Preface

This manual discusses how to make effective use of the Oracle Application Server Containers for J2EE (OC4J) security features.

This preface contains these topics:

• Audience

• Documentation Accessibility

• Organization

• Related Documentation

• Conventions

Audience

This manual is intended for experienced Java developers, deployers, and application managers who want to understand the security features of OC4J.

Documentation Accessibility

Our goal is to make Oracle products, services, and supporting documentation accessible, with good usability, to the disabled community. To that end, our documentation includes features that make information available to users of assistive technology. This documentation is available in HTML format, and contains markup to facilitate access by the disabled community. Standards will continue to evolve over time, and Oracle Corporation is actively engaged with other market-leading technology vendors to address technical obstacles so that our documentation can be accessible to all of our customers. For additional information, visit the Oracle Accessibility Program Web site at:

http://www.oracle.com/accessibility/

Accessibility of Code Examples in Documentation

JAWS, a Windows screen reader, may not always correctly read the code examples in this document. The conventions for writing code require that closing braces should appear on an otherwise empty line; however, JAWS may not always read a line of text that consists solely of a bracket or brace.

Accessibility of Links to External Web Sites in Documentation

This documentation may contain links to Web sites of other companies or organizations that Oracle Corporation does not own or control. Oracle Corporation neither evaluates nor makes any representations regarding the accessibility of these Web sites.

Organization

This document contains:

• Chapter 1, "Introduction"

• Chapter 2, "Overview of JAAS in Oracle Application Server"

• Chapter 3, "Configuring And Deploying the JAAS Provider"

• Chapter 4, "JAAS Provider Administration Tasks"

• Chapter 5, "Using the JAZN Admintool"

• Chapter 6, "Security and J2EE Applications"

• Chapter 7, "Custom LoginModules"

• Chapter 8, "JAAS and Enterprise Manager"

• Chapter 9, "Java 2 Security"

• Chapter 10, "Password Management"

• Chapter 11, "Oracle HTTPS for Client Connections"

• Chapter 12, "EJB Security"

• Chapter 13, "J2EE Connector Architecture Security"

• Chapter 14, "Configuring CSIv2"

• Chapter 15, "Security Tips"

• Appendix A, "JAAS Provider Standards and Samples"

• Appendix B, "JAAS Provider Schemas"

Related Documentation

For more information, see these Oracle resources:

• Oracle Application Server 10g Security Guide

• Oracle Application Server 10g Administrator's Guide

• Oracle Identity Management Concepts and Deployment Planning Guide

• Oracle Application Server Certificate Authority Administrator's Guide

• Oracle Application Server Single Sign-On Administrator's Guide

• Oracle Application Server Single Sign-On Application Developer's Guide

• Oracle Internet Directory Administrator's Guide

• Oracle Internet Directory Application Developer's Guide

• Oracle Application Server Containers for J2EE Services Guide

• Oracle Application Server Containers for J2EE Enterprise JavaBeans Developer's Guide

• Oracle Application Server Web Services Developer's Guide

• The OC4J Javadoc

Printed documentation is available for sale in the Oracle Store at:

http://oraclestore.oracle.com/

To download free release notes, installation documentation, white papers, or other collateral, please visit the Oracle Technology Network (OTN). You must register online before using OTN; registration is free and can be done at:

http://otn.oracle.com/membership/

If you already have a username and password for OTN, then you can go directly to the documentation section of the OTN Web site at:

http://otn.oracle.com/documentation/content.html

For additional information, see:

• The Sun Java and J2EE Web pages, especially the Java Authentication and Authorization Service (JAAS) website at http://java.sun.com/products/jaas/index-14.html

Conventions

The following conventions are also used in this manual:

Convention	Meaning
. . .	Vertical ellipsis points in an example mean that information not directly related to the example has been omitted.
. . .	Horizontal ellipsis points in statements or commands mean that parts of the statement or command not directly related to the example have been omitted
boldface text	Boldface type in text indicates a term defined in the text, the glossary, or in both locations.
italic text	Italicized text indicates placeholders or variables for which you must supply particular values.
[ ]	Brackets enclose optional clauses from which you can choose one or none.