BEA WebLogic Server™ 8.1 Unleashed
by Mark Artiges, Gupreet Singh Bhasin, Bernard Ciconte, Malcolm Garland, Saranathan Govindarajan, James Huang, Subramanian Kovilmadam, Kunal Mittal, Paul J. Perrone, Tom Schwenk, Steve Steffen
Securing Java Clients
Unlike Web clients using Internet browsers, application clients require a different strategy for implementing security. In the past, application clients of WebLogic Server used JNDI for authentication. Although JAAS is a standard extension to security in J2EE 1.3, it's the preferred method of application client authentication in WebLogic Server. Security implementations based on JNDI works under WebLogic Server, but some methods in the weblogic.jndi.Environment class based on JNDI authentication have been deprecated. This is why BEA recommends using JAAS for all username and password authentication. For two-way SSL authentication, JNDI is used because JAAS does not handle this.
WebLogic Server, being J2EE 1.3–compliant, ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access