Index

Symbols

<password>

AES/DES/DESede/SEED/Blowfish, Configuring Password Security
base64, Configuring Password Security
SHA, Configuring Password Security

<role-mapping>

<role-permission>, Configuring jeus-web-dd.xml

A

accounts.xml, Overview, Configuring XML

<users><group>, Configuring XML
<users><user>, Configuring XML

accounts.xsd, Configuring XML

application.xml, Configuring application.xml

auditing, Auditing

authentication, Authentication

AuthenticationRepositoryService, SPI Class, AuthenticationRepositoryService SPI

AuthenticationService, SPI Class, AuthenticationService SPI

AuthorizaionService, Event

authorization, Authorization

AuthorizationRepositoryService, SPI Class, AuthorizationRepositoryService SPI

AuthorizationService, SPI Class, AuthorizationService SPI

C

cert-user-map.xml, Configuring information to Grant Identity

<cert-user><cert>, Configuring information to Grant Identity
<cert-user><username>, Configuring information to Grant Identity

checked permission, Authorization

configuring EJB module security, Configuring EJB Module Security

configuring J2EE application security, Configuring J2EE Application Security

configuring Java SE permissions, Configuring Java SE Permissions

configuring LoginModule service, Configuring LoginModule Service

configuring security domain components, Configuring Security Domain Components, Configuring Security Services

configuring security system policies, Configuring Security System Policies

configuring the security system domain, Configuring the Security System Domain

configuring the security system user information, Configuring the Security System User Information

configuring Web module security, Configuring Web Module Security

credential, Authentication

CredentialFactory, Authentication

CredentialMappingService, SPI Class, CredentialMappingService SPI

CredentialVerificationService, SPI Class, CredentialVerificationService SPI

custom permission, Editing the XML File

custom security service, Configuring the XML File

D

default JACC provider, Default JACC Provider, Integrating JACC Providers with the JEUS Security System

directory structure for the default security system, Overview

domain.xml, Configuring XML, Editing XML, Configuring the XML File

<datasource-id>, Using Database
<security-domain><audit>, Configuring the XML File
<security-domain><authentication>, Configuring the XML File
<security-domain><authorization>, Configuring the XML File
<security-domain><cache-config>, Editing XML
<security-domain><credential-verification>, Configuring the XML File
<security-domain><identity-assertion>, Configuring the XML File
<security-domain><keystore-config>, Editing XML
<security-domain><name>, Editing XML, Configuring the XML File
<security-manager><security-domains>, Configuring XML

E

ejb-jar.xml, Configuring ejb-jar.xml

<assembly-descriptior><method-permission>, Configuring ejb-jar.xml
<assembly-descriptior><security-role>, Configuring ejb-jar.xml
<module-info><unspecified-method-permission>, Configuring jeus-ejb-dd.xml
<security-identity>, Configuring ejb-jar.xml
<security-identity> <run-as> <role-name>, Configuring jeus-ejb-dd.xml
<security-role-ref>, Configuring ejb-jar.xml

EventHandlingService, SPI Class, EventHandlingService SPI, Overview

excluded permission, Authorization

I

IdentityAssertionService, SPI Class, IdentityAssertionService SPI
implementing LoginModule to integrate JEUS with LDAP, Implementing LoginModule to Integrate JEUS with LDAP
implementing LoginModule to integrate with Database, Implementing LoginModule to Integrate with Database
improving security level, Improving Security Level
introducing JACC protocol, Introducing JACC Protocol

J

JACC Provider

java.security.Policy, Implementing JACC Provider
javax.security.jacc.PolicyConfiguration, Implementing JACC Provider
javax.security.jacc.PolicyConfigurationFactory, Implementing JACC Provider

JACC provider, Using JACC Provider

java.security.manager, Configuring Java SE SecurityManager

java.security.policy, Configuring Java SE SecurityManager

jeus-application-dd.xml, Configuring jeus-application-dd.xml

<application><role-permission>, Configuring jeus-application-dd.xml

jeus-domain.xsd, Configuring XML

jeus-ejb-dd.xml, Configuring jeus-ejb-dd.xml

<module-info><role-permission>, Configuring jeus-ejb-dd.xml

jeus-security.xsd, Configuring XML, Editing XML

jeus-web-dd.xml, Configuring jeus-web-dd.xml

<jeus-web-dd><role-mapping>, Configuring jeus-web-dd.xml
<servlet><run-as>, Configuring jeus-web-dd.xml

