Security

Use the Security page to set security properties for the Enterprise Server.

The Security page contains the following options.

Security Manager

If this option is selected, the security manager for the domain is enabled.

When this option is enabled, a JVM option, -Djava.security.manager, will be added to the JVM setting of the Enterprise Server. See To Configure the JVM Options. You must restart the server to enable this change.

Ensure that you have granted correct permissions for all applications. You can turn off the security manger to enhance performance.

This option is disabled by default.

Audit Logging

If this option is enabled, the server will load and run all the audit modules specified in the Audit Modules setting. If the option is disabled, the server does not access audit modules. This option is disabled by default.

Default Realm

The active (default) realm that the server uses for authentication. Applications use this realm unless their deployment descriptor specifies a different realm. All configured realms appear in the list. The default value is file.

Default Principal

Specifies the default user name. The server uses this user name when no other principal is provided. If you type a value in this field, type the corresponding password in the Default Principal Password field.

This attribute is not required for normal server operation.

Default Principal Password

Password of the default principal specified in the Default Principal field. This attribute is not required for normal server operation.

Audit Modules

List of audit module provider classes, delimited by commas. A module listed here must already be configured. If Audit Logging is enabled, this field must list audit modules. By default, the server uses an audit module named default. For information on creating new audit modules, see To Create an Audit Module.

Default Principal To Role Mapping Enabled

If this option is selected, default principal-to-role mapping is applied to applications that do not have an application-specific mapping.

Mapped Principal Class

Specifies a custom implementation of the java.security.Principal class used in the default principal-to-role mapping.

Additional Properties

Additional security properties for the server.

Valid properties are dependent on the type of realm selected in the Default Realm field and are typically specified when you edit a realm. For details, see the following topics:

Related Tasks
Related asadmin Commands

None.