WebSphere Administrative Console is a Java program that provides the systems management interface for the WebSphere Administrative Server.

The Help includes a tutorial on how to perform the primary tasks, help for dialogs, and help for input fields. To access the Help, you need a Web browser that supports HTML 4, Cascading Stylesheets (CSS), and Java applets. Examples of such browsers are Netscape Navigator 4.07 and Microsoft Internet Explorer 4.01 or higher.

To access the Help:

  1. From a client computer in your network, open a Web browser.
  2. In your browser's Address field, type http://domain_name/IBMWebAS/help/helpcon.htm
  3. Press Enter.

Information on the Web

The WebSphere Application Server Web site includes:

Visit http://www.ibm.com/software/webservers/appserv/.

Novell Developer Web site

Novell's DeveloperNet Web site includes developer tools and support information, including:

Visit http://developer.novell.com/websphere.

Novell Documentation Web site

Novell's documentation Web site includes updated versions of the following documentation components:

Visit http://www.novell.com/documentation/lg/websphere/docui/index.html.


Before you install WebSphere Application Server

This chapter provides information on planning for the WebSphere Application Server product on NetWare.

As always, before installing WebSphere Application Server, consult the Web sites listed above for the latest information.


WebSphere Application Server component options

The WebSphere Application Server installation program allows you to choose from the following install options:

Development Kit
Installs all components, including the administrative server, administrator's console, Java client libraries, documentation, Help, samples, and MVC Beans for eBusiness. This option provides a full installation of the product. See the Custom Installation for specific components.
Production Application Server
Installs only the application server. Documentation and other components are not included. This option is recommended for mass deployment.
Administrator's Console
Installs the WebSphere Administrative Console for managing application servers. This option features a default configuration for the administrative server, helping you to more quickly begin administrative tasks.
Developer's Client Libraries
Installs .jar files that enable your client programs to access the server's code libraries.
Custom Installation
Installs selected components. Indicate your selections on the next page of the installation program.

This option features a default configuration for the administrative server, helping you begin administrative tasks more quickly. If installing a development environment, it is recommended that you select the default configuration (Development Kit).


WebSphere Application Server supported topologies

WebSphere Application Server Advanced Edition Version 3 supports a variety of topologies. The popular configurations are presented here:

Basic topology

The basic topology:

Figure 1. Basic topology supported by WebSphere Application Server

Single machine basic configuration

For instructions on installing the basic configuration, see Installing and configuring WebSphere Application Server.

Advanced topology option I

This topology option can be comprised of:

NOTE: A server group and all of its clones should reside on the same machine.

This topology provides good servlet and JavaServer Pages performance. Multiple application server engines deploy several instances of Java applications, all managed within a logical server group.

Figure 2 shows that this configuration, combined with the topology in Figure 1, is ideal for horizontal scaling, where the eNetwork Dispatcher product is used to balance workload across several machines.

Figure 2. Advanced topology option I

REQTEXT

For instructions on installing this topology, see Installing and configuring WebSphere Application Server.

Advanced topology option II

This topology option has all of the functions of advanced topology option I. Connections using non-secure encryption or Open Servlet Engine  (OSE) connect the Web server or WebSphere Application Server plug-in to the application server groups as shown in Figure 3. The firewall in this topology must support a TCP port. If the firewall uses a protocol analyzer, it will fail.

This topology is the most flexible of those supported by WebSphere Application Server Version 3.0. The servlets and JavaServer Pages files dispatch via the Remote Method Invocation (RMI) through IIOP. Multiple workstations with multiple server groups with clones are permitted.

This topology allows maximum flexibility in distribution of objects. This topology also is the only secure configuration. In this topology, shown as Figure 3, the connection between the Web server and WebSphere Application Server is the only unsecured connection. The connections from the  (OSE) listener to the application server groups use IIOP.

Figure 3. Advanced topology option II

REQTEXT

For information on installing this advanced option, see Installing and configuring WebSphere Application Server.

Server group support

WebSphere Application Server supports cloning of application servers using WebSphere Administrative Console. WebSphere Application Server supports cloning for servlet engines, Web applications, and servlets for workload management, load balancing, and fail over.

If all of the Java Virtual Machines (JVMs) supporting a server and its clones (a "server group") are located on the same physical machine (node) as the Web server, the OSE transport should be used to route the servlet requests, using the pushed-based native load balancing.

If any of the JVMs participating in a servlet cluster are located on any node other than the node containing the Web server, the IIOP-based servlet redirector should be used to route the servlet request, taking advantage of the IIOP load balancing.


WebSphere Application Server installation tips

These tips are intended to highlight some important points about successfully installing WebSphere Application Server. For more information on planning and installation, including requirements and procedures, read sections of this book as they are applicable to your WebSphere application; review the main product Web site for Release Notes with known problems, limitations, and workarounds; and visit the following product Web site for the most recent planning and installation information:

http://www.ibm.com/software/websphere/appserv/doc/v302/install/install_guides.html

Before installing

While installing

After installing

For more information on starting the WebSphere Administrative Server, see Starting and stopping WebSphere Application Server.

