4.3. The JaasSecurityDomain MBean
The
org.jboss.security.plugins.JaasSecurityDomain is an extension of JaasSecurityManager that adds the notion of a KeyStore, a JSSE KeyManagerFactory and a TrustManagerFactory for supporting SSL and other cryptographic use cases. The additional configurable attributes of the JaasSecurityDomain include:
- KeyStoreType
- The type of the
KeyStoreimplementation. This is the type argument passed to thejava.security.KeyStore.getInstance(String type)factory method. The default isJKS. - KeyStoreURL
- A URL to the location of the
KeyStoredatabase. This is used to obtain anInputStreamto initialize theKeyStore. If the string does not contain a name/value URL, the value is treated as a file. - KeyStorePass
- The password associated with the
KeyStoredatabase contents. TheKeyStorePassis also used in combination with theSaltandIterationCountattributes to create a PBE secret key used with the encode/decode operations. TheKeyStorePassattribute value format is one of the following:- The plain text password for the
KeyStore. ThetoCharArray()value of the string is used without any manipulation. - A command to execute to obtain the plaintext password. The format is
{EXT}...where the...is the exact command line that will be passed to theRuntime.exec(String)method to execute a platform-specific command. The first line of the command output is used as the password. - A class to create to obtain the plaintext password. The format is
{CLASS}classname[:ctorarg]where the[:ctorarg]is an optional string that will be passed to the constructor when instantiating theclassname. The password is obtained from classname by invoking atoCharArray()method if found, otherwise, thetoString()method is used.
- Salt
- The
PBEParameterSpecsalt value. - IterationCount
- The
PBEParameterSpeciteration count value. - TrustStoreType
- The type of the
TrustStoreimplementation. This is the type argument passed to thejava.security.KeyStore.getInstance(String type)factory method. The default isJKS. - TrustStoreURL
- A URL to the location of the
TrustStoredatabase. This is used to obtain anInputStreamto initialize theKeyStore. If the string is not a value URL, it is treated as a file. - TrustStorePass
- The password associated with the trust store database contents. The
TrustStorePassis a simple password and does not have the same configuration options as theKeyStorePass. - ManagerServiceName
- Sets the JMX object name string of the security manager service MBean. This is used to register the defaults to register the
JaasSecurityDomainas a the security manager underjava:/jaas/<domain>where<domain>is the name passed to the MBean constructor. The name defaults tojboss.security:service=JaasSecurityManager.
