Oracle9iAS Containers for J2EE Services Guide -- Index

<commit-class> element, 10-12

<commit-coordinator> element, 10-12

<container-transaction> element, 10-7

<data-source>

attributes, 1-9

<resource-ref> element, 1-11

<res-ref-name> element, 1-11

<transaction-type> element, 10-6, 10-8

access control list model

definition, 4-13

AccessController, 4-5

accessing JAAS provider, 7-4

AccessTest1, 8-7, B-11

actions

definition, 4-4

add button

Oracle Enterprise Manager, 7-4

add command, 7-24

adding and removing realms, 7-16

adding and removing roles, 7-17

adding and removing users, 7-17

addperm options, 7-18

addprncpl option, 7-19

addrealm option, 7-16

addrole option, 7-17

adduser option, 7-17

administrative role, 7-29

AdminPermission class

administering permissions, 4-26

definition, 4-5, A-7

adminRole, 7-28

adminUser, 7-29

Ant build tool, 9-5

Apache

JServ license, A-3

license, A-1

Apache Listener. See Oracle HTTP Server

apachectl start command, 9-8

apachectl startssl command, 9-8

APIs

oracle.security.jazn package, A-2

oracle.security.jazn.policy package, A-6

oracle.security.jazn.realm package, A-9

Application Realm

creation, 7-31

creation code, B-8

definition, 4-18

role management, 4-18, 4-21

sample LDAP directory information tree, 4-21

user management, 4-18, 4-21

ApplicationClientInitialContextFactory, 2-6 to 2-8

ApplicationInitialContextFactory, 2-8 to 2-10

applications

executing, 8-4, 9-8

in Java2 application environments, 6-2

sample J2SE, 8-5

with JAAS, 4-10

application.xml

designating data-sources.xml, 1-2

assigning permissions, 7-6

attributes

CacheEventListener, 13-17

DefaultTimeToLive, 13-17

DISTRIBUTE, 13-14

GROUP_TTL_DESTROY, 13-14

IdleTime, 13-17

LOADER, 13-14

ORIGINAL, 13-14

REPLY, 13-15

SPOOL, 13-15

SYNCHRONIZE, 13-16

SYNCHRONIZE_DEFAULT, 13-16

TimeToLive, 13-18

Version, 13-18

Attributes.setCacheEventListener() method, 13-28

authentication

definition, 4-2

J2EE, 9-2

J2SE, 8-2

using login modules, 4-9

using Oracle9iAS Single Sign-On (SSO), 4-13

using RealmLoginModule class, 4-13

with Basic Authentication, 6-13

with SSL, 6-10

with SSO, 4-13, 6-8

authentication environments, 6-6

authorization

definition, 4-2

J2EE, 9-4

J2SE, 8-3

basic authentication, 6-6

callerinfo demo, 5-2

Cache

concepts, 13-2

cache environment, 13-6

CacheAccess.createPool() method, 13-40

CacheAccess.get() method, 13-22

CacheAccess.getOwnership() method, 13-46

CacheAccess.preLoad() method, 13-22

CacheAccess.releaseOwnership() method, 13-46

CacheAccess.save() method, 13-35

CacheEventListener attribute, 13-17

CacheEventListener interface, 13-28

CacheLoader()

