Index

<ua:attributeEntries>Entries</ua:attributeEntries> tag

<ua:attributeEntry/> tag

<ua:chpw/> tag

<ua:exception>Body</ua:exception> tag

<ua:getAttribute/> tag

<ua:getAttributeNames/> tag

<ua:getAttributes/> tag

<ua:getPrincipalName/> tag

<ua:login/> tag

<ua:logout/> tag

<ua:notLogin>Body</ua:notLogin> tag

-nosecurity option

access permission, setting up

access permission management

Active Directory, settings when using

addAttribute method, [2]

addSSODataListener method

addSSOData method

addUserData method (syntax 1)

addUserData method (syntax 2)

API

• association between SPI and

• for implementation of EJB client applications

• provided by integrated user management framework

• used with integrated user management framework

API-based implementation, notes on

API parameter

Application (option of JAAS configuration file)

application-centralized configuration

application-distributed configuration

application execution infrastructure

• functionality for

• functionality for operating and maintaining

application server, security management with

AttributeEntry class

AttributeEntry constructor

attribute list, example of setting

authentication

• by application setup

• with security identities

authentication functionality

• available for applications

• precautions for using

authentication information, definition file for

authentication password encryption, enhanced support of

authentication process

authentication program coding

• example of (in UNIX)

• example of (in Windows)

authentication states, inheritance of

ChangeDataFailedException class

ChangeDataFailedException constructor

changePassword method

check method (syntax 1)

check method (syntax 2)

client authentication

close method

com.cosminexus.admin.auth.api.repository.event.ChangeDataFailedException

com.cosminexus.admin.auth.api.repository.event.SSODataListenerException

com.cosminexus.admin.auth.api.repository.ldap.config (API parameter)

com.cosminexus.admin.auth.api.repository.ldap.ObjectClassError

com.cosminexus.admin.auth.CryptoException

com.cosminexus.admin.auth.custom.lm (option to be specified for DelegationLoginModule)

com.cosminexus.admin.auth.custom.modules (custom login module parameter)

com.cosminexus.admin.auth.gsession.keep_password

• Cosminexus standard login module parameter

• option to be specified for WebPasswordJDBCLoginModule

• option to be specified for WebPasswordLDAPLoginModule

• option to be specified for WebPasswordLoginModule

com.cosminexus.admin.auth.jdbc.conn.password (JDBC parameter)

com.cosminexus.admin.auth.jdbc.conn.retry.count (JDBC parameter)

com.cosminexus.admin.auth.jdbc.conn.retry.wait (JDBC parameter)

com.cosminexus.admin.auth.jdbc.conn.url (JDBC parameter)

com.cosminexus.admin.auth.jdbc.conn.user (JDBC parameter)

com.cosminexus.admin.auth.jdbc.driver (JDBC parameter)

com.cosminexus.admin.auth.jdbc.password.encrypt.ex (JDBC parameter)

com.cosminexus.admin.auth.jdbc.password.encrypt (JDBC parameter)

com.cosminexus.admin.auth.jdbc.password.type (JDBC parameter)

com.cosminexus.admin.auth.jdbc.pool.enable (JDBC parameter)

com.cosminexus.admin.auth.jdbc.pool.gc_interval (JDBC parameter)

com.cosminexus.admin.auth.jdbc.pool.max_spare (JDBC parameter)

com.cosminexus.admin.auth.jdbc.pool.max (JDBC parameter)

com.cosminexus.admin.auth.jdbc.pool.min_spare (JDBC parameter)

com.cosminexus.admin.auth.jdbc.r (option to be specified for WebPasswordJDBCLoginModule)

com.cosminexus.admin.auth.jdbc.sql (JDBC parameter)

com.cosminexus.admin.auth.keep_password

• Cosminexus standard login module parameter

• option to be specified for WebPasswordJDBCLoginModule

• option to be specified for WebPasswordLDAPLoginModule

• option to be specified for WebPasswordLoginModule

com.cosminexus.admin.auth.keep_password.encrypt

• Cosminexus standard login module parameter

• option to be specified for WebPasswordJDBCLoginModule

• option to be specified for WebPasswordLDAPLoginModule

• option to be specified for WebPasswordLoginModule

com.cosminexus.admin.auth.ldap.attr.password (JNDI parameter)

com.cosminexus.admin.auth.ldap.attr.userid (JNDI parameter)

com.cosminexus.admin.auth.ldap.basedn (JNDI parameter)

