10.12.2012 Views

The Java EE 5 Tutorial (PDF) - Oracle Software Downloads

The Java EE 5 Tutorial (PDF) - Oracle Software Downloads

The Java EE 5 Tutorial (PDF) - Oracle Software Downloads

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Some OtherTerminology<br />

<strong>The</strong> following terminology is also used to describe the security requirements of the <strong>Java</strong> <strong>EE</strong><br />

platform:<br />

■ Principal: A principal is an entity that can be authenticated by an authentication protocol in<br />

a security service that is deployed in an enterprise. A principal is identified using a principal<br />

name and authenticated using authentication data.<br />

■ Security policy domain (also known as security domain or realm): A security policy<br />

domain is a scope over which a common security policy is defined and enforced by the<br />

security administrator of the security service.<br />

■ Security attributes: A set of security attributes is associated with every principal. <strong>The</strong><br />

security attributes have many uses, for example, access to protected resources and auditing<br />

of users. Security attributes can be associated with a principal by an authentication protocol.<br />

■ Credential: A credential contains or references information (security attributes) used to<br />

authenticate a principal for <strong>Java</strong> <strong>EE</strong> product services. A principal acquires a credential upon<br />

authentication, or from another principal that allows its credential to be used.<br />

Managing Users and Groups on the Application Server<br />

Managing users on the Application Server is discussed in more detail in the <strong>Oracle</strong> GlassFish<br />

Server 2.1.2 Administration Guide.<br />

This tutorial provides steps for managing users that will need to be completed to work through<br />

the tutorial examples.<br />

Adding Users to the Application Server<br />

Working with Realms, Users, Groups, and Roles<br />

To add users to the Application Server, follow these steps:<br />

1. Start the Application Server if you haven’t already done so. Information on starting the<br />

Application Server is available in “Starting and Stopping the Application Server” on page 68.<br />

2. Start the Admin Console if you haven’t already done so. You can start the Admin Console by<br />

starting a web browser and entering the URL http://localhost:4848/asadmin.Ifyou<br />

changed the default Admin port during installation, enter the correct port number in place<br />

of 4848.<br />

3. To log in to the Admin Console, enter the user name and password of a user in the<br />

admin-realm who belongs to the asadmin group. <strong>The</strong> name and password entered during<br />

installation will work, as will any users added to this realm and group subsequent to<br />

installation.<br />

4. Expand the Configuration node in the Admin Console tree.<br />

5. Expand the Security node in the Admin Console tree.<br />

6. Expand the Realms node.<br />

Chapter 28 • Introduction to Security in the <strong>Java</strong> <strong>EE</strong> Platform 779

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!