Red Hat APPLICATION SERVER - JONAS Manual page 46

38
org.objectweb.jonas.security.auth.spi.JResourceLoginModule
parameters:
: the name of the entry in the
• resourceName
sents how and where the authentication information is stored. This is the only required parameter.
: Specify this optional parameter if you want this login module to ask for a cer-
• certCallback
tificate callback. By default it is set to
.
true
org.objectweb.jonas.security.auth.spi.CRLLoginModule
tains authentication based on certificates. However, when enabled, it will also permit non-certificate
based accesses. It verifies that the certificate presented by the user has not been revoked by the Certi-
fication Authority that signed it. To use it, the directory in which to store the revocation lists (CRLs)
files or a LDAP repository must exist.
org.objectweb.jonas.security.auth.spi.CRLLoginModule
eters:
• CRLsResourceName
: if the CRL files are stored in a directory on the machine, you must specify another
Directory
•
parameter pointing to that directory:
CRLsDirectoryName
•
must be
.crl
: This functionality is experimental if your CRL files are stored in a LDAP repository, two
LDAP
•
additional parameters must be specified:
: the address of the server that hosts the LDAP repository
address
•
: the port used by the LDAP repository; CRLs are retrieved from an LDAP directory
port
•
using the LDAP schema defined in RFC 2587 (refer to http://www.ietf.org/rfc/rfc2587.txt).
3.5.8.3.5.2. Specify the Configuration Parameters
The JAAS configuration sits on a file in which the login module to use for authentication is described.
This file is located in
name, edit the
$JOANS_BASE/bin/jonas.sh
-Djava.security.auth.login.config=$JONAS_BASE/conf/jaas.config
The contents of the JAAS configuration file follow this structure:
Application_1 {
LoginModuleClassA Flag Options;
LoginModuleClassB Flag Options;
LoginModuleClassC Flag Options;
};
Application_2 {
LoginModuleClassB Flag Options;
LoginModuleClassC Flag Options;
};
Other {
LoginModuleClassC Flag Options;
false
: this parameter specifies how the CRLs are stored:
: the directory containing the CRL files (the extension for these files
).
$JONAS_BASE/conf
Chapter 3. JOnAS Configuration
jonas-realm.xml
. When using JAAS realms with certificates, set it to
and named
jaas.config
script and modify the following line:
accepts the following
file being used; this entry repre-
is the LoginModule that con-
can take the following param-
. To change its location and