Planning to install WebSphere Application Server on NetWare

As with any software, some planning is necessary to ensure a successful installation. This section discusses how to install WebSphere Application Server on the Novell NetWare operating system. It provides:

Hardware requirements

These are the minimum hardware requirements for installing and operating WebSphere Application Server on the Novell NetWare operating system:

Software requirements

These are the minimum software requirements for installing and operating the WebSphere Application Server on the Novell NetWare operating system:

Uninstalling previous versions of WebSphere

Before you install WebSphere Advanced Application Server 3.0.2, you must first uninstall any Standard or Advanced versions you currently have installed on your NetWare server. 

To uninstall an existing version of WebSphere:

  1. Use the Install menu on the GUI console to remove WebSphere.
  2. If you were using Oracle as your administrative server, remove WebSphere from the Oracle database.
    1. From the NetWare console, run the Oracle utility svrmgr31.
    2. At the SVRMGR prompt, type the following commands, pressing Enter after each command:
  1. Reboot the server.

Installing and configuring WebSphere Application Server

This chapter discusses how to install and configure WebSphere Application Server and its components. After you complete these tasks, WebSphere Application Server can run with full functionality, using primarily its default settings.


Installing WebSphere Application Server on NetWare

Before you install WebSphere Application Server, consult the Novell Developer Kit, Novell Documentation Web site, or the Library page of the WebSphere Application Server Web site for corrections and additions to this information:

http://developer.novell.com/websphere/

http://www.novell.com/documentation/lg/websphere/docui/index.html

http://www.ibm.com/webservers/appserv/library.html

Main steps for installing on Novell NetWare

Before installing WebSphere Application Server, quickly review the following list to make sure you have met all of the prerequisites for successfully installing WebSphere on NetWare. If you have read Before you install WebSphere Application Server, you may have already have done steps 1 through 3.

  1. Ensure that you have met all hardware and software requirements.
  2. Ensure that the NetWare Enterprise Web server is successfully installed.
  3. Stop the Web server by typing nswebdn at the NetWare console prompt.
  4. Uninstall any previous versions of the Standard or Advanced WebSphere Application Server (see Uninstalling previous versions of WebSphere).
  5. Install WebSphere Application Server.
  6. Create the database (or table space) and user account. This must be done before running WebSphere. See Configuring Oracle as the Administrative Database.
  7. Start the WebSphere administration server by typing startwebsphere at the NetWare console prompt.
  8. Start the administrative console from the NetWare GUI by clicking the Novell button > point to WebSphere > click Administrator's Console.
  9. Verify that WebSphere Application Server is functioning. See Checking and troubleshooting the installation.

Installing on NetWare

To install WebSphere on NetWare:

  1. Start your NetWare server.
  2. From a command prompt, type cdrom to mount the CD-ROM.
  3. Open the NetWare GUI by typing startx at a command prompt.
  4. From the GUI, click Novell > Install.
  5. Click Add.
  6. Click Browse > navigate to the CD.
  7. From the root of the CD, select PRODUCT.NI > click OK.
  8. Click OK again.
  9. Follow the on-screen instructions in Selecting components to install to continue the installation.

Selecting components to install

When the Install Options panel displays, select the component you want to install and the target directory.

The component options are described in WebSphere Application Server component options. The default option is Development Kit, which provides the basic topology described in Basic topology.

Alternatively, you can install the basic topology using the Custom Installation option. Selecting Custom Installation opens the Choose Application Server Components panel. The default options include:

Selecting database options

When the Database Options panel displays, enter the information appropriate for your configuration. 

IMPORTANT: Be sure to specify the correct path to your database. For example, if you are using Oracle and have installed the database on VOL1, make sure you specify VOL1.

The WebSphere Application Server requires a database to manage configuration and security information. WebSphere 3.02 Advanced for NetWare lets you use either Oracle or DB2. 

The following table indicates where Oracle and DB2 databases can be stored in relation to where the WebSphere Administration Server resides. A local database is one that resides on the same NetWare server as the WebSphere administration server.

  Local Database Remote Database
Oracle Allowed Allowed
DB2 Not Allowed Allowed

Scripts to create and initialize your database are provided for these configurations. Selecting either Oracle or DB2 will provide default values for all other fields. Oracle defaults will configure WebSphere to be used with Oracle on the local server.

Because DB2 is not available on NetWare, the installation process will simply install the necessary values needed to run a DB2 database on a remote server. This assumes that a WebSphere Application Server database was created in the directory C:\SQLLIB on the remote computer.

NOTE: Prior to running WebSphere, the database (or table space) and user account needs to be created. The WebSphere Application Server will use this information to access the database. The following section describes how to create and configure the database.


Configuring Oracle as the administrative server database

You can run the Oracle Server on your local node, or you can access an Oracle Server on another host. WebSphere lets you use an Oracle database or allows multiple hosts to share an Oracle database. 