implementing, 13-22

CacheLoader.createStream() method, 13-38

caching scheme, 1-14

callback handler, 8-2, 8-5

callerInfo demo, 5-2, 9-4

code, 9-9

results, 5-6

capability model

definition, 4-13

cd command, 7-24

checking password, 7-17

checkpasswd option, 7-17

cipher suites

supported by Oracle HTTPS, 1-7

class names

definition, 4-4

classes

AdminPermission, A-7

Grantee, A-8

InitRealmInfo, A-10

JAZNConfig, A-2

JAZNConfigException, A-4

JAZNContext, A-3

JAZNPermission, A-3

RealmLoginModule, A-10

RealmManager, A-10

RealmPermission, A-10

RoleAdminPermission, A-8

cleanInterval property, 13-27

clear command, 7-25

codebase, 4-10

codesource, 7-8

in policy files, 4-10

constructing

JNDI contexts, 2-4

JNDI InitialContext, 2-5

createDiskObject() method, 13-23, 13-36

createInstance() method, 13-42

CreatePool() method, 13-40

createRole, 7-32, 7-33

createStream() method, 13-23

creating a new grant entry, 7-8

creating roles, 7-33

creation code

Application Realm, B-8

External Realm, 7-30

credentials, 4-8, 4-24

cryptographic keys, 4-8

data source

configuration, 1-8

configuration file, 1-9

connection sharing, 1-13

default, 1-2

definition, 1-2

emulated, 1-2, 1-5 to 1-6

error conditions, 1-15

mixing transactions, 1-15

username, 1-15

introduction, 1-1

location of XML file, 1-2

non-emulated, 1-7 to 1-8

behavior, 1-13

JTA transaction, 1-13

Oracle JDBC extensions, 1-12

retrieving connection, 1-4, 1-11

using Merant driver, 1-17

using OCI driver, 1-16

data storage

in LDAP-based environments, 4-21

database

caching scheme, 1-14

retrieving connection, 1-4

DataSource object, 10-4, 1-4

methods, 1-10

retrieving, 10-4

use in JTA, 10-11

data-sources.xml, 1-9

designating location, 1-2

pre-installed definitions, 1-2

data-sources.xml file, 10-12

use in JTA, 10-2

dedicated.connection JNDI property, 1-15

default configurations

callerInfo demo, 5-3

default realm, 9-6

default-realm, 5-4

DefaultTimeToLive attribute, 13-17

default-web-site.xml file, 5-3, 9-5

defineGroup() method, 13-20, 13-21

defineObject() method, 13-21

defineRegion() method, 13-19

delegation, 4-2

deleting grant entries, 7-8

deployment descriptor

JTA, 10-6

deployment descriptors

JCA, 12-4

destroy() method, 13-25

destroyInstance() method, 13-42

directory information tree (DIT)

Application Realm, 4-21

External Realm, 4-18

Subscriber Realm, 4-19

discoveryAddress property, 13-27, 13-44

diskPath property, 13-27, 13-33

distinguished name (DN), 4-22

DISTRIBUTE attribute, 13-14, 13-43

distribute property, 13-27

doFilter(ServletRequest request, ServletResponse response,FilterChain chain), 9-3