com.cosminexus.admin.auth.ldap.certificate.attr.userid (JNDI parameter)

com.cosminexus.admin.auth.ldap.conn.read_timeout (JNDI parameter)

com.cosminexus.admin.auth.ldap.conn.retry.count (JNDI parameter)

com.cosminexus.admin.auth.ldap.conn.retry.wait (JNDI parameter)

com.cosminexus.admin.auth.ldap.directory.kind (JNDI parameter)

com.cosminexus.admin.auth.ldap.password.encrypt.ex (JNDI parameter)

com.cosminexus.admin.auth.ldap.password.encrypt (JNDI parameter)

com.cosminexus.admin.auth.ldap.pool.enable (JNDI parameter)

com.cosminexus.admin.auth.ldap.pool.gc_interval (JNDI parameter)

com.cosminexus.admin.auth.ldap.pool.max_spare (JNDI parameter)

com.cosminexus.admin.auth.ldap.pool.max (JNDI parameter)

com.cosminexus.admin.auth.ldap.pool.min_spare (JNDI parameter)

com.cosminexus.admin.auth.ldap.r

• option to be specified for WebCertificateLoginModule

• option to be specified for WebPasswordLDAPLoginModule

• option to be specified for WebPasswordLoginModule

com.cosminexus.admin.auth.ldap.search.scope (JNDI parameter)

com.cosminexus.admin.auth.ldap.search.userrdn (JNDI parameter)

com.cosminexus.admin.auth.ldap.w

• option to be specified for WebPasswordLDAPLoginModule

• option to be specified for WebPasswordLoginModule

com.cosminexus.admin.auth.param_check.enable (Cosminexus standard login module parameter)

com.cosminexus.admin.auth.realm

• option to be specified for DelegationLoginModule

• option to be specified for WebCertificateLoginModule

• option to be specified for WebPasswordJDBCLoginModule

• option to be specified for WebPasswordLDAPLoginModule

• option to be specified for WebPasswordLoginModule

• option to be specified for WebSSOLoginModule

com.cosminexus.admin.auth.sfo.disable (trace parameter)

com.cosminexus.admin.auth.sso.encrypt (single sign-on parameter)

com.cosminexus.admin.auth.sso.keyfile (single sign-on parameter)

com.cosminexus.admin.auth.sso.ldap.r

• option to be specified for WebSSOLoginModule

• single sign-on parameter

com.cosminexus.admin.auth.sso.ldap.w

• option to be specified for WebPasswordLDAPLoginModule

• option to be specified for WebPasswordLoginModule

• option to be specified for WebSSOLoginModule

• single sign-on parameter

com.cosminexus.admin.auth.sso.lm (single sign-on parameter)

com.cosminexus.admin.auth.sso.param.pubdat (single sign-on parameter)

com.cosminexus.admin.auth.sso.param.secdat (single sign-on parameter)

com.cosminexus.admin.auth.sso.param.userid (single sign-on parameter)

com.cosminexus.admin.auth.sso (option to be specified for WebSSOLoginModule)

com.cosminexus.admin.auth.trace.level (trace parameter)

com.cosminexus.admin.auth.trace.prefix (trace parameter)

com.cosminexus.admin.auth.trace.rotate (trace parameter)

com.cosminexus.admin.auth.trace.size (trace parameter)

com.cosminexus.admin.common.ConfigError

com.cosminexus.admin.common.FormatError

com.cosminexus.admin.common.ParameterError

com.cosminexus.admin.common.UAException

com.sun.jndi.ldap.connect.timeout (JNDI parameter)

configuration file

• creating

• example of setting

configuration file parameter used by login modules

container security

convpw

cosminexus.xml, configuring properties of application that does not contain

Cosminexus HTTP Server, SSL setup with

Cosminexus standard login module

• overview of

• user authentication mechanism based on

Cosminexus standard login module parameter

CSV file

• basic specifications

• containing single sign-on authentication information

• specification example

custom login module, [2], [3]

• examples of implementing

• invoking

• points to remember when implementing

custom login module parameter

DelegationLoginModule

DelegationLoginModule class

DIT structure

• of single sign-on information repository

• of user information repository

EJB client application

• API for implementation of

• security implementation in

encryption key file

• changing

• creating, [2]

• creating (when using single sign-on)

encrypt method

enhanced encryption support

Enterprise Bean security identities

Enterprise Bean security role reference, defining

exception classes

• API used with integrated user management framework

• for APIs

• for JAAS login modules

file, deploying

firewall, [2], [3]

