![[Contents]](FIGURE/CONTENT.GIF)
uCosminexus Application Server, Security Management Guide
![[Index]](FIGURE/INDEX.GIF)
![[Back]](FIGURE/FRONT.GIF)
![[Next]](FIGURE/AFTER.GIF)
The Cosminexus standard login modules provided by the integrated user management framework are grouped into the following two types:
The following table lists the function of each login module.
Table 5-6 Login module function list
| Function | Type | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| P | C | L | J | D | S | ||||
| Used repository | LDAP directory server | A | A | A | -- | -- | A | ||
| Database (JDBC) | -- | -- | -- | A | -- | -- | |||
| Authentication method | X509 certificate | -- | A | -- | -- | -- | -- | ||
| Password authentication | A | -- | A#1 | A | -- | -- | |||
| Type that can store passwords | Binary (byte []) | A | -- | -- | A#2 | -- | -- | ||
| Character string | -- | -- | -- | A#3 | -- | -- | |||
| Encryption algorithm used to compare/store passwords | Plain text | A | -- | -- | A | -- | -- | ||
| SHA-1 | A | -- | -- | A | -- | -- | |||
| MD5 | A | -- | -- | A | -- | -- | |||
| Encryption enhancement | A | -- | -- | A | -- | -- | |||
| Triple DES | -- | -- | -- | -- | -- | A | |||
| Miscellaneous | Setting Principal objects | A | A | A | A | -- | -- | ||
| Obtaining user attributes | A | A | A | -- | -- | -- | |||
| Registering the user ID and realm name of the user logging in the integrated user management session at the time of login (which are removed at the time of logout) | A | A | A | A | A#4 | A#4 | |||
| Invoking custom login modules | -- | -- | -- | -- | A | A | |||
#1: The type that can store passwords and the encryption algorithm depend on the LDAP directory server.
#2: The mappable SQL data type can be specified in the byte [] type (VARBINARY/LONGVARBINARY).
#3: The mappable SQL data type can be specified in the String [] type (CHAR/VARCHAR/LONGVARCHAR).
#4: Registration is performed when the conditions are met.
All Rights Reserved. Copyright (C) 2013, Hitachi, Ltd