Book Image

GlassFish Security

By : Masoud Kalali
Book Image

GlassFish Security

By: Masoud Kalali

Overview of this book

<p>Security was, is, and will be one of the most important aspects of Enterprise Applications and one of the most challenging areas for architects, developers, and administrators. It is mandatory for Java EE application developers to secure their enterprise applications using Glassfish security features.<br /><br />Learn to secure Java EE artifacts (like Servlets and EJB methods), configure and use GlassFish JAAS modules, and establish environment and network security using this practical guide filled with examples. One of the things you will love about this book is that it covers the advantages of protecting application servers and web service providers using OpenSSO.<br /><br />The book starts by introducing Java EE security in Web, EJB, and Application Client modules. Then it introduces the Security Realms provided in GlassFish, which developers and administrators can use to complete the authentication and authorization setup. In the next step, we develop a completely secure Java EE application with Web, EJB, and Application Client modules.<br /><br />The next part includes a detailed and practical guide to setting up, configuring, and extending GlassFish security. This part covers everything an administrator needs to know about GlassFish security, starting from installation and operating environment security, listeners and password security, through policy enforcement, to auditing and developing new auditing modules.</p> <p>Before starting the third major part of the book, we have a chapter on OpenDS discussing how to install, and administrate OpenDS. The chapter covers importing and exporting data, setting up replications, backup and recovery and finally developing LDAP based solutions using OpenDS and Java.</p> <p>Finally the third part starts by introducing OpenSSO and continues with guiding you through OpenSSO features, installation, configuration and how you can use it to secure Java EE applications in general and web services in particular. Identity Federation and SSO are discussed in the last chapter of the book along with a working sample.</p>
Table of Contents (14 chapters)
GlassFish Security
Credits
About the Author
About the Reviewers
Preface

What is OpenSSO


OpenSSO, hosted at http://opensso.dev.java.net, is a Sun Microsystems-sponsored open source project started in 2005 for providing core identity services such as single sign-on (SSO), federation, and Web Services security. The project is based on the code base of Sun Java System Access Manager 7.0 and Sun Java System Federation Manager 7.0, which are previous versions of Sun Microsystems commercial, closed source products. OpenSSO provides support for industry-accepted standards like SAML 2.0, eXtensible Access Control Markup Language (XACML), WS-Federation, Liberty Alliance, OpenID, Information Card, and so on. These functionalities are either in the main code base or through its extensions.

Note

After Oracle took over Sun Microsystems, they decided to take back the latest release of the OpenSSO and only provide the enterprise release available for download. A company named ForgeRock (http://www.forgerock.com/), decided to stand behind the project and continue its development...