Sams Teach Yourself J2EE™ in 21 Days, Second Edition
by Martin Bond, Dan Haywood, Debbie Law, Andy Longshaw, Peter Roxburgh
Working with J2EE RI Security
Before you look at making your J2EE application security aware, you must spend a short time looking at the J2EE RI support for a simple authentication system.
The J2EE RI provides an authentication domain that can be used during application development. The RI security domain supports:
Realms— A realm defines users that are authenticated using the same mechanism. The J2EE RI defines two realms:
file— Consisting of users and passwords stored in an XML file
certificate— Consisting of users identified by X.509 digital certificates, (certificates are only used to authenticate Web browser clients)
Users— Defines a username within the J2EE security domain. In the default realm, the username is the principal name. In the ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access