When you install WebSphere Application Server, the installation program generates a CREATEORACLE.NCF file in the as_root/bin directory. Follow the steps below for creating and configuring the Oracle database on NetWare or NT.

NOTE: If you are using Oracle, note that occasionally, when the Administrator's Console is started, items in the Topology tab are not visible. This can be fixed by editing the INITdatabase_instance.ORA file in the DATABASE subdirectory where the Oracle database was installed (e.g. DATA:ORAHOME1\DATABASE\INITORCL.ORA).

Edit this file by adding or modifying the following line:

OPEN_CURSORS=200

For the change to be effective, the database must be stopped, unloaded and then restarted (e.g. orastop, oraunld, oraload and orastart).

Creating and configuring the database on NetWare

To create and initialize the table space in the Oracle database on NetWare: 

  1. At the NetWare console prompt, type load createOracle.
  2. Open the sys:\OraHome1\RDBMS\wasoracle.log file to check for errors.
  3. Start the database by typing oraload and orastart at the console prompt.

IMPORTANT: These steps must be completed before starting WebSphere. Also, once you have WebSphere and Oracle running successfully, do not stop and unload Oracle before stopping WebSphere.

Creating and configuring the database on NT

To create and initialize the table space in the Oracle database on NT:

  1. From the computer where you have DB2 installed, map a drive to the NetWare server and volume where WebSphere is installed.
  2. Navigate to as_root\bin.
  3. Run the file CREATEORACLE.BAT.
  4. From the same directory, open WASDB2.LOG to check for errors.
  5. Start the database.

Configuring DB2 as the administrative server database 

You can use DB2 as the administrative server database, which is used to manage and store WebSphere Application Server configuration and administration information. Because DB2 does not run on NetWare, you will have to use it as a remote database running on an NT computer that is attached to your NetWare network where you have installed WebSphere. WebSphere allows multiple hosts to share a DB2 database as depicted in Figure 2 and Figure 3.

The following information describes how to use DB2 as your administrative server database. 

Creating, configuring and starting a distributed DB2 on Windows NT 

When you install WebSphere Application Server, the installation program will generate a CREATEDB2.BAT and a CREATEWASDB.SCR file in the as_ root/bin directory.

To create and initialize the database on NT:

  1. From the computer where you have DB2 installed, log in to NT as a user that has administrative rights.
  2. From the control panel, verify that the DB2 service has been started.
  3. Map a drive to the NetWare server and volume where you WebSphere is installed.
  4. Navigate to as_root\bin and copy CREATEDB2.BAT and CREATEWASDB.SCR to your NT computer.
  5. Run the file CREATEDB2.BAT.
  6. From the same directory, open WASDB2.LOG to check for errors.
  7. Start the JDBC Applet Server on the TCP/IP port specified during installation.

For example if you specified a port of 6789 in the JDBC URL, then you would enter the following:

db2jstrt 6789

DB2 documentation

For more information on using and configuring DB2, visit

http://www.software.ibm.com/cgi-bin/db2www/library/pubs.d2w/report#UDBPUBS


Configuring Application Server components

The WebSphere Application Server components, security runtime and Object Level Trace and Debugging (OLT and OLD), require post-installation steps before you can use the WebSphere Administrative Console to configure, start, and administer them.

Security runtime

The WebSphere security runtime might require some post-installation steps. Refer to http://domain_name/IBMWebAS/help/secure2.htm for the steps related to security.


Enabling Security

In order for your applications to take advantage of WebSphere security, there are a few tasks you need to perform. If you are running the admin console from Windows NT, you will need to install the admin console and your Server Certificate. See Enabling Web distribution of the WebSphere Administration Console for instructions. Once your admin console is updated and you have installed your server certificate, you are ready to enable security.

Installing the server certificate (when running the Admin Console on Windows NT)

To install the server certificate when running the Admin Console on Windows NT:

  1. Create a new folder in C:\WebSphere\AppServer named Etc. (or create this folder in the location you unjared IBMWebASv3_NT_AdminClient.jar in Updating the Admin Console).
  2. Map a drive to your NetWare 5.1 server.
  3. Open the SYS:\public folder.
  4. Copy RootCert.der to C:\WebSphere\AppServer\Etc.

NOTE: If you did not unjar IBMWebASv3_NT_AdminClient.jar to C:\WebSphere\AppServer, you will need to edit PROPERTIES\SSL.PROPERTIES and set the SSL.CERTS property to the full path of RootCert.der.

Creating a WebSphere administrator account

Before you enable security, you need to create a separate account for the WebSphere administrator. The password for this account will not be secure, therefore it is recommended that you do not use the same password as the admininistrator account on your server.

To create the WebSphere administrator account:

  1. Start Console One.
  2. Browse to the context where you would like the WebSphere administrator account created.
  3. Click the New User button on the toolbar, or click File > New > User.
  4. Fill in the following:
  5. Name: Name of the WebSphere admin account (example: WebSphereAdmin).
    Surname: Surname for the WebSphere admin account (example: WebSphereAdmin).
  6. Click OK.
  7. Enter and confirm the password.

