uCosminexus Application Server, Security Management Guide

[Contents][Index][Back][Next]

5.4.5 Inheritance of the login state using session failover functionality

Integrated user management uses the session failover functionality to pass the login state to another J2EE server.

The following table lists the information that is inherited by the session failover. In the table, API refers to the JAAS API. Custom Tag is the JSP custom tag provided in integrated user management.

Table 5-10 Information that is inherited by the session failover functionality

Information Cosminexus standard login module Custom login module
API Custom tag API Custom tag
Integrated user management session information Login state
(whether users are logging in or not)
Auto Auto Auto Auto
Registered user ID/realm name Auto Auto Auto Auto
Password O O n/a n/a
Authentication information Subject X X X X
Principal X X X X
User attribute (UserAttributes) Man Man n/a n/a
Credential (public/private) other than user attributes (UserAttributes) X X X X

Legend:
Auto: Can be inherited automatically
O: Can be selected depending on the option
Man: Can be inherited manually
X: Cannot be inherited
n/a: Not applicable

To fail over the user application created in versions earlier than 07-00 by using the session failover function, part of the user application process must be revised. For details about the method used to develop the integrated user management application that supports the session failover, see 5.12 Implementation of user authentication when using the session failover functionality. To learn more about the session failover functionality, see 5. Inheritance of the Session Information Between J2EE Servers in the uCosminexus Application Server Expansion Guide.