[jboss-cvs] JBossAS SVN: r70307 - projects/docs/trunk/AS_4/Server_Configuration_Guide/ja-JP.
jboss-cvs-commits at lists.jboss.org
jboss-cvs-commits at lists.jboss.org
Mon Mar 3 03:33:42 EST 2008
Author: noriko
Date: 2008-03-03 03:33:42 -0500 (Mon, 03 Mar 2008)
New Revision: 70307
Modified:
projects/docs/trunk/AS_4/Server_Configuration_Guide/ja-JP/J2EE_Security_On_JBOSS.po
Log:
initial translation completed
Modified: projects/docs/trunk/AS_4/Server_Configuration_Guide/ja-JP/J2EE_Security_On_JBOSS.po
===================================================================
--- projects/docs/trunk/AS_4/Server_Configuration_Guide/ja-JP/J2EE_Security_On_JBOSS.po 2008-03-03 05:55:50 UTC (rev 70306)
+++ projects/docs/trunk/AS_4/Server_Configuration_Guide/ja-JP/J2EE_Security_On_JBOSS.po 2008-03-03 08:33:42 UTC (rev 70307)
@@ -1,34 +1,38 @@
+# translation of J2EE_Security_On_JBOSS.po to Japanese
# Language /tmp/mike/JBEAP420/JBAS translations for JBEAP package.
-# Copyright (C) 2007 Free Software Foundation, Inc.
+# Copyright (C) 2007, 2008 Free Software Foundation, Inc.
+#
# Automatically generated, 2007.
-#
+# Noriko Mizumoto <noriko at redhat.com>, 2008.
msgid ""
msgstr ""
-"Project-Id-Version: JBEAP 420\n"
+"Project-Id-Version: J2EE_Security_On_JBOSS\n"
"Report-Msgid-Bugs-To: http://bugs.kde.org\n"
"POT-Creation-Date: 2007-11-05 06:01+0000\n"
-"PO-Revision-Date: 2001-02-09 01:25+0100\n"
-"Last-Translator: Automatically generated\n"
-"Language-Team: none\n"
+"PO-Revision-Date: 2008-03-03 18:26+1000\n"
+"Last-Translator: Noriko Mizumoto <noriko at redhat.com>\n"
+"Language-Team: Japanese <fedora-trans-ja at redhat.com>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:6
#, no-c-format
msgid "Security on JBoss"
-msgstr ""
+msgstr "JBoss ã§ã®ã‚»ã‚ュリティã«ã¤ã„ã¦"
#. Tag: subtitle
#: J2EE_Security_On_JBOSS.xml:7
#, no-c-format
msgid "J2EE Security Configuration and Architecture"
-msgstr ""
+msgstr "J2EE ã®ã‚»ã‚ュリティè¨å®šã¨ã‚¢ãƒ¼ã‚テクãƒãƒ£"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:8
#, no-c-format
+#, fuzzy
msgid ""
"Security is a fundamental part of any enterprise application. You need to be "
"able to restrict who is allowed to access your applications and control what "
@@ -45,17 +49,18 @@
"getting into the JBoss security implementation details, we will review EJB "
"and servlet specification security models, as well as JAAS to establish the "
"foundation for these details."
-msgstr ""
+msgstr "ã„ãšã‚Œã®ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ライズアプリケーションã«ã¨ã£ã¦ã‚‚æ¬ ã‹ã›ãªã„ã®ãŒã‚»ã‚ュリティã§ã™ã€‚ アプリケーションã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’許å¯ã™ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’制é™ã—〠アプリケーションユーザーãŒå®Ÿè¡Œã§ãã‚‹æ“作を制御ã§ããªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“。 J2EE 仕様㯠EJB ãŠã‚ˆã³ ウェブコンãƒãƒ¼ãƒãƒ³ãƒˆç”¨ã®ã‚·ãƒ³ãƒ—ルãªãƒãƒ¼ãƒ«ãƒ™ãƒ¼ã‚¹ã®ã‚»ã‚ュリティモデルを定義ã—ã¦ã„ã¾ã™ã€‚ ã‚»ã‚ュリティ関連を処ç†ã™ã‚‹ JBoss コンãƒãƒ¼ãƒãƒ³ãƒˆãƒ•ãƒ¬ãƒ¼ãƒ ワーク㯠JBossSX 拡張フレームワークã«ãªã‚Šã¾ã™ã€‚ JBossSX ã‚»ã‚ュリティ拡張ã¯ãƒãƒ¼ãƒ«ãƒ™ãƒ¼ã‚¹ã®å®£è¨€åž‹ J2EE ã‚»ã‚ュリティモデルãŠã‚ˆã³ã‚»ã‚ュリティプãƒã‚シ層経由ã®ã‚«ã‚¹ã‚¿ãƒ ã‚»ã‚ュリティã®çµ±åˆã®ä¸¡æ–¹ã«å¯¾ã™ã‚‹ã‚µãƒãƒ¼ãƒˆã‚’æä¾›ã—ã¾ã™ã€‚宣言型セã‚ュリティモデルã®ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆå®Ÿè£…㯠JAAS (Java Authentication and Authorization Service) ãƒã!
‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¨ã‚µãƒ–ジェクトをベースã¨ã—ã¦ã„ã¾ã™ã€‚ ã‚»ã‚ュリティプãƒã‚シ層ã«ã‚ˆã‚Š"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:12
#, no-c-format
msgid "J2EE Declarative Security Overview"
-msgstr ""
+msgstr "J2EE 宣言型セã‚ュリティ概è¦"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:13
#, no-c-format
+#, fuzzy
msgid ""
"The J2EE security model declarative in that you describe the security roles "
"and permissions in a standard XML descriptor rather than embedding security "
@@ -66,7 +71,7 @@
"account. The security requirements, roles and permissions will vary "
"independently of how you access the bank account, based on what bank is "
"managing the account, where the ATM is located, and so on."
-msgstr ""
+msgstr "ビジãƒã‚¹ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã«ã‚»ã‚ュリティを組ã¿è¾¼ã‚€æ–¹æ³•ã§ã¯ãªã〠標準㮠XML 記述åã«ã‚»ã‚ュリティーãƒãƒ¼ãƒ«ãŠã‚ˆã³ãƒ‘ーミッションを記述ã™ã‚‹ã¨ã„ã†ç‚¹ã«ãŠã„㦠J2EE ã‚»ã‚ュリティモデル"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:16
@@ -78,13 +83,13 @@
"using the <literal>ejb-jar.xml</literal> and <literal>web.xml</literal> "
"deployment descriptors. The following sections look at the purpose and usage "
"of the various security elements."
-msgstr ""
+msgstr "J2EE アプリケーションã®å®‰å…¨åŒ–ã¯ã€ 標準㮠J2EE デプãƒã‚¤ãƒ¡ãƒ³ãƒˆè¨˜è¿°åを使ã£ãŸã‚¢ãƒ—リケーションセã‚ュリティè¦ä»¶ã®è©³ç´°ã«åŸºã¥ã„ã¦ã„ã¾ã™ã€‚ <literal>ejb-jar.xml</literal> ãŠã‚ˆã³ <literal>web.xml</literal> デプãƒã‚¤ãƒ¡ãƒ³ãƒˆè¨˜è¿°åを使ã£ã¦ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ライズアプリケーション内ã§ã® EJB やウェブコンãƒãƒ¼ãƒãƒ³ãƒˆã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã®å®‰å…¨åŒ–を図りã¾ã™ã€‚次ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã§ã¯å„種セã‚ュリティエレメントã®ç›®çš„ã¨ä½¿ã„æ–¹ã«ã¤ã„ã¦è¦‹ã¦ã„ãã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:20
#, no-c-format
msgid "Security References"
-msgstr ""
+msgstr "ã‚»ã‚ュリティå‚ç…§"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:21
@@ -104,12 +109,16 @@
"be defined by using the role-based <literal>method-permissions</literal> "
"elements."
msgstr ""
+"EJB ãŠã‚ˆã³ã‚µãƒ¼ãƒ–レットã¯ã„ãšã‚Œã‚‚ <xref linkend=\"Security_References-"
+"The_security_role_ref_element\"/> ã§ç¤ºã™ã‚ˆã†ã« 1 ã¤ã¾ãŸã¯è¤‡æ•°ã® <literal>security-role-ref</"
+"literal> エレメントを宣言ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã“ã®ã‚¨ãƒ¬ãƒ¡ãƒ³ãƒˆã¯ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆãŒ<literal>isCallerInRole(String)</literal> メソッドã«å¯¾ã—㦠<literal>role-name</literal> 値を引数ã¨ã—ã¦ä½¿ç”¨ã—ã¦ã„ã‚‹ã“ã¨ã‚’宣言ã—ã¦ã„ã¾ã™ã€‚ <literal>isCallerInRole</literal> メソッドを使用ã™ã‚‹ã“ã¨ã§ã€ コンãƒãƒ¼ãƒãƒ³ãƒˆã¯å‘¼ã³å‡ºã—å´ãŒ <literal>security-role-ref/"
+"role-name</literal> エレメントã§å®£è¨€ã•ã‚Œã¦ã„ã‚‹ãƒãƒ¼ãƒ«ã«ã„ã‚‹ã‹ã©ã†ã‹ã‚’確èªã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ <literal>role-name</literal> エレメント値㯠<literal>role-link</literal> エレメントを使ã£ã¦ <literal>security-role</literal> エレメントã«ãƒªãƒ³ã‚¯ã—ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“。 <literal>isCallerInRole</literal> ã®ä¸€èˆ¬çš„ãªä½¿ã„æ–¹ã¯ã€ ãƒãƒ¼ãƒ«ãƒ™ãƒ¼ã‚¹ã® <literal>method-permissions</literal> エレメントを使ã£ã¦å®šç¾©ã§ããªã„ã‚»ã‚ュリティãƒã‚§ãƒƒã‚¯ã‚’è¡Œã†ã“ã¨ã§ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:25
#, no-c-format
msgid "The security-role-ref element"
-msgstr ""
+msgstr "security-role-ref エレメント"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:32
@@ -117,7 +126,7 @@
msgid ""
"shows the use of <literal>security-role-ref</literal> in an <literal>ejb-jar."
"xml</literal>."
-msgstr ""
+msgstr "<literal>ejb-jar.xml</literal> ã® <literal>security-role-ref</literal> ã®ä½¿ã„方を示ã—ã¦ã„ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:35
@@ -125,7 +134,7 @@
msgid ""
"An ejb-jar.xml descriptor fragment that illustrates the security-role-ref "
"element usage."
-msgstr ""
+msgstr "security-role-ref エレメントã®ä½¿ã„方を示㙠ejb-jar.xml 記述åã®ä¸€éƒ¨ã§ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:36
@@ -146,6 +155,20 @@
" ...\n"
"</ejb-jar>"
msgstr ""
+"<!-- A sample ejb-jar.xml fragment -->\n"
+"<ejb-jar>\n"
+" <enterprise-beans>\n"
+" <session>\n"
+" <ejb-name>ASessionBean</ejb-name>\n"
+" ...\n"
+" <security-role-ref>\n"
+" <role-name>TheRoleICheck</role-name>\n"
+" <role-link>TheApplicationRole</role-link>\n"
+" </security-role-ref>\n"
+" </session>\n"
+" </enterprise-beans>\n"
+" ...\n"
+"</ejb-jar>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:37
@@ -153,7 +176,7 @@
msgid ""
"shows the use of <literal>security-role-ref</literal> in a <literal>web.xml</"
"literal>."
-msgstr ""
+msgstr "<literal>web.xml</literal> ã® <literal>security-role-ref</literal> ã®ä½¿ã„方を示ã—ã¦ã„ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:40
@@ -161,7 +184,7 @@
msgid ""
"An example web.xml descriptor fragment that illustrates the security-role-"
"ref element usage."
-msgstr ""
+msgstr "security-role-ref エレメントã®ä½¿ã„方を示ã™ã‚µãƒ³ãƒ—ル web.xml 記述åã®ä¸€éƒ¨ã§ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:41
@@ -179,12 +202,23 @@
" ...\n"
"</web-app>"
msgstr ""
+"<web-app>\n"
+" <servlet>\n"
+" <servlet-name>AServlet</servlet-name>\n"
+" ...\n"
+" <security-role-ref>\n"
+" <role-name>TheServletRole</role-name>\n"
+" <role-link>TheApplicationRole</role-link>\n"
+" </security-role-ref>\n"
+" </servlet>\n"
+" ...\n"
+"</web-app>"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:46
#, no-c-format
msgid "Security Identity"
-msgstr ""
+msgstr "ã‚»ã‚ュリティ ID"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:47
@@ -193,13 +227,13 @@
"An EJB has the capability to specify what identity an EJB should use when it "
"invokes methods on other components using the <literal>security-identity</"
"literal> element, shown in"
-msgstr ""
+msgstr "EJB ã«ã¯ <literal>security-identity</literal> エレメントを使ã£ã¦ä»–ã®ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã§ãƒ¡ã‚½ãƒƒãƒ‰ã‚’呼ã³å‡ºã™å ´åˆã« EJB ãŒä½¿ç”¨ã™ã¹ã ID を指定ã™ã‚‹ã“ã¨ãŒã§ãる機能ãŒã‚ã‚Šã¾ã™ã€‚ 次ã«ä¾‹ã‚’示ã—ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:51
#, no-c-format
msgid "The security-identity element"
-msgstr ""
+msgstr "security-identity エレメント"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:58
@@ -212,7 +246,7 @@
"propagated as the security identity for method invocations made by the EJB. "
"Propagation of the caller's identity is the default used in the absence "
"of an explicit <literal>security-identity</literal> element declaration."
-msgstr ""
+msgstr "呼ã³å‡ºã— ID ã¯ãã®ç¾åœ¨ã®å‘¼ã³å‡ºã—å´ã¾ãŸã¯ç‰¹å®šã®ãƒãƒ¼ãƒ«ã«ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ アプリケーションã®ã‚¢ãƒƒã‚»ãƒ³ãƒ–ラ㯠<literal>use-caller-identity</literal> åエレメントを付ã‘㦠<literal>security-identity</literal> エレメントを使用ã—ç¾åœ¨ã®å‘¼ã³å‡ºã—å´ã® ID ãŒã‚»ã‚ュリティ ID ã¨ã—㦠EJB ã«ã‚ˆã‚Šå®Ÿè¡Œã•ã‚ŒãŸãƒ¡ã‚½ãƒƒãƒ‰å‘¼ã³å‡ºã—ã«å¯¾ã—ã¦ä¼æ’ã•ã‚Œã‚‹ã‚ˆã†æŒ‡ç¤ºã—ã¾ã™ã€‚ 呼ã³å‡ºã—å´ã® ID ã®ä¼æ’ã¯æ˜Žç¤ºçš„㪠<literal>security-identity</literal> エレメント宣言ãŒãªã„å ´åˆã«ä½¿ç”¨ã•ã‚Œã‚‹ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:61
@@ -234,6 +268,8 @@
"following descriptor fragment that illustrates <literal>security-identity</"
"literal> element usage."
msgstr ""
+"代ã‚ã‚Šã«ã€ アプリケーションã®ã‚¢ãƒƒã‚»ãƒ³ãƒ–ラ㯠<literal>run-as/role-"
+"name</literal> åエレメントを使ã£ã¦ <literal>role-name</literal> 値ã§ä¸Žãˆã‚‰ã‚Œã‚‹ç‰¹å®šã®ã‚»ã‚ュリティãƒãƒ¼ãƒ«ãŒã‚»ã‚ュリティ ID ã¨ã—㦠EJB ã«ã‚ˆã‚Šå®Ÿè¡Œã•ã‚ŒãŸãƒ¡ã‚½ãƒƒãƒ‰å‘¼ã³å‡ºã—ã«å¯¾ã—ã¦ä½¿ç”¨ã•ã‚Œã‚‹ã‚ˆã†æŒ‡å®šã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚ ã“れ㯠<literal>EJBContext.getCallerPrincipal()</literal> メソッドã§è¦‹ã‚‰ã‚Œã‚‹å‘¼ã³å‡ºã—å´ã® ID を変更ã™ã‚‹ã‚‚ã®ã§ã¯ãªã„ã®ã§æ³¨æ„ã—ã¦ãã ã•ã„。 呼ã³å‡ºã—å´ã®ã‚»ã‚ュリティãƒãƒ¼ãƒ«ã¯ <literal>run-as/role-name</literal> エレメント値ã§æŒ‡å®šã•ã‚Œã‚‹å˜ä¸€ãƒãƒ¼ãƒ«ã«è¨å®šã•ã‚Œã¾ã™ã€‚ <literal>run-as</literal> エレメントã®ä½¿ã„æ–¹ã®ã²ã¨ã¤ã¨ã—ã¦ã€ 外部クライアント群ãŒå†…部 EJB ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã®ã‚’防ãã“ã¨ãŒã§ãã¾ã™ã€‚ ã“ã‚Œã¯å¤–部クライアントã«å‰²ã‚Šå½“ã¦ã‚‰ã‚ŒãŸã“ã¨ã®ãªã„ãƒãƒ¼ãƒ«ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’制é™ã™ã‚‹å†…部 EJB <literal>method-permission</literal> エレメントを割!