dropping a realm, 7-29, 7-32

dropping roles, 7-35

dropRole, 7-32, 7-35

embedded resource adapter, 12-2

environments, 4-3, 4-17

examples

stand-alone resource adapters, 12-6

exceptionHandler() method, 13-23

exceptions

JAZNException, A-4

JAZNInitException, A-4

JAZNNamingException, A-4

JAZNObjectExistsException, A-4

JAZNObjectNotFoundException, A-4

JAZNRuntimeException, A-4

executing an application, 8-4

exit command, 7-26

External Realm

automatically installed, 4-22

creating, 7-30

creation code, 7-30

definition, 4-17

role management, 4-17, 4-19

sample LDAP directory information tree, 4-18

user management, 4-17, 4-19

features, 4-2

foundations of the JAAS provider, 4-2

GenericCredential interface

and Kerberos, 12-8

getAttribute("java.security.cert.X509certificate"), 9-3

getAuthType, 9-3

getconfig option, 7-20

getConnection method, 10-4, 1-4

getID() method, 13-28

getName() method, 13-23

getOwnership() method, 13-46

getOwnsership() method, 13-50

getParent() method, 13-21

getPolicy, 7-36

getRegion() method, 13-23

getRemoteUser, 9-3

getRoles, 7-33

getSource() method, 13-28

getSubject, 8-3

getting XML configuration information, 7-20

getUserPrincipal, 9-3

grant entry data, 7-7

Grantee class

definition, A-8

granting and revoking permissions, 7-19

granting and revoking roles, 7-17

granting roles, 7-33

grantperm option, 7-19

grantRole, 7-32, 7-34

grantrole option, 7-17

GROUP_TTL_DESTROY attribute, 13-14, 13-24, 13-25

handleEvent() method, 13-28

help command, 7-25

help option, 7-21

hosted application environments, 4-26

hosted environments, 4-27

HTTPClient.HttpUrlConnection, 1-10

HTTPConnection, 1-4

Oracle extensions, 1-13

IdleTime attribute, 13-17

impersonation

delegation, 4-2

import

oracle.ias.cache, 13-19

initial context factories

JNDI, 2-6 to 2-11

InitialContext

constructing in JNDI, 2-5

InitRealmInfo class

definition, A-10

InitRealmInfo.RealmType interface, 7-31

definition, A-9

installation

Javadoc, A-2

interfaces

InitRealmInfo.RealmType, A-9

JAZNPolicy, A-6

Realm, A-9

Realm.LDAPProperty, A-9

RealmPrincipal, A-9

RealmRole, A-9

RealmUser, A-9

RoleManager, A-10

UserManager, A-10

invalidate() method, 13-24

invoking JAZN Admintool, 7-15

J2EE. See Java2 Platform, Enterprise Edition (J2EE)

J2SE environments

JAAS provider integration, 6-2

J2SE. See Java2 Platform, Standard Edition (J2SE)

JAAS, 4-2

definition, 4-7

overview, 1-2

JAAS policy

managing, 7-6

JAAS provider

definition, 4-2

enhancements to realms, 4-15

features, 4-2

integration with Basic authentication, 6-12

integration with J2EE applications, 6-4

integration with J2SE applications, 6-2

integration with SSL-enabled applications, 6-9

integration with SSO-enabled applications, 6-7

management of, 7-2

management tools, 7-2

permission classes, 4-5

policy management, 7-36

running multiple instances, A-2

security role, 6-15

JAAS provider integration

J2SE environments, 6-2

JAAS. See Java Service (JAAS)

jaas.config, 8-4

Java, 10-1

Java application environments, 4-3

Java Authentication and Authorization Service (JAAS)

applications, 4-10

definition, 4-7

extending the Java2 Security Model, 4-7

login modules, 4-9

policy files

example, 4-10

principals, 4-8

realms, 4-10

roles, 4-9

subjects, 4-8

support for authorization and authentication features, 4-7

Java Authentication and Authorization Service. See JAAS.

Java Connector Architecture

overview, 1-3

Java Message Service. SeeJMS.

Java Object Cache, 13-2

attributes, 13-12

basic architecture, 13-3

basic interfaces, 13-5

cache configuration properties, 13-26

cache consistency levels, 13-49

cache environment, 13-6, 13-11

classes, 13-5

configuration

cleanInterval property, 13-27

discoveryAddress property, 13-27

diskPath property, 13-27

distribute property, 13-27

logFileName property, 13-27

logger property, 13-27

logSeverity property, 13-28

maxObjects property, 13-28

maxSize property, 13-28

consistency levels

distributed with reply, 13-50

distributed without reply, 13-50

local, 13-49

synchronized, 13-50

default region, 13-11

defining a group, 13-20, 13-21

defining a region, 13-19

defining an object, 13-21

destroy object, 13-25

disk cache

adding objects to, 13-34

configuring, 13-33

disk objects, 13-33

definition of, 13-9

distributed, 13-36

local, 13-36

using, 13-36

distribute property, 13-43

distributed cache architecture, 13-4

distributed disk objects, 13-34

distributed groups, 13-44

distributed mode, 13-43

distributed objects, 13-44

distributed regions, 13-44

features, 13-7

group, 13-12

invalidating object, 13-24

javacache.log log file, 13-27

local disk objects, 13-34

local mode, 13-43

memory objects

definition of, 13-8

local memory object, 13-8

spooled memory object, 13-8

updating, 13-8

naming objects, 13-8

object types, 13-6, 13-8

overview, 1-3

pool objects

accessing, 13-41

creating, 13-40

definition of, 13-10

using, 13-40

programming restrictions, 13-31

region, 13-11

StreamAccess object, 13-10

subregion, 13-11

Java permissions, 7-4

managing, 7-12

Java Platform, Enterprise Edition (J2EE)

security role, 6-14

Java programming, 7-27

sample code, 7-27

Java Transaction API. See JTA.

