Contents

About This Guide

Who Should Use This Guide
Using the Documentation
How This Guide Is Organized
Related Information
Documentation Conventions

General Conventions
Conventions Referring to Directories

Product Support

Designing Applications

Application Requirements
About the J2EE Programming Model

The Client Layer

Browser Clients
Simple CORBA Clients
ACC Clients
Web Service Clients
JMS Clients

The Presentation Layer

Servlets
JSPs
Static Content
SHTML
CGI

The Business Logic Layer

Session Beans
Entity Beans
Message-Driven Beans

The Data Access Layer

Best Practices for Designing J2EE Applications

Presenting Data with Servlets and JSPs
Creating Reusable Application Code
Modularizing Applications

Functional Isolation
Reusable Code
Prepackaged Components
Shared Framework Classes
Session and Security Issues

Developing J2EE Applications

Setting Up a Development Environment

Installing and Preparing the Server for Development
Development Tools

The asadmin Command
The Administration Interface
Sun ONE Studio
Apache Ant
Migration Tools
Profiling Tools
Source Code Control Tools
Other Tools Supported Through Sun ONE Studio

Steps for Creating Components

Creating Web Applications
Creating Enterprise JavaBeans
Creating ACC Clients
Creating Connectors
Creating Complete Applications

Securing J2EE Applications

Sun ONE Application Server Security Goals
Sun ONE Application Server Specific Security Features
Sun ONE Application Server Security Model

Web Application and URL Authorizations
Invocation of Enterprise Bean Methods
ACC Client Invocation of Enterprise Bean Methods

Security Responsibilities Overview

Application Developer
Application Assembler
Application Deployer

Common Security Terminology

Authentication
Authorization
Realms
Role Mapping

Container Security

Programmatic Security
Declarative Security

Application Level Security
Web Component Level Security
EJB Level Security

Guide to Security Information

User Information
Security Roles

Realm Configuration

How to Configure Realms

Using the Administration Interface
Using the asadmin Command
Editing the server.xml File

Supported Realms

file
ldap
certificate
solaris
Creating a Custom Realm

The server.policy File

Default Permissions
Changing Permissions for an Application
Disabling the Security Manager

Programmatic Login

Precautions
Granting Programmatic Login Permission
The ProgrammaticLogin Class

Assembling and Deploying J2EE Applications

Overview of Assembly and Deployment

Modules
Applications
J2EE Standard Descriptors
Sun ONE Application Server Descriptors
Naming Standards
JNDI Naming
Directory Structure
Runtime Environments

Module Runtime Environment
Application Runtime Environment

Classloaders

The Classloader Hierarchy
Classloader Universes
Circumventing Classloader Isolation

Sample Applications

Assembling Modules and Applications

Tools for Assembly

Apache Ant
Sun ONE Studio
The Deployment Descriptor Verifier

Assembling a WAR Module
Assembling an EJB JAR Module
Assembling a Lifecycle Module
Assembling an Application
Assembling an ACC Client
Assembling a J2EE CA Resource Adapter

Deploying Modules and Applications

Deployment Names and Errors
The Deployment Life Cycle

Dynamic Deployment
Disabling a Deployed Application or Module
Dynamic Reloading

Tools for Deployment

Apache Ant
Sun ONE Studio
The asadmin Command
The Administration Interface

Deployment by Module or Application
Deploying a WAR Module
Deploying an EJB JAR Module
Deploying a Lifecycle Module

The asadmin Command
The Administration Interface

Deploying an ACC Client
Deploying a J2EE CA Resource Adapter
Access to Shared Frameworks

Apache Ant Assembly and Deployment Tool

Ant Tasks for Sun ONE Application Server 7

sun-appserv-deploy
sun-appserv-undeploy
sun-appserv-instance
sun-appserv-component
sun-appserv-admin
sun-appserv-jspc

Reusable Subelements

server
component
fileset

The Application Deployment Descriptor Files

The sun-application_1_3-0.dtd File

Subelements
Data
Attributes

Elements in the sun-application.xml File

sun-application
web
web-uri
context-root
pass-by-reference
unique-id
security-role-mapping
role-name
principal-name
group-name

Sample Application XML Files

Sample application.xml File
Sample sun-application.xml File

Debugging J2EE Applications

Enabling Debugging

Using the Administration Interface
Editing the server.xml File

JPDA Options
Using Sun ONE Studio for Debugging
Debugging JSPs
Generating a Stack Trace for Debugging
Sun ONE Message Queue Debugging
Logging

Using the Administration Interface
Editing the server.xml File

Profiling

The HPROF Profiler
The Optimizeit Profiler
The Wily Introscope Profiler
The JProbe Profiler

Developing Lifecycle Listeners

Server Life Cycle Events
The LifecycleListener Interface
The LifecycleEvent Class
The Server Lifecycle Event Context
Assembling and Deploying a Lifecycle Module
Considerations for Lifecycle Modules

Glossary

Index