Lesson 5 (Glassfish Security) Flashcards
What is the default-config in Glassfish? (glassfish admin)
Template config, which you can copy to create server configs.
What is a server-config in Glassfish? (glassfish admin)
Server configs are configurations that are used for the server.
What are http listeners?
For each server you can define HTTP listeners.
What can you do with http listeners?
Define security settings, port numbers etc.
What is a glassfish realm? (3)
A security policy domain.
What can glassfish realms do with user certificates?
A file with certificates of authenticated users
What is a glassfish filerealm?
An encrypted file with usernames and passwords (fileRealm)
What is a glassfish jdbc (database) realm?
database with usernames and passwords (jdbcRealm)
How can a web app be secured based on groups and roles?
Based on the glassfish groups/roles, mapped in the glassfish-web.xml per application.
How can glassfish ssl be enabled?
By enabling SSL in a http listener. Cipher suites can be added. The server certificates are always added in the keystore file (keystore.jks)
How can certificates be added to the glassfish keystore?
Through the command line tool (keytool) from jks you can add or change certificates in the keystore.jks file. (bin directory)
How does the server validate certificates?
It contains the cacerts file, that holds the CA-certificates.
Sample of role mapping in glassfish-web.xml
> security-role-mapping>
>role-name>expert >role-name>
>group-name>group1 >group-name>
security-role-mapping>
