Basic information
JAASModule provides classes for authentication via JAAS [3],
granting and revoking permissions for principals (users/groups) and storing these information in a database.
WWW examples demonstrate easy usage and integration into ActionServlet framework [5].
Benefits of using JAASModule
- Conforms to Java 2 security permissions architecture [1][2].
- Leverages JAAS (also part of JDK 1.4 API), i.e. standardized login
modules can be used (Kerberos, Unix, File, SQL, NT domain, ...).
- JDBCPolicy can keep information in any relational database and multiple Policy instances can be
in effect at the same time (example: applications running in one www server
can have different or same database of users).
Documentation
Download
|
|
1 Ant 1.4+ is only needed to build examples and/or recompile JAASModule sources.
2 Tomcat or any servlet container compatible with Servlet Specification 2.2+ (Jetty, JRun, Resin etc.).
|
References
- [1] Java 2 Platform Security (JDK 1.3)
- [2] Java 2 Platform Security (JDK 1.4)
- [3] Java Authentication and Authorization Service (JAAS)
- [4] Tagish - login modules for JAAS
- [5] ActionServlet - opensource web application framework
|
|