When the WebSphere administrator account is created, use it when completing the next section, Enabling security in the Global Security Task.

Enabling security in the Global Security Task

  1. Start the administrative server and WebSphere Administrative Console.
  2. Click the Tasks tab.
  3. Click the Security task group to expand it.
  4. Click Specify Global Settings.
  5. Click the green traffic light button on the console toolbar to start the task.
  6. On the General tabbed page, select the Enable Security check box.
  7. On the Authentication Mechanism tabbed page, select Lightweight Third Party Authentication (LTPA) as the Authentication Mechanism.
  8. On the User Registry tabbed page, enter the user ID and password for the the account you created in Creating a WebSphere administrator account.

The password for this account is not secure, so if you have not created this separate account follow the instructions in Creating a WebSphere administrator account to create this account.

  1. Select NDS as the directory type.
  2. Enter localhost as the host.
  3. Enter o=ws_admin_context as the Base Distinguished Name, where ws_admin_context is the NDS context for the Security Server admin user you specified in the Security Server ID field.
  4. Check the Use SSL to Connect to Directory checkbox > click Finish.
  5. When prompted for an LTPA password, enter your WebSphere administrator password.
  6. For your changes to take effect, stop the administrative server and then start it again.

NOTE: The first time you start your administrative server after enabling security, the administrative server will exit with a code of 1111. The administrative server will then restart automatically.

  1. In the Topology tree on the Topology tab, locate the node representing the local machine.
  2. Right-click the node and click Stop for Restart.
  3. A dialog informs you that the administrative console will be shut down as well. Confirm that you want to proceed with the operation.

Setting Up a Secure Connection to a Remote NDS

NDS eDirectory manages user accounts for WebSphere. If you are running NDS on a remote server--a server other than the server where you are running WebSphere--you can set up a secure connection using SSL and Novell International Cryptographic Infrastructure (NICI).

NICI is set up using keyring managment tools. You create a Key Management Object (KMO) which uses the digitial certificate for the sever which hosts NDS.

Setting up NICI involves the following process:

  1. Export the trusted root from tree A.
  2. Create a certificate in tree B signed by tree A's Certificate Authority.
  3. Configure WebSphere to use this certificate.

STEP A: Exporting the Trusted Root from Tree A

  1. In ConsoleOne, select the Security Container located under the tree root for tree A.
  2. Right-click the Certificate Authority object in the security container and select Properties.
  3. Click the Certificates tab and select Public Key Certificate.
  4. Press the Export button.
  5. Choose .DER format and type in a filename in the filename field.
  6. Press Export.

Step B: Creating the Key Material Object for Tree B

  1. In ConsoleOne, highlight the container in tree B containing the Server object.
  2. Right-click on the container object and choose New > Object.
  3. Select the NDSPKI:Key Material Object class and click OK.
  4. Under Certificate Name, type in a name for the KMO object.
  5. Select the Custom radio button in the Creation method box and click Next.
  6. Select the External Certificate Authority radio button to indicate that the certificate will be generated by tree A and click Next.
  7. Specify the RSA key size, if applicable, and click Next.
  8. Click Next to accept the certificate parameters.
  9. Click Finish to generate a Certificate Signing Request (CSR).
  10. Select the System Clipboard in Base64 Format radio button and click Save.
  11. Left-click the Server object to select tree A.
  12. Under the ConsoleOne Tools menu, select Issue Certificate.
  13. Press Ctrl+V to paste the new CSR into the CSR window and then click Next.
  14. Click Next to generate a certificate signed by tree A's Certificate Authority.
  15. Select the SSL or TLS radio button to indicate that the certificate is to be used for SSL authentication and click Next.
  16. Select the validity period desired and click Next.
  17. Click Finish to create the certificate.
  18. Select the System Clipboard in Base64 Format radio button and click Save.
  19. Right-click the KMO in tree B and click Properties.
  20. Click the Certificates tab and select Public Key Certificate.
  21. Click Import.
  22. Click Read from File and enter the filename of the Trusted Root certificate that you exported from the first tree and click Next.
  23. Press Ctrl+V to paste the certificate created by tree A's Certificate Authority into the certificate window.
  24. Click Finish.

Step C: Configuring WebSphere to Use the New KMO Object

  1. Edit NSSL.PROPERTIES in the SYS:/WEBSPHERE/APPSERVER/PROPERTIES directory to include the following entry:

nssl.keystore=name

where name is the value used in step number 4 of Step B.

  1. Stop and restart the WebSphere administration server.

Starting and stopping WebSphere Application Server

This chapter provides you with information on how to start and stop:

Remember to consult the IBM WebSphere Application Server Web site for the latest corrections or additions to this information.


Starting the WebSphere administrative server on NetWare

When you install WebSphere on NetWare, your AUTOEXEC.NCF file is modified to run the Administrative Server when you start NetWare. Optionally, you can comment this line out and start the Administrative Server from a command prompt by typing startwebsphere.

