2장. 관리 인터페이스 및 애플리케이션 보안

프로세스

1. http-authentication-factory 또는 sasl-authentication-factory 를 만듭니다.

   • http-authentication-factory 를 생성합니다.

     구문

     /subsystem=elytron/http-authentication-factory=<authentication_factory_name>:add(http-server-mechanism-factory=global, security-domain=<security_domain_name>, mechanism-configurations=[{mechanism-name=<mechanism-name>, mechanism-realm-configurations=[{realm-name=<realm_name>}]}])

     Copy to Clipboard Toggle word wrap

     예제

     /subsystem=elytron/http-authentication-factory=exampleAuthenticationFactory:add(http-server-mechanism-factory=global, security-domain=exampleSecurityDomain, mechanism-configurations=[{mechanism-name=BASIC, mechanism-realm-configurations=[{realm-name=exampleSecurityRealm}]}])
     {"outcome" => "success"}

     Copy to Clipboard Toggle word wrap

   • sasl-authentication-factory 를 만듭니다.

     구문

     /subsystem=elytron/sasl-authentication-factory=<sasl_authentication_factory_name>:add(security-domain=<security_domain>,sasl-server-factory=configured,mechanism-configurations=[{mechanism-name=<mechanism-name>,mechanism-realm-configurations=[{realm-name=<realm_name>}]}])

     Copy to Clipboard Toggle word wrap

     예제

     /subsystem=elytron/sasl-authentication-factory=exampleSaslAuthenticationFactory:add(security-domain=exampleSecurityDomain,sasl-server-factory=configured,mechanism-configurations=[{mechanism-name=PLAIN,mechanism-realm-configurations=[{realm-name=exampleSecurityRealm}]}])
     {"outcome" => "success"}

     Copy to Clipboard Toggle word wrap

2. 관리 인터페이스를 업데이트합니다.

   • http-authentication-factory 를 사용하여 관리 콘솔을 보호합니다.

     구문

     /core-service=management/management-interface=http-interface:write-attribute(name=http-authentication-factory, value=<authentication_factory_name>)

     Copy to Clipboard Toggle word wrap

     예제

     /core-service=management/management-interface=http-interface:write-attribute(name=http-authentication-factory, value=exampleAuthenticationFactory)
     {
         "outcome" => "success",
         "response-headers" => {
             "operation-requires-reload" => true,
             "process-state" => "reload-required"
         }
     }

     Copy to Clipboard Toggle word wrap

   • sasl-authentication-factory 를 사용하여 관리 CLI를 보호합니다.

     구문

     /core-service=management/management-interface=http-interface:write-attribute(name=http-upgrade,value={enabled=true,sasl-authentication-factory=<sasl_authentication_factory>})

     Copy to Clipboard Toggle word wrap

     예제

     /core-service=management/management-interface=http-interface:write-attribute(name=http-upgrade,value={enabled=true,sasl-authentication-factory=exampleSaslAuthenticationFactory})
     {
         "outcome" => "success",
         "response-headers" => {
             "operation-requires-reload" => true,
             "process-state" => "reload-required"
         }
     }

     Copy to Clipboard Toggle word wrap

3. 서버를 다시 로드합니다.

   reload

   Copy to Clipboard Toggle word wrap