り当ã¦ã‚‹ã“ã¨ã«ã‚ˆã‚Šå®Ÿè¡Œã§ãã¾ã™ã€‚ 内部 EJB を使ã†å¿…è¦ãŒã‚ã‚‹ EJB ã¯åˆ¶é™ã•ã‚Œã‚‹ãƒãƒ¼ãƒ«ã«ç›¸å½“ã™ã‚‹ <literal>run-as/role-name</literal> ã§è¨å®šã—ã¾ã™ã€‚ 次ã®è¨˜è¿°åã®ä¸€éƒ¨ã¯ <literal>security-identity</literal> エレメントã®ä½¿ç”¨ä¾‹ã‚’示ã—ã¦ã„ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:64
@@ -264,10 +300,35 @@
" <!-- ... -->\n"
"</ejb-jar>"
msgstr ""
+"<!-- A sample ejb-jar.xml fragment -->\n"
+"<ejb-jar>\n"
+" <enterprise-beans>\n"
+" <session>\n"
+" <ejb-name>ASessionBean</ejb-name>\n"
+" <!-- ... -->\n"
+" <security-identity>\n"
+" <use-caller-identity/>\n"
+" </security-identity>\n"
+" </session>\n"
+" <session>\n"
+" <ejb-name>RunAsBean</ejb-name>\n"
+" <!-- ... -->\n"
+" <security-identity>\n"
+" <run-as>\n"
+" <description>A private internal role</"
+"description>\n"
+" <role-name>InternalRole</role-name>\n"
+" </run-as>\n"
+" </security-identity>\n"
+" </session>\n"
+" </enterprise-beans>\n"
+" <!-- ... -->\n"
+"</ejb-jar>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:65
#, no-c-format
+#, fuzzy
msgid ""
"When you use <literal>run-as</literal> to assign a specific role to outgoing "
"calls, JBoss associates a principal named <literal>anonymous</literal>. If "
@@ -277,6 +338,8 @@
"principal named <literal>internal</literal> with <literal>RunAsBean</"
"literal> from the prior example."
msgstr ""
+"<literal>run-as</literal> を使ã£ã¦ç‰¹å®šã®ãƒãƒ¼ãƒ«ã‚’発信コールã«å‰²ã‚Šå½“ã¦ã‚‹å ´åˆã€ JBoss 㯠<literal>anonymous</literal> ã¨ã„ã†åå‰ã® principal を関連付ã‘ã¾ã™ã€‚ ã“ã®ã‚³ãƒ¼ãƒ«ã«åˆ¥ã® principal を関連付ã‘ãŸã„å ´åˆã€ <literal>jboss.xml</literal> ファイル内㮠bean 㧠<literal>run-as-principal</literal> を関連付ã‘ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ 次ã®ä¾‹ã§ã¯ <literal>internal</literal> ã¨ã„ã†åå‰ã® principal ã‚’å‰è¿°ã®ä¾‹ã‹ã‚‰ã® <literal>RunAsBean</"
+"literal> ã«é–¢é€£ä»˜ã‘ã¦ã„ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:68
@@ -289,6 +352,12 @@
" </security-identity>\n"
"</session>"
msgstr ""
+"<session>\n"
+" <ejb-name>RunAsBean</ejb-name>\n"
+" <security-identity>\n"
+" <run-as-principal>internal</run-as-principal>\n"
+" </security-identity>\n"
+"</session>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:69
@@ -297,7 +366,7 @@
"The <literal>run-as</literal> element is also available in servlet "
"definitions in a <literal>web.xml</literal> file. The following example "
"shows how to assign the role <literal>InternalRole</literal> to a servlet:"
-msgstr ""
+msgstr "<literal>run-as</literal> エレメント㯠<literal>web.xml</literal> ファイルã®ã‚µãƒ¼ãƒ–レット定義ã§ã‚‚使用ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ 次ã®ä¾‹ã§ã¯ãƒãƒ¼ãƒ«ã‚’サーブレットã«å‰²ã‚Šå½“ã¦ã‚‹æ–¹æ³•ã«ã¤ã„ã¦ç¤ºã—ã¦ã„ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:72
@@ -311,6 +380,13 @@
" </run-as>\n"
"</servlet>"
msgstr ""
+"<servlet>\n"
+" <servlet-name>AServlet</servlet-name>\n"
+" <!-- ... -->\n"
+" <run-as> \n"
+" <role-name>InternalRole</role-name>\n"
+" </run-as>\n"
+"</servlet>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:73
@@ -322,7 +398,7 @@
"a specific principal to go along with the <literal>run-as</literal> role. "
"The following fragment shows how to associate a principal named "
"<literal>internal</literal> to the servlet in the prior example."
-msgstr ""
+msgstr "ã“ã®ã‚µãƒ¼ãƒ–レットã‹ã‚‰ã®ã‚³ãƒ¼ãƒ«ã¯ anonymous <literal>principal</literal> ã«é–¢é€£ä»˜ã‘られã¾ã™ã€‚ <literal>run-as-principal</literal> エレメントã¯ã€ <literal>run-as</literal> ãƒãƒ¼ãƒ«ã¨å…±ã«ç‰¹å®šã® principal を割り当ã¦ã‚‹ãŸã‚ <literal>jboss-web.xml</literal>ファイルã§ä½¿ç”¨ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ 次ã®ä¾‹ã§ã¯ <literal>internal</literal> ã¨ã„ã†åå‰ã® principal ã‚’å‰è¿°ã®ä¾‹ã®ã‚µãƒ¼ãƒ–レットã«é–¢é€£ä»˜ã‘る方法を示ã—ã¦ã„ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:76
@@ -333,12 +409,16 @@
" <run-as-principal>internal</run-as-principal>\n"
"</servlet>"
msgstr ""
+"<servlet>\n"
+" <servlet-name>AServlet</servlet-name>\n"
+" <run-as-principal>internal</run-as-principal>\n"
+"</servlet>"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:80
#, no-c-format
msgid "Security roles"
-msgstr ""
+msgstr "ã‚»ã‚ュリティãƒãƒ¼ãƒ«"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:81
@@ -350,7 +430,7 @@
"logical security roles by declaring <literal>security-role</literal> "
"elements. The <literal>role-name</literal> value is a logical application "
"role name like Administrator, Architect, SalesManager, etc."
-msgstr ""
+msgstr "<literal>security-role-ref</literal> ã¾ãŸã¯ <literal>security-identity</literal> エレメントã®ã„ãšã‚Œã‹ã§å‚ç…§ã•ã‚Œã‚‹ã‚»ã‚ュリティãƒãƒ¼ãƒ«åã¯ã‚¢ãƒ—リケーションã®å®£è¨€ãƒãƒ¼ãƒ«ã®ã²ã¨ã¤ã«ãƒžãƒƒãƒ”ングã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ アプリケーションアッセンブラ㯠<literal>security-role</literal> を宣言ã™ã‚‹ã“ã¨ã§è«–ç†çš„ãªã‚»ã‚ュリティãƒãƒ¼ãƒ«ã‚’定義ã—ã¾ã™ã€‚ <literal>role-name</literal> 値㯠Administrator〠Architect〠SalesManager ãªã©ã®ã‚ˆã†ã«è«–ç†ã‚¢ãƒ—リケーションãƒãƒ¼ãƒ«åã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:84
@@ -364,13 +444,13 @@
"environment. The deployment descriptor roles are application constructs with "
"application domain-specific names. For example, a banking application might "
"use role names such as BankManager, Teller, or Customer."
-msgstr ""
+msgstr "J2EE 仕様ã§ã¯ã€ デプãƒã‚¤ãƒ¡ãƒ³ãƒˆè¨˜è¿°å内ã®ã‚»ã‚ュリティãƒãƒ¼ãƒ«ã¯ã‚¢ãƒ—リケーションã®è«–ç†ã‚»ã‚ュリティビューã®å®šç¾©ã«ä½¿ç”¨ã•ã‚Œã‚‹ã“ã¨ãŒé‡è¦ã¨ãªã‚‹ãŸã‚注æ„ã™ã‚‹æ—¨ãŒè¨˜è¿°ã•ã‚Œã¦ã„ã¾ã™ã€‚ J2EE デプãƒã‚¤ãƒ¡ãƒ³ãƒˆè¨˜è¿°åã§å®šç¾©ã•ã‚Œã‚‹ãƒãƒ¼ãƒ«ã¯ç›®çš„ã®ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ライズã®ç¨¼åƒç’°å¢ƒã«å˜åœ¨ã™ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚°ãƒ«ãƒ¼ãƒ—〠ユーザー〠principal〠ãã®ä»–ã®ã‚³ãƒ³ã‚»ãƒ—トãªã©ã¨æ··åŒã—ãªã„よã†ã«ã—ã¦ãã ã•ã„。 デプãƒã‚¤ãƒ¡ãƒ³ãƒˆè¨˜è¿°åã®ãƒãƒ¼ãƒ«ã¯ã‚¢ãƒ—リケーションドメイン固有ã®åå‰ã‚’æŒã¤ã‚¢ãƒ—リケーション構æˆã«ãªã‚Šã¾ã™ã€‚ ãŸã¨ãˆã°ã€ 銀行æ¥å‹™ã‚¢ãƒ—リケーション㯠BankManager〠Teller〠Customer ãªã©ã¨ã„ã£ãŸãƒãƒ¼ãƒ«åを使用ã™ã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“。"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:88
#, no-c-format
msgid "The security-role element"
-msgstr ""
+msgstr "security-role エレメント"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:95
@@ -390,6 +470,8 @@
"> shows the usage of the <literal>security-role</literal> in an <literal>ejb-"
"jar.xml</literal> file."
msgstr ""
+"JBoss ã§ã¯ã€ <literal>security-role</literal> エレメント㯠<literal>security-role-ref/role-name</literal> 値をコンãƒãƒ¼ãƒãƒ³ãƒˆãƒãƒ¼ãƒ«ãŒå‚ç…§ã™ã‚‹è«–ç†ãƒãƒ¼ãƒ«ã«ãƒžãƒƒãƒ”ングã™ã‚‹ãŸã‚ã ã‘ã«ä½¿ç”¨ã•ã‚Œã¾ã™ã€‚ ユーザーã®å‰²ã‚Šå½“ã¦ãƒãƒ¼ãƒ«ã¯ã‚¢ãƒ—リケーションã®ã‚»ã‚ュリティ管ç†ã®å‹•çš„ãªæ©Ÿèƒ½ã§ã‚り〠JBossSX 実装ã«ã¤ã„ã¦èª¬æ˜Žã™ã‚‹éš›ã«ç†è§£ã—ã¦ã„ãã¾ã™ã€‚ JBoss ã¯ãƒ¡ã‚½ãƒƒãƒ‰ãƒ‘ーミッションã®å®£è¨€ã« <literal>security-role</literal> エレメントã®å®šç¾©ã‚’å¿…è¦ã¨ã—ã¾ã›ã‚“。 ã—ã‹ã—〠<literal>security-role</literal> エレメントã®è©³ç´°å®šç¾©ã¯è¤‡æ•°ã®ã‚¢ãƒ—リケーションサーãƒãƒ¼å…¨ä½“ã«å¯¾ã™ã‚‹ç§»æ¤æ€§ã®ç¢ºä¿ã‚„デプãƒã‚¤ãƒ¡ãƒ³ãƒˆè¨˜è¿°åã®ç®¡ç†ã¨ã„ã†ç›®çš„ã‹ã‚‰è¡Œã£ã¦ãŠã„ãŸæ–¹ãŒã‚ˆã„ã§ã—ょã†ã€‚ <xref linkend=\"Security_roles-An_ejb_jar."
+"xml_descriptor_fragment_that_illustrates_the_security_role_element_usage.\"/> ã§ã¯ã€ <literal>ejb-jar.xml</literal> ファイル内㮠<literal>security-role</literal> ã®ä½¿ã„方を示ã—ã¦ã„ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:98
@@ -397,7 +479,7 @@
msgid ""
"An ejb-jar.xml descriptor fragment that illustrates the security-role "
"element usage."
-msgstr ""
+msgstr "security-role エレメントã®ä½¿ã„方を示㙠ejb-jar.xml 記述åã®ä¸€éƒ¨ã§ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:99
@@ -415,6 +497,17 @@
" </assembly-descriptor>\n"
"</ejb-jar>"
msgstr ""
+"<!-- A sample ejb-jar.xml fragment -->\n"
+"<ejb-jar>\n"
+" <!-- ... -->\n"
+" <assembly-descriptor>\n"
+" <security-role>\n"
+" <description>The single application role</"
+"description>\n"
+" <role-name>TheApplicationRole</role-name>\n"
+" </security-role>\n"
+" </assembly-descriptor>\n"
+"</ejb-jar>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:100
@@ -422,7 +515,7 @@
msgid ""
"shows the usage of the <literal>security-role</literal> in an <literal>web."
"xml</literal> file."
-msgstr ""
+msgstr "<literal>web.xml</literal> ファイル内㮠<literal>security-role</literal> ã®ä½¿ã„方を示ã—ã¦ã„ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:103
@@ -430,7 +523,7 @@
msgid ""
"An example web.xml descriptor fragment that illustrates the security-role "
"element usage."
-msgstr ""
+msgstr "security-role エレメントã®ä½¿ã„方を示ã™ã‚µãƒ³ãƒ—ル㮠web.xml 記述åã®ä¸€éƒ¨ã§ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:104
@@ -445,12 +538,20 @@
" </security-role>\n"
"</web-app>"
msgstr ""
+"<!-- A sample web.xml fragment -->\n"
+"<web-app>\n"
+" <!-- ... -->\n"
+" <security-role>\n"
+" <description>The single application role</description>\n"
+" <role-name>TheApplicationRole</role-name>\n"
+" </security-role>\n"
+"</web-app>"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:109
#, no-c-format
msgid "EJB method permissions"
-msgstr ""
+msgstr "EJB メソッドã®ãƒ‘ーミッション"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:110
@@ -459,13 +560,13 @@
"An application assembler can set the roles that are allowed to invoke an "
"EJB's home and remote interface methods through method-permission "
"element declarations."
-msgstr ""
+msgstr "アプリケーションアッセンブラ㯠method-permission エレメントã®å®£è¨€ã‚’使ã£ã¦ EJB ã®ãƒ›ãƒ¼ãƒ ãŠã‚ˆã³ãƒªãƒ¢ãƒ¼ãƒˆã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã®ãƒ¡ã‚½ãƒƒãƒ‰ã®å‘¼ã³å‡ºã—を許å¯ã•ã‚Œã‚‹ãƒãƒ¼ãƒ«ã‚’è¨å®šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:114
#, no-c-format
msgid "The method-permissions element"
-msgstr ""
+msgstr "method-permission エレメント"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:121
@@ -482,19 +583,19 @@
"accessible by a role using a <literal>method-permission</literal> element, "
"the EJB methods default to being excluded from use. This is equivalent to "
"defaulting the methods into the <literal>exclude-list</literal>."
-msgstr ""
+msgstr "å„ <literal>method-permission</literal> エレメントã«ã¯ã€ メソッドåエレメントã«ã‚ˆã£ã¦è˜åˆ¥ã•ã‚Œã‚‹ã‚ˆã†ã« EJB メソッドã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ãŒè¨±å¯ã•ã‚Œã‚‹è«–ç†ãƒãƒ¼ãƒ«ã‚’定義ã™ã‚‹ãƒãƒ¼ãƒ«åã®åエレメント㌠1 ã¤ã¾ãŸã¯è¤‡æ•°å«ã¾ã‚Œã¦ã„ã¾ã™ã€‚ èªè¨¼ãƒ¦ãƒ¼ã‚¶ãƒ¼ãªã‚‰èª°ã§ã‚‚メソッドåエレメントã§è˜åˆ¥ã•ã‚Œã‚‹ãƒ¡ã‚½ãƒƒãƒ‰ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ãã‚‹ã“ã¨ã‚’宣言ã™ã‚‹ãŸã‚ã« <literal>role-name</literal> エレメントã§ã¯ãªã <literal>unchecked</literal> エレメントを指定ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚ ã•ã‚‰ã«ã€ <literal>exclude-list</literal> エレメントをæŒã¤ãƒ¡ã‚½ãƒƒãƒ‰ã«ã¯èª°ã‚‚アクセスã§ããªã„ã“ã¨å®£è¨€ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚ EJB ã« <literal>method-permission</literal> エレメントを使ã£ãŸãƒãƒ¼ãƒ«ã§ã‚¢ã‚¯ã‚»ã‚¹å¯èƒ½ã§ã‚ã‚‹ã¨å®£è¨€ã•ã‚Œã¦ã„ãªã„メソッドãŒã‚ã‚‹å ´åˆã€ EJB メソッドã¯ä½¿ç”¨ã‹ã‚‰é™¤å¤–ã™ã‚‹ã‚ˆã†ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã!
§è¨å®šã—ã¾ã™ã€‚ ã“ã‚Œã¯ãƒ¡ã‚½ãƒƒãƒ‰ã‚’ <literal>exclude-list</literal> ã«ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆè¨å®šã™ã‚‹ã®ã¨åŒç‰ã§ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:125
#, no-c-format
msgid "The method element"
-msgstr ""
+msgstr "メソッドエレメント"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:132
#, no-c-format
msgid "There are three supported styles of method element declarations."
-msgstr ""
+msgstr "メソッドエレメントã®å®£è¨€ã«ã¯ã‚µãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ã‚‹ 3 種類ã®ã‚¹ã‚¿ã‚¤ãƒ«ãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:135
@@ -502,7 +603,7 @@
msgid ""
"The first is used for referring to all the home and component interface "
"methods of the named enterprise bean:"
-msgstr ""
+msgstr "1 番目ã®ã‚¹ã‚¿ã‚¤ãƒ«ã¯ named enterprise bean ã®å…¨ãƒ›ãƒ¼ãƒ ãŠã‚ˆã³ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã®ãƒ¡ã‚½ãƒƒãƒ‰ã«å¯¾ã™ã‚‹å‚ç…§ã«ä½¿ç”¨ã•ã‚Œã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:138
@@ -513,6 +614,10 @@
" <method-name>*</method-name>\n"
"</method>"
msgstr ""
+"<method>\n"
+" <ejb-name>EJBNAME</ejb-name>\n"
+" <method-name>*</method-name>\n"
+"</method>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:139
@@ -520,7 +625,7 @@
msgid ""
"The second style is used for referring to a specified method of the home or "
"component interface of the named enterprise bean:"
-msgstr ""
+msgstr "2 番目ã®ã‚¹ã‚¿ã‚¤ãƒ«ã¯ãƒ›ãƒ¼ãƒ ã®æŒ‡å®šãƒ¡ã‚½ãƒƒãƒ‰ã¾ãŸã¯ named enterprise bean ã®ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã«å¯¾ã™ã‚‹å‚ç…§ã«ä½¿ç”¨ã•ã‚Œã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:142
@@ -531,6 +636,10 @@
" <method-name>METHOD</method-name>\n"
" </method>"
msgstr ""
+"<method>\n"
+" <ejb-name>EJBNAME</ejb-name>\n"
+" <method-name>METHOD</method-name>\n"
+" </method>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:143
@@ -538,7 +647,7 @@
msgid ""
"If there are multiple methods with the same overloaded name, this style "
"refers to all of the overloaded methods."