Stopping the WebSphere administrative server on NetWare

 To stop the Administrative Server, type stopwebsphere at the NetWare console prompt. 

IMPORTANT: Do not stop and unload Oracle before stopping WebSphere.

Starting the WebSphere Administrative Console on NetWare

You can start the WebSphere Administrative Console on NetWare through the NetWare GUI interface or from a command prompt.

To start from the NetWare console:

  1. Start the NetWare GUI console:
    1. From the Novell menu, select WebSphere, and then Administrator's Console.
    2. You can also start the server from the NetWare console prompt by typing adminclient.
  2. Start the default server from the WebSphere Administrative Console:
    1. Click the Topology tab.
    2. Expand the WebSphere Administrative Domain tree.
    3. Expand the node labeled with the host name.
    4. Select Default Server.
    5. If the default server state is Stopped, click the Start button (green icon) on the tool bar. Wait for the status to change from Stopped to Running.

Starting the WebSphere Administrative Console on NT

If you want to use the Administrative Console on a remote Windows NT client computer in your network, follow the steps outlined below.

To set up the Administrative Console on a remote NT client:

  1. On the nw console, type setupclient.
  2. From a Web browser running on a remote computer in your network, type the URL http://hostname/admin/install and press Enter.

Exiting the WebSphere Administrative Console

To exit the WebSphere Administrative Console, click Exit on the console menu bar.


Starting and stopping an application server

To start an application server process from the WebSphere Administrative Console:

  1. Click the Topology tab.
  2. Expand the WebSphere Administrative Domain tree view.
  3. Expand your host name tree view.
  4. Select and click Default Server or the server you created.
  5. Do the following:

Similarly, to stop an application server process, follow the same first four steps used to start a server process, but then do the following:

  1. Click the round, red button on the administrative console tool bar.
  2. Right-click, then select and click Stop.

NOTE: If you want to stop everything except the administrative console, refer to the starting and stopping topics.


Checking and troubleshooting the installation

Now that you have installed WebSphere Application Server, you can verify that it is installed and functioning correctly. This topic discusses:

Remember to consult the IBM WebSphere Application Server for NetWare Web site (http://www.novell.com/websphere) for the latest corrections or additions to this information.


Verifying that the Product is Running

Before testing servlets and enterprise beans, you must start the product and its prerequisites:

  1. Ensure that the administrative repository is running. (See Configuring DB2 as the administrative server database and Configuring Oracle as the administrative server database).
  2. Start the administrative server.
  3. Start the administrative console.
  4. Be sure the Default Server is started from the WebSphere Administrative Console (see Starting and stopping an application server).

Testing Your Web Server

To verify that the NetWare Enterprise Web server is up and running, use a Web browser to open your Web server's default home page:

http://domain_name

If it isn't running, type nsweb at the NetWare console prompt.


Testing Servlets

To verify the WebSphere Application Server installation, you must have started the Web servers. Use your browser to open:

http://domain_name/servlet/snoop

where domain_name is your host machine name.

Two sample applications (servlet groups) are installed under the Application Server hosts folder. The applications are default_app (which includes snoop) and examples. To serve servlets from these applications, use your browser to open the servlet URL. To view the servlet URL, use the WebSphere Administrative Console to display the servlet attributes.

Troubleshooting servlets

If you cannot open and display your servlets, be sure that you have correctly installed the Web server and that it is running. Also, make sure you have used your host name and not localhost; and that you have started the Default Server from the WebSphere Administrative Console (refer to Starting and stopping an application server).


Testing enterprise beans

This section describes how to test the enterprise beans included with WebSphere Advanced Edition for NetWare to ensure that WebSphere is running correctly.

Testing with the sample enterprise bean HitCount

After you install WebSphere Application Server, you can test an enterprise bean by  

NOTE: Before proceeding, you must disable security for the bean to work.

To create a JDBC driver:

  1. Make sure WebSphere is running.
  2. From the NetWare GUI, start the WebSphere Administrative Console.
  3. Click the Topology tab.
  4. Right-click on the WebSphere Admin Domain object and select Create >  JDBC Driver.
  5. In the Create a JDBCDriver dialog, enter the following values for the respective fields:

    Name: SampleJDBC
    Implementation class:

    1. DB2 Thick: COM.ibm.db2.jdbc.app.DB2Driver
    2. DB2 Thin: COM.ibm.db2.jdbc.net.DB2Driver
    3. Oracle Thin: oracle.jdbc.driver.OracleDriver

    URL Prefix:

    1. DB2 Thick: jdbc:db2
    2. DB2 Thin: jdbc:db2:hostname:port (e.g. jdbc:db2:yourdb.yourco.com:6789)
    3. Oracle Thin: jdbc:oracle:thin:@hostname:port (for example, jdbc:oracle:thin:@yourdb.yourco.com:1521)

    JTA Enabled:

    1. DB2: false
    2. Oracle: true or false
  6. Click on Create and, after a message displays stating that the creation was successful, click on OK.

