Secure Identity Propagation using WS-Trust, WS-Security, and SAML2
I gave the following presentation at IBM Impact in April, 2011.
Read article: Secure Identity Propagation using WS-Trust, WS-Security, and SAML2Security
103 articles tagged Security.
HTTP Client – Form-Based Authentication
This article continues the discussion started in the Servlet Authentication article. Here we discuss Form-Based authentication; another common form of authentication when Servlet technology is used.
Read article: HTTP Client – Form-Based Authentication
Servlet Container Authentication
There are three required authentication mechanisms supported by a compliant Servlet Container: HTTP Basic Authentication, Form-based Authentication, and CLIENT_CERT authentication. There is a fourth authentication method, DIGEST, that isn’t used very often in my experience. This final…
Read article: Servlet Container Authentication
JBossWorld 2010 Session — Securing JBoss Services
On June 24, 2010, I gave a presentation at JBoss World in Boston. This was my second time at JBoss World. The presentation covered Securing JBoss Services. It explored the use of JaasSecurityDomain MBeans to configure SSL in JBoss 4.3 (also relevent for newer versions of JBoss) for various…
Read article: JBossWorld 2010 Session — Securing JBoss Services
J2EE Security Series
An Openldap Directory Server JBoss 4.3.x Setup Adding Groups To OpenLdap Using OpenLdap as a User Repository with JBoss 4.3.x
Read article: J2EE Security Series
Securing The JBoss JAAS Subject Reader Application with J2EE Security
This article continues the J2EE Security Series from the past few months. Here we expand the Simple J2EE Web Application that was introduced in this article to use J2EE Security.
Read article: Securing The JBoss JAAS Subject Reader Application with J2EE Security
A Simple Web Application
In order to test J2EE Security with the Security Realm and Openldap User Repository we created in the last article in this series, we need an application to protect. The focus of this article is to create a very simple web application that can be protected by J2EE Security.
Read article: A Simple Web Application
J2EE Security
The article continues the series discussing J2EE Security and its related concepts. The following brings together the numerous concepts discussed in the past articles.
Read article: J2EE Security
Role Mapping & J2EE Security
The discussion of J2EE Security on the JBoss Application Server continues as Role Mapping is introduced.
Read article: Role Mapping & J2EE Security
Using OpenLdap as a User Repository with JBoss 4.3.x
This article continues our discussion of setting up J2EE Security in a JBoss 4.3.x container. In the last article, we completed the setup of an OpenLdap database that can be used as a User Repository.
Read article: Using OpenLdap as a User Repository with JBoss 4.3.x