-msgstr ""
+msgstr "åŒã˜ã‚ªãƒ¼ãƒãƒ¼ãƒãƒ¼ãƒ‰åã‚’æŒã¤è¤‡æ•°ã®ãƒ¡ã‚½ãƒƒãƒ‰ãŒã‚ã‚‹å ´åˆã€ ã“ã®ã‚¹ã‚¿ã‚¤ãƒ«ã¯ã‚ªãƒ¼ãƒãƒ¼ãƒãƒ¼ãƒ‰ãƒ¡ã‚½ãƒƒãƒ‰ã™ã¹ã¦ã‚’å‚ç…§ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:146
@@ -546,7 +655,7 @@
msgid ""
"The third style is used to refer to a specified method within a set of "
"methods with an overloaded name:"
-msgstr ""
+msgstr "3 番目ã®ã‚¹ã‚¿ã‚¤ãƒ«ã¯ã‚ªãƒ¼ãƒãƒ¼ãƒãƒ¼ãƒ‰åå‰ã‚’æŒã¤ãƒ¡ã‚½ãƒƒãƒ‰ã‚»ãƒƒãƒˆå†…ã®æŒ‡å®šãƒ¡ã‚½ãƒƒãƒ‰ã«å¯¾ã™ã‚‹å‚ç…§ã«ä½¿ç”¨ã•ã‚Œã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:149
@@ -562,6 +671,15 @@
" </method-params>\n"
"</method>"
msgstr ""
+"<method>\n"
+" <ejb-name>EJBNAME</ejb-name>\n"
+" <method-name>METHOD</method-name>\n"
+" <method-params>\n"
+" <method-param>PARAMETER_1</method-param>\n"
+" <!-- ... -->\n"
+" <method-param>PARAMETER_N</method-param>\n"
+" </method-params>\n"
+"</method>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:150
@@ -572,7 +690,7 @@
"name of the corresponding method parameter type. If there are multiple "
"methods with the same overloaded signature, the permission applies to all of "
"the matching overloaded methods."
-msgstr ""
+msgstr "メソッドã¯æŒ‡å®šã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ライズ bean ã®ãƒ›ãƒ¼ãƒ ã¾ãŸã¯ãƒªãƒ¢ãƒ¼ãƒˆã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹å†…ã§å®šç¾©ã•ã‚Œãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“。 method-param エレメント値ã¯è©²å½“ã™ã‚‹ãƒ¡ã‚½ãƒƒãƒ‰ãƒ‘ラメータタイプã®å®Œå…¨ä¿®é£¾åã«ãªã‚Šã¾ã™ã€‚ オーãƒãƒ¼ãƒãƒ¼ãƒ‰ã•ã‚ŒãŸåŒã˜ç½²åã‚’æŒã¤è¤‡æ•°ã®ãƒ¡ã‚½ãƒƒãƒ‰ãŒã‚ã‚‹å ´åˆã€ パーミッションã¯ä¸€è‡´ã™ã‚‹ã‚ªãƒ¼ãƒãƒ¼ãƒãƒ¼ãƒ‰ãƒ¡ã‚½ãƒƒãƒ‰ã™ã¹ã¦ã«é©ç”¨ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:153
@@ -581,7 +699,7 @@
"The optional <literal>method-intf</literal> element can be used to "
"differentiate methods with the same name and signature that are defined in "
"both the home and remote interfaces of an enterprise bean."
-msgstr ""
+msgstr "オプション㮠<literal>method-intf</literal> エレメントã¯ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ライズ bean ã®ãƒ›ãƒ¼ãƒ ãŠã‚ˆã³ãƒªãƒ¢ãƒ¼ãƒˆã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã®ä¸¡æ–¹ã§å®šç¾©ã•ã‚Œã‚‹åŒã˜åå‰ã¨ç½²åã‚’æŒã¤è¤‡æ•°ã®ãƒ¡ã‚½ãƒƒãƒ‰ã‚’区別ã™ã‚‹ãŸã‚ã«ä½¿ç”¨ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:156
@@ -589,7 +707,7 @@
msgid ""
"provides complete examples of the <literal>method-permission</literal> "
"element usage."
-msgstr ""
+msgstr "<literal>method-permission</literal> エレメントã®ä½¿ç”¨ä¾‹ã‚’示ã—ã¦ã„ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:159
@@ -597,7 +715,7 @@
msgid ""
"An ejb-jar.xml descriptor fragment that illustrates the method-permission "
"element usage."
-msgstr ""
+msgstr "method-permission エレメントã®ä½¿ã„方を示㙠ejb-jar.xml 記述åã®ä¸€éƒ¨ã§ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:160
@@ -671,12 +789,79 @@
" </assembly-descriptor>\n"
"</ejb-jar>"
msgstr ""
+"<ejb-jar>\n"
+" <assembly-descriptor>\n"
+" <method-permission>\n"
+" <description>The employee and temp-employee roles may "
+"access any\n"
+" method of the EmployeeService bean </description>\n"
+" <role-name>employee</role-name>\n"
+" <role-name>temp-employee</role-name>\n"
+" <method>\n"
+" <ejb-name>EmployeeService</ejb-name>\n"
+" <method-name>*</method-name>\n"
+" </method>\n"
+" </method-permission>\n"
+" <method-permission>\n"
+" <description>The employee role may access the "
+"findByPrimaryKey,\n"
+" getEmployeeInfo, and the updateEmployeeInfo(String) method "
+"of\n"
+" the AardvarkPayroll bean </description>\n"
+" <role-name>employee</role-name>\n"
+" <method>\n"
+" <ejb-name>AardvarkPayroll</ejb-name>\n"
+" <method-name>findByPrimaryKey</method-name>\n"
+" </method>\n"
+" <method>\n"
+" <ejb-name>AardvarkPayroll</ejb-name>\n"
+" <method-name>getEmployeeInfo</method-name>\n"
+" </method>\n"
+" <method>\n"
+" <ejb-name>AardvarkPayroll</ejb-name>\n"
+" <method-name>updateEmployeeInfo</method-name>\n"
+" <method-params>\n"
+" <method-param>java.lang.String</method-"
+"param>\n"
+" </method-params>\n"
+" </method>\n"
+" </method-permission>\n"
+" <method-permission>\n"
+" <description>The admin role may access any method of the\n"
+" EmployeeServiceAdmin bean </description>\n"
+" <role-name>admin</role-name>\n"
+" <method>\n"
+" <ejb-name>EmployeeServiceAdmin</ejb-name>\n"
+" <method-name>*</method-name>\n"
+" </method>\n"
+" </method-permission>\n"
+" <method-permission>\n"
+" <description>Any authenticated user may access any method "
+"of the\n"
+" EmployeeServiceHelp bean</description>\n"
+" <unchecked/>\n"
+" <method>\n"
+" <ejb-name>EmployeeServiceHelp</ejb-name>\n"
+" <method-name>*</method-name>\n"
+" </method>\n"
+" </method-permission>\n"
+" <exclude-list>\n"
+" <description>No fireTheCTO methods of the EmployeeFiring "
+"bean may be\n"
+" used in this deployment</description>\n"
+" <method>\n"
+" <ejb-name>EmployeeFiring</ejb-name>\n"
+" <method-name>fireTheCTO</method-name>\n"
+" </method>\n"
+" </exclude-list>\n"
+" </assembly-descriptor>\n"
+"</ejb-jar>"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:165
#, no-c-format
msgid "Web Content Security Constraints"
-msgstr ""
+msgstr "ウェブコンテントã®ã‚»ã‚ュリティ制é™"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:166
@@ -687,12 +872,14 @@
"This set of information is declared by using the <literal>web.xml</"
"literal><literal>security-constraint</literal> element."
msgstr ""
+"ウェブアプリケーションã§ã¯ã€ ä¿è·ã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚’è˜åˆ¥ã™ã‚‹ URL パターンã§ã‚³ãƒ³ãƒ†ãƒ³ãƒˆã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’許å¯ã•ã‚Œã‚‹ãƒãƒ¼ãƒ«ã«ã‚ˆã£ã¦ã‚»ã‚ュリティを定義ã—ã¾ã™ã€‚ ã“ã®æƒ…å ±ä¸€å¼ã¯ <literal>web.xml</"
+"literal><literal>security-constraint</literal> エレメントを使ã£ã¦å®£è¨€ã—ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:170
#, no-c-format
msgid "The security-constraint element"
-msgstr ""
+msgstr "security-constraint エレメント"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:177
@@ -707,7 +894,7 @@
"request to correspond to an attempt to access secured content. The "
"<literal>http-method</literal> element value specifies a type of HTTP "
"request to allow."
-msgstr ""
+msgstr "安全化を図るコンテント㯠1 ã¤ã¾ãŸã¯è¤‡æ•°ã® <literal>web-resource-collection</literal> エレメントを使ã£ã¦å®£è¨€ã—ã¾ã™ã€‚ å„ <literal>web-resource-collection</literal> エレメントã«ã¯ã‚ªãƒ—ション㮠<literal>url-pattern</literal> エレメントã®ã‚·ãƒªãƒ¼ã‚ºã€ 続ã„ã¦ã‚ªãƒ—ション㮠<literal>http-method</literal> エレメントã®ã‚·ãƒªãƒ¼ã‚ºãŒå«ã¾ã‚Œã¦ã„ã¾ã™ã€‚ <literal>url-pattern</literal> エレメント値ã¯ã€ ã‚»ã‚ュアãªã‚³ãƒ³ãƒ†ãƒ³ãƒˆã¸ã®ã‚¢ã‚¯ã‚»ã‚¹è©¦è¡Œã«è©²å½“ã™ã‚‹è¦æ±‚ã¨ä¸€è‡´ã™ã‚‹è¦æ±‚ URL ã«å¯¾ã™ã‚‹ URL パターンを指定ã—ã¾ã™ã€‚ <literal>http-method</literal> エレメント値ã¯è¨±å¯ã™ã‚‹ HTTP è¦æ±‚ã®ã‚¿ã‚¤ãƒ—を指定ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:180
@@ -731,6 +918,8 @@
"<literal>CONFIDENTIAL</literal> flag indicates that the use of SSL is "
"required."
msgstr ""
+"オプション㮠<literal>user-data-constraint</literal> エレメントã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ã‚µãƒ¼ãƒãƒ¼ã¸ã®æŽ¥ç¶šã®ãƒˆãƒ©ãƒ³ã‚¹ãƒãƒ¼ãƒˆå±¤ã«å¯¾ã™ã‚‹è¦ä»¶ã‚’指定ã—ã¾ã™ã€‚ è¦ä»¶ã¯ã‚³ãƒ³ãƒ†ãƒ³ãƒˆã®æ•´åˆæ€§ (通信プãƒã‚»ã‚¹ä¸ã®ãƒ‡ãƒ¼ã‚¿ã®æ”¹ã–んを防ãã“ã¨) を目的ã¨ã—ã¦ã‚‚機密性 (トランジットä¸ã®èªã¿å–りを防ãã“ã¨) を目的ã¨ã—ã¦ã‚‚構ã„ã¾ã›ã‚“。 transport-guarantee エレメント値ã¯ä¿è·ã•ã‚Œã‚‹ã¹ãクライアントã¨ã‚µãƒ¼ãƒãƒ¼é–“ã®é€šä¿¡ã«å¯¾ã—ã¦ãã®åº¦åˆã„を指定ã—ã¾ã™ã€‚ 値ã«ã¯ <literal>NONE</literal>〠<literal>INTEGRAL</literal>〠<literal>CONFIDENTIAL</literal> ãŒã‚ã‚Šã¾ã™ã€‚ <literal>NONE</literal> ã®å€¤ã¯ã€ アプリケーションã¯ãƒˆãƒ©ãƒ³ã‚¹ãƒãƒ¼ãƒˆã®ä¿è¨¼ã‚’一切必è¦ã¨ã—ãªã„ã¨ã„ã†æ„味ã«ãªã‚Šã¾ã™ã€‚ <literal>INTEGRAL</literal> ã®å€¤ã¯ã€ アプリケーションã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ã‚µãƒ¼ãƒãƒ¼é–“ã§é€ä¿¡ã•ã‚Œã‚‹ãƒ‡ãƒ¼ã‚¿ã¯ãƒˆãƒ©!
ンジットä¸ã«å¤‰æ›´ãŒã§ããªã„方法ã§é€ä¿¡ã•ã‚Œã‚‹ã“ã¨ã‚’å¿…è¦ã¨ã™ã‚‹ã¨ã„ã†æ„味ã«ãªã‚Šã¾ã™ã€‚ <literal>CONFIDENTIAL</literal> ã®å€¤ã¯ã€ アプリケーションã¯é€ä¿¡ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒˆã‚’何者ã‹ãŒç›£è¦–ã™ã‚‹ã®ã‚’防ã手段を用ã„ã¦ãƒ‡ãƒ¼ã‚¿ãŒé€ä¿¡ã•ã‚Œã‚‹ã“ã¨ã‚’å¿…è¦ã¨ã™ã‚‹ã¨ã„ã†æ„味ã«ãªã‚Šã¾ã™ã€‚ ã»ã¨ã‚“ã©ã®å ´åˆã€ <literal>INTEGRAL</literal> ã¾ãŸã¯ "
+"<literal>CONFIDENTIAL</literal> ã®ãƒ•ãƒ©ã‚°ã‚ã‚‹å ´åˆã¯ SSL ã®ä½¿ç”¨ãŒå¿…è¦ã¨ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:183
@@ -740,17 +929,18 @@
"the authentication method that should be used, the realm name that should be "
"used for rhw application, and the attributes that are needed by the form "
"login mechanism."
-msgstr ""
+msgstr "オプション㮠<literal>login-config</literal> エレメントã¯ã€ 使用ã•ã‚Œã‚‹ã¹ãèªè¨¼ãƒ¡ã‚½ãƒƒãƒ‰ã€ rhw アプリケーションã«ä½¿ç”¨ã•ã‚Œã‚‹ã¹ãレルムå〠ãã—ã¦ãƒ•ã‚©ãƒ¼ãƒ ãƒã‚°ã‚¤ãƒ³ãƒ¡ã‚«ãƒ‹ã‚ºãƒ ã§å¿…è¦ã¨ã•ã‚Œã‚‹å±žæ€§ã®ãã‚Œãžã‚Œã‚’è¨å®šã™ã‚‹ãŸã‚ã«ä½¿ç”¨ã—ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:187
#, no-c-format
msgid "The login-config element"
-msgstr ""
+msgstr "login-config エレメント"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:194
#, no-c-format
+#, fuzzy
msgid ""
"The <literal>auth-method</literal> child element specifies the "
"authentication mechanism for the web application. As a prerequisite to "
@@ -764,7 +954,7 @@
"well as error pages that should be used in form-based login. If the "
"<literal>auth-method</literal> value is not <literal>FORM</literal>, then "
"<literal>form-login-config</literal> and its child elements are ignored."
-msgstr ""
+msgstr "<literal>auth-method</literal> åエレメントã¯ã‚¦ã‚§ãƒ–アプリケーション用ã®èªè¨¼ãƒ¡ã‚«ãƒ‹ã‚ºãƒ を指定ã—ã¾ã™ã€‚ 承èªåˆ¶é™ã«ã‚ˆã£ã¦ä¿è·ã•ã‚Œã¦ã„るウェブリソースã¸ã®ã‚¢ã‚¯ã‚»ã‚¹å–å¾—ã«å¯¾ã™ã‚‹å‰ææ¡ä»¶ã®ã‚ˆã†ã«ã€ a user must have authenticated using the configured mechanism. åˆæ³•ã® Legal <literal>auth-method</literal> 値㯠<literal>BASIC</literal>〠<literal>DIGEST</literal>〠<literal>FORM</literal>〠<literal>CLIENT-CERT</literal> ã«ãªã‚Šã¾ã™ã€‚ <literal>realm-name</literal> åエレメント㯠HTTP ベーシックãŠã‚ˆã³ãƒ€ã‚¤ã‚¸ã‚§ã‚¹ãƒˆèªè¨¼ã§ä½¿ç”¨ã•ã‚Œã‚‹ãƒ¬ãƒ«ãƒ åを指定ã—ã¾ã™ã€‚ <literal>form-login-config</literal> åエレメントã¯ãƒã‚°ã‚¤ãƒ³ã®ä»–〠フォームベースã®ãƒã‚°ã‚¤ãƒ³ã§ä½¿ç”¨ã•ã‚Œã‚‹ã¹ãエラーページを指定ã—ã¾ã™ã€‚ <literal>auth-method</literal> 値㌠<literal>FORM</literal> ã§ã¯ãªã„å ´åˆã€ <literal>form-login-config</literal> ã¨ã!
ã®åエレメントã¯ç„¡è¦–ã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:197
@@ -778,6 +968,10 @@
"role. There is no required transport guarantee and the authentication method "
"used for obtaining the user identity is BASIC HTTP authentication."
msgstr ""
+"例ã¨ã—ã¦ã€ <xref linkend=\"Web_Content_Security_Constraints-_A_web."
+"xml_descriptor_fragment_which_illustrates_the_use_of_the_security_constraint_and_related_elements."
+"\"/> ã® <literal>web.xml</literal> 記述åã®ä¸€éƒ¨ã¯ã€ ウェブアプリケーション㮠<literal>/"
+"restricted</literal> パスé…下ã«ã‚ã‚‹ URL ã¯ã™ã¹ã¦ <literal>AuthorizedUser</literal> ãƒãƒ¼ãƒ«ã‚’å¿…è¦ã¨ã™ã‚‹ã“ã¨ã‚’示ã—ã¦ã„ã¾ã™ã€‚ å¿…è¦ã¨ãªã‚‹ãƒˆãƒ©ãƒ³ã‚¹ãƒãƒ¼ãƒˆã®ä¿è¨¼ã¯ãªã〠ユーザー ID ã®å–å¾—ã«ä½¿ç”¨ã•ã‚Œã‚‹èªè¨¼ãƒ¡ã‚½ãƒƒãƒ‰ã¯ BASIC HTTP èªè¨¼ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:200
@@ -785,7 +979,7 @@
msgid ""
"A web.xml descriptor fragment which illustrates the use of the security-"
"constraint and related elements."
-msgstr ""
+msgstr "security-constraint ãŠã‚ˆã³é–¢é€£ã™ã‚‹ã‚¨ãƒ¬ãƒ¡ãƒ³ãƒˆã®ä½¿ã„方を示㙠web.xml 記述åã®ä¸€éƒ¨ã§ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:201
@@ -819,12 +1013,39 @@
" </security-role>\n"
"</web-app>"
msgstr ""
+"<web-app>\n"
+" <!-- ... -->\n"
+" <security-constraint>\n"
+" <web-resource-collection>\n"
+" <web-resource-name>Secure Content</web-resource-"
+"name>\n"
+" <url-pattern>/restricted/*</url-pattern>\n"
+" </web-resource-collection>\n"
+" <auth-constraint>\n"
+" <role-name>AuthorizedUser</role-name>\n"
+" </auth-constraint>\n"
+" <user-data-constraint>\n"
+" <transport-guarantee>NONE</transport-guarantee>\n"
+" </user-data-constraint>\n"
+" </security-constraint>\n"
+" <!-- ... -->\n"
+" <login-config>\n"
+" <auth-method>BASIC</auth-method>\n"
+" <realm-name>The Restricted Zone</realm-name>\n"
+" </login-config>\n"
+" <!-- ... -->\n"
+" <security-role>\n"
+" <description>The role required to access restricted content "
+"</description>\n"
+" <role-name>AuthorizedUser</role-name>\n"
+" </security-role>\n"
+"</web-app>"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:206
#, no-c-format
msgid "Enabling Declarative Security in JBoss"
-msgstr ""
+msgstr "JBoss ã§å®£è¨€åž‹ã‚»ã‚ュリティを有効ã«ã™ã‚‹"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:207
@@ -841,12 +1062,14 @@
"security configuration are discussed in <xref linkend=\"Security_on_JBoss-"
"The_JBoss_Security_Model\"/>."
msgstr ""
+"ã“ã“ã¾ã§ã§èª¬æ˜Žã—ã¦ã㟠J2EE ã‚»ã‚ュリティエレメントã¯ã‚¢ãƒ—リケーションå´ã‹ã‚‰ã¿ãŸã‚»ã‚ュリティè¦ä»¶ã«ã¤ã„ã¦ã®ã¿ã§ã—ãŸã€‚ J2EE ã‚»ã‚ュリティエレメントã¯è«–ç†ãƒãƒ¼ãƒ«ã‚’宣言ã™ã‚‹ãŸã‚〠アプリケーション導入å´ã¯ãã®ãƒãƒ¼ãƒ«ã‚’アプリケーションドメインã‹ã‚‰å°Žå…¥ç’°å¢ƒã«ãƒžãƒƒãƒ”ングã™ã‚‹ãŸã‚ã§ã™ã€‚ J2EE ã®ä»•æ§˜ã¯ã“れらアプリケーションã®ã‚µãƒ¼ãƒãƒ¼å›ºæœ‰ã®è©³ç´°ã‚’çœç•¥ã—ã¦ã„ã¾ã™ã€‚ JBoss ã§ã¯ã€ アプリケーションãƒãƒ¼ãƒ«ã®å°Žå…¥ç’°å¢ƒã¸ã®ãƒžãƒƒãƒ”ングã«ã¯ JBoss サーãƒãƒ¼å›ºæœ‰ã®ãƒ‡ãƒ—ãƒã‚¤ãƒ¡ãƒ³ãƒˆè¨˜è¿°åを使ã£ãŸ J2EE ã‚»ã‚ュリティモデルを実装ã™ã‚‹ã‚»ã‚ュリティ管ç†ã®æŒ‡å®šãŒå¿…è¦ã¨ãªã‚Šã¾ã™ã€‚ ã‚»ã‚ュリティè¨å®šå›žã‚Šã®è©³ç´°ã«ã¤ã„ã¦ã¯ <xref linkend=\"Security_on_JBoss-"
+"The_JBoss_Security_Model\"/> ã§èª¬æ˜Žã•ã‚Œã¦ã„ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:215
#, no-c-format
msgid "An Introduction to JAAS"
-msgstr ""
+msgstr "JAAS ã«ã¤ã„ã¦"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:216
@@ -857,13 +1080,13 @@
"implementation details of JBossSX. The following sections provide an "
"introduction to JAAS to prepare you for the JBossSX architecture discussion "
"later in this chapter."
-msgstr ""
+msgstr "JBossSX フレームワーク㯠JAAS API をベースã¨ã—ã¦ã„ã¾ã™ã€‚ JBossSX ã®å®Ÿè£…ã«ã¤ã„ã¦è©³ã—ãç†è§£ã™ã‚‹ã«ã¯ã€ JAAS API ã®åŸºæœ¬çš„ãªã‚¨ãƒ¬ãƒ¡ãƒ³ãƒˆã‚’ç†è§£ã—ã¦ãŠãã“ã¨ãŒé‡è¦ã¨ãªã‚Šã¾ã™ã€‚ æœ¬ç« ã®å¾ŒåŠã§å‡ºã¦ãã‚‹ JBossSX アーã‚テクãƒãƒ£ã«é€²ã‚€å‰ã«ã€ 次ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã§ JAAS ã«ã¤ã„ã¦å°‘ã—説明をã—ã¦ãŠãã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:220
#, no-c-format
msgid "What is JAAS?"
-msgstr ""
+msgstr "JAAS ã¨ã¯"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:221
@@ -877,7 +1100,7 @@
"for JDK 1.3 and is bundled with JDK 1.4+. Because the JBossSX framework uses "
"only the authentication capabilities of JAAS to implement the declarative "
"role-based J2EE security model, this introduction focuses on only that topic."
-msgstr ""
+msgstr " JAAS 1.0 API ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼èªè¨¼ãŠã‚ˆã³æ‰¿èªã‚’目的ã¨ã—ã¦è¨è¨ˆã•ã‚ŒãŸ Java パッケージã®ã‚»ãƒƒãƒˆã‹ã‚‰æ§‹æˆã•ã‚Œã¦ã„ã¾ã™ã€‚ 標準㮠PAM (Pluggable Authentication Module) フレームワーク㮠Java ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’実装ã—〠ユーザーベースã®æ‰¿èªã«å¯¾å¿œã™ã‚‹ã‚ˆã† Java 2 Platform ã®ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã‚¢ãƒ¼ã‚テクãƒãƒ£ã‚’互æ›æ‹¡å¼µã—ã¦ã„ã¾ã™ã€‚ JAAS ã¯æœ€åˆã€ JDK 1.3 ã®æ‹¡å¼µãƒ‘ッケージã¨ã—ã¦ãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã€ JDK 1.4+ ã«åŒæ¢±ã•ã‚Œã¦ã„ã¾ã—ãŸã€‚ JBossSX フレームワークã¯å®£è¨€åž‹ãƒãƒ¼ãƒ«ãƒ™ãƒ¼ã‚¹ã® J2EE ã‚»ã‚ュリティモデルã®å®Ÿè£…ã« JAAS ã®æ‰¿èªæ©Ÿèƒ½ã®ã¿ã‚’使用ã—ã¦ã„ã‚‹ã®ã§ã€ 本セクションã§ã¯ã“ã®éƒ¨åˆ†ã«ã¤ã„ã¦ã®ã¿ç„¦ç‚¹ã‚’ç½®ã„ã¦é€²ã‚ã¦ã„ãã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:224
@@ -890,13 +1113,13 @@
"achieved without changing the JBossSX security manager implementation. All "
"that needs to change is the configuration of the authentication stack that "
"JAAS uses."
-msgstr ""
+msgstr "JAAS èªè¨¼ã¯ãƒ—ラグãŒå¯èƒ½ãªæ–¹æ³•ã§å®Ÿè¡Œã•ã‚Œã¾ã™ã€‚ ã“ã‚Œã«ã‚ˆã‚Š Java アプリケーションã¯åŸºç¤Žã¨ãªã‚‹èªè¨¼æŠ€è¡“ã«ä¾å˜ã™ã‚‹ã“ã¨ãªã〠JBossSX ã‚»ã‚ュリティ管ç†ã¯ç•°ãªã‚‹ã‚»ã‚ュリティインフラストラクãƒãƒ£ã§å‹•ä½œã™ã‚‹ã“ã¨ãŒã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚ ã‚»ã‚ュリティインフラストラクãƒãƒ£ã¨ã®çµ±åˆã¯ JBossSX ã‚»ã‚ュリティ管ç†ã®å®Ÿè£…を変更ã™ã‚‹ã“ã¨ãªãè¡Œã†ã“ã¨ãŒå¯èƒ½ã§ã™ã€‚ 変更ãŒå¿…è¦ã¨ãªã‚‹ã®ã¯ã€ JAAS ãŒä½¿ç”¨ã™ã‚‹èªè¨¼ã‚¹ã‚¿ãƒƒã‚¯ã®è¨å®šã®ã¿ã§ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:228
#, no-c-format
msgid "The JAAS Core Classes"
-msgstr ""
+msgstr "JAAS コアクラス"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:229
@@ -906,33 +1129,31 @@
"authentication, and authorization. The following list presents only the "
"common and authentication classes because these are the specific classes "
"used to implement the functionality of JBossSX covered in this chapter."
-msgstr ""
+msgstr "JAAS コアクラス群ã¯ã€ 共通〠èªè¨¼ã€ 承èªã® 3 ã¤ã®ã‚«ãƒ†ã‚´ãƒªãƒ¼ã«åŒºåˆ†ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ 共通ã¨èªè¨¼ã®ã‚¯ãƒ©ã‚¹ãŒæœ¬ç« ã§èª¬æ˜Žã•ã‚Œã¦ã„ã‚‹ JBossSX ã®æ©Ÿèƒ½ã®å®Ÿè£…ã«ä½¿ç”¨ã•ã‚Œã‚‹ã‚¯ãƒ©ã‚¹ã§ã‚ã‚‹ãŸã‚〠次ã®ä¸€è¦§ã§ã¯å…±é€šã¨èªè¨¼ã®ã‚¯ãƒ©ã‚¹ã®ã¿ã‚’示ã—ã¾ã™ã€‚ "
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:232
#, no-c-format
msgid "The are the common classes:"
-msgstr ""
+msgstr "共通ã®ã‚¯ãƒ©ã‚¹ã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:237
#, no-c-format
-msgid ""
-"<literal>Subject</literal> (<literal>javax.security.auth.Subject</literal>)"
-msgstr ""
+msgid "<literal>Subject</literal> (<literal>javax.security.auth.Subject</literal>)"
+msgstr "<literal>Subject</literal> (<literal>javax.security.auth.Subject</literal>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:242
#, no-c-format
-msgid ""
-"<literal>Principal</literal> (<literal>java.security.Principal</literal>)"
-msgstr ""
+msgid "<literal>Principal</literal> (<literal>java.security.Principal</literal>)"
+msgstr "<literal>Principal</literal> (<literal>java.security.Principal</literal>)"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:247
#, no-c-format
msgid "These are the authentication classes:"
-msgstr ""
+msgstr "èªè¨¼ã®ã‚¯ãƒ©ã‚¹ã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:252
@@ -941,6 +1162,8 @@
"<literal>Callback</literal> (<literal>javax.security.auth.callback.Callback</"
"literal>)"
msgstr ""
+"<literal>Callback</literal> (<literal>javax.security.auth.callback.Callback</"
+"literal>)"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:257
@@ -949,6 +1172,8 @@
"<literal>CallbackHandler</literal> (<literal>javax.security.auth.callback."
"CallbackHandler</literal>)"
msgstr ""
+"<literal>CallbackHandler</literal> (<literal>javax.security.auth.callback."
+"CallbackHandler</literal>)"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:262
@@ -957,6 +1182,8 @@
"<literal>Configuration</literal> (<literal>javax.security.auth.login."
"Configuration</literal>)"
msgstr ""
+"<literal>Configuration</literal> (<literal>javax.security.auth.login."
+"Configuration</literal>)"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:267
@@ -965,6 +1192,8 @@
"<literal>LoginContext</literal> (<literal>javax.security.auth.login."
"LoginContext</literal>)"
msgstr ""
+"<literal>LoginContext</literal> (<literal>javax.security.auth.login."
+"LoginContext</literal>)"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:272
@@ -973,12 +1202,14 @@
"<literal>LoginModule</literal> (<literal>javax.security.auth.spi."
"LoginModule</literal>)"
msgstr ""
+"<literal>LoginModule</literal> (<literal>javax.security.auth.spi."
+"LoginModule</literal>)"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:278
#, no-c-format
msgid "The Subject and Principal Classes"
-msgstr ""
+msgstr "Subject クラス㨠Principal クラス"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:279
@@ -993,7 +1224,7 @@
"The JAAS APIs use the existing Java 2 <literal>java.security.Principal</"
"literal> interface to represent a principal, which is essentially just a "
"typed name."
-msgstr ""
+msgstr "リソースã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’承èªã™ã‚‹ã«ã¯ã€ ã¾ãšã‚¢ãƒ—リケーションã¯ãã®è¦æ±‚元をèªè¨¼ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ JAAS フレームワークã¯è¦æ±‚元を表ã™ãŸã‚ã®ç”¨èªž subject を定義ã—ã¾ã™ã€‚ <literal>Subject</literal> クラス㯠JAAS ã®ä¸å¤®ã‚¯ãƒ©ã‚¹ã«ãªã‚Šã¾ã™ã€‚ <literal>Subject</literal> ã¯äººã‚„サービスãªã©å˜ä¸€ã‚¨ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã®æƒ…å ±ã‚’è¡¨ã—ã¾ã™ã€‚ æƒ…å ±ã¯ãã®ã‚¨ãƒ³ãƒ†ã‚£ãƒ†ã‚£æœ¬äººã€ パブリックã®è¨¼æ˜Žæ›¸ã€ プライベートã®è¨¼æ˜Žæ›¸ãªã©ã«æ¸¡ã‚Šã¾ã™ã€‚ JAAS API ã¯æ—¢å˜ã® Java 2 <literal>java.security.Principal</literal> インターフェースを使用ã—ã¦æœ¬äººã‚’表ã—ã¾ã™ã€‚ 基本的ã«ã¯å˜ã«å…¥åŠ›ã•ã‚ŒãŸåå‰ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:282
@@ -1005,7 +1236,7 @@
"principal (123-45-6789), and a username principal (johnd), all of which help "
"distinguish the subject from other subjects. To retrieve the principals "
"associated with a subject, two methods are available:"
-msgstr ""
+msgstr "èªè¨¼ã®ãƒ—ãƒã‚»ã‚¹ã§ã€ subject ã¯é–¢é€£ ID ã¾ãŸã¯ principal を付ã‘ã¦ç§»æ¤ã•ã‚Œã¾ã™ã€‚ subject ã¯ãŸãã•ã‚“ã® principal ã‚’æŒã¤ã“ã¨ãŒã§ãã¾ã™ã€‚ ãŸã¨ãˆã°ã€ ã²ã¨ã‚Šã®äººãŒåå‰ã® principal (John Doe)〠ソーシャルセã‚ュリティ番å·ã® principal (123-45-6789)〠ユーザーåã® principal (johnd) ã‚’æŒã¤ã“ã¨ãŒã§ã〠ã“れらã¯ã™ã¹ã¦ä»–ã® subject ã‹ã‚‰ã“ã® subject を区別ã™ã‚‹ã®ã«å½¹ç«‹ã¡ã¾ã™ã€‚ subject ã«é–¢é€£ã¥ã‘られ㟠principal を検索ã™ã‚‹ã«ã¯ã€ 2 ã¤ã®æ–¹æ³•ãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:285
@@ -1014,6 +1245,8 @@
"public Set getPrincipals() {...}\n"
"public Set getPrincipals(Class c) {...}"
msgstr ""
+"public Set getPrincipals() {...}\n"
+"public Set getPrincipals(Class c) {...}"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:286
@@ -1027,12 +1260,15 @@
"literal>, so an instance in the principals set may represent a logical "
"grouping of other principals or groups of principals."
msgstr ""
+"最åˆã®æ–¹æ³•ã¯ subject ã«å«ã¾ã‚Œã‚‹ã™ã¹ã¦ã® principal ã‚’è¿”ã—ã¾ã™ã€‚ 2 番目ã®æ–¹æ³•ã¯ <literal>c</"
+"literal> ã®ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã¾ãŸã¯ãã®ã‚µãƒ–クラスã®ã²ã¨ã¤ã§ã‚ã‚‹ principal ã®ã¿ã‚’è¿”ã—ã¾ã™ã€‚ subject ã«ä¸€è‡´ã™ã‚‹ principal ãŒãªã„ã¨ç©ºã®ã‚»ãƒƒãƒˆãŒè¿”ã•ã‚Œã¾ã™ã€‚ <literal>java.security.acl.Group</"
+"literal> インターフェース㯠<literal>java.security.Principal</literal> ã®ã‚µãƒ–インターフェースã§ã‚ã‚‹ãŸã‚〠principal セット内ã®ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã¯ä»–ã® principal ã¾ãŸã¯ principal ã®ã‚°ãƒ«ãƒ¼ãƒ—ã®è«–ç†çš„ãªã‚°ãƒ«ãƒ¼ãƒ—分ã‘を表ã™å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:292
#, no-c-format
msgid "Authentication of a Subject"
-msgstr ""
+msgstr "Subject ã®èªè¨¼"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:293
@@ -1040,17 +1276,18 @@
msgid ""
"Authentication of a subject requires a JAAS login. The login procedure "
"consists of the following steps:"
-msgstr ""
+msgstr "subject ã®èªè¨¼ã«ã¯ JAAS ãƒã‚°ã‚¤ãƒ³ãŒå¿…è¦ã¨ãªã‚Šã¾ã™ã€‚ ãƒã‚°ã‚¤ãƒ³ã®æ‰‹é †ã¯æ¬¡ã®ã‚¹ãƒ†ãƒƒãƒ—ã‹ã‚‰æˆã‚Šç«‹ã¡ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:298
#, no-c-format
+#, fuzzy
msgid ""
"An application instantiates a <literal>LoginContext</literal> and passes in "
"the name of the login configuration and a <literal>CallbackHandler</literal> "
"to populate the <literal>Callback</literal> objects, as required by the "
"configuration <literal>LoginModule</literal>s."
-msgstr ""
+msgstr "アプリケーション㯠<literal>LoginContext</literal> ã®ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã‚’作æˆã—ãƒã‚°ã‚¤ãƒ³è¨å®šã®åå‰ãŠã‚ˆã³ <literal>CallbackHandler</literal> ã«æ¸¡ã—㦠<literal>LoginModule</literal> ã®è¨å®šã§è¦ã•ã‚Œã‚‹ã‚ˆã†ã« <literal>Callback</literal> オブジェクトを移æ¤ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:303
@@ -1060,14 +1297,13 @@
"literal> to load all the <literal>LoginModules</literal> included in the "
"named login configuration. If no such named configuration exists the "
"<literal>other</literal> configuration is used as a default."
-msgstr ""
+msgstr "<literal>LoginContext</literal> 㯠<literal>Configuration</literal> ã« named ãƒã‚°ã‚¤ãƒ³è¨å®šã«å«ã¾ã‚Œã‚‹ã™ã¹ã¦ã® <literal>LoginModules</literal> ã‚’ãƒãƒ¼ãƒ‰ã™ã‚‹ã‚ˆã†æŒ‡ç¤ºã—ã¾ã™ã€‚ ã“ã®ã‚ˆã†ãª named è¨å®šãŒå˜åœ¨ã—ã¦ã„ãªã„å ´åˆã€ <literal>other</literal> è¨å®šãŒãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã¨ã—ã¦ä½¿ç”¨ã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:308
#, no-c-format
-msgid ""
-"The application invokes the <literal>LoginContext.login</literal> method."
-msgstr ""
+msgid "The application invokes the <literal>LoginContext.login</literal> method."
+msgstr "アプリケーション㯠<literal>LoginContext.login</literal> メソッドを呼ã³å‡ºã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:313
@@ -1081,7 +1317,7 @@
"array of <literal>Callback</literal> objects. Upon success, the "
"<literal>LoginModule</literal>s associate relevant principals and "
"credentials with the subject."
-msgstr ""
+msgstr "ãƒã‚°ã‚¤ãƒ³ãƒ¡ã‚½ãƒƒãƒ‰ã¯ãƒãƒ¼ãƒ‰ã•ã‚ŒãŸã™ã¹ã¦ã® <literal>LoginModule</literal> を呼ã³å‡ºã—ã¾ã™ã€‚ å„ <literal>LoginModule</literal> 㯠subject ã®èªè¨¼ã‚’試行ã™ã‚‹ã®ã§ã€ 関連ã¥ã‘られ㟠<literal>CallbackHandler</literal> 㧠handle メソッドを呼ã³å‡ºã—èªè¨¼ãƒ—ãƒã‚»ã‚¹ã«å¿…è¦ã¨ãªã‚‹æƒ…å ±ã‚’å–å¾—ã—ã¾ã™ã€‚ å¿…è¦ã¨ãªã‚‹æƒ…å ±ã¯ handle メソッド㫠<literal>Callback</literal> オブジェクトã®ã‚¢ãƒ¬ã‚¤ã®å½¢å¼ã§æ¸¡ã•ã‚Œã¾ã™ã€‚ æˆåŠŸã™ã‚‹ã¨ã€ <literal>LoginModule</literal> ã¯é–¢é€£ã® principal ã¨è¨¼æ˜Žæ›¸ã‚’ subject ã«çµã³ä»˜ã‘ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:318
@@ -1091,7 +1327,7 @@
"application. Success is represented by a return from the login method. "
"Failure is represented through a LoginException being thrown by the login "
"method."
-msgstr ""
+msgstr "<literal>LoginContext</literal> ã¯ã‚¢ãƒ—リケーションã«å¯¾ã™ã‚‹èªè¨¼çŠ¶æ…‹ã‚’è¿”ã—ã¾ã™ã€‚ ãƒã‚°ã‚¤ãƒ³ãƒ¡ã‚½ãƒƒãƒ‰ã‹ã‚‰ã®æˆ»ã‚Šã¯æˆåŠŸã§ã™ã€‚ ãƒã‚°ã‚¤ãƒ³ãƒ¡ã‚½ãƒƒãƒ‰ã«ã‚ˆã£ã¦ LoginException ãŒæŠ•ã’られるã¨å¤±æ•—ã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:323
@@ -1099,7 +1335,7 @@
msgid ""
"If authentication succeeds, the application retrieves the authenticated "
"subject using the <literal>LoginContext.getSubject</literal> method."
-msgstr ""
+msgstr "èªè¨¼ãŒæˆåŠŸã—ãŸã‚‰ã€ アプリケーション㯠<literal>LoginContext.getSubject</literal> メソッドを使ã£ã¦èªè¨¼ã•ã‚ŒãŸ subject を検索ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:328
@@ -1108,7 +1344,7 @@
"After the scope of the subject authentication is complete, all principals "
"and related information associated with the subject by the login method can "
"be removed by invoking the <literal>LoginContext.logout</literal> method."
-msgstr ""
+msgstr "subject èªè¨¼ã®ã‚¹ã‚³ãƒ¼ãƒ—ãŒå®Œäº†ã—ãŸã‚‰ã€ ãƒã‚°ã‚¤ãƒ³ãƒ¡ã‚½ãƒƒãƒ‰ã§ subject ã«é–¢é€£ã¥ã‘られãŸæƒ…å ±ãŠã‚ˆã³ principal ã‚’ã™ã¹ã¦ <literal>LoginContext.logout</literal> メソッドを呼ã³å‡ºã—ã¦å‰Šé™¤ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:333
@@ -1123,7 +1359,7 @@
"authentication services. Therefore, you can plug different login modules "
"into an application without changing the application itself. The following "
"code shows the steps required by an application to authenticate a subject."
-msgstr ""
+msgstr "<literal>LoginContext</literal> クラスã¯èªè¨¼ã—ã¦ã„ã‚‹ subject ã®åŸºæœ¬ãƒ¡ã‚½ãƒƒãƒ‰ã‚’æä¾›ã—〠基礎ã¨ãªã‚‹èªè¨¼æŠ€è¡“ã«ä¾å˜ã™ã‚‹å¿…è¦ã®ãªã„アプリケーションã®é–‹ç™ºæ‰‹æ®µã‚’æä¾›ã—ã¾ã™ã€‚ <literal>LoginContext</literal> ã¯ç‰¹å®šã®ã‚¢ãƒ—リケーション用ã«è¨å®šã•ã‚ŒãŸèªè¨¼ã‚µãƒ¼ãƒ“スを確定ã™ã‚‹ã‚ˆã† <literal>Configuration</literal> ã«æŒ‡ç¤ºã—ã¾ã™ã€‚ <literal>LoginModule</literal> クラス群ã¯èªè¨¼ã‚µãƒ¼ãƒ“スを表ã—ã¾ã™ã€‚ ã—ãŸãŒã£ã¦ã€ ç•°ãªã‚‹ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’アプリケーション自体を変更ã™ã‚‹ã“ã¨ãªã 1 ã¤ã®ã‚¢ãƒ—リケーションã«ãƒ—ラグインã™ã‚‹ã“ã¨ãŒå¯èƒ½ã§ã™ã€‚ 次ã®ã‚³ãƒ¼ãƒ‰ã§ã¯ subject ã®èªè¨¼ã«ã‚¢ãƒ—リケーションãŒå¿…è¦ã¨ã™ã‚‹ã‚¹ãƒ†ãƒƒãƒ—を示ã—ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:336
@@ -1174,6 +1410,50 @@
" }\n"
"}"
msgstr ""
+"CallbackHandler handler = new MyHandler();\n"
+"LoginContext lc = new LoginContext(\"some-config\", handler);\n"
+"\n"
+"try {\n"
+" lc.login();\n"
+" Subject subject = lc.getSubject();\n"
+"} catch(LoginException e) {\n"
+" System.out.println(\"authentication failed\");\n"
+" e.printStackTrace();\n"
+"}\n"
+" \n"
+"// Perform work as authenticated Subject\n"
+"// ...\n"
+"\n"
+"// Scope of work complete, logout to remove authentication info\n"
+"try {\n"
+" lc.logout();\n"
+"} catch(LoginException e) {\n"
+" System.out.println(\"logout failed\");\n"
+" e.printStackTrace();\n"
+"}\n"
+" \n"
+"// A sample MyHandler class\n"
+"class MyHandler \n"
+" implements CallbackHandler\n"
+"{\n"
+" public void handle(Callback[] callbacks) throws\n"
+" IOException, UnsupportedCallbackException\n"
+" {\n"
+" for (int i = 0; i < callbacks.length; i++) {\n"
+" if (callbacks[i] instanceof NameCallback) {\n"
+" NameCallback nc = (NameCallback)callbacks[i];\n"
+" nc.setName(username);\n"
+" } else if (callbacks[i] instanceof PasswordCallback) {\n"
+" PasswordCallback pc = (PasswordCallback)callbacks[i];\n"
+" pc.setPassword(password);\n"
+" } else {\n"
+" throw new UnsupportedCallbackException(callbacks[i],\n"
+" \"Unrecognized "
+"Callback\");\n"
+" }\n"
+" }\n"
+" }\n"
+"}"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:337
@@ -1187,7 +1467,7 @@
"authentication process. For example, one <literal>LoginModule</literal> may "
"perform username/password-based authentication, while another may interface "
"to hardware devices such as smart card readers or biometric authenticators."
-msgstr ""
+msgstr "<literal>LoginModule</literal> インターフェースã®å®Ÿè£…を作æˆã™ã‚‹ã“ã¨ã§é–‹ç™ºè€…ã«ã‚ˆã‚Šèªè¨¼æŠ€è¡“ãŒçµ±åˆã•ã‚Œã¾ã™ã€‚ ã“ã‚Œã«ã‚ˆã‚Šã€ 管ç†è€…ã¯ç•°ãªã‚‹èªè¨¼æŠ€è¡“ã‚’ 1 ã¤ã®ã‚¢ãƒ—リケーションã«ãƒ—ラグインã™ã‚‹ã“ã¨ãŒã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚ 複数㮠<literal>LoginModule</literal> ã‚’ãƒã‚§ãƒ¼ãƒ³åŒ–ã— 1 ã¤ä»¥ä¸Šã®èªè¨¼æŠ€è¡“ã‚’èªè¨¼ãƒ—ãƒã‚»ã‚¹ã«åŠ ãˆã‚‹ã“ã¨ãŒå¯èƒ½ã§ã™ã€‚ ãŸã¨ãˆã°ã€ ã‚ã‚‹ <literal>LoginModule</literal> ã§ãƒ¦ãƒ¼ã‚¶ãƒ¼åã¨ãƒ‘スワードベースã®èªè¨¼ã‚’è¡Œã„〠別㮠<literal>LoginModule</literal> ã¯ã‚¹ãƒžãƒ¼ãƒˆã‚«ãƒ¼ãƒ‰ã‚„æˆä½“èªè¨¼æ©Ÿèƒ½ãªã©ã®ãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢ãƒ‡ãƒã‚¤ã‚¹ã«æŽ¥ç¶šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:340
@@ -1197,7 +1477,7 @@
"<literal>LoginContext</literal> object against which the client creates and "
"issues the login method. The process consists of two phases. The steps of "
"the process are as follows:"
-msgstr ""
+msgstr "<literal>LoginModule</literal> ã®ãƒ©ã‚¤ãƒ•ã‚µã‚¤ã‚¯ãƒ«ã¯ã€ クライアントãŒä½œæˆã€ 発行ã™ã‚‹ãƒã‚°ã‚¤ãƒ³ãƒ¡ã‚½ãƒƒãƒ‰ã«å¯¾ã—㦠<literal>LoginContext</literal> オブジェクトã«ã‚ˆã‚Šèª¿æ•´ã•ã‚Œã¾ã™ã€‚ プãƒã‚»ã‚¹ã¯ 2 ã¤ã®æ®µéšŽã§æˆã‚Šç«‹ã£ã¦ã„ã¾ã™ã€‚ プãƒã‚»ã‚¹ã®ã‚¹ãƒ†ãƒƒãƒ—ã¯ä»¥ä¸‹ã®é€šã‚Šã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:345
@@ -1205,7 +1485,7 @@
msgid ""
"The <literal>LoginContext</literal> creates each configured "
"<literal>LoginModule</literal> using its public no-arg constructor."
-msgstr ""
+msgstr "<literal>LoginContext</literal> ãŒãã®å¼•æ•°ç„¡ã—ã®ãƒ‘ブリックコンストラクタを使ã£ã¦è¨å®šã•ã‚ŒãŸå„ <literal>LoginModule</literal> を作æˆã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:350
@@ -1217,6 +1497,9 @@
"initialize(Subject subject, CallbackHandler callbackHandler, Map "
"sharedState, Map options)</literal>."
msgstr ""
+"å„ <literal>LoginModule</literal> ã¯ãã®åˆæœŸåŒ–メソッドã¸ã®ã‚³ãƒ¼ãƒ«ã§åˆæœŸåŒ–ã•ã‚Œã¾ã™ã€‚ <literal>Subject</literal> 引数㯠null 以外ã«ãªã‚‹ã“ã¨ãŒä¿è¨¼ã•ã‚Œã¾ã™ã€‚ åˆæœŸåŒ–メソッドã®ç½²åã¯ã€ <literal>public void "
+"initialize(Subject subject, CallbackHandler callbackHandler, Map "
+"sharedState, Map options)</literal> ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:355
@@ -1234,7 +1517,7 @@
"<literal>LoginException</literal> indicates failure. A return value of true "
"indicates that the method succeeded, whereas a return valueof false "
"indicates that the login module should be ignored."
-msgstr ""
+msgstr "<literal>login</literal> メソッドãŒèªè¨¼ãƒ—ãƒã‚»ã‚¹ã‚’開始ã™ã‚‹ãŸã‚呼ã³å‡ºã•ã‚Œã¾ã™ã€‚ ãŸã¨ãˆã°ã€ ã‚るメソッド実装ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ãƒ¦ãƒ¼ã‚¶ãƒ¼åã¨ãƒ‘スワードã®å…¥åŠ›ã‚’求ã‚〠NIS ã‚„ LDAP ãªã©ã®ãƒãƒ¼ãƒŸãƒ³ã‚°ã‚µãƒ¼ãƒ“スã«ä¿å˜ã•ã‚Œã¦ã„るデータã«å¯¾ã—ã¦ã“ã®æƒ…å ±ã‚’ç¢ºèªã™ã‚‹å ´åˆãŒã‚ã‚Šã¾ã™ã€‚ 別ã®å®Ÿè£…ã¯ã‚¹ãƒžãƒ¼ãƒˆã‚«ãƒ¼ãƒ‰ã‚„生体èªè¨¼ãƒ‡ãƒã‚¤ã‚¹ã«æŽ¥ç¶šã•ã‚Œã‚‹ã‹ã€ å˜ç´”ã«åŸºç¤Žã¨ãªã‚‹ã‚ªãƒšãƒ¬ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚·ã‚¹ãƒ†ãƒ ã‹ã‚‰ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã‚’æŠ½å‡ºã™ã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“。 å„ <literal>LoginModule</literal> ã«ã‚ˆã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ ID ã®æ¤œè¨¼ã¯ JAAS èªè¨¼ã®ãƒ•ã‚§ãƒ¼ã‚º 1 ã¨ã¿ãªã•ã‚Œã¾ã™ã€‚ <literal>login</literal> メソッドã®ç½²å㯠<literal>boolean login() throws LoginException</literal> ã«ãªã‚Šã¾ã™ã€‚ <literal>LoginException</literal> ã¯å¤±æ•—を示ã—ã¦ã„ã¾ã™ã€‚ true ã®è¿”り値ã¯ãƒ¡ã‚½ãƒƒãƒ‰ãŒæˆåŠŸã—ãŸã“ã¨ã‚’示ã—〠false ã®è¿”り値!
ã¯ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒç„¡è¦–ã•ã‚Œã‚‹ã§ã‚ã‚ã†ã“ã¨ã‚’示ã—ã¦ã„ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:360
@@ -1254,6 +1537,8 @@
"method succeeded, whereas a return of false indicates that the login module "
"should be ignored."
msgstr ""
+"<literal>LoginContext</literal> ã®å…¨ä½“çš„ãªèªè¨¼ãŒæˆåŠŸã™ã‚‹ã¨ã€ <literal>commit</literal> ãŒå„ <literal>LoginModule</literal> ã§å‘¼ã³å‡ºã•ã‚Œã¾ã™ã€‚ フェーズ 1 ㌠<literal>LoginModule</"
+"literal> ã«å¯¾ã—ã¦æˆåŠŸã™ã‚‹ã¨ã€ コミットメソッドãŒãƒ•ã‚§ãƒ¼ã‚º 2 ã§ç¶šã関連㮠principal〠パブリック証明書〠プライベート証明書ãªã©ã‚’ subject ã«çµã³ä»˜ã‘ã¾ã™ã€‚ フェーズ 1 ㌠<literal>LoginModule</literal> ã«å¤±æ•—ã™ã‚‹ã¨ã€ <literal>commit</literal> ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼åやパスワードãªã©ä»¥å‰ã«ä¿å˜ã—ã¦ã„ãŸèªè¨¼çŠ¶æ…‹ã‚’ã™ã¹ã¦å‰Šé™¤ã—ã¾ã™ã€‚ <literal>commit</literal> メソッドã®ç½²å㯠<literal>boolean commit() throws LoginException</literal> ã«ãªã‚Šã¾ã™ã€‚ <literal>LoginException</literal> ãŒæŠ•ã’られるã¨ã‚³ãƒŸãƒƒãƒˆãƒ•ã‚§ãƒ¼ã‚ºå®Œäº†ã®å¤±æ•—ã¨ã„ã†ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ true ãŒè¿”ã•ã‚Œã‚‹ã¨ãƒ¡ã‚½ãƒƒãƒ‰ã®æˆåŠŸã§ã€ false ãŒè¿”ã•ã‚ŒãŸå ´åˆã¯ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒç„¡è¦–ã•ã‚Œã‚‹ã§ã‚ã‚ã†ã“ã¨ã‚’示ã—ã¦ã„ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:365
@@ -1269,7 +1554,7 @@
"<literal>LoginException</literal>. A return of true indicates that the "
"method succeeded, whereas a return of false indicates that the login module "
"should be ignored."
-msgstr ""
+msgstr "<literal>LoginContext</literal> ã®å…¨ä½“çš„ãªèªè¨¼ãŒå¤±æ•—ã™ã‚‹ã¨ã€ <literal>abort</literal> メソッドãŒå„ <literal>LoginModule</literal> ã§å‘¼ã³å‡ºã•ã‚Œã¾ã™ã€‚ <literal>LoginModule</literal> メソッドã¯ãƒã‚°ã‚¤ãƒ³ã¾ãŸã¯åˆæœŸåŒ–ã®ãƒ¡ã‚½ãƒƒãƒ‰ã«ã‚ˆã£ã¦ä½œæˆã•ã‚ŒãŸã™ã¹ã¦ã®èªè¨¼çŠ¶æ…‹ã‚’削除ã‚ã‚‹ã„ã¯ç ´æ£„ã—ã¾ã™ã€‚ <literal>abort</literal> メソッドã®ç½²å㯠<literal>boolean abort() throws LoginException</literal> ã«ãªã‚Šã¾ã™ã€‚ <literal>LoginException</literal> ãŒæŠ•ã’られる㨠<literal>abort</literal> フェーズ完了ã®å¤±æ•—ã¨ã„ã†ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ true ãŒè¿”ã•ã‚Œã‚‹ã¨ãƒ¡ã‚½ãƒƒãƒ‰ã¯æˆåŠŸã§ã€ false ãŒè¿”ã•ã‚ŒãŸå ´åˆã¯ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ç„¡è¦–ã•ã‚Œã‚‹ã§ã‚ã‚ã†ã“ã¨ã‚’示ã—ã¦ã„ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:370
@@ -1287,7 +1572,7 @@
"<literal>LoginException</literal>. A return of true indicates that the "
"method succeeded, whereas a return of false indicates that the login module "
"should be ignored."
-msgstr ""
+msgstr "ãƒã‚°ã‚¤ãƒ³æˆåŠŸã®å¾Œã«èªè¨¼çŠ¶æ…‹ã‚’削除ã™ã‚‹ãŸã‚〠アプリケーション㯠<literal>LoginContext</literal> 㧠<literal>logout</literal> を呼ã³å‡ºã—ã¾ã™ã€‚ ã“ã‚Œã«ã‚ˆã‚Šã€ å„ <literal>LoginModule</literal> 㧠<literal>logout</literal> メソッドã®å‘¼å‡ºãŒèµ·ã“ã‚Šã¾ã™ã€‚ <literal>logout</literal> メソッド㯠<literal>commit</literal> 動作ã®ã¨ãã«å½“åˆ subject ã«é–¢é€£ä»˜ã‘られã¦ã„㟠principal ã¨è¨¼æ˜Žæ›¸ã‚’削除ã—ã¾ã™ã€‚ 証明書ã¯å‰Šé™¤æ™‚ã«ç ´æ£„ã•ã‚Œã‚‹ã¹ãã§ã™ã€‚ <literal>logout</literal> メソッドã®ç½²å㯠<literal>boolean logout() throws LoginException</literal> ã«ãªã‚Šã¾ã™ã€‚ <literal>LoginException</literal> ãŒæŠ•ã’られるã¨ãƒã‚°ã‚¢ã‚¦ãƒˆãƒ—ãƒã‚»ã‚¹å®Œäº†ãŒå¤±æ•—ã—ãŸã“ã¨ã«ãªã‚Šã¾ã™ã€‚ true ãŒè¿”ã•ã‚Œã‚‹ã¨ãƒ¡ã‚½ãƒƒãƒ‰ãŒæˆåŠŸã§ã€ false ãŒè¿”ã•ã‚Œã‚‹ã¨ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ç„¡è¦–ã•ã‚Œã‚‹ã§ã‚ã‚ã†ã“ã¨ã‚’示ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:375
@@ -1310,7 +1595,7 @@
"might simply obtain credential information by using an application server "
"API. The <literal>callbackhandler</literal> interface has one method to "
"implement:"
-msgstr ""
+msgstr "<literal>LoginModule</literal> ãŒèªè¨¼æƒ…å ±ã‚’å–å¾—ã™ã‚‹ãŸã‚ユーザーã¨äº¤ä¿¡ã—ãªã‘ã‚Œã°ãªã‚‰ãªã„å ´åˆã€ <literal>CallbackHandler</literal> オブジェクトを使用ã—ã¾ã™ã€‚ アプリケーション㯠<literal>CallbackHandler</literal> インターフェースを実装ã—ã¦ãã® LoginContext ã«æ¸¡ã—ã¾ã™ã€‚ ã“ã‚ŒãŒç›´æŽ¥ã€ 基礎ã¨ãªã‚‹ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«ã“ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã‚’転é€ã—ã¾ã™ã€‚ ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ <literal>CallbackHandler</literal> を使用ã—ã¦ã€ パスワードやスマートカード PIN ãªã©ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‹ã‚‰ã®å…¥åŠ›ã‚’åŽé›†ã—ã€ çŠ¶æ…‹æƒ…å ±ãªã©ã‚’ユーザーã«æä¾›ã™ã‚‹ä¸¡æ–¹ã®å½¹å‰²ã‚’æžœãŸã—ã¾ã™ã€‚ アプリケーションã«ã‚ˆã‚‹ <literal>CallbackHandler</literal> ã®æŒ‡å®šã‚’許å¯ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€ 基礎ã¨ãªã‚‹ <literal>LoginModule</literal> ã¯ã‚¢ãƒ—リケーションãŒãƒ¦ãƒ¼ã‚¶ãƒ¼ã¨è¡Œã†äº¤ä¿¡æ–¹æ³•ã«ä¾å˜ã—ãªã„状態をç¶æŒã!
—ã¾ã™ã€‚ ãŸã¨ãˆã°ã€ GUI アプリケーション用㮠<literal>CallbackHandler</literal> ã®å®Ÿè£…ã¯ã‚¦ã‚£ãƒ³ãƒ‰ã‚¦ã‚’表示ã—ã¦ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®å…¥åŠ›ã‚’求ã‚ã‚‹å ´åˆãŒã‚ã‚Šã¾ã™ã€‚ 一方〠アプリケーションサーãƒãƒ¼ãªã© GUI ã§ã¯ãªã„環境㮠<literal>callbackhandler</literal> ã®å®Ÿè£…ã¯å˜ç´”ã«ã‚¢ãƒ—リケーションサーãƒãƒ¼ API を使ã£ã¦è¨¼æ˜Žæ›¸æƒ…å ±ã‚’å–å¾—ã™ã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“。 <literal>callbackhandler</literal> インターフェースã«ã¯å®Ÿè£…ã™ã‚‹ãƒ¡ã‚½ãƒƒãƒ‰ãŒã²ã¨ã¤ã‚ã‚Šã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:378
@@ -1320,6 +1605,9 @@
" throws java.io.IOException, \n"
" UnsupportedCallbackException;"
msgstr ""
+"void handle(Callback[] callbacks)\n"
+" throws java.io.IOException, \n"
+" UnsupportedCallbackException;"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:379
@@ -1337,17 +1625,18 @@
"does not understand how to use a <literal>Callback</literal> object passed "
"into the handle method, it throws an <literal>UnsupportedCallbackException</"
"literal> to abort the login call."
-msgstr ""
+msgstr "<literal>Callback</literal> インターフェースã¯æœ€å¾Œã«èª¬æ˜Žã™ã‚‹èªè¨¼ã‚¯ãƒ©ã‚¹ã§ã™ã€‚ デフォルトã®å®Ÿè£…ãŒã„ãã¤ã‹æä¾›ã•ã‚Œã¦ã„ã‚‹ã‚‚ã®ç”¨ã®ã‚¿ã‚°ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã§ã€ å‰ã®ä¾‹ã§ä½¿ç”¨ã—㟠<literal>NameCallback</literal> ã‚„ <literal>PasswordCallback</literal> ã‚’å«ã‚“ã§ã„ã¾ã™ã€‚ <literal>LoginModule</literal> 㯠<literal>Callback</literal> を使ã£ã¦èªè¨¼ãƒ¡ã‚«ãƒ‹ã‚ºãƒ ã§å¿…è¦ã¨ã•ã‚Œã‚‹æƒ…å ±ã‚’è¦æ±‚ã—ã¾ã™ã€‚ èªè¨¼ã®ãƒã‚°ã‚¤ãƒ³ãƒ•ã‚§ãƒ¼ã‚ºã§ã€ <literal>LoginModule</literal> 㯠<literal>Callback</literal> ã®ã‚¢ãƒ¬ã‚¤ã‚’直接〠<literal>CallbackHandler.handle</literal> メソッドã«æ¸¡ã—ã¾ã™ã€‚ <literal>callbackhandler</literal> ãŒãƒãƒ³ãƒ‰ãƒ«ãƒ¡ã‚½ãƒƒãƒ‰ã«æ¸¡ã•ã‚ŒãŸ <literal>Callback</literal> オブジェクトã®ä½¿ã„æ–¹ãŒã‚ã‹ã‚‰ãªã„å ´åˆã€ <literal>UnsupportedCallbackException</literal> を投ã’ã¦ãƒã‚°ã‚¤ãƒ³ã‚³ãƒ¼ãƒ«ã‚’ä¸æ¢ã—ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:391
#, no-c-format
msgid "The JBoss Security Model"
-msgstr ""
+msgstr "JBoss ã‚»ã‚ュリティモデル"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:392
#, no-c-format
+#, fuzzy
msgid ""
"Similar to the rest of the JBoss architecture, security at the lowest level "
"is defined as a set of interfaces for which alternate implementations may be "
@@ -1358,7 +1647,7 @@
"The_key_security_model_interfaces_and_their_relationship_to_the_JBoss_server_EJB_container_elements."
"\"/> shows a class diagram of the security interfaces and their relationship "
"to the EJB container architecture."
-msgstr ""
+msgstr "JBoss アーã‚テクãƒãƒ£ã®ä»–ã®éƒ¨åˆ†ã¨åŒæ§˜ã€ 最低é™ãƒ¬ãƒ™ãƒ«ã§ã®ã‚»ã‚ュリティã¯"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:396
@@ -1366,7 +1655,7 @@
msgid ""
"The key security model interfaces and their relationship to the JBoss server "
"EJB container elements."
-msgstr ""
+msgstr "é‡è¦ã¨ãªã‚‹ã‚»ã‚ュリティモデルã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ãŠã‚ˆã³ãã® JBoss サーãƒãƒ¼ EJB コンテナエレメントã«å¯¾ã™ã‚‹é–¢é€£æ€§"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:403
@@ -1381,6 +1670,10 @@
"The_key_security_model_interfaces_and_their_relationship_to_the_JBoss_server_EJB_container_elements."
"\"/> are summarized in the following list."
msgstr ""
+"水色ã®ã‚¯ãƒ©ã‚¹ç¾¤ã¯ã‚»ã‚ュリティインターフェースを表ã—〠黄色ã®ã‚¯ãƒ©ã‚¹ç¾¤ã¯ EJB コンテナ層を表ã—ã¦ã„ã¾ã™ã€‚ J2EE ã‚»ã‚ュリティモデルã®å®Ÿè£…ã«å¿…è¦ã¨ãªã‚‹ 2 ã¤ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã¯ <literal>org.jboss.security.AuthenticationManager</literal> 㨠<literal>org.jboss.security."
+"RealmMapping</literal> ã§ã™ã€‚ <xref linkend=\"The_JBoss_Security_Model-"
+"The_key_security_model_interfaces_and_their_relationship_to_the_JBoss_server_EJB_container_elements."
+"\"/> ã«ç¤ºã—ã¦ã„ã‚‹ã‚»ã‚ュリティインターフェースã®ãƒãƒ¼ãƒ«ã«ã¤ã„ã¦ã¯ä»¥ä¸‹ã®ä¸€è¦§ã§è¦ç´„ã—ã¦ã„ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:408
@@ -1394,7 +1687,7 @@
"is invoked to determine whether a user identity and associated credentials "
"as known in the operational environment are valid proof of the user's "
"identity."
-msgstr ""
+msgstr "<emphasis role=\"bold\">AuthenticationManager</emphasis>: ã“ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã¯ principal ã«é–¢é€£ä»˜ã‘られる署å書を検証ã™ã‚‹å½¹ç›®ã‚’æžœãŸã—ã¾ã™ã€‚ principal ã¨ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼å〠雇用者番å·ã€ ソーシャルセã‚ュリティ番å·ãªã©ã® ID ã¨ãªã‚Šã¾ã™ã€‚ 証明証ã¯ãƒ‘スワード〠セッションã‚ー〠デジタル署åãªã©ã® ID を証明ã™ã‚‹ã‚‚ã®ã«ãªã‚Šã¾ã™ã€‚ <literal>isValid</literal> メソッドã¯ãã®ç¨¼åƒç’°å¢ƒå†…ã§æ—¢çŸ¥ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ ID ã¨é–¢é€£ã¥ã‘られãŸè¨¼æ˜Žæ›¸ãŒãƒ¦ãƒ¼ã‚¶ãƒ¼ã® ID ã®æœ‰åŠ¹ãªè¨¼æ˜Žã¨ãªã‚‹ã‹ã©ã†ã‹ã‚’確定ã™ã‚‹ãŸã‚ã«å‘¼ã³å‡ºã•ã‚Œã¾ã™ã€‚ "
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:413
@@ -1407,18 +1700,19 @@
"<literal>doesUserHaveRole</literal> method validates that the user identity "
"in the operation environment has been assigned the indicated role from the "
"application domain."
-msgstr ""
+msgstr "<emphasis role=\"bold\">RealmMapping</emphasis>: ã“ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã¯ principal マッピングã¨ãƒãƒ¼ãƒ«ãƒžãƒƒãƒ”ングを行ã„ã¾ã™ã€‚ <literal>getPrincipal</literal> メソッドã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ ID を稼åƒç’°å¢ƒã§æ—¢çŸ¥ã¨ã—ã¦å–り〠アプリケーションドメイン ID ã‚’è¿”ã—ã¾ã™ã€‚ <literal>doesUserHaveRole</literal> メソッドã¯ç¨¼åƒç’°å¢ƒå†…ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ ID ãŒã‚¢ãƒ—リケーションドメインã‹ã‚‰æŒ‡ç¤ºã•ã‚Œã‚‹ãƒãƒ¼ãƒ«ã‚’割り当ã¦ã‚‰ã‚Œã¦ã„ã‚‹ã“ã¨ã‚’検証ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:418
#, no-c-format
+#, fuzzy
msgid ""
"<emphasis role=\"bold\">SecurityProxy</emphasis>: This interface describes "
"the requirements for a custom <literal>SecurityProxyInterceptor</literal> "
"plugin. A <literal>SecurityProxy</literal> allows for the externalization of "
"custom security checks on a per-method basis for both the EJB home and "
"remote interface methods."
-msgstr ""
+msgstr "<emphasis role=\"bold\">SecurityProxy</emphasis>: ã“ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã¯ã‚«ã‚¹ã‚¿ãƒ ã® <literal>SecurityProxyInterceptor</literal> プラグインã®è¦ä»¶ã‚’記述ã—ã¾ã™ã€‚ <literal>SecurityProxy</literal> ã¯"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:423
@@ -1428,7 +1722,7 @@
"subinterface of <literal>AuthenticationManager</literal> that adds accessor "
"methods for obtaining the security domain name of the security manager and "
"the current thread's authenticated <literal>Subject</literal>."
-msgstr ""
+msgstr "<emphasis role=\"bold\">SubjectSecurityManager</emphasis>: ã‚»ã‚ュリティ管ç†ã®ã‚»ã‚ュリティドメインåãŠã‚ˆã³ç¾ã‚¹ãƒ¬ãƒƒãƒ‰ã®èªè¨¼ <literal>Subject</literal> ã‚’å–å¾—ã™ã‚‹ãŸã‚ã®ã‚¢ã‚¯ã‚»ã‚¹æ©Ÿæ§‹ãƒ¡ã‚½ãƒƒãƒ‰ã‚’è¿½åŠ ã™ã‚‹ <literal>AuthenticationManager</literal> ã®ã‚µãƒ–インターフェースã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:428
@@ -1443,7 +1737,7 @@
"TrustManagerFactory</literal> interfaces. This interface is a work in "
"progress that will be the basis of a multi-domain security architecture that "
"will better support ASP style deployments of applications and resources."
-msgstr ""
+msgstr "<emphasis role=\"bold\">SecurityDomain</emphasis>: <literal>AuthenticationManager</literal>〠<literal>RealmMapping</literal>〠<literal>SubjectSecurityManager</literal> ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã®æ‹¡å¼µã§ã™ã€‚ JAAS Subject をベースã¨ã™ã‚‹ç·åˆçš„ãªã‚»ã‚ュリティインターフェースã¸ã®å‹•ãã§ã‚り〠<literal>java.security.KeyStore</literal>〠JSSE <literal>com.sun.net.ssl.KeyManagerFactory</literal>〠<literal>com.sun.net.ssl.TrustManagerFactory</literal> インターフェースã«ãªã‚Šã¾ã™ã€‚ ã“ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã¯æœªå®Œæˆã§ã‚り〠アプリケーションやリソース㮠ASP スタイルã®é–‹ç™ºã‚’サãƒãƒ¼ãƒˆã™ã‚‹ãƒžãƒ«ãƒãƒ‰ãƒ¡ã‚¤ãƒ³ã‚»ã‚ュリティアーã‚テクãƒãƒ£ã®åŸºç›¤ã¨ãªã‚‹äºˆå®šã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:433
@@ -1467,6 +1761,16 @@
"The_relationship_between_the_JBossSX_framework_implementation_classes_and_the_JBoss_server_EJB_container_layer."
"\"/>."
msgstr ""
+"<literal>AuthenticationManager</literal>〠<literal>RealmMapping</literal>〠<literal>SecurityProxy</literal> ã®å„インターフェースã«ã¯ JAAS 関連ã®ã‚¯ãƒ©ã‚¹ã«å¯¾ã™ã‚‹é–¢é€£æ€§ã¯ãªã„ã®ã§æ³¨æ„ã—ã¦ãã ã•ã„。 JBossSX フレームワーク㯠JAAS ã«å¤§ããä¾å˜ã—ã¾ã™ãŒã€ J2EE ã‚»ã‚ュリティモデルã®å®Ÿè£…ã«è¦ã•ã‚Œã‚‹åŸºæœ¬çš„ãªã‚»ã‚ュリティインターフェースã¯ä¾å˜ã—ã¾ã›ã‚“。 JBossSX フレームワーク㯠JAAS をベー<xref "
+"linkend=\"The_JBoss_Security_Model-"
+"The_relationship_between_the_JBossSX_framework_implementation_classes_and_the_JBoss_server_EJB_container_layer."
+"\"/>スã¨ã™ã‚‹åŸºæœ¬çš„ãªã‚»ã‚ュリティプラグインインターフェースã®å˜ãªã‚‹å®Ÿè£…ã§ã™ã€‚ ã“ã‚Œã«ã¤ã„ã¦ã¯ <xref "
+"linkend=\"The_JBoss_Security_Model-"
+"The_relationship_between_the_JBossSX_framework_implementation_classes_and_the_JBoss_server_EJB_container_layer."
+"\"/> ã®ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆå›³ã§ç¤ºã—ã¾ã™ã€‚ ã“ã®ãƒ—ラグインアーã‚テクãƒãƒ£ã®çµæžœã€ ãã®ã‚ˆã†ã«æœ›ã‚ã° JAAS を使用ã—ãªã„独自ã®ã‚«ã‚¹ã‚¿ãƒ ã‚»ã‚ュリティ管ç†å®Ÿè£…㧠JAAS ベース㮠JBossSX 実装クラスを自由ã«ç½®ãæ›ãˆã‚‹ã“ã¨ãŒã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚ ç½®ãæ›ãˆã‚‹æ–¹æ³•ã«ã¤ã„ã¦ã¯ã€ <xref "
+"linkend=\"The_JBoss_Security_Model-"
+"The_relationship_between_the_JBossSX_framework_implementation_classes_and_the_JBoss_server_EJB_container_layer."
+"\"/> 㧠JBossSX ã®è¨å®šã«ä½¿ç”¨ã§ãã‚‹ JBossSX MBean を確èªã—ã¦ãã ã•ã„。"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:437
@@ -1474,7 +1778,7 @@
msgid ""
"The relationship between the JBossSX framework implementation classes and "
"the JBoss server EJB container layer."
-msgstr ""
+msgstr "JBossSX フレームワーク実装ã®ã‚¯ãƒ©ã‚¹ç¾¤ã¨ JBoss サーãƒãƒ¼ EJB コンテナ層ã¨ã®é–¢ä¿‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:445
@@ -1495,6 +1799,10 @@
"xml_deployment_descriptors.\"/> shows the JBoss-specific EJB and web "
"application deployment descriptor's security-related elements."
msgstr ""
+"æœ¬ç« ã®å†’é ã§ã® J2EE 標準セã‚ュリティモデルã®èª¬æ˜Žã¯ã€ ã‚»ã‚ュリティを有効ã«ã™ã‚‹ãŸã‚ã« JBoss サーãƒãƒ¼å›ºæœ‰ã®ãƒ‡ãƒ—ãƒã‚¤ãƒ¡ãƒ³ãƒˆè¨˜è¿°åを使用ã™ã‚‹å ´åˆã®è¦ä»¶ã‚’説明ã—ã¦çµ‚了ã—ã¾ã—ãŸã€‚ ã“ã®è¨å®šã«é–¢ã™ã‚‹è©³ç´°ã‚’ã“ã“ã«è¨˜ã—ã¾ã™ã€‚ <xref linkend="
+"\"Enabling_Declarative_Security_in_JBoss_Revisited-"
+"The_security_element_subsets_of_the_JBoss_server_jboss.xml_and_jboss_web."
+"xml_deployment_descriptors.\"/> ã§ã¯ã€ JBoss 固有㮠EJB ãŠã‚ˆã³ ウェブアプリケーションã®ãƒ‡ãƒ—ãƒã‚¤ãƒ¡ãƒ³ãƒˆè¨˜è¿°åã®ã‚»ã‚ュリティ関連エレメントを示ã—ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:450
@@ -1502,7 +1810,7 @@
msgid ""
"The security element subsets of the JBoss server jboss.xml and jboss-web.xml "
"deployment descriptors."
-msgstr ""
+msgstr "JBoss サーãƒãƒ¼ã® jboss.xml 㨠jboss-web.xml ã®å„デプãƒã‚¤ãƒ¡ãƒ³ãƒˆè¨˜è¿°åã®ã‚»ã‚ュリティエレメントã®ã‚µãƒ–セット"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:457
@@ -1516,7 +1824,7 @@
"domain in effect for all EJBs in the deployment unit. This is the typical "
"usage because mixing security managers within a deployment unit complicates "
"inter-component operation and administration."
-msgstr ""
+msgstr "<literal>security-domain</literal> エレメントã®å€¤ã¯ JBoss ㌠EJB ãŠã‚ˆã³ã‚¦ã‚§ãƒ–コンテナ用ã«ä½¿ç”¨ã™ã‚‹ã‚»ã‚ュリティ管ç†ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹å®Ÿè£…ã® JNDI åを指定ã—ã¾ã™ã€‚ <literal>AuthenticationManager</literal> ãŠã‚ˆã³ <literal>RealmMapping</literal> ã®ä¸¡ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã‚’実装ã™ã‚‹ã‚ªãƒ–ジェクトã§ã™ã€‚ トップレベルã®ã‚¨ãƒ¬ãƒ¡ãƒ³ãƒˆã¨ã—ã¦æŒ‡å®šã™ã‚‹ã¨ã€ 導入ユニット内ã®ã™ã¹ã¦ã® EJB ã«å¯¾ã—ã¦æŽ¡ç”¨ã•ã‚Œã‚‹ã‚»ã‚ュリティドメインを定義ã—ã¾ã™ã€‚ 1 導入ユニット内ã§è¤‡æ•°ã®ã‚»ã‚ュリティ管ç†ã‚’混在ã•ã›ã‚‹ã¨å†…部コンãƒãƒ¼ãƒãƒ³ãƒˆã®å‹•ä½œã‚„管ç†ãŒè¤‡é›‘ã«ãªã‚‹ãŸã‚〠ã“ã‚ŒãŒä¸€èˆ¬çš„ãªä½¿ç”¨æ–¹æ³•ã¨ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:460
@@ -1525,7 +1833,7 @@
"To specify the security domain for an individual EJB, you specify the "
"<literal>security-domain</literal> at the container configuration level. "
"This will override any top-level security-domain element."
-msgstr ""
+msgstr "個別 EJB ã«å¯¾ã—ã¦ã‚»ã‚ュリティドメインを指定ã™ã‚‹ã«ã¯ã€ コンテナã®è¨å®šãƒ¬ãƒ™ãƒ«ã§ <literal>security-domain</literal> を指定ã—ã¾ã™ã€‚ ã“ã‚Œã¯ãƒˆãƒƒãƒ—レベル㮠security-domain エレメントを上書ãã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:463
@@ -1540,7 +1848,7 @@
"target EJB to obtain a non-null <literal>Principal</literal> for the caller "
"using the <literal>getUserPrincipal</literal> method. This is a J2EE "
"specification requirement."
-msgstr ""
+msgstr "<literal>unauthenticated-principal</literal> エレメントã¯èªè¨¼ã®ãªã„ユーザー㌠EJB を呼ã³å‡ºã—ãŸå ´åˆã« <literal>EJBContext.getUserPrincipal</literal> メソッドã«ã‚ˆã£ã¦è¿”ã•ã‚Œã‚‹ <literal>Principal</literal> オブジェクトã«ä½¿ç”¨ã™ã‚‹åå‰ã‚’指定ã—ã¾ã™ã€‚ ã“ã‚Œã¯èªè¨¼ã®ãªã„呼ã³å‡ºã—å´ã«ç‰¹æ®Šãªãƒ‘ーミッションを与ãˆã‚‹ã‚‚ã®ã§ã¯ãªã„ã®ã§æ³¨æ„ã—ã¦ãã ã•ã„。 主ãªç›®çš„ã¯ã€ 安全ã§ã¯ãªã„サーブレットãŠã‚ˆã³ JSP ページãŒå®‰å…¨ã§ã¯ãªã„ EJB を呼ã³å‡ºã—〠目的㮠EJB ã« <literal>getUserPrincipal</literal> メソッドを使ã£ã¦å‘¼ã³å‡ºã—å´ã® null ã§ã¯ãªã„ <literal>Principal</literal> ã‚’å–å¾—ã•ã›ã‚‹ã“ã¨ãŒã§ãるよã†ã«ã™ã‚‹ã“ã¨ã§ã™ã€‚ ã“れ㯠J2EE 仕様è¦ä»¶ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:466
@@ -1559,7 +1867,7 @@
"The <literal>org.jboss.security.SubjectSecurityProxy</literal> is an example "
"<literal>SecurityProxy</literal> implementation used by the default JBossSX "
"installation."
-msgstr ""
+msgstr "<literal>security-proxy</literal> エレメントã¯ã€ ã‚»ã‚ュリティ論ç†ã‚’ EJB 実装ã«çµ„ã¿è¾¼ã‚€ã“ã¨ãªã EJB 宣言型セã‚ュリティモデルã®ç¯„囲を越ãˆã‚‹ã‚»ã‚ュリティãƒã‚§ãƒƒã‚¯ã‚’è¦æ±‚ã”ã¨ã«è¨±å¯ã™ã‚‹ã‚«ã‚¹ã‚¿ãƒ ã®ã‚»ã‚ュリティプãƒã‚シ実装をè˜åˆ¥ã—ã¾ã™ã€‚ <literal>org.jboss.security.SecurityProxy</literal> インターフェースã®å®Ÿè£…〠ã‚ã‚‹ã„ã¯å…±é€šã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã‚’ã¾ã£ãŸã実装ã™ã‚‹ã“ã¨ãªã安全化を図る EJB ã®ãƒãƒ¼ã‚«ãƒ«ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã€ ãƒãƒ¼ã‚«ãƒ«ãƒ›ãƒ¼ãƒ 〠リモート〠ã‚ã‚‹ã„ã¯ãƒ›ãƒ¼ãƒ 内ã§ãƒ¡ã‚½ãƒƒãƒ‰ã‚’実装ã™ã‚‹å˜ãªã‚‹ã‚ªãƒ–ジェクトã§ã‚ã‚Šãˆã¾ã™ã€‚ 特定ã®ã‚¯ãƒ©ã‚¹ãŒ <literal>SecurityProxy</literal> インターフェースを実装ã—ãªã„å ´åˆã€ インスタンスã¯ãƒ¡ã‚½ãƒƒãƒ‰ã®å‘¼ã³å‡ºã—ã‚’ãã®ã‚ªãƒ–ジェクトã«å§”ä»»ã™ã‚‹ <literal>SecurityProxy</literal> 実装内ã«ãƒ©ãƒƒãƒ—ã•ã‚Œãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚!
“。 <literal>org.jboss.security.SubjectSecurityProxy</literal> ã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã® JBossSX インストールã§ä½¿ç”¨ã•ã‚Œã‚‹ <literal>SecurityProxy</literal> 実装例ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:469
@@ -1578,6 +1886,11 @@
"\"/>, and the full source code is available in the <literal>src/main/org/"
"jboss/book/security/ex1</literal> directory of the book examples."
msgstr ""
+"平凡ãªã‚¹ãƒ†ãƒ¼ãƒˆãƒ¬ã‚¹ã‚»ãƒƒã‚·ãƒ§ãƒ³ bean ã®ã‚³ãƒ³ãƒ†ã‚ストã®ã‚«ã‚¹ã‚¿ãƒ <literal>SecurityProxy</literal> ã®ä¾‹ã‚’見ã¦ã¿ã¾ã™ã€‚ カスタム<literal>SecurityProxy</literal> 㯠bean ã® <literal>echo</literal> メソッドをãã®å¼•æ•°ã¨ã—㦠4 æ–‡å—ã®å˜èªžã‚’使ã£ã¦å‘¼ã³å‡ºã—ã‚’è¡Œã†è€…ãŒã„ãªã„ã“ã¨ã‚’検証ã—ã¾ã™ã€‚ ã‚»ã‚ュリティコンテã‚ストã¯ãƒ¡ã‚½ãƒƒãƒ‰ã®å¼•æ•°ã§ã‚り呼ã³å‡ºã—å´ã®ãƒ—ãƒãƒ‘ティã§ã¯ãªã„ãŸã‚〠<literal>FourLetterEchoInvoker</literal> ãƒãƒ¼ãƒ«ã‚’定義ã§ããªã„ã®ã§ã€ ã“ã‚Œã¯ãƒãƒ¼ãƒ«ãƒ™ãƒ¼ã‚¹ã®ã‚»ã‚ュリティã§ã¯ã§ããªã„ãƒã‚§ãƒƒã‚¯ã«ãªã‚Šã¾ã™ã€‚ カスタム<literal>SecurityProxy</literal> ã®ã‚³ãƒ¼ãƒ‰ã‚’ <xref linkend="
+"\"Enabling_Declarative_Security_in_JBoss_Revisited-"
+"The_example_1_custom_EchoSecurityProxy_implementation_that_enforces_the_echo_argument_based_security_constraint."
+"\"/> ã«ç¤ºã—ã¾ã™ã€‚ 完全ãªã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã¯ãƒ–ックサンプル㮠<literal>src/main/org/"
+"jboss/book/security/ex1</literal> ディレクトリをã”覧ãã ã•ã„。"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:472
@@ -1585,7 +1898,7 @@
msgid ""
"The example 1 custom EchoSecurityProxy implementation that enforces the echo "
"argument-based security constraint."