To create a data source:

  1. Right-click on the WebSphere Admin Domain object and then select Create > DataSource.
  2. In the Create a DataSource dialog, enter the following information:

    Name: SampleDBSource
    Database name:

    1. DB2: SampleDB
    2. Oracle: ORCL (The database instance name or SID is used here with Oracle.)

    Driver: SampleJDBC (created in the first step, To Create and Install a JDBC Driver)

  3. Click on Create and, after a message displays stating that the creation was successful, click on OK.

To create a database or tablespace in DB2:

Type the following command at a DB2 command prompt:

db2 create database SampleDB

To create a database or tablespace in Oracle:

  1. Start the Oracle command prompt by typing SVRMGR31 at the NetWare console prompt.
  2. Enter your username and password.
  3. Type the following commands at Oracle command prompt, pressing enter after each command string:

    CREATE TABLESPACE sampledb DATAFILE 'sys:/orahome1/sampledb' SIZE 50K REUSE AUTOEXTEND ON NEXT 5K;

    CREATE USER ejb IDENTIFIED BY ejb DEFAULT TABLESPACE sampledb;

    GRANT CONNECT, RESOURCE, DBA TO ejb;

    COMMIT;

To install the new JDBCDriver onto your host:

  1. On the Topology tab, right-click the SampleJDBC object and click Install.
  2. In the Install Driver dialog, select the node where you will configure this JDBCDriver.

    For single-system configuration, specify the host name on which you are currently running.

  3. Click Browse and select the path for the JDBC driver so the system can locate the driver.

    DB2: WebSphere\AppServer\lib\db2java.zip
    Oracle: WebSphere\AppServer\lib\classes111.zip

  4. Click Install > OK.

To deploy the bean:

  1. Expand the node and the Default Server to get to the Default Container.
  2. Right-click the Default Container and select Create > EnterpriseBean.
  3. For Jar file, select Browse, click on the icon to go up one folder (or subdirectory), and then double-click the deployableEJBs subdirectory.
  4. Double-click on the Inc.jar file.
  5. Within the JAR file, select the .SER file and then click Select.
  6. Click Yes > OK.
  7. Click the DataSource tab and select Change next to the DataSource field.
  8. From the DataSource popup, select SampleDBSource (from step 5) and then click OK.
  9. Fill in the information for the User ID and Password fields.

    DB2: Use a db2 username and password.

    Oracle: Use EJB and EJB from step 6b.

  10. Click on Create and, after a message dialog opens stating that create completed successfully, click OK.

To start the EnterpriseBean:

  1. Ensure that the Default Server and Default Container are running.
  2. Right-click on the Inc EnterpriseBean object and then click Start.
  3. Click OK.

To test the EnterpriseBean:

  1. Start your Web browser and type the URL http://hostname/webapp/examples/HitCount in your browser's address field.
  2. From the Generate Hit Count Using list, select Enterprise JavaBean.
  3. Click Increment.

The number of hits should display.

Testing the security function using the HitCount sample

You can use the HitCount sample described in Testing with the sample enterprise bean HitCount to test the security function.

To test the security function using the HitCount sample: 

  1. From the Tasks pane of the administrative console, expand the Security tree view.
  2. Select Specify Global Settings > click Start.
  3. In the Security Task Wizard, click the Enable Security check box and then click Finished.
  4. Expand the Configuration task > select Configure an Enterprise Application > then click Start.
  5. On the General tab, enter the application name SecApp > then click Next.
  6. On the Add Resource tab, expand Enterprise Beans.
  7. Select the Increment bean > click Add > click Next > and then click Finished.
  8. Select Edit an Enterprise Application > click Start.
  9. Select SecApp and click Next.
  10. Under Web Applications, click Examples > click Add > click Next > and then click Finished.
  11. Expand the Security task, select Configure Resource Security, and click on Start.
  12. Open the Enterprise Bean tree view and do the following:
    1. Select the Increment bean and then Next.
    2. For the Use default Method Groups dialog, answer Yes.
    3. Click on Finished.
  13. Open the Security task, select Configure Resource Security, and click Start.
  14. Open the VirtualHosts view followed by the default_host tree view, and then do the following:
    1. Select the URI /webapp/examples/HitCount and click Next.
    2. For the Use default Method Groups dialog, click Yes.
    3. Click Finished.
  15. Assign permissions:
    1. Select Assign Permissions > select all of the SecApp WebSphere permissions > then click Add.
    2. Select the All Authenticated Users check box.
    3. Click on OK.
  16. Under the Security tree view, select Configure Application Security and then click Start.
  17. Under Enterprise Applications, select SecApp > click Next > and then click Finished.
  18. Stop the default server and then stop the administrative client.
  19. Restart the administrative server, the administrative client, and then the default server.
  20. From a client computer, start a Web browser and type the URL in your browser's address field. For example, type http://domain_name/webapp/examples/HitCount. You should see a prompt for user ID and password. If you do not, check the Std Out log found at WebSphere/AppServer/Log/DefaultServer.

