uCosminexus Application Server, Security Management Guide
JAAS allows you to invoke multiple authentication modules sequentially in a single authentication. These authentication modules use the Map object (sharedState) passed to the third parameter of the LoginModule interface initialize method to pass information. This section provides the information that is added by each of the Cosminexus standard login modules. Note that DelegationLoginModule and WebPasswordJDBCLoginModule do not add information.
WebPasswordLoginModule, WebCertificateLoginModule, and WebPasswordLDAPLoginModule add the following information to sharedState before invoking the next LoginModule.
If the user has been already authenticated in one session, WebSSOLoginModule obtains the information used for authentication in other realms from the user mapping and adds the following information to sharedState before invoking custom login modules. No information is added when the user has not been authenticated in the session or when there is no authentication information in the user mapping.
The above keys can be changed in the configuration file of the integrated user management framework. If a custom login module exists and can obtain authentication information from sharedState, the keys can be tailored to the custom login module specifications. For details about the configuration file settings, see 14.2 jaas.conf (JAAS configuration file).
All Rights Reserved. Copyright (C) 2013, Hitachi, Ltd