jeus.security.admin, Architecture

jeus.security.base, Architecture

jeus.security.base package class, Basic API

jeus.security.base.CredentialFactory, Basic API
jeus.security.base.PermissionMap, Basic API
jeus.security.base.Policy, Basic API
jeus.security.base.Role, Basic API
jeus.security.base.SecurityCommonService, Basic API
jeus.security.base.SecurityException, Basic API
jeus.security.base.ServiceException, Basic API
jeus.security.base.Subject, Basic API

jeus.security.container, Architecture

jeus.security.impl.*, Architecture

jeus.security.resource package class, Resource API

jeus.security.resource.ExpiryTime, Resource API
jeus.security.resource.ExpiryTimeFactory, Resource API
jeus.security.resource.GroupPrincipalImpl, Resource API
jeus.security.resource.Lock, Resource API
jeus.security.resource.LockFactory, Resource API
jeus.security.resource.Password, Resource API
jeus.security.resource.PasswordFactory, Resource API
jeus.security.resource.PrincipalImpl, Resource API
jeus.security.resource.ResourcePermission, Resource API
jeus.security.resource.RoleImpl, Resource API
jeus.security.resource.RolePermission, Resource API
jeus.security.resource.TimeConstrainedRolePermission, Resource API

jeus.security.spi, Architecture

jeus.security.spi package, Service Class

jeus.security.spi package class, SPI Class, SPI Class

AuthenticationRepositoryService, SPI Class
AuthenticationService, SPI Class
AuthorizationRepositoryService, SPI Class
AuthorizationService, SPI Class
CredentialMappingService, SPI Class
CredentialVerificationService, SPI Class
EventHandlingService, SPI Class
IdentityAssertionService, SPI Class
jeus.security.spi.AuthenticationRepositoryService, SPI Class
jeus.security.spi.AuthorizationRepositoryService, SPI Class
SecurityInstaller, SPI Class
SubjectFactoryService, SPI Class
SubjectValidationService, SPI Class

L

LDAP JAAS LoginModule, Configuring LDAP JAAS LoginModule Service
login, Login

N

non-blocking I/O, Tuning the Security System

P

packaging JACC provider, Packaging JACC Provider

password validation

configuring custom password validator, Configuring Password Security
configuring default password validator, Configuring Password Security

permission, Authorization

PermissionMap, Authorization

checked permissions, Authorization
excluded permissions, Authorization
unchecked permissions, Authorization

policies.xml, Overview

<policy><resource-permissions>, Editing the XML File
<policy><role-permissions>, Editing the XML File

policy, Overview

principal, Principal-to-Role Mapping

principal-to-role mapping, Principal-to-Role Mapping

proof credential, CredentialVerificationService SPI

R

remove-login-cache command, Cached Login Information
repository and external security mechanism, Architecture
role-based mechanism, Authorization
role-to-resource mapping, Role-to-Resource Mapping

S

secured connection, Tuning the Security System

security constraint, Role-to-Resource Mapping

security domain, Domain

security installer, Overview

security services configurations, Security Services Configurations

security.key, Overview

SecurityException, CredentialVerificationService SPI, Event

SecurityInstaller, Services and SPI, SPI Class, Event

SecurityManager, Tuning the Security System, Configuring Java SE SecurityManager

service, Services and SPI

service class, Service Class

service, Service Class
service description, Service Class
service domain, Service Class
service MBean, Service Class
service properties, Service Class
service state, Service Class
service type, Service Class

SHARED_DOMAIN, Domain

SPI, Services and SPI

standard security events, Event

subject, Authentication

SubjectFactoryService, SPI Class, SubjectFactoryService SPI

SubjectValidationService, SPI Class, SubjectValidationService SPI, Event

SYSTEM_DOMAIN, Domain, Overview

T

TimeConstrainedRolePermission, Configuring jeus-web-dd.xml
TimeConstraintRolePermission, Authorization
tuning the security system, Tuning the Security System

U

unchecked permission, Authorization

user-cert-map.xml, Configuring Identity Certificate Information

<user-cert><alias>, Configuring Identity Certificate Information
<user-cert><keypassword>, Configuring Identity Certificate Information
<user-cert><secretkey>, Configuring Identity Certificate Information
<user-cert><username>, Configuring Identity Certificate Information

using JAAS, Using JAAS

W

web.xml, Configuring web.xml

<web-app><security-constraint>, Configuring web.xml
<web-app><security-role>, Configuring web.xml
<web-app><servlet><run-as>, Configuring web.xml
<web-app><servlet><security-role-ref>, Configuring web.xml

Index
Prev

Prev
Appendix B. JEUS Server Permissions	Home