0

IS there any way to validate LTPA token previously generated from IBM Tivoli federated Websphere Application Server in my nodejs application. I have checked "ldapjs", but I could not find something to validate LTPA token.

2 Answers2

2

I have written a small library for this purpose: https://www.npmjs.com/package/ltpa

Once you've extracted your server key you can use the library to validate, and generate LtpaTokens.

  • I've tried your library (thank you for your work) but how to implement it with a server to server (kerberos environment) key? I don't have the server key but an administrative username – TecHunter Mar 31 '16 at 14:18
  • The library is only useful if you have access to the server Ltpa secret. I'm not sure what you mean by server-to-server. – Markus Berg Apr 06 '16 at 12:03
  • I have a websphere with ltpa token against an AD using ldap. the websphere is configured with a service user to check user credential against the AD then on success will generate the ltpa token. This lib is only to generate the ltpa right? I have the 3DESKey of the server (extracted from server's config) but not sure what is the server key here... – TecHunter Apr 06 '16 at 12:53
  • 1
    To be honest, I'm not entirely sure myself. I've never used websphere, so my only experience with Ltpa has been with IBM Domino. It might be that the Ltpa version used by Domino differs from the one used by Websphere: ftp://ftp.software.ibm.com/software/integration/datapower/library/prod_docs/Misc/UnderstandingLTPA-v1.pdf – Markus Berg Apr 07 '16 at 15:22
  • mine is LtpaToken2 not the first one... that might explains it. thanks though! – TecHunter Apr 08 '16 at 08:19
0

There is an Java API related with WSLogin - which allows to validate LTPA. (Technically a re-login here)

But I dont think you can use this with Nodejs.

But my preferred way is to use the BASIC authentication using the URL post from your app.

This requires a provider (Websphere) to expose a URL for you.