Testing other sample enterprise beans

You can follow the steps in Testing with the sample enterprise bean HitCount to deploy other sample enterprise beans. Look in http://domain_name/WebSphereSamples/index.html.


Debugging, logging and monitoring

This division provides an overview of the facilities available for logging, monitoring, and debugging WebSphere Application Server and its components.

The WebSphere Administrative Console help system provides instructions to help you enable debugging, tracing, logging, and monitoring to detect and diagnose problems in both the Application server and your own programs.

To access the help system, open:

as_root/web/help/helpcon.htm

where as_root is the root directory of your WebSphere Application Server installation.


Tips for using administrative server and console  

If you have completed instructions in previous chapters, you should by now have the administrative server and administrative console running. Further, you might have used the administrative console to verify the installation with a servlet and an enterprise bean.

This chapter provides more information about the administrative console and points you to online helps that describe how to complete administrative tasks using the console.


What you can do with the console

The administrative console is a main window from which you can complete tasks using the following resources:

Enterprise applications
Configure applications comprised of Java components that work together to perform a business logic function. An enterprise application can contain enterprise beans, servlets, HTML, JavaServer Pages (JSP) files, and Web applications. You can start and stop the application as a single unit, and create copies (clones) for workload management purposes.
Web applications
Configure combinations of servlets, HTML, and JavaServer Pages (JSP) files into Web applications, allowing you to manage the resources as a single unit.
Application servers
Manage application server processes that enable your Web server to handle requests for applications containing enterprise beans and servlets.
Enterprise beans and their containers
Deploy and manage entity and session beans, including their containers and database access.
Servlet engines and servlets
Manage servlet engines that run within application servers to handle servlet requests.
Files
Manage JavaServer Pages (JSP) files, HTML files, and Web resources.
Nodes
Manage physical machines in your administrative domain.

In addition, you can use the console to do the following:


Help on using the console

For information on how to use the console, refer to the Help. To run the Help system, open the following file using your Web browser:

as_root/web/help/helpcon.htm


Getting assistance

Developer support

The WebSphere Application Server Web site and the Novell Developer Kit contain frequently asked questions and their answers.

http://www.ibm.com/software/webservers/appserv/library.html
http://developer.novell.com/websphere

You can also visit the user forum at

http://www.networking.ibm.com/was/forum.html

Novell Support Connection

If you experience a problem with WebSphere Application Server, you can contact the Novell Support Connection.

The Novell Support Connection™ provides access to Novell’s networking expertise through the Novell Support Connection Web site, the Novell Support Connection CD, and support programs for customers and partners. 

By using the Novell Support Connection Web site or CD, you can connect to the same networking knowledge used by Novell technical support engineers. In addition, the Web site provides an open Internet-based forum for customers and partners to share technical support information and solutions. The forums are staffed by volunteer System Operators (SysOps) who are invited and sponsored by Novell to answer questions posted in the forums. The Web site also offers information on Advanced Technical Training videos, CBTs and conferences. 

For additional support, Novell encourages customers to contact a Novell partner. Customers can locate qualified partners using the Novell Support Connection Web site. Searches are based on geographic location, product expertise, or both.

Visit the Novell Support Connection at:

support.novell.com (Americas) 
support.novell.de (Europe, Middle East, Africa) 
support.novell.com.au (Asia Pacific ) 

or call:

Americas (English) 1-800-858-4000/801-861-4000 
Europe, Middle East, Africa (English) (49) 211 5632 744 
French (49) 211 5632 733 
German (49) 211 5632 777 
Asia Pacific (English) (61) 2 9925 3133 

See the Novell Support Connection Web site for a complete list of languages and support telephone numbers.

To order the Novell Support Connection CD, call 1-800-377-4136 or 1-303-297-2725 or visit the Novell Support Connection Web site.

You can also e-mail IBM directly with your suggestions and requirements for future releases, and to report less critical defects that do not require a personal interaction or formal support: WASTEAM@US.IBM.COM


Appendix A. Components available for installation


Java client libraries

The Java client libraries component consists of the following subcomponents:


Production application server

Install the production application server when you need to deploy servers together. The producation application server component consists of the following subcomponents:

Upon selection of the server installation option, all of the above WebSphere Application Server subcomponents are installed in the target directory you specify. Java client libraries are also installed.


Administrative console

Install the WebSphere Administrative Console component when you need to deploy a production machine to perform administrative tasks. This installation is a superset of the Java client libraries component, adding administrative and deployment tools. The administrative console component consists of the following subcomponents:


Development kit

Install the WebSphere Application Server development kit when you need to develop and test applications. The development kit includes the following subcomponents:


Database components

The WebSphere Application Server Advanced Edition product requires a database for operation. An Oracle 8i database satisfying the product prerequisites is available for NetWare.

WebSphere Application Server Advanced Edition supports Oracle8i (Version 8.1.6) THIN JDBC Driver when used with the Java Development Kit Version 1.1.x. The OCI driver is not supported.


