About This Document

Intended Audience

This document covers in detail all the concepts related to the JEUS 6.0 security system, configuration, operation, and customization. It is intended for all JEUS system administrators.

Required Knowledge

In order to fully understand this guide, users need to have an overall understanding of:

J2SE security architecture and general security technologies (SSL/TLS, Digital Authentication, Role-based User Authentication Model)

JEUS security architecture

JEUS Server as a whole (Refer to "JEUS Server Guide")

Document Scope

This document does not cover Java EE or Java specifications. For more information, refer to their related documents.

Document Organization

This document consists of eleven main chapters and two appendices.

"Chapter 1. Introducing the Security System"

Describes the overview and introduction of the JEUS security system.
"Chapter 2. Configuring the Security System"

Describes how to configure security domains, security services, subjects, and policies.
"Chapter 3. Configuring Security for Applications and Modules"

Describes how to apply security settings to EJB, web modules, and J2EE applications in JEUS.
"Chapter 4. Programming with the Security System API"

Describes how to create applications (for example Servlets) that use the security system API.
"Chapter 5. Developing Customized Security Services"

Describes how to develop your own Customized Security Providers (services) to use with JEUS.
"Chapter 6. Using JACC Provider"

Describes how to develop and integrate a JACC provider with the JEUS security system.
"Chapter 7. Using JAAS"

Describes how to develop and integrate a JAAS provider with the JEUS security system.

"Appendix A. Security Event Service"

Describes about the standard security event that is detected by the security system.
"Appendix B. JEUS Server Permissions"

Describes the security event reference to the permission that is checked by JEUS Server.

Conventions

Convention	Meaning
<<AaBbCc123>>	Filename of a program
<Ctrl>+C	Hold the Control key and press C
[Button]	Button or Menu name
Boldface	Emphasis
" " (double quotes)	Reference to chapters or sections in the manual, or to other related documentation
'Input Item'	Description for an input item on the screen
`Hyperlink`	E-mail account, website, link to other chapters or sections
>	Progress order of menus
+----	Files or directories exist below.
\|----	Files or directories do not exist below.
Note	Reference or note
Caution	Caution
[Figure 1.1]	Figure name
[Table 1.1]	Table name
AaBbCc123	Java codes and XML documents
`[ command argument ]`	Optional parameter
< xyz >	The contents between '<' and '>' will be changed to an actual value.
\|	Selective argument. ex) A\|B: either A or B
…	Repetitive parameters, etc.

System Requirements

This guide follows the UNIX style for all examples and screen configurations.

Users of other environments, such as Windows, can use this with a few considerations. For example, use the Windows style "\" as the directory delimiter instead of the UNIX style "/". Environment variables should also be changed to Windows style variables.

This guide primarily discusses Java, so most of the content should apply to all systems.

Guide	Description
JEUS Server Guide	Describes overview of the JEUS system and server, and system management.
JEUS EJB Guide	Describes JEUS EJB engine and how to deploy EJB modules.
JEUS Web Engine Guide	Describes how to manage JEUS web engine, and how to manage and deploy Java EE WAR Archive and servlet/JSP.
JEUS Node Manager Guide	Describes JEUS Node Manager concepts and usage.

References

Java Authorization Contract for Containers Specification Version 1.0

Information about JACC provider.
J2EE 6 Specification

Information about the basic security architecture applied to J2EE server, including JEUS.
EJB 3.1 Specification

Information about EJB security model.
Servlet 3.0 Specification

Information about Servlet security model.
Javadoc for J2SE 6 packages java.security, javax.security.auth J2EE 6 package javax.security.jacc

Detailed information about basic security-related J2SE/J2EE class.