Introduction to JAAS

As discussed in the last chapter, JAAS introduces the following classes: Subject, Principal, LoginContext, and LoginModule. We'll now see how to uses these classes and others to authenticate WebLogic Server application clients.

JAAS Login Configuration File

According to J2SE specifications, to keep JAAS login implementations separate from application code, a login configuration file is used at runtime to determine which LoginModules should be used for client authentication. A login configuration file contains one or entries of the following form:

<entry name> {
<LoginModule> <flag> <LoginModule options>;
<LoginModule> <flag> <LoginModule options>;
    . . .
    };

The entry name, used in application code, is associated with one ...

Get BEA WebLogic Server™ 8.1 Unleashed now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial