[jboss-cvs] JBossAS SVN: r74576 - in projects/security/security-negotiation/trunk/docs/userguide/en: images and 1 other directories.
jboss-cvs-commits at lists.jboss.org
jboss-cvs-commits at lists.jboss.org
Sun Jun 15 11:27:01 EDT 2008
Author: darran.lofthouse at jboss.com
Date: 2008-06-15 11:27:00 -0400 (Sun, 15 Jun 2008)
New Revision: 74576
Added:
projects/security/security-negotiation/trunk/docs/userguide/en/images/
projects/security/security-negotiation/trunk/docs/userguide/en/images/ie-internet-options.png
projects/security/security-negotiation/trunk/docs/userguide/en/images/ie-local-intranet-added.png
projects/security/security-negotiation/trunk/docs/userguide/en/images/ie-local-intranet.png
projects/security/security-negotiation/trunk/docs/userguide/en/images/ie-tools-internet-options.png
projects/security/security-negotiation/trunk/docs/userguide/en/images/negotiation-toolkit.png
Modified:
projects/security/security-negotiation/trunk/docs/userguide/en/modules/general_installation.xml
projects/security/security-negotiation/trunk/docs/userguide/en/modules/internet_explorer.xml
projects/security/security-negotiation/trunk/docs/userguide/en/modules/microsoft_ad.xml
Log:
[SECURITY-154] Added Internet Explorer configuration.
Added: projects/security/security-negotiation/trunk/docs/userguide/en/images/ie-internet-options.png
===================================================================
(Binary files differ)
Property changes on: projects/security/security-negotiation/trunk/docs/userguide/en/images/ie-internet-options.png
___________________________________________________________________
Name: svn:executable
+ *
Name: svn:mime-type
+ application/octet-stream
Added: projects/security/security-negotiation/trunk/docs/userguide/en/images/ie-local-intranet-added.png
===================================================================
(Binary files differ)
Property changes on: projects/security/security-negotiation/trunk/docs/userguide/en/images/ie-local-intranet-added.png
___________________________________________________________________
Name: svn:executable
+ *
Name: svn:mime-type
+ application/octet-stream
Added: projects/security/security-negotiation/trunk/docs/userguide/en/images/ie-local-intranet.png
===================================================================
(Binary files differ)
Property changes on: projects/security/security-negotiation/trunk/docs/userguide/en/images/ie-local-intranet.png
___________________________________________________________________
Name: svn:executable
+ *
Name: svn:mime-type
+ application/octet-stream
Added: projects/security/security-negotiation/trunk/docs/userguide/en/images/ie-tools-internet-options.png
===================================================================
(Binary files differ)
Property changes on: projects/security/security-negotiation/trunk/docs/userguide/en/images/ie-tools-internet-options.png
___________________________________________________________________
Name: svn:executable
+ *
Name: svn:mime-type
+ application/octet-stream
Added: projects/security/security-negotiation/trunk/docs/userguide/en/images/negotiation-toolkit.png
===================================================================
(Binary files differ)
Property changes on: projects/security/security-negotiation/trunk/docs/userguide/en/images/negotiation-toolkit.png
___________________________________________________________________
Name: svn:executable
+ *
Name: svn:mime-type
+ application/octet-stream
Modified: projects/security/security-negotiation/trunk/docs/userguide/en/modules/general_installation.xml
===================================================================
--- projects/security/security-negotiation/trunk/docs/userguide/en/modules/general_installation.xml 2008-06-15 14:50:44 UTC (rev 74575)
+++ projects/security/security-negotiation/trunk/docs/userguide/en/modules/general_installation.xml 2008-06-15 15:27:00 UTC (rev 74576)
@@ -5,6 +5,8 @@
<title>General Installation</title>
<section>
+ <title>Introduction</title>
+
<para>
This section of the document describes the general installation
process of the negotiation module, the following chapters in this
@@ -47,21 +49,19 @@
<para>
The authenticator is contained within a single jar
'jboss-negotiation.jar', this jar should be placed in the
- following location: -
+ following location -
+ <code>{jboss.home}/server/{configuration}/lib/</code>
</para>
- <para>{jboss.home}/server/{configuration}/lib</para>
-
<para>
After copying the jar to the above location you will need to add
- the authenticator itself to the following descriptor: -
+ the authenticator itself to the following descriptor -
+ <code>
+ {jboss.home}/server/{configuration}/deploy/jboss-web.deployer/META-INF/jboss-service.xml
+ </code>
</para>
<para>
- {jboss.home}/server/{configuration}/deploy/jboss-web.deployer/META-INF/jboss-service.xml
- </para>
-
- <para>
Within this descriptor you should see a set of authenticators,
to add SPNEGO you should add the following entry: -
</para>
@@ -70,13 +70,18 @@
<![CDATA[
<java:property>
<java:key>SPNEGO</java:key>
- <java:value>
- org.jboss.security.negotiation.spnego.SPNEGOAuthenticator
- </java:value>
+ <java:value>org.jboss.security.negotiation.spnego.SPNEGOAuthenticator</java:value>
</java:property>
]]>
</programlisting>
+
+ <tip>
+ Ensure that there is no white space around the classname as this
+ can cause the deployment to fail.
+ </tip>
+
+
<para>
The key can be any value you choose, however using SPNEGO is
recommended to be consistent with the rest of this document.
@@ -462,5 +467,28 @@
http://testserver.kerberos.jboss.org:8080/jboss-negotiation-toolkit
</ulink>
</para>
+
+ <section>
+ <title>Front Page</title>
+
+ <para>
+ The main page for the negotion toolkit contains links to the
+ various utilities within the toolkit that can be used to test
+ your installation. It is recommended that you follow the links
+ from top to bottom to get the stages working.
+ </para>
+
+ <figure id="negotiation-toolkit-front">
+ <title>Negotiation Toolkit Front Page</title>
+ <mediaobject>
+ <imageobject>
+ <imagedata align="center"
+ fileref="images/negotiation-toolkit.png" />
+ </imageobject>
+ </mediaobject>
+ </figure>
+
+ </section>
+
</section>
</chapter>
Modified: projects/security/security-negotiation/trunk/docs/userguide/en/modules/internet_explorer.xml
===================================================================
--- projects/security/security-negotiation/trunk/docs/userguide/en/modules/internet_explorer.xml 2008-06-15 14:50:44 UTC (rev 74575)
+++ projects/security/security-negotiation/trunk/docs/userguide/en/modules/internet_explorer.xml 2008-06-15 15:27:00 UTC (rev 74576)
@@ -5,8 +5,82 @@
<title>Microsoft Internet Explorer</title>
<section>
- <title></title>
+ <title>Introduction</title>
- <para></para>
+ <para>
+ This chapter describes the configuration required to enable SPNEGO
+ negotiation in Internet Explorer. These instructions are prepared
+ against Internet Explorer 6 on Microsoft Windows 2003
+ </para>
</section>
+
+ <section>
+ <title>Local Intranet</title>
+
+ <para>
+ By default Internet Explorer only performs SPNEGO authentication
+ against sites in the 'Local intranet' zone.
+ </para>
+
+ <para>Open the 'Internet Options' from the 'Tools' menu: -</para>
+
+ <figure id="ie-tools-internet-options">
+ <title>Tools -> Internet Options</title>
+ <mediaobject>
+ <imageobject>
+ <imagedata align="center"
+ fileref="images/ie-tools-internet-options.png" />
+ </imageobject>
+ </mediaobject>
+ </figure>
+
+ <para>And select the 'Security' tab: -</para>
+
+ <figure id="ie-internet-options">
+ <title>Internet Options</title>
+ <mediaobject>
+ <imageobject>
+ <imagedata align="center"
+ fileref="images/ie-internet-options.png" />
+ </imageobject>
+ </mediaobject>
+ </figure>
+
+ <para>
+ Ensure that 'Local intranet' is highlighted and click the 'Sites'
+ command button.
+ </para>
+
+ <figure id="ie-local-intranet">
+ <title>Local Intranet</title>
+ <mediaobject>
+ <imageobject>
+ <imagedata align="center"
+ fileref="images/ie-local-intranet.png" />
+ </imageobject>
+ </mediaobject>
+ </figure>
+
+ <para>
+ Enter the URL of the server hosting the JBoss installation and
+ click on 'Add'.
+ </para>
+
+ <figure id="ie-local-intranet-added">
+ <title>Local Intranet - Site Added</title>
+ <mediaobject>
+ <imageobject>
+ <imagedata align="center"
+ fileref="images/ie-local-intranet-added.png" />
+ </imageobject>
+ </mediaobject>
+ </figure>
+
+ <para>
+ This should now be sufficient for Internet Explorer to trust the
+ JBoss installation and to perform the SPNEGO negotiation. This can
+ be tested by using the 'Basic Negotiation' section of the
+ Negotiation Toolkit web application.
+ </para>
+ </section>
</chapter>
\ No newline at end of file
Modified: projects/security/security-negotiation/trunk/docs/userguide/en/modules/microsoft_ad.xml
===================================================================
--- projects/security/security-negotiation/trunk/docs/userguide/en/modules/microsoft_ad.xml 2008-06-15 14:50:44 UTC (rev 74575)
+++ projects/security/security-negotiation/trunk/docs/userguide/en/modules/microsoft_ad.xml 2008-06-15 15:27:00 UTC (rev 74576)
@@ -5,8 +5,14 @@
<title>Microsoft Active Directory</title>
<section>
- <title></title>
+ <title>Introduction</title>
- <para>How to add a user to AD and export the keytab.</para>
+ <para>
+ This chapter describes the steps required to configure the
+ authenticator which are specific to Windows, these instructions
+ are prepared against Windows 2003.
+ </para>
+
+
</section>
</chapter>
\ No newline at end of file
More information about the jboss-cvs-commits
mailing list