Red Hat Application Server, Руководство пользователя

Страница: 46 / 296

38 Chapter 3. JOnAS Configuration
org.objectweb.jonas.security.auth.spi.JResourceLoginModule
accepts the following
parameters:
• resourceName
: the name of the entry in the
jonas-realm.xml
file being used; this entry repre-
sents how and where the authentication information is stored. This is the only required parameter.
• certCallback
: Specify this optional parameter if you want this login module to ask for a cer-
tificate callback. By default it is set to
false
. When using JAAS realms with certificates, set it to
true
.
org.objectweb.jonas.security.auth.spi.CRLLoginModule
is the LoginModule that con-
tains authentication based on certificates. However, when enabled, it will also permit non-certificate
based accesses. It verifies that the certificate presented by the user has not been revoked by the Certi-
fication Authority that signed it. To use it, the directory in which to store the revocation lists (CRLs)
files or a LDAP repository must exist.
org.objectweb.jonas.security.auth.spi.CRLLoginModule
can take the following param-
eters:
• CRLsResourceName
: this parameter specifies how the CRLs are stored:
•
Directory
: if the CRL files are stored in a directory on the machine, you must specify another
parameter pointing to that directory:
•
CRLsDirectoryName
: the directory containing the CRL files (the extension for these files
must be
.crl
).
•
LDAP
: This functionality is experimental if your CRL files are stored in a LDAP repository, two
additional parameters must be specified:
•
address
: the address of the server that hosts the LDAP repository
•
port
: the port used by the LDAP repository; CRLs are retrieved from an LDAP directory
using the LDAP schema defined in RFC 2587 (refer to http://www.ietf.org/rfc/rfc2587.txt).
3.5.8.3.5.2. Specify the Configuration Parameters
The JAAS configuration sits on a file in which the login module to use for authentication is described.
This file is located in
$JONAS_BASE/conf
and named
jaas.config
. To change its location and
name, edit the
$JOANS_BASE/bin/jonas.sh
script and modify the following line:
-Djava.security.auth.login.config=$JONAS_BASE/conf/jaas.config
The contents of the JAAS configuration file follow this structure:
Application_1 {
LoginModuleClassA Flag Options;
LoginModuleClassB Flag Options;
LoginModuleClassC Flag Options;
};
Application_2
{
LoginModuleClassB Flag Options;
LoginModuleClassC Flag Options;
};
Other {
LoginModuleClassC Flag Options;