Java virtual machine (JVM)

running multiple JAAS provider instances, A-2

Java2 application environments, 6-2

Java2 Platform, Enterprise Edition (J2EE)

application development in, 6-2

application development with the JAAS provider, 4-2

application management, 9-2

application startup, 9-8

creating applications using the Java2 Security Model, 4-4

definition, 6-2, 6-4

integration with JAAS provider, 6-4

integration with JAZNUserManager, 6-4

integration with Oracle components, 6-4

integration with Oracle9iAS Containers for J2EE, 6-4

Oracle component responsibilities in basic authentication environments, 6-13

Oracle component responsibilities in SSL-enabled environments, 6-10

Oracle component responsibilities in SSO-enabled environments, 6-8

starting applications with SecurityManager, 9-8

starting in SSL environment, 9-8

starting in SSO environments, 9-8

Java2 Platform, Standard Edition (J2SE)

application development in, 6-2

application development with the JAAS provider, 4-2

authentication, 8-2

authorization, 8-3

creating applications using the Java2 Security Model, 4-4

definition, 6-2

integration with JAAS provider, 6-2

integration with Oracle components, 6-2

provider types available, 6-2

Java2 Security Model, 4-3, 4-7, 9-4

definition, 4-4

using access control capability model, 4-13

using with J2EE applications, 4-4

using with J2SE applications, 4-4

using with JAAS, 4-7

javacache.properties file, 13-26

Javadoc

location of, A-2

java.io.FilePermission, B-9

java.lang.SecurityManager.checkPermission, 8-3

java.net.URL framework, 1-10

java.security.cert.X509Certificate, 9-3

java.security.cert.X509Certificate,x509cert, 9-3

java.security.Permission class, 7-35

RealmPermission extends from, A-10

java.security.principal, 4-12

java.security.Principal interface

RealmPrincipal extends from, A-9

using with principals, 4-8

using with roles and groups, 4-9

javax.net.ssl.KeyStore, 1-11

javax.net.ssl.KeyStorePassword, 1-12

javax.security.auth.Policy, A-2

javax.security.auth.Subject.doAs, 8-2, 8-3

javax.servlet.HttpServletRequest, 9-3

JAZN Admintool, 7-2, 7-14

administering policy, 4-24

definition, 4-16

for managing JAAS provider types, 4-13

invoking, 7-15

Quick Start, 5-7

shell commands, 7-24

JAZN Admintool commands

usage examples, 7-14

JAZN Admintool options

addperm, 7-18

addprncpl, 7-19

addrealm, 7-16

addrole, 7-17

adduser, 7-17

checkpasswd, 7-17

getconfig, 7-20

getting help, 7-21

grantperm, 7-19

grantrole, 7-17

help, 7-21

listperm, 7-19

listperms, 7-19

listprncpl, 7-20

listrealms, 7-17

listroles, 7-18

listusers, 7-18

remprncpl, 7-19

remrealm, 7-16

remrole, 7-17

remuser, 7-17

revokeperm, 7-19

revokerole, 7-17

setpasswd, 7-18

shell, 7-20

JAZN Admintool shell, 7-14

starting, 7-20

JAZN Admintool shell commands

add, 7-24

cd, 7-24

clear, 7-25

exit, 7-26

help, 7-25

ls, 7-24

man, 7-25

mk, 7-24

mkdir, 7-24

pwd, 7-25

rm, 7-25

jazn element

location, 5-4, 9-6

JAZNAdminGroup, 4-26

JAZNClientGroup, 4-26

JAZNConfig class, 7-28

definition, A-2

JAZNConfigException class

definition, A-4

JAZNContext class, 7-28

definition, A-3

jazn-data.xml file, 4-11, 4-23, 5-3

JAZNException exception

definition, A-4

JAZNInitException exception

definition, A-4

JAZNNamingException exception

definition, A-4

JAZNObjectExistsException exception

definition, A-4

JAZNObjectNotFoundException exception

definition, A-4

JAZNPermission class

definition, 4-5, 4-6, A-3

target names, A-3

JAZNPolicy interface

