uCosminexus Application Server, Security Management Guide
Integrated user management uses the session failover functionality to pass the login state to another J2EE server.
The following table lists the information that is inherited by the session failover. In the table, API refers to the JAAS API. Custom Tag is the JSP custom tag provided in integrated user management.
Table 5-10 Information that is inherited by the session failover functionality
| Information | Cosminexus standard login module | Custom login module | |||
|---|---|---|---|---|---|
| API | Custom tag | API | Custom tag | ||
| Integrated user management session information | Login state (whether users are logging in or not) |
Auto | Auto | Auto | Auto |
| Registered user ID/realm name | Auto | Auto | Auto | Auto | |
| Password | O | O | n/a | n/a | |
| Authentication information | Subject | X | X | X | X |
| Principal | X | X | X | X | |
| User attribute (UserAttributes) | Man | Man | n/a | n/a | |
| Credential (public/private) other than user attributes (UserAttributes) | X | X | X | X | |
To fail over the user application created in versions earlier than 07-00 by using the session failover function, part of the user application process must be revised. For details about the method used to develop the integrated user management application that supports the session failover, see 5.12 Implementation of user authentication when using the session failover functionality. To learn more about the session failover functionality, see 5. Inheritance of the Session Information Between J2EE Servers in the uCosminexus Application Server Expansion Guide.
All Rights Reserved. Copyright (C) 2013, Hitachi, Ltd