Red Hat APPLICATION SERVER - JONAS Manual page 44

36
All the elements of the configuration for the LDAP resource can be found in the
jonas-realm_1_0.dtd
realm_1_0.dtd).
For this sample, it is assumed that the LDAP server is on the same computer and is on the default port
(389). It takes all the default values of the DTD.
The datasource resource to add in the
jonas-ldaprealm
[...]
ldaprealm name="howto_ldap_realm1"
[...]
/jonas-ldaprealm
3.5.8.3. Configuring Client Authentication Based on the Client Certificate in the Web
Container
3.5.8.3.1. Introduction
In order to set up the client authentication based on client certificate in a Web container, do the fol-
lowing:
1. Configure the Realm the Web container will have to use.
2. Configure an SSL listener on the Web container.
3. Configure the Web application to make it ask a client certificate.
4. Configure the JAAS LoginModules.
5. Populate the Realm access list.
It is mandatory to possess a X.509 certificate for your Web container on each external interface (IP
address) that accepts secure connections. This one can be digitally signed by a Certification Authority
or can be autosigned.
3.5.8.3.2. Step 1: Configure the Realm the Web Container Uses
With Tomcat
$JONAS_BASE/conf/server.xml
$CATALINA_BASE/conf/server.xml
Realm
className="org.objectweb.jonas.security.realm.web.catalina50.JAAS" /
The class specified uses the JAAS model to authenticate the users. Thus, to choose the resource in
which to look for authentication data, configure JAAS.
3.5.8.3.3. Step 2: Configure an SSL Listener on the Web Container
Uncomment the following section in the
Connector className="org.apache.catalina.connector.http.HttpConnector"
port="9043" minProcessors="5" maxProcessors="75" enableLookups="true"
DTD file (refer
jonas-realm.xml
baseDN="dc=jonas,dc=objectweb,dc=org" /
5.0.x, in the
file, the
file, replace the current Realm by the following:
server.xml
Chapter 3. JOnAS Configuration
to http://jonas.objectweb.org/current/xml/jonas-
file is:
$JONAS_ROOT/conf/server.xml
$CATALINA_HOME/conf/server.xml
file:
file, the
file, or the