definition, A-6

JAZNRuntimeException exception

definition, A-4

JAZNUserManager, 9-2, 9-4

definition, 4-13, 6-4

filter element, 6-5, 9-3

integration in J2EE environments, 6-4

jazn.xml file, 8-4, 8-5

JCA, 12-1 to 12-8

deployment descriptors, 12-4

QoS contracts, 12-2

resource adapters, 12-2

stand-alone resource adapter archives, 12-4 to 12-5

stand-alone resource adapter example, 12-6

JDBC

Oracle extensions, 1-12

retrieving connection, 1-4

JDK 1.3, 4-7

JMS, 11-1 to 11-10

configuring, 11-3 to 11-10

examples, 11-2 to 11-3

overview, 1-2, 11-1 to 11-2

JMS

resource providers, 11-10

JMS

resource providers, 11-4

JNDI, 2-1 to 2-11

constructing contexts, 2-4

environment, 2-5

initial context factories, 2-6 to 2-11

initial contexts, 2-2 to 2-3

lookup of data source, 1-4

JTA

bean-managed transaction, 10-2, 10-8

code download site, 10-1

container-managed transaction, 10-2, 10-6

demarcation, 10-2, 10-5

deployment descriptor, 10-6

DTD elements, 10-14

overview, 1-2

resource enlistment, 10-2

retrieving data source, 10-4

single-phase commit

configuration, 10-2

definition, 10-2

specification web site, 10-1

two-phase commit, 10-10

configuration, 10-10

definition, 10-2

Kerberos, 4-8

and GenericCredential interface, 12-8

LDAP. See Lightweight Directory Access Protocol (LDAP)

ldapadd tool

creating users, 4-18

LDAP-based provider type

Oracle Internet Directory, 4-3

licenses

Apache, A-1

Apache JServ, A-3

third-party, A-1 to A-4

Lightweight Directory Access Protocol (LDAP)-based environments

in J2SE environments, 6-2

realm contents, 4-18

realm data storage, 4-21

realm management, 4-17

realm permissions, 4-22

realm types available, 4-17

sample Application Realm directory information tree, 4-21

sample External Realm directory information tree, 4-18

sample Subscriber Realm directory information tree, 4-19

listing permission information, 7-19

listing permissions, 7-19

listing principal class information, 7-20

listing principal classes, 7-20

listing realms, 7-17

listing roles, 7-18

listing users, 7-18

listperm option, 7-19

listperms option, 7-19

listprncpl option, 7-20

listrealms option, 7-17

listroles option, 7-18

listusers option, 7-18

LOADER attribute, 13-14

location

jazn element, 5-4, 9-6

log file javacache.log, 13-27

log() method, 13-23

logFileName property, 13-27

logger property, 13-27

login method, 8-2

login modules

available with JAAS provider, 4-13

configuring with different applications, 4-9

definition, 4-9

with JAAS, 4-9

LoginContext class, 4-9, 8-2

authenticating subjects, 4-9

LoginContext.getSubject, 8-3

logSeverity property, 13-28

ls command, 7-24

man command, 7-25

management

of JAAS provider, 7-2

management tools, 7-2

managing JAAS provider policy, 7-36

managing JAZN

with Java, 7-27

managing permissions, 7-12, 7-35

managing realms, 7-28

managing roles, 7-32

managing users, 7-32

Mandatory transaction attribute, 10-7

maxObjects property, 13-28

maxSize property, 13-28

Merant driver, 1-17

migrating principals, 7-20

mk command, 7-24

mkdir command, 7-24

mod_oc4j, 9-4

mod_oc4j.conf file, 9-7

mod_ossl, 9-8

mod_osso, 9-8

multiple instances

of JAAS provider, A-2

multiple instances of JAZN

JAZNConfig, 7-28

namespace partitioning, 4-10

netSearch() method, 13-23, 13-50

Never transaction attribute, 10-7

NotSupported transaction attribute, 10-6

obfuscation, 4-24

OBJECT_INVALIDATION event, 13-29

OBJECT_UPDATED event, 13-29

OC4J. See Oracle9iAS Containers for J2EE (OC4J)

