第2章 管理インターフェイスとアプリケーションのセキュリティー保護

手順

1. http-authentication-factory または sasl-authentication-factory を作成します。

   • http-authentication-factory を作成します。

     構文

     /subsystem=elytron/http-authentication-factory=<authentication_factory_name>:add(http-server-mechanism-factory=global, security-domain=<security_domain_name>, mechanism-configurations=[{mechanism-name=<mechanism-name>, mechanism-realm-configurations=[{realm-name=<realm_name>}]}])

     Copy to Clipboard Toggle word wrap

     例

     /subsystem=elytron/http-authentication-factory=exampleAuthenticationFactory:add(http-server-mechanism-factory=global, security-domain=exampleSecurityDomain, mechanism-configurations=[{mechanism-name=BASIC, mechanism-realm-configurations=[{realm-name=exampleSecurityRealm}]}])
     {"outcome" => "success"}

     Copy to Clipboard Toggle word wrap

   • sasl-authentication-factory を作成します。

     構文

     /subsystem=elytron/sasl-authentication-factory=<sasl_authentication_factory_name>:add(security-domain=<security_domain>,sasl-server-factory=configured,mechanism-configurations=[{mechanism-name=<mechanism-name>,mechanism-realm-configurations=[{realm-name=<realm_name>}]}])

     Copy to Clipboard Toggle word wrap

     例

     /subsystem=elytron/sasl-authentication-factory=exampleSaslAuthenticationFactory:add(security-domain=exampleSecurityDomain,sasl-server-factory=configured,mechanism-configurations=[{mechanism-name=PLAIN,mechanism-realm-configurations=[{realm-name=exampleSecurityRealm}]}])
     {"outcome" => "success"}

     Copy to Clipboard Toggle word wrap

2. 管理インターフェイスを更新します。

   • http-authentication-factory を使用して管理コンソールを保護します。

     構文

     /core-service=management/management-interface=http-interface:write-attribute(name=http-authentication-factory, value=<authentication_factory_name>)

     Copy to Clipboard Toggle word wrap

     例

     /core-service=management/management-interface=http-interface:write-attribute(name=http-authentication-factory, value=exampleAuthenticationFactory)
     {
         "outcome" => "success",
         "response-headers" => {
             "operation-requires-reload" => true,
             "process-state" => "reload-required"
         }
     }

     Copy to Clipboard Toggle word wrap

   • sasl-authentication-factory を使用して管理 CLI を保護します。

     構文

     /core-service=management/management-interface=http-interface:write-attribute(name=http-upgrade,value={enabled=true,sasl-authentication-factory=<sasl_authentication_factory>})

     Copy to Clipboard Toggle word wrap

     例

     /core-service=management/management-interface=http-interface:write-attribute(name=http-upgrade,value={enabled=true,sasl-authentication-factory=exampleSaslAuthenticationFactory})
     {
         "outcome" => "success",
         "response-headers" => {
             "operation-requires-reload" => true,
             "process-state" => "reload-required"
         }
     }

     Copy to Clipboard Toggle word wrap

3. サーバーをリロードします。

   reload

   Copy to Clipboard Toggle word wrap