JBoss Community

What Is JBoss SX?

JBoss security framework. Default implementation is based on JAAS. Implements standard J2EE authentication and authorization but also supports extended security models with SecurityProxy and SecurityAssociation implementations.

JAAS based implementation enables pluggable authentication modules (PAMs) which is a way to integrate with existing authentication frameworks in your enterprise.

• JBossSXTheBigPicture

• JBossSecurityFAQ

• SecureAWebApplicationInJBoss

• JAAS Topics

  • HOWTO

  • Login Modules

    • ClientLoginModule

    • UsersRolesLoginModule

    • DatabaseServerLoginModule

    • LdapLoginModule

    • LdapExtLoginModule

    • BaseCertLoginModule

    • CertRolesLoginModule

    • RoleMappingLoginModule

    • Sun JDK OS Support

    • UsingCustomPrincpalsWith

  • CachingLoginCredentials

  • Integrating Keystores using JaasSecurityDomain

• Security Services

  • JaasSecurityManagerService

  • JaasSecurityManager

  • JaasSecurityDomain

  • DynamicLoginConfig

  • JACC

  • ConfiguringAJavaSecurityManager

  • SecurityAuditService

  • JaasSecurityDomainSocketFactory

• Web Layer Security

  • Programmatic Web Login

  • Using authentication with HttpInvokerProxy for JAAS secured InvokerServlet

  • SPNEGO Authentication

• Debugging Security

  • Enabling Logging

  • Debug/Trace the security layer

• JBossXACML

• Next Generation JBossSX

  • Generalized Authentication Layer

  • Generalized Authorization Layer

  • Security Context replacing the SecurityAssociation

  • Security in JBoss5

• Articles on JBossSX

  • [ Integrate security infrastructures with JBossSX

|http://www.javaworld.com/javaworld/jw-08-2001/jw-0831-jaas_p.html]

• Articles on JAAS

  • All that JAAS

• Integration of 3rd party security products

  • Integration of JBoss AS with RSA Cleartrust

  • Generic Header Based Authentication

• Understanding Role mapping

  • The creation of the Run-As identity

  • Mapping Roles in JBoss Application Server v5.x

• Miscellaneous Topics

  • JBoss/Tomcat Security Tips