From teiid-commits at lists.jboss.org Tue Oct 18 11:46:01 2011
Content-Type: multipart/mixed; boundary="===============8745195230851244637=="
MIME-Version: 1.0
From: teiid-commits at lists.jboss.org
To: teiid-commits at lists.jboss.org
Subject: [teiid-commits] teiid SVN: r3558 -
branches/7.4.x/documentation/admin-guide/src/main/docbook/en-US/content.
Date: Tue, 18 Oct 2011 11:46:00 -0400
Message-ID: <201110181546.p9IFk034003637@svn01.web.mwc.hst.phx2.redhat.com>
--===============8745195230851244637==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Author: shawkins
Date: 2011-10-18 11:46:00 -0400 (Tue, 18 Oct 2011)
New Revision: 3558
Modified:
branches/7.4.x/documentation/admin-guide/src/main/docbook/en-US/content/=
security.xml
Log:
SOA-3448 fixing programlisting whitespace
Modified: branches/7.4.x/documentation/admin-guide/src/main/docbook/en-US/c=
ontent/security.xml
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
--- branches/7.4.x/documentation/admin-guide/src/main/docbook/en-US/content=
/security.xml 2011-10-18 10:52:08 UTC (rev 3557)
+++ branches/7.4.x/documentation/admin-guide/src/main/docbook/en-US/content=
/security.xml 2011-10-18 15:46:00 UTC (rev 3558)
@@ -115,22 +115,20 @@
Example user.properties file
+# username=3Dpassword
+
+fred=3Dpassword
+george=3Dpassword...]]>
=
JAAS role assignments are stored in the <profile>=
;conf/props/teiid-security-roles.properties file.
Example user.properties file
+# username=3Drole1,role2,...
+
+data_role_1=3Dfred,sally
+data_role_2=3Dgeorge]]>
=
User and role names are entirely up to the needs of th=
e given deployment. For example each application team can set their own sec=
urity constraints for their VDBs, by mapping their VDB data roles to applic=
ation specific JAAS roles, e.g. app_role_1=3Duser1,user2,user3.
@@ -202,31 +200,27 @@
data source. Here is a sample configuration, this needs to=
be configured in "teiid-jboss-beans.xml" file.
=
-
-
+
+
+ =
+
+ useFirstPass
+ props/teiid-security-u=
sers.properties
+ props/teiid-security-r=
oles.properties
+
+ =
+
+ useFirstPass
+ jboss.j=
ca:service=3DLocalTxCM,name=3DDefaultDS
+
+ =
+
+]]>
=
-
- useFirstPass
- props/teiid-securi=
ty-users.properties
- props/teiid-securi=
ty-roles.properties
-
- =
-
- useFirstPass
- jbo=
ss.jca:service=3DLocalTxCM,name=3DDefaultDS
-
- =
-
- =
- ]]>
- =
In the -ds.xml file that is defined as the "managedConne=
ctionFactoryName" in the above configuration, =
you need to add the following element
=
- teiid-security
- ]]>
+ teiid-security]]>
=
In the above configuration example, in the primary login=
module "UsersRolesLoginModule" is setup to hold the =
passwords in the file, and when user logs in with password, th=
e same password will be also set on the logged in Subject after =
@@ -251,31 +245,27 @@
map to different roles. If a user has multiple roles, the firs=
t role that has the credential will be chosen.
Below find the sample configuration.
=
-
-
- =
-
- useFirstPass
- props/teiid-securi=
ty-users.properties
- props/teiid-securi=
ty-roles.properties
-
- =
-
- useFirstPass
- props/teiid-credenti=
almap.properties
- jbo=
ss.jca:service=3DLocalTxCM,name=3DDefaultDS
- =
- =
-
- =
- ]]> =
+
+
+ =
+
+ useFirstPass
+ props/teiid-security-u=
sers.properties
+ props/teiid-security-r=
oles.properties
+
+ =
+
+ useFirstPass
+ props/teiid-credentialma=
p.properties
+ jboss.j=
ca:service=3DLocalTxCM,name=3DDefaultDS
+ =
+ =
+
+]]> =
In the -ds.xml file that is defined as the "managedConne=
ctionFactoryName" in the above configuration, =
you need to add the following element
=
- teiid-security
- ]]>
+ teiid-security]]>
=
In the above configuration example, in the primary login=
module "UsersRolesLoginModule" is setup for logging in
the primary user and assign some roles. The "RoleBasedCredenti=
alMap" login module is configured to hold =
@@ -288,19 +278,17 @@
password in the file defined by the "credentialMap" property,=
and define following properties in =
the "RoleBasedCredentialMap" login module.
=
-
- useFirstPass
- props/teiid-credenti=
almap.properties
- jbo=
ss.jca:service=3DLocalTxCM,name=3DDefaultDS
- =
-
- PBEWithMD5AndDES
- testPBEIdentityLoginModul=
e
- abcdefgh
- 19
- =
- ]]> =
+
+ useFirstPass
+ props/teiid-credentialmap.proper=
ties
+ jboss.jca:servi=
ce=3DLocalTxCM,name=3DDefaultDS
+ =
+
+ PBEWithMD5AndDES
+ testPBEIdentityLoginModule
+ abcdefgh
+ 19
+]]> =
=
For full details about encryption of the password, pleas=
e follow this =
docume=
nt's =
--===============8745195230851244637==--