The Java EE 5 Tutorial (PDF) - Oracle Software Downloads

Contents
22
Working with Realms, Users, Groups, and Roles .......................................................................... 775
What Are Realms, Users, Groups, and Roles? ........................................................................ 776
Managing Users and Groups on the Application Server ....................................................... 779
Setting Up Security Roles .......................................................................................................... 780
Mapping Roles to Users and Groups ....................................................................................... 782
Establishing a Secure Connection Using SSL ................................................................................. 783
Installing and Configuring SSL Support ................................................................................. 783
Specifying a Secure Connection in Your Application Deployment Descriptor ................. 784
Verifying SSL Support ............................................................................................................... 785
Working with Digital Certificates ............................................................................................ 786
Enabling Mutual Authentication over SSL ............................................................................. 790
Further Information about Security ................................................................................................ 793
29 Securing Java EE Applications .........................................................................................................795
Securing Enterprise Beans ................................................................................................................ 796
Accessing an Enterprise Bean Caller’s Security Context ....................................................... 797
Declaring Security Role Names Referenced from Enterprise Bean Code ........................... 799
Defining a Security View of Enterprise Beans ........................................................................ 801
Using Enterprise Bean Security Annotations ......................................................................... 812
Using Enterprise Bean Security Deployment Descriptor Elements .................................... 813
Configuring IOR Security ......................................................................................................... 814
Deploying Secure Enterprise Beans ......................................................................................... 816
Enterprise Bean Example Applications .......................................................................................... 817
Example: Securing an Enterprise Bean .................................................................................... 818
Example: Using the isCallerInRole and getCallerPrincipal Methods ....................... 823
Discussion: Securing the Duke’s Bank Example ..................................................................... 829
Securing Application Clients ........................................................................................................... 829
Using Login Modules ................................................................................................................ 830
Using Programmatic Login ...................................................................................................... 831
Securing EIS Applications ................................................................................................................ 831
Container-Managed Sign-On .................................................................................................. 831
Component-Managed Sign-On ............................................................................................... 832
Configuring Resource Adapter Security ................................................................................. 832
Mapping an Application Principal to EIS Principals ............................................................. 834
The Java EE 5Tutorial • June 2010