Contents

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

What's New in This Guide

• New and Changed Features
• Other Significant Changes in This Document

1 Introduction to Oracle Coherence Security

• 1.1 Conceptual Overview of Oracle Coherence Security
• 1.2 Coherence Security Quick Start
• 1.3 Overview of Security Configuration

2 Enabling General Security Measures

• 2.1 Using the Java Security Manager
  • 2.1.1 Enable the Java Security Manager
  • 2.1.2 Specify Permissions
  • 2.1.3 Programmatically Specifying Local Permissions
• 2.2 Using Host-Based Authorization
  • 2.2.1 Overview of Host-Based Authorization
  • 2.2.2 Specify Cluster Member Authorized Hosts
  • 2.2.3 Specify Extend Client Authorized Hosts
  • 2.2.4 Use a Filter Class to Determine Authorization
• 2.3 Managing Rogue Clients

3 Using an Access Controller

• 3.1 Overview of Using an Access Controller
• 3.2 Using the Default Access Controller Implementation
  • 3.2.1 Enable the Access Controller
  • 3.2.2 Create a Keystore
  • 3.2.3 Include the Login Module
  • 3.2.4 Create a Permissions File
  • 3.2.5 Create an Authentication Callback Handler
  • 3.2.6 Enable Security Audit Logs
• 3.3 Using a Custom Access Controller Implementation

4 Authorizing Access to Server-Side Operations

• 4.1 Overview of Access Control Authorization
• 4.2 Creating Access Control Authorization Implementations
• 4.3 Declaring Access Control Authorization Implementations
• 4.4 Enabling Access Control Authorization on a Partitioned Cache

5 Securing Extend Client Connections

• 5.1 Using Identity Tokens to Restrict Client Connections
  • 5.1.1 Overview of Using Identity Tokens
  • 5.1.2 Creating a Custom Identity Transformer
  • 5.1.3 Enabling a Custom Identity Transformer
  • 5.1.4 Creating a Custom Identity Asserter
  • 5.1.5 Enabling a Custom Identity Asserter
  • 5.1.6 Using Custom Security Types
  • 5.1.7 Understanding Custom Identity Token Interoperability
• 5.2 Associating Identities with Extend Services
• 5.3 Implementing Extend Client Authorization
  • 5.3.1 Overview of Extend Client Authorization
  • 5.3.2 Create Authorization Interceptor Classes
  • 5.3.3 Enable Authorization Interceptor Classes

6 Using SSL to Secure Communication

• 6.1 Overview of SSL
• 6.2 Using SSL to Secure TCMP Communication
  • 6.2.1 Overview of Using SSL to Secure TCMP Communication
  • 6.2.2 Define an SSL Socket Provider
  • 6.2.3 Using the Predefined SSL Socket Provider
• 6.3 Using SSL to Secure Extend Client Communication
  • 6.3.1 Overview of Using SSL to Secure Extend Client Communication
  • 6.3.2 Configuring a Cluster-Side SSL Socket Provider
    • 6.3.2.1 Configure an SSL Socket Provider per Proxy Service
    • 6.3.2.2 Configure an SSL Socket Provider for All Proxy Services
  • 6.3.3 Configuring a Java Client-Side SSL Socket Provider
    • 6.3.3.1 Configure an SSL Socket Provider per Remote Service
    • 6.3.3.2 Configure an SSL Socket Provider for All Remote Services
  • 6.3.4 Configuring a .NET Client-Side Stream Provider
• 6.4 Using SSL to Secure Federation Communication
• 6.5 Controlling Cipher Suite and Protocol Version Usage

7 Securing Oracle Coherence in Oracle WebLogic Server

• 7.1 Overview of Securing Oracle Coherence in Oracle WebLogic Server
• 7.2 Securing Oracle Coherence Cluster Membership
  • 7.2.1 Enabling the Oracle Coherence Security Framework
  • 7.2.2 Specifying an Identity for Use by the Security Framework
• 7.3 Authorizing Oracle Coherence Caches and Services
  • 7.3.1 Specifying Cache Authorization
  • 7.3.2 Specifying Service Authorization
• 7.4 Securing Extend Client Access with Identity Tokens
  • 7.4.1 Enabling Identity Transformers for Use in Oracle WebLogic Server
  • 7.4.2 Enabling Identity Asserters for Use in Oracle WebLogic Server

8 Securing Oracle Coherence REST

• 8.1 Overview of Securing Oracle Coherence REST
• 8.2 Using HTTP Basic Authentication with Oracle Coherence REST
  • 8.2.1 Specify Basic Authentication for an HTTP Acceptor
  • 8.2.2 Specify a Login Module
• 8.3 Using SSL Authentication With Oracle Coherence REST
  • 8.3.1 Specify Certificate Authentication for an HTTP Acceptor
  • 8.3.2 Configure an HTTP Acceptor SSL Socket Provider
  • 8.3.3 Access Secured REST Services
• 8.4 Using SSL and HTTP Basic Authentication with Oracle Coherence REST
• 8.5 Implementing Authorization For Oracle Coherence REST