Appendix B. Installing and configuring NetWare Enterprise Web Server


The NetWare Enterprise Web Server should be installed before you install the IBM WebSphere Application Server because installing the WebSphere Application Server changes the Web server OBJ.CONF file. 

The following modifications are made to the NetWare Enterprise Web Server configuration files during the installation process:

The default install directory for WebSphere is SYS:/WebSphere/Appserver. This will be different for non-default directories


Appendix C. Novell Directory Services (NDS)

Novell Directory Services® (NDSTM), also referred to as eDirectory is implemented as part of the IBM WebSphere 3.0 for NetWare infrastructure. NDS provides a seamless authentication capability and implements LDAP extensions.

SSL provides encryption of data and authentication using X.509v3 public-key certificates. The server may be configured to run with or without SSL support. The server supports LDAP referrals, allowing directories to be distributed across multiple LDAP servers. Replication is supported which makes additional read-only copies of the directory available, improving performance and reliability of access to the directory information. A powerful, easy-to-manage access control model is supported. Configuration and administration of the LDAP Directory is accomplished through an improved web-based interface.

NDS supports over a billion entries with peak sub-second response time for searches.

The NetWare Enterprise Web Server supports LDAP administration.

Directory client access is supported using LDAP or HTTP protocols. Client applications can be developed using the enhanced elements provided for supporting LDAP Version 3 protocols and APIs. Also included is the Java Naming and Directory Interface (JNDI) client API that provides Java applications with access to LDAP-enabled directories. Both clients support access to NDS using LDAP Version 2 or Version 3.


Appendix D. Notices

References in this publication to IBM products, programs, or services do not imply that IBM intends to make them available in all countries in which IBM operates. Any reference to an IBM product, program, or service is not intended to state or imply that only that IBM product, program or service may be used. Subject to IBM's valid intellectual property or other legally protectable rights, any functionally equivalent product, program, or service may be used instead of the IBM product, program, or service. The evaluation and verification of operation in conjunction with other products, except those expressly designated by IBM, are the responsibility of the user.

IBM may have patents or pending patent applications covering subject matter described in this document. The furnishing of this document does not give you any license to these patents. You can send license inquiries, in writing, to the IBM Director of Licensing, IBM Corporation, 500 Columbus Avenue, Thornwood, NY 10594, U.S.A.

Licensees of this program who wish to have information about it for the purpose of enabling: (i) the exchange of information between independently created programs and other programs (including this one) and (ii) the mutual use of the information which has been exchanged, should contact:

Director of Licensing
IBM Corporation
North Castle Drive
Amonk, NY 10504-1785
USA

The licensed program described in this document and all licensed material available for it are provided by IBM under terms of the IBM Customer Agreement.

This document is not intended for production use and is furnished as is without any warranty of any kind, and all warranties are hereby disclaimed including the warranties of merchantability and fitness for a particular purpose.

This product includes computer software created and made available by CERN. This acknowledgement shall be mentioned in full in any product which includes the CERN computer software included herein or parts thereof.


Trademarks

The following terms are trademarks of IBM Corporation in the United States or other countries or both.

IBM
RS/6000
WebSphere
WebSphere Application Server

Microsoft, Windows, Windows NT and the Windows 95 logo are trademarks or registered trademarks of Microsoft Corporation.

UNIX is a registered trademark in the United States and other countries licensed exclusively through X/Open Company Limited.

Pentium II is a trademark or registered trademark of Intel Corporation.

NetWare is a trademark of Novell, Inc.

Java and all Java-based trademarks and logos are trademarks or registered trademarks of Sun Microsystems, Inc. in the United States and other countries.

Other company, product, and service names, which may be denoted by a double asterisk (**), may be trademarks or service marks of others.


First NetWare Edition (May 1999)

This edition applies to the licensed program IBM WebSphere Application Server Advanced Edition Version 3.02, Program Number 5801-AAR.

Order publications by phone or fax. IBM Software Delivery Solutions/IBM Publications Support takes publication orders between 8:30 a.m. and 7:00 p.m. Eastern Standard Time (EST). The phone number is (800) 879-2755. The fax number is (800) 284-4721.

You can also order publications through your IBM representative or the IBM branch office serving your locality. Publications are not stocked at the address below.

A form for your comments appears at the back of this publication. If the form has been removed, address your comments to:

IBM Corporation
Attn: Information Development
Department G7IA, Building 062
P.O. Box 12195
Research Triangle Park, NC 27709-2195

You can fax comments to (919) 254-0206.

When you send information to IBM, you grant IBM a nonexclusive right to use or distribute the information in any way it believes appropriate without incurring any obligation to you.


(C) Copyright International Business Machines Corporation 1998,1999. All rights reserved

Note to U.S. Government users: Documentation related to restricted rights. This documentation is related to restricted rights. Use, duplication, or disclosure is subject to restrictions set forth in GSA ADP schedule contract with IBM Corporation.