OCI driver, 1-16

OID. See Oracle Internet Directory (OID)

Oracle Enterprise Manager (OEM), 7-2, 7-3, 7-8

accessing JAAS provider, 7-4

creating a new grant entry, 7-8

creating new grant

permission, 7-10

creating new grants, 7-8, 7-9

JAAS provider overview, 4-16

principal classes, 7-9, 7-13

revoking permissions, 7-13

Oracle HTTPS, 1-1 to 1-20

default system properties, 1-11

example, 1-17

feature overview, 1-6

prerequisites for use, 1-2

supported cipher suites, 1-7

Oracle Internet Directory (OID)

administering policy data, 4-26

creating users, 4-18

location, 7-28

provider type, 4-15

Oracle Wallet Manager

and HTTPS, 1-8

Oracle9iAS Containers for J2EE (OC4J), 9-2

integration in J2EE environments, 6-4

mapping security roles to JAAS provider users and roles, 6-15

Oracle9iAS Single Sign-On (SSO)

for SSO authentication, 4-13

Oracle9iAS Web Cache, 13-2

oracle.ias.cache, 13-19

oracle.security.jazn package

classes, A-2

definition, A-2

exceptions, A-4

oracle.security.jazn.oc4j. JAZNServletRequest, 9-4

oracle.security.jazn.policy package

classes, A-7

definition, A-6

interfaces, A-6

oracle.security.jazn.realm package

classes, A-10

definition, A-9

interfaces, A-9

support for realms, 4-15

use of, 4-12

oracle.security.jazn.util. CertHash.getHash(x509cert), 9-3

OracleSSLCredential, 1-5, 1-14

Oracle.ssl.defaultCipherSuites, 1-12

ORIGINAL attribute, 13-14

orion-application.xml file, 5-4, 9-6, 9-7, 10-11

mapping security roles to JAAS provider users and roles, 6-15

packages

oracle.security.jazn, A-2

oracle.security.jazn.policy, A-6

oracle.security.jazn.realm, A-9

partitioning, 4-10, 4-26

passwords, 4-24

checking, 7-17

setting, 7-18

permissions, 4-14, 7-10

actions, 4-4

administering with AdminPermission class, 4-26

class definitions, 4-5

class name, 4-4

definition, 4-10

granting and revoking with the JAZN Admintool, 7-19

in Java2 Security Model, 4-4

JAAS provider, 4-5

Java permission instance contents, 4-4

listing with the JAZN Admintool, 7-19

management in LDAP-based environments, 4-26

management in XML-based environments, 4-23, 4-26

managing, 7-12, 7-35

target, 4-4

persistence, 4-24

Pluggable Authentication Module (PAM), 4-7

policies

administering with JAZN Admintool, 4-24

administering with Oracle Internet Directory (OID), 4-26

administration, 4-24

definition, 4-10

information storage in XML-based provider type, 4-23

management in LDAP-based environments, 4-26

management in XML-based environments, 4-23

policy entries, 7-4

policy files

codesource, 4-10

example, 4-10

subject, 4-10

policy partitioning

among realms, 4-27