-msgstr ""
+msgstr "例 1〠echo 引数ベースã®ã‚»ã‚ュリティ制é™ã‚’強制実行ã™ã‚‹ã‚«ã‚¹ã‚¿ãƒ EchoSecurityProxy 実装"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:473
@@ -1654,6 +1967,68 @@
" }\n"
"}"
msgstr ""
+"package org.jboss.book.security.ex1;\n"
+" \n"
+"import java.lang.reflect.Method;\n"
+"import javax.ejb.EJBContext;\n"
+" \n"
+"import org.apache.log4j.Category;\n"
+" \n"
+"import org.jboss.security.SecurityProxy;\n"
+" \n"
+"/** A simple example of a custom SecurityProxy implementation\n"
+" * that demonstrates method argument based security checks.\n"
+" * @author Scott.Stark at jboss.org\n"
+" * @version $Revision: 1.12 $\n"
+" */\n"
+"public class EchoSecurityProxy implements SecurityProxy\n"
+"{\n"
+" Category log = Category.getInstance(EchoSecurityProxy.class);\n"
+" Method echo;\n"
+" \n"
+" public void init(Class beanHome, Class beanRemote,\n"
+" Object securityMgr)\n"
+" throws InstantiationException\n"
+" {\n"
+" log.debug(\"init, beanHome=\"+beanHome\n"
+" + \", beanRemote=\"+beanRemote\n"
+" + \", securityMgr=\"+securityMgr);\n"
+" // Get the echo method for equality testing in invoke\n"
+" try {\n"
+" Class[] params = {String.class};\n"
+" echo = beanRemote.getDeclaredMethod(\"echo\", params);\n"
+" } catch(Exception e) {\n"
+" String msg = \"Failed to finde an echo(String) method\";\n"
+" log.error(msg, e);\n"
+" throw new InstantiationException(msg);\n"
+" }\n"
+" }\n"
+" \n"
+" public void setEJBContext(EJBContext ctx)\n"
+" {\n"
+" log.debug(\"setEJBContext, ctx=\"+ctx);\n"
+" }\n"
+" \n"
+" public void invokeHome(Method m, Object[] args)\n"
+" throws SecurityException\n"
+" {\n"
+" // We don't validate access to home methods\n"
+" }\n"
+"\n"
+" public void invoke(Method m, Object[] args, Object bean)\n"
+" throws SecurityException\n"
+" {\n"
+" log.debug(\"invoke, m=\"+m);\n"
+" // Check for the echo method\n"
+" if (m.equals(echo)) {\n"
+" // Validate that the msg arg is not 4 letter word\n"
+" String arg = (String) args[0];\n"
+" if (arg == null || arg.length() == 4)\n"
+" throw new SecurityException(\"No 4 letter words\");\n"
+" }\n"
+" // We are not responsible for doing the invoke\n"
+" }\n"
+"}"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:474
@@ -1686,6 +2061,10 @@
"xml_descriptor_which_configures_the_EchoSecurityProxy_as_the_custom_security_proxy_for_the_EchoBean."
"\"/>."
msgstr ""
+"<literal>EchoSecurityProxy</literal> ã‚’ <literal>EchoBean</literal> ã®ã‚«ã‚¹ã‚¿ãƒ プãƒã‚ã‚·ã¨ã—ã¦ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹é–¢é€£ã¥ã‘られ㟠<literal>jboss.xml</literal> 記述åã‚’ <xref linkend="
+"\"Enabling_Declarative_Security_in_JBoss_Revisited-The_jboss."
+"xml_descriptor_which_configures_the_EchoSecurityProxy_as_the_custom_security_proxy_for_the_EchoBean."
+"\"/> ã«ç¤ºã—ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:480
@@ -1693,7 +2072,7 @@
msgid ""
"The jboss.xml descriptor, which configures the EchoSecurityProxy as the "
"custom security proxy for the EchoBean."
-msgstr ""
+msgstr "EchoBean ã®ã‚«ã‚¹ã‚¿ãƒ ã‚»ã‚ュリティプãƒã‚ã‚·ã¨ã—㦠EchoSecurityProxy ã‚’è¨å®šã™ã‚‹ jboss.xml 記述å"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:481
@@ -1711,6 +2090,17 @@
" </enterprise-beans>\n"
"</jboss>"
msgstr ""
+"<jboss>\n"
+" <security-domain>java:/jaas/other</security-domain>\n"
+" \n"
+" <enterprise-beans>\n"
+" <session>\n"
+" <ejb-name>EchoBean</ejb-name>\n"
+" <security-proxy>org.jboss.book.security.ex1."
+"EchoSecurityProxy</security-proxy>\n"
+" </session>\n"
+" </enterprise-beans>\n"
+"</jboss>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:482
@@ -1720,6 +2110,8 @@
"<literal>EchoBean.echo</literal> method with the arguments <literal>Hello</"
"literal> and <literal>Four</literal> as illustrated in this fragment:"
msgstr ""
+"次ã«ç¤ºã™ã‚ˆã†ã«ã€ <literal>EchoBean.echo</literal> メソッドを引数 <literal>Hello</"
+"literal> 㨠<literal>Four</literal> ã§å‘¼ã³å‡ºãã†ã¨ã™ã‚‹ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚’実行ã—ã¦ã‚«ã‚¹ã‚¿ãƒ プãƒã‚シをテストã—ã¦ã¿ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:485
@@ -1744,6 +2136,24 @@
" }\n"
"}"
msgstr ""
+"public class ExClient\n"
+"{\n"
+" public static void main(String args[])\n"
+" throws Exception\n"
+" {\n"
+" Logger log = Logger.getLogger(\"ExClient\");\n"
+" log.info(\"Looking up EchoBean\");\n"
+"\n"
+" InitialContext iniCtx = new InitialContext();\n"
+" Object ref = iniCtx.lookup(\"EchoBean\");\n"
+" EchoHome home = (EchoHome) ref;\n"
+" Echo echo = home.create();\n"
+"\n"
+" log.info(\"Created Echo\");\n"
+" log.info(\"Echo.echo('Hello') = \"+echo.echo(\"Hello\"));\n"
+" log.info(\"Echo.echo('Four') = \"+echo.echo(\"Four\"));\n"
+" }\n"
+"}"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:486
@@ -1752,7 +2162,7 @@
"The first call should succeed, while the second should fail due to the fact "
"that <literal>Four</literal> is a four-letter word. Run the client as "
"follows using Ant from the examples directory:"
-msgstr ""
+msgstr "最åˆã®ã‚³ãƒ¼ãƒ«ã¯æˆåŠŸã™ã‚‹ã¯ãšã§ã™ã€‚ 2 番目ã®ã‚³ãƒ¼ãƒ«ã¯ <literal>Four</literal> ㌠4 æ–‡å—ã®å˜èªžã§ã‚ã‚‹ãŸã‚失敗ã™ã‚‹ã¯ãšã§ã™ã€‚ examples ディレクトリã‹ã‚‰ Ant を使ã£ã¦æ¬¡ã®ã‚ˆã†ã«ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚’実行ã—ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:489
@@ -1772,6 +2182,19 @@
" [java] Caused by: java.lang.SecurityException: No 4 letter words\n"
"..."
msgstr ""
+"[examples]$ ant -Dchap=security -Dex=1 run-example\n"
+"run-example1:\n"
+"...\n"
+" [echo] Waiting for 5 seconds for deploy...\n"
+" [java] [INFO,ExClient] Looking up EchoBean\n"
+" [java] [INFO,ExClient] Created Echo\n"
+" [java] [INFO,ExClient] Echo.echo('Hello') = Hello\n"
+" [java] Exception in thread \"main\" java.rmi.AccessException: "
+"SecurityException; nested exception is: \n"
+" [java] java.lang.SecurityException: No 4 letter words\n"
+"...\n"
+" [java] Caused by: java.lang.SecurityException: No 4 letter words\n"
+"..."
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:490
@@ -1784,13 +2207,13 @@
"exception is that the <literal>SecurityException(\"No 4 letter words\")</"
"literal> generated by the <literal>EchoSecurityProxy</literal> was thrown to "
"abort the attempted method invocation as desired."
-msgstr ""
+msgstr "<literal>echo('Hello')</literal> メソッドã®ã‚³ãƒ¼ãƒ«ã¯æœŸå¾…通りæˆåŠŸã—〠<literal>echo('Four')</literal> メソッドã®ã‚³ãƒ¼ãƒ«ã¯ä¹±é›‘ãªè¡¨ç¤ºã¨ãªã‚‹ä¾‹å¤–ã«ãªã‚Šã€ ã“れも期待通りã§ã™ã€‚ 上記ã®å‡ºåŠ›ã¯ç´™é¢ã®åˆ¶ç´„上〠çœç•¥ã•ã‚Œã¦ã„ã¾ã™ã€‚ ã“ã®ä¾‹å¤–ã§é‡è¦ã¨ãªã‚‹éƒ¨åˆ†ã¯ã€ 希望通り試行ã•ã‚ŒãŸãƒ¡ã‚½ãƒƒãƒ‰å‘¼ã³å‡ºã—ã‚’ä¸æ¢ã™ã‚‹ãŸã‚ <literal>EchoSecurityProxy</literal> ã«ã‚ˆã£ã¦ç”Ÿæˆã•ã‚ŒãŸ <literal>SecurityException(\"No 4 letter words\")</literal> ãŒæŠ•ã’られãŸã¨ã„ã†éƒ¨åˆ†ã§ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:498
#, no-c-format
msgid "The JBoss Security Extension Architecture"
-msgstr ""
+msgstr "JBoss ã‚»ã‚ュリティ拡張アーã‚テクãƒãƒ£"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:499
@@ -1805,7 +2228,7 @@
"or LDAP server to a sophisticated security software suite. The integration "
"flexibility is achieved using the pluggable authentication model available "
"in the JAAS framework."
-msgstr ""
+msgstr "å‰è¿°ã®ä¸€èˆ¬çš„㪠JBoss ã‚»ã‚ュリティ層ã«ã¤ã„ã¦ã®èª¬æ˜Žã§ã¯ã€ JBossSX ã‚»ã‚ュリティ拡張フレームワークã¯ã‚»ã‚ュリティ層インターフェースã®å®Ÿè£…ã§ã‚ã‚‹ã¨è¨˜è¼‰ã—ã¦ã„ã¾ã™ã€‚ ã“れ㯠JBossSX フレームワークã®ä¸»è¦ãªç›®çš„ã¨ãªã‚Šã¾ã™ã€‚ 実装ã®è©³ç´°ã¯ã€ æ—¢å˜ã®ã‚»ã‚ュリティインフラストラクãƒãƒ£ã«çµ±åˆã™ã‚‹éš›ã®ã‚«ã‚¹ã‚¿ãƒžã‚¤ã‚ºãŒå¤šæ§˜ã§ã‚る点ã§èˆˆå‘³æ·±ã„ã‚‚ã®ãŒã‚ã‚Šã¾ã™ã€‚ ã‚»ã‚ュリティインフラストラクãƒãƒ£ã¯ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã‚„ LDAP サーãƒãƒ¼ã‹ã‚‰é«˜åº¦ãªã‚»ã‚ュリティソフトウェアスィートã¾ã§ãªã‚“ã§ã‚‚構ã„ã¾ã›ã‚“。 JAAS フレームワークã®ãƒ—ラグå¯èƒ½ãªèªè¨¼ãƒ¢ãƒ‡ãƒ«ã‚’使用ã™ã‚‹ã¨æŸ”軟性ã®ã‚ã‚‹çµ±åˆãŒå®Ÿç¾ã§ãã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:502
@@ -1820,6 +2243,10 @@
"the EJB and web container layers based on the <literal>security-domain</"
"literal> element of the corresponding component deployment descriptor."
msgstr ""
+"JBossSX フレームワークã®å¿ƒè‡“部分㯠<literal>org.jboss.security.plugins."
+"JaasSecurityManager</literal> ã§ã™ã€‚ ã“れ㯠<literal>AuthenticationManager</literal> 㨠<literal>RealmMapping</literal> インターフェースã®ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆå®Ÿè£…ã«ãªã‚Šã¾ã™ã€‚ <xref linkend=\"The_JBoss_Security_Extension_Architecture-"
+"The_relationship_between_the_security_domain_component_deployment_descriptor_value_the_component_container_and_the_JaasSecurityManager."
+"\"/> ã§ã¯ã€ <literal>JaasSecurityManager</literal> ãŒè©²å½“コンãƒãƒ¼ãƒãƒ³ãƒˆãƒ‡ãƒ—ãƒã‚¤ãƒ¡ãƒ³ãƒˆè¨˜è¿°åã® <literal>security-domain</literal> エレメントをベースã¨ã™ã‚‹ EJB ãŠã‚ˆã³ã‚¦ã‚§ãƒ–コンテナã®å±¤ã«ã©ã®ã‚ˆã†ã«çµ±åˆåŒ–ã‚’è¡Œã†ã‹ã‚’示ã—ã¦ã„ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:506
@@ -1844,7 +2271,7 @@
"perform its role. When a secured component is requested, the security "
"interceptor delegates security checks to the security manager instance "
"associated with the container."
-msgstr ""
+msgstr "ã‚»ã‚ュリティドメイン <literal>jwdomain</literal> ã®é…下ã§å®‰å…¨åŒ–ã•ã‚ŒãŸ EJB ãŠã‚ˆã³ã‚¦ã‚§ãƒ–コンテントã®ä¸¡æ–¹ã‚’å«ã‚€ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ライズアプリケーションを示ã—ã¦ã„ã¾ã™ã€‚ EJB ãŠã‚ˆã³ã‚¦ã‚§ãƒ–コンテナã«ã¯ã‚»ã‚ュリティインターセプタをå«ã‚€è¦æ±‚インターセプタアーã‚テクãƒãƒ£ãŒã‚り〠コンテナセã‚ュリティモデルを強制実施ã—ã¾ã™ã€‚ 導入時ã«ã€ <literal>jboss.xml</literal> 㨠<literal>jboss-web.xml</literal> 記述åã® <literal>security-domain</literal> エレメント値ãŒã‚³ãƒ³ãƒ†ãƒŠã«é–¢é€£ä»˜ã‘られるセã‚ュリティ管ç†ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã‚’å–å¾—ã™ã‚‹ãŸã‚ã«ä½¿ç”¨ã•ã‚Œã¾ã™ã€‚ 次ã«ã‚»ã‚ュリティインターセプタã¯ã‚»ã‚ュリティ管ç†ã‚’使ã£ã¦ãã®ãƒãƒ¼ãƒ«ã‚’実行ã—ã¾ã™ã€‚ ã‚»ã‚ュアãªã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆãŒè¦æ±‚ã•ã‚Œã‚‹ã¨ã€ ã‚»ã‚ュリティインターセプタã¯ã‚»ã‚ュリティãƒã‚§ãƒƒã‚¯ã‚’コンテナã!
«é–¢é€£ã¥ã‘られãŸã‚»ã‚ュリティ管ç†ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã«å§”ä»»ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:516
@@ -1858,16 +2285,19 @@
"<literal>JaasSecurityManager</literal> implementation and its use of JAAS in "
"the following section."
msgstr ""
+"JBossSX <literal>JaasSecurityManager</literal> 実装ã¯ã€ <literal>security-"
+"domain</literal> エレメント値ã¨ä¸€è‡´ã™ã‚‹åå‰ã®é…下ã«è¨å®šã•ã‚Œã‚‹ JAAS ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®å®Ÿè¡Œã«ã‚ˆã£ã¦å¾—られる <literal>Subject</literal> インスタンスã«é–¢é€£ã¥ã‘られãŸæƒ…å ±ã‚’å…ƒã«ã‚»ã‚ュリティãƒã‚§ãƒƒã‚¯ã‚’è¡Œã„ã¾ã™ã€‚ 次ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã§ã¯ <literal>JaasSecurityManager</literal> 実装ã¨ãã® JAAS ã®ä½¿ç”¨ã«ã¤ã„ã¦è©³ã—ã見ã¦ã„ãã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:520
#, no-c-format
msgid "How the JaasSecurityManager Uses JAAS"
-msgstr ""
+msgstr "JaasSecurityManager ã«ã‚ˆã‚‹ JAAS ã®ä½¿ç”¨æ–¹æ³•"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:521
#, no-c-format
+#, fuzzy
msgid ""
"The <literal>JaasSecurityManager</literal> uses the JAAS packages to "
"implement the <literal>AuthenticationManager</literal> and "
@@ -1879,7 +2309,7 @@
"mapping behavior. Thus, you can use the <literal>JaasSecurityManager</"
"literal> across different security domains simply by plugging in different "
"login module configurations for the domains."
-msgstr ""
+msgstr "<literal>JaasSecurityManager</literal> 㯠JAAS パッケージ群を使ã£ã¦ <literal>AuthenticationManager</literal> ãŠã‚ˆã³ <literal>RealmMapping</literal> インターフェース動作を実装ã—ã¾ã™ã€‚ 特ã«ã€ ãã®å‹•ä½œã¯ã‚»ã‚ュリティドメインã«ä¸€è‡´ã™ã‚‹åå‰é…下ã§è¨å®šã•ã‚Œã‚‹ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã®å®Ÿè¡Œã‹ã‚‰å‰²ã‚Šå½“ã¦ã‚‰ã‚Œã¦ã„ã‚‹ <literal>JaasSecurityManager</literal> "
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:524
@@ -1894,7 +2324,7 @@
"assigned a security domain named <literal>jwdomain</literal> using the "
"<literal>jboss.xml</literal> descriptor <literal>security-domain</literal> "
"element."
-msgstr ""
+msgstr "JAAS èªè¨¼ãƒ—ãƒã‚»ã‚¹ã«ãŠã‘ã‚‹ <literal>JaasSecurityManager</literal> ã®ä½¿ç”¨è©³ç´°ã‚’説明ã™ã‚‹ãŸã‚〠EJB ホームメソッド呼ã³å‡ºã—ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå‘¼ã³å‡ºã—を見ã¦ã„ãã¾ã™ã€‚ å‰ææ¡ä»¶ã¨ãªã‚‹è¨å®šã¯ã€ EJB ㌠JBoss サーãƒãƒ¼å†…ã«å°Žå…¥ã•ã‚Œã¦ã„ã¦ã€ ãã®ãƒ›ãƒ¼ãƒ インターフェースメソッド㌠<literal>ejb-jar.xml</literal> 記述å内㮠<literal>method-permission</literal> エレメントを使ã£ã¦å®‰å…¨ã«ã•ã‚Œã¦ã„ã‚‹ã“ã¨ã€ ã¾ãŸ <literal>jboss.xml</literal> 記述å <literal>security-domain</literal> エレメントを使ã£ã¦ <literal>jwdomain</literal> ã¨ã„ã†åå‰ã®ã‚»ã‚ュリティドメインãŒå‰²ã‚Šå½“ã¦ã‚‰ã‚Œã¦ã„ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:528
@@ -1902,7 +2332,7 @@
msgid ""
"An illustration of the steps involved in