create-jacc-provider

enables administrators to create a JACC provider that can be used by third-party authorization modules for applications running in GlassFish Server

Synopsis

create-jacc-provider [--help]
[--policyproviderclass pol-provider-class] 
[--policyconfigfactoryclass pc-factory-class] 
[--property name=value)[:name=value]*] 
[--target target] jacc-provider-name

Description

The create-jacc-provider subcommand creates a JSR-115—compliant Java Authorization Contract for Containers (JACC) provider that can be used for authorization of applications running in GlassFish Server. The JACC provider is created as a jacc-provider element within the security-service element in the domain's domain.xml file.

The default GlassFish Server installation includes two JACC providers, named default and simple. Any JACC providers created with the create-jacc-provider subcommand are in addition to these two default providers. The default GlassFish Server JACC providers implement a simple, file-based authorization engine that complies with the JACC specification. The create-jacc-provider subcommand makes it possible to specify additional third-party JACC providers.

You can create any number of JACC providers within the security-service element, but the GlassFish Server runtime uses only one of them at any given time. The jacc-provider element in the security-service element points to the name of the provider that is currently in use by GlassFish Server. If you change this element to point to a different JACC provider, restart GlassFish Server.

This command is supported in remote mode only.

Options

If an option has a short option name, then the short option precedes the long option name. Short options have one dash whereas long options have two dashes.

--help

-?

Displays the help text for the subcommand.

--policyproviderclass

Specifies the fully qualified class name for the javax.security.jacc.policy.provider that implements the java.security.Policy.

--policyconfigfactoryclass

Specifies the fully qualified class name for the javax.security.jacc.PolicyConfigurationFactory.provider that implements the provider-specific javax.security.jacc.PolicyConfigurationFactory.

--property

Optional attribute name/value pairs for configuring the JACC provider. The following properties are available:

repository: The directory containing the JACC policy file. For the default GlassFish Server JACC provider, the default directory is ${com.sun.aas.instanceRoot}/generated/policy. This property is not defined by default for the simple GlassFish Server JACC provider.

--target

Specifies the target for which you are creating the JACC provider. The following values are valid:

server: Creates the JACC provider on the default server instance. This is the default value.
configuration_name: Creates the JACC provider in the specified configuration.
cluster_name: Creates the JACC provider on all server instances in the specified cluster.
instance_name: Creates the JACC provider on a specified server instance.

Operands

jacc-provider-name: The name of the provider used to reference the jacc-provider element in domain.xml.

Examples

Example 1 Creating a JACC Provider

The following example shows how to create a JACC provider named testJACC on the default server target.

asadmin> create-jacc-provider
--policyproviderclass com.sun.enterprise.security.provider.PolicyWrapper
--policyconfigfactoryclass com.sun.enterprise.security.provider.PolicyConfigurationFactoryImpl
testJACC

Command create-jacc-provider executed successfully.

Exit Status

0: subcommand executed successfully
1: error in executing the subcommand