glassfish « Security « JSP-Servlet Q&A





1. Glassfish Security: Role changes should take effect immediately    stackoverflow.com

I'm using a JDBC realm for authentication and authorization. When I remove a role from a user in the DB, the changes are not reflected immediately in the application, only at ...

2. GF3.1.1 JSP Project - WARNING: WebappClassLoader.findClassInternal(com.company.utils.Utils) security exception: access denied    java.net

I am working with Netbeans 7.0.1 and Glassfish 3.1.1. I am bringing an old product of many JSPs into the GF 3.1.1 realm and out of necessity it must remain a JSP project (for now). After working hard to combine these into one NB 7.0.1 project I build the project and deploy it.

3. Security Identity Propogation for Servlet with @RunAs    java.net

On Glassfish 3.1 b43. I have two applications, an EAR with EJB modules, and a separate WAR module. When setting up security, both the EAR and the WAR use the same realm. Authenticated User subjects are propagated from the WAR to the EAR as expected. In an EJB, I can access the caller principal and check is caller in role. Now ...

4. Stopping System.exit() in JSP with Security Manager in GF 3.0.1?    java.net

Hi, Quick question.. just for fun I made a JSP page with a System.exit(0) and knew it would kill glassfish. So, I restarted it and then turned on the Security Manager in the Security settings in the admin page. I restarted the server and tried the page again and the same thing happened..dead server. I expected a Access violation or something ...

6. How to Config Servlet with SSL on GlassFish    java.net

you can configure web.xml such that ssl will be used in different ways. if you define a user-data-constraint, ssl will be used to encrypt the trafffic between your browser and the server. You can also configure auth-contraint elements to require user authentication and authorization for corresponding patterns. You can also configiure CLIENT_CERT as the auth method in login-config; such that the ...