Flag (option of JAAS configuration file)

format of functional descriptions

functionality

• associated manuals

• associated system purposes

• classifications of

• for application execution infrastructure

• for operating and maintaining application execution infrastructure

• of application server

getAlias method

getAttributeEntries method, [2]

getAttribute method, [2]

getAttributeName method

getAttributeNames method, [2]

getAttributes method, [2]

getException method

getListeners method

getLoginInfoManager method

getMapping method

getMappingRealms method

getName method

getObjectClasses method

getOldPublicData method

getOldSecretData method

getOption method

getPassword method

getPublicData method, [2]

getRequest method, [2], [3]

getResponse method, [2], [3]

getSecretData method

getSession method

getSSODataListeners method

getSSOData method

getSubcontext method, [2]

getSubjectID method

getTagEntry method, [2], [3]

getTagID method, [2], [3]

getUserData method

getUserId method

getUserID method

handle method, [2], [3], [4]

hasMoreElements method

hasMore method

IDS

implementing

• API-based login session

• API-based logout session

• API-based session to obtain user IDs

• API-based user authentication

• custom login module-based user authentication

• enhanced support of authentication password encryption

• session to register successfully authenticated subject to HttpSession

• tag library-based user authentication

individual user management, association between integrated user management framework and

integrated user management

• commands used in

• details of commands used in

• files used by

• list of commands used in

• list of files used by

• management method of user information used for

• process flow

• process flow when using

integrated user management-based authentication

integrated user management configuration file

integrated user management framework, [2], [3]

• API provided by

• API used with

• association between individual user management and

• implementation of user authentication based on

• libraries

• repository DIT structure in

• tag library used with

integrated user management function, procedures used to setup

intrusion detection system, [2], [3]

J2EE server runtime protection provided by SecurityManager functionality

JAAS

jaas.conf

• creating

• reloading

jaas.conf

• example of setting

JAAS-based user management, [2]

JAAS configuration file

JAAS configuration file definition, example of

java.naming.provider.url (JNDI parameter)

java.naming.security.credentials (JNDI parameter)

java.naming.security.principal (JNDI parameter)

Java Authentication and Authorization Service (JAAS)-based user authentication, overview of

Java VM property, setting up

javax.net.ssl.trustStore (load balancer definition property file key), [2]

javax.net.ssl.trustStorePassword (load balancer definition property file key), [2]

javax.security.auth.login.AccountExpiredException

javax.security.auth.login.CredentialExpiredException

javax.security.auth.login.FailedLoginException, [2]

javax.security.auth.login.LoginException, [2]

JDBC parameter

JNDI parameter

JSP security role reference, defining

JSP tag library

lb.ACOS.privilegedexec.password (load balancer connection configuration property file key), [2]

lb.API.protocol (load balancer connection configuration property file key), [2]

lb.host (load balancer definition property file key), [2]

lb.password (load balancer definition property file key), [2]

lb.persistence.cookie-insert.templatename (load balancer definition property file key), [2]

lb.port (load balancer definition property file key), [2]

lb.properties

lb.protocol (load balancer definition property file key), [2]

lb.timeout (load balancer definition property file key), [2]

lb.type (load balancer definition property file key), [2]

lb.user (load balancer definition property file key), [2]

LB-information-distinguished-name.properties

LDAP directory server

• connection failover by multiplexing

• installing

• registering user information to

• setting up

LDAP directory server multiplexing

• example configuration of

• example configuration of (multi-master configuration)

LdapSSODataManager class

LdapSSODataManager constructor

LdapUserDataManager class

LdapUserDataManager constructor

LdapUserEnumeration interface

line operation

LINK_xxxx

listUsers method (syntax 1), [2]

listUsers method (syntax 2), [2]

load balancer

• controlling via operation management functionality

• directly accessing through API

• that employs API-based direct connections, files used to control

• that employs API-based direct connections, list of files used to control

load balancer definition property file

LoginInfoManager class

login method

LoginModule interface, points to remember when implementing

login module name (option of JAAS configuration file)

login state

• how to check

login user ID, registering

LoginUtil class

logout method

Major functional changes in 09-70

Major functional changes in 09-80

Major functional changes in 09-87

management portal-based integrated user management operation

management portal-based repository management

method permission

• security definition

• setting

modifySSOData method

modifyUserData method

ModuleOptions (option of JAAS configuration file)

nextElement method

next method

object class, extending

ObjectClassEntry class

ObjectClassEntry constructor

OPERATION

options

• to be specified for DelegationLoginModule

• to be specified for WebCertificateLoginModule

• to be specified for WebPasswordJDBCLoginModule

• to be specified for WebPasswordLDAPLoginModule

• to be specified for WebSSOLoginModule

other parameters

password

• changing

• encrypting

PasswordCryptography interface

PasswordUtil class

Principal interface

Principal object, points to remember when implementing

program security

PUBLICDATA

realm, [2], [3]

REALMNAME

realm name

• determining

registering

• login user IDs

• users

removeAttribute method, [2]

removeMapping method

removeSSODataListener method

removeSSOData method

removeUserData method

resource monitoring (integrated user management)

reverse proxy server

role

• registering

• registering to users

• setting

Run As functionality

SECRETDATA

secure system, considerations in design of

security definition

• method permission

• security identity

security identity

• authentication setup with

• authentication with

• JSP

• security definition

• servlet

• settings of

security identity functionality

security role

• server management command-based

• setting up

security role reference, defining

server authentication

server management command

• application setup by using

• security role setup by using

servlet security role reference, defining

sessions

• custom login module

• integrated user management

• managed in integrated user management

• types of

setAlias method

setAttributeEntries method, [2]

setAttributeName method

setException method

setMapping method

setName method

setObjectClasses method

setOption method

setPassword method, [2]

setPublicData method

setRequest method, [2], [3]

setResponse method, [2], [3]

setSecretData method

setSession method

setSubcontext method, [2]

setSubjectID method

setTagEntry method, [2], [3]

setTagID method, [2], [3]

setup

• <security-constraint> element

• <security-identity> element

setUserID method

single sign-on, [2]

• example of supporting (when using custom login module)

• example of supporting (when using standard login module)

single sign-on information repository

• referencing

• registering

single sign-on library

• positioning of

single sign-on parameter

single sign-on repository

size method, [2]

SPI, association between API and

SSL, encryption with

SSL/TLS encryption

• of authentication information

• of data

SSL accelerator, [2]

SSL encryption

• of authentication information

• of data

ssoDataAdded method

SSOData class

SSOData constructor

SSODataEvent class

SSODataEvent constructor

SSODataListenerException class

SSODataListenerException constructor

SSODataListener interface

ssoDataModified method

ssoDataRemoved method

ssoexport

ssogenkey

ssoimport

system configurations for ensuring security

tag library

• list of tags contained in

• used with integrated user management framework

tierlb.properties

tier-side load balancer connection configuration property file

ua.conf

• creating

• example of setting (in UNIX)

• example of setting (in Windows)

uachpw

uachpw command

user

• registering

• registering roles to

• setting

UserAttributes interface

user authentication, overview of Java Authentication and Authorization Service (JAAS)-based

user authentication library

• positioning of

user authentication repository

UserData class

UserData constructor

user definition attributes, extending

user entry structure

USERID

user IDs registered in integrated user management sessions, deleting

user information

• definition file for acquiring

• definition file for adding or modifying

• formatting used to register, [2]

• managing

• registering

• registering (when using single sign-on)

• registering by using commands, [2]

• registering by using integrated user management framework library, [2]

user information repository

user mapping, [2]

• definition file for

user mapping function

validity period

• of JAAS user authentication

• of user authentication

virtual server manager-side load balancer connection configuration property file

WebCertificateCallback class

WebCertificateCallback constructor

WebCertificateHandler class

WebCertificateHandler constructor

WebCertificateLoginModule

WebCertificateLoginModule class

Web container-based authentication functionality using DD settings

Web container-based authentication using DD settings

WebLogoutCallback class

WebLogoutCallback constructor

WebLogoutHandler class

WebLogoutHandler constructor

WebPasswordCallback class

WebPasswordCallback constructor

WebPasswordHandler class

WebPasswordHandler constructor

WebPasswordJDBCLoginModule

WebPasswordJDBCLoginModule class

WebPasswordLDAPLoginModule

WebPasswordLDAPLoginModule class

WebPasswordLoginModule

WebPasswordLoginModule class

web server, authentication functionality of

Web Services Security functionality, SOAP message encryption with

WebSSOCallback class

WebSSOCallback constructor

WebSSOHandler class

WebSSOHandler constructor

WebSSOLoginModule

WebSSOLoginModule class

work procedure document