uCosminexus Application Server, Security Management Guide
jaas.conf stores the login module names used by each application, the repository number specified in ua.conf (the LDAP directory server or RDB), and other information used by the user authentication or single sign-on library.
The jaas.conf location is as follows.
Overwrite this jaas.conf file or copy it to a new location. Specify the jaas.conf location in the Java VM properties at the time of startup. For details about setting the JavaVM properties at the time of startup, see 5.21 JavaVM property setup.
Change the jaas.conf access permission so that the Component Container administrators can reference the file. To learn more about setting the Component Container administrators, see 4.1.4 Important points in setting the Component Container administrators (in UNIX) in the uCosminexus Application Server System Setup and Operation Guide.
Specify the following information per application.
To learn more about the jaas.conf settings when using Active Directory as the LDAP directory server, see 5.17.4 Settings when using Active Directory.
For details about jaas.conf, see 14.2 jaas.conf (JAAS configuration file).
jaas.conf can be reloaded without restarting the J2EE server by using the mngsvrutil command. This Management Server management command can be used to change the LDAP number used by the login module without restarting the J2EE server.
To use the mngsvrutil command, it is required that Management Server has started and been configured appropriately.
The following figure shows the flow of reloading jaas.conf.
Figure 5-25 Flow of reloading jaas.conf
For details about the mngsvrutil command, see mngsvrutil (Management Server Management Command) in the uCosminexus Application Server Command Reference Guide.
All Rights Reserved. Copyright (C) 2013, Hitachi, Ltd