Book Image

GlassFish Administration

By : Xuekun Kou
Book Image

GlassFish Administration

By: Xuekun Kou

Overview of this book

To build a powerful production environment for your Java EE systems, you need a great application server, and the skills to manage it. This book gives you all that you are looking for. This book will help you gain the necessary skills to install, configure, tune, and troubleshoot GlassFish so that you can fully unleash its power. It will teach you how to use the GlassFish application server, with a special focus on administration tasks. It presents the GlassFish administrative tasks in a logical sequence, with each chapter focusing on a specific topic. Starting with installation and moving through configuration, this book takes a careful look at the administration console so that you get a complete understanding of GlassFish and its administrative features. It will help you understand how to deploy Java EE, Ruby on Rails and other supported applications to GlassFish, and how to configure the necessary resources for these applications. You will also learn how to maintain, tune, and troubleshoot your GlassFish server. Also includes a bonus chapter introducing Glassfish v3.
Table of Contents (17 chapters)
GlassFish Administration
Credits
About the Author
Acknowledgement
About the Reviewers
Preface

Additional security concerns in GlassFish


In this section, we discuss several additional security features implemented in GlassFish, and some common practices we take to make GlassFish more secure.

First, let's consider the management of passwords in GlassFish.

Administering passwords

GlassFish uses two categories of passwords—those necessary for running the administration and configuration tasks, and those necessary for configuring the resources. Examples of administration related passwords include the GlassFish master password, and the administrator's password. Examples of application resource related passwords include the passwords for a data source.

Working with administration related passwords

Encoded password files that contain encoded passwords need to be protected using file system permissions. These files include the following:

  • <domain-dir>/master-password: This file contains the encoded master password and should be protected with filesystem permissions 600.

  • Any password file...