GlassFish Security book FAQ 1: Custom Security Realm in GlassFish

I decided to write down the answer for some questions which my book's readers email me or ask me via twitter in my weblog so everyone can benefit from the answers. Here is the answer to the first question which involves custom security realms. GlassFish supports 5 types of security realms out of the box which are sd follow: File Realm: Usefull for development and testing purposes. GlassFish provids a user/ group management interface for this realm. We can add user and groups using the administration console. When using this realm all usernames, passwords and groups are stored in a plain text file. JDBC Realm: In production environment we store user information including but not limited to username, passwords and groups in an RDBMS and then configure a JDBC realm to authenticate the given credentials againts the information stored in the datase. LDAP Realm: Sometimes we have all user details stored in an LDAP like Active Directory or Redhat Directory Server, OpenDS or Sun Java System Directory Server Enterprise Edition. Solaris Realm: This realm is used to authenticate users with a Solaris user directory. Certificate Realm: The certificate realm allows us to conduct mutual SSL authentication based on the client certificates. Sometimes our users information is stored in a silo different than all of this mentioned storages and we need to use that source for authentication and access control. For example ass...

Date: May, 18 2010
Url: http://www.java.net/blog/kalali/archive/2010/05/18/glassfish-security-book-faq-1-custom-security-realm-glassfish

Others News