PoolAccess object, 13-41

PoolAccess.close() method, 13-41

PoolAccess.get() method, 13-41

PoolAccess.getPool() method, 13-41

PoolAccess.returnToPool() method, 13-41

PoolInstanceFactory

implementing, 13-42

principal, 4-8, 8-2

principal classes, 7-9, 7-13

listing information with the JAZN Admintool, 7-20

principal-based authorization

support for, 4-7

principals, 7-9, 7-36

definition, 4-8

with JAAS, 4-8

principals.xml file, 6-4

converting from, 7-20

PrivilegedAction interface, 8-3, 8-4

privileges, 4-15

protection domain

definition, 4-4

in Java2 Security Model, 4-5

provider types, 4-3, 4-17

in J2SE environments, 6-2

managing, 4-13

Oracle Internet Directory (OID), 4-15, 4-24

retrieving permissions from, 4-13

storing policy information, 4-24

XML-based, 4-15, 4-24

public key certificates, 4-8

pwd command, 7-25

QoS contracts, 12-2

quality of service contracts, 12-2

Quick Start, 5-1

RAR file

RBAC, 4-9

RBAC. See role-based access control (RBAC)

Realm interface

definition, A-9

realm name, 7-28

realm permissions

management in LDAP-based environments, 4-22

Realm.LDAPProperty interface

definition, A-9

RealmLoginModule, 4-13

RealmLoginModule class, 9-2

definition, A-10

for SSL and Basic authentication, 4-13

in J2SE environments, 6-2, 8-2

RealmManager class, 7-33

definition, A-10

RealmPermission class, 4-22

action names, A-10

definition, 4-5, 4-6, A-10

RealmPrincipal interface, 4-12, 9-3

definition, A-9

RealmRole interface

definition, A-9

realms

adding and removing with the JAZN Admintool, 7-16

creation of realm container in LDAP-based environments, 4-21

data storage in LDAP-based environments, 4-21

definition, 4-10, 4-12

dropping, 7-29, 7-32

information storage in XML-based provider type, 4-23

JAAS provider enhancements, 4-15

JAAS provider framework, 4-17

JAAS provider support, 4-12

listing with the JAZN Admintool, 7-17

managing in LDAP-based environments, 4-17

managing in XML-based provider type, 4-22

name, 7-28

permission management in LDAP-based environments, 4-22

policy partitioning, 4-27

realm contents in LDAP-based environments, 4-18

types available in LDAP-based environments, 4-17

types available in XML-based provider type, 4-22

with JAAS, 4-10

RealmUser interface

definition, A-9

release_Ownsership() method, 13-50

releaseOwnership() method, 13-46

Remote Method Invocation. See RMI.

remprncpl option, 7-19

remrealm option, 7-16

remrole option, 7-17

remuser option, 7-17

REPLY attribute, 13-15, 13-44

Required transaction attribute, 10-6

RequiresNew transaction attribute, 10-7

resource adapter, 12-2

Resource Adapter Archive. See RAR.

resource providers

JMS, 11-4 to 11-10

ResourceProvider

JMS, 11-4

retrieving authentication information, 9-3

returnToPool() method, 13-41

revokeperm option, 7-19

revokeRole, 7-33

revokerole option, 7-17

revoking permissions

Oracle Enterprise Manager, 7-13

rm command, 7-25

RMI

overview, 1-2

RMIInitialContextFactory, 2-10 to 2-11

rmi.xml, 3-2

role activation

definition, 4-15

role hierarchy

definition, 4-14

role management, 4-18

role manager, 4-18

role object class, 7-29

role's searchbase property, 7-29

RoleAdminPermission class, 4-27

definition, 4-5, A-8

role-based access control (RBAC), 4-12

definition, 4-14

JAAS provider support for, 4-12

role activation, 4-15

role hierarchy, 4-14

support for, A-2

RoleManager interface, 4-22, 7-32, 7-33

createRole, 7-32

definition, A-10

dropRole, 7-32

getRoles, 7-33

grantRole, 7-32

revokeRole, 7-33

roles, 7-36

adding and removing with the JAZN Admintool, 7-17

creating, 7-33

definition, 4-14

dropping, 7-35

granting, 7-33

granting and revoking with the JAZN Admintool, 7-17

listing with the JAZN Admintool, 7-18

management in Application Realms, 4-18, 4-21

management in External Realms, 4-17, 4-19

management in LDAP-based environments, 4-17

management in Subscriber Realms, 4-17, 4-20

management in XML-based environments, 4-23

managing, 7-32

using the J2EE security role, 6-14

with JAAS, 4-9

run-as element, 4-2, 4-15

sample application

AccessTest1, B-11

sample code, 7-27

createRole, 7-33

dropRole, 7-35

grantRole, 7-34

Sample J2SE Application, 8-5

sample_subrealm realm, 5-3

save() method, 13-35

searching for grant entry data, 7-7

searching for permissions, 7-12

secure mode, 5-5, 9-8

secure socket layer (SSL)

authentication method, 6-6

integration with Basic authentication, 6-12

integration with JAAS provider, 6-9

Secure Socket Layers (SSL), 6-6

security role

using in the web.xml file, 6-14

SecurityManager, 4-5, 8-3, 8-4

SecurityManager.checkPermission, 8-3, 9-4

server.xml, 3-2

server.xml file, 5-3, 9-5

Servlet.service, 9-4

setAttributes() method, 13-23

setCacheEventListener() method, 13-28

setpasswd option, 7-18

setting a password, 7-18

shell commands, 7-24

shell option, 7-20

single sign-on (SSO), 6-6, 9-2, 9-7

integration with JAAS provider, 6-7

SPOOL attribute, 13-15, 13-34

sslPrincipal, 9-3

stand-alone resource adapter, 12-2

stand-alone resource adapter archives, 12-4 to 12-5

stand-alone resource adapters

example, 12-6

starting

JAZN Admintool, 7-15

starting an application, 9-8

StreamAccess object

InputStream, 13-38

OutputStream, 13-38

using, 13-38

Subject.doAS, 4-15

Subject.doAs method, 8-3, 9-4

associating a subject with AccessControlContext, 4-8

invoking, 4-9

subjects, 4-8, 8-2, 8-3

definition, 4-8

with JAAS, 4-8

Subscriber Realm

definition, 4-17

role management, 4-17, 4-20

sample LDAP directory information tree, 4-19

user management, 4-17, 4-20

Supports transaction attribute, 10-6

SYNCHRONIZE attribute, 13-16, 13-46

SYNCHRONIZE_DEFAULT attribute, 13-16, 13-46

target names

definition, 4-4

of JAZNPermission class, A-3

third-party licenses, A-1 to A-4

TimeToLive attribute, 13-18

transaction

bean managed, 10-2

container-managed, 10-2

demarcation, 10-2, 10-5

deployment descriptor, 10-6

resource enlistment, 10-2

two-phase commit, 10-10

UserTransaction object, 10-9

user communities, 4-10, 4-17

user manager, 4-18

user object class, 7-29

user's searchbase property, 7-29

UserManager interface, 4-22, 7-32

definition, A-10

users, 7-36

adding and removing with the JAZN Admintool, 7-17

creating with Oracle Internet Directory, 4-18

creating with the ldapadd tool, 4-18

listing with the JAZN Admintool, 7-18

management in Application Realms, 4-18, 4-21

management in External Realms, 4-17, 4-19

management in LDAP-based environments, 4-17

management in Subscriber Realms, 4-17, 4-20

management in XML-based environments, 4-23

managing, 7-32

UserTransaction object

use in JTA, 10-9

Version attribute, 13-18

view grant entry data, 7-7

viewing existing permissions, 7-12

Web Cache, 13-2

Web Object Cache, 13-2

Web Object cache, 13-2

web.xml file

using the J2EE security role, 6-14

X.500 distinguished name

Oracle Enterprise Manager, 7-10

creating new grant, 7-10

XML-based provider type, 4-3

jazn-data.xml, 4-23

provider type, 4-15

realm and policy information storage, 4-23

realm management, 4-22

realm type available, 4-22

Index

Symbols

A

B

C

D

E

F

G

H

I

J

K

L

M

N

O

P

Q

R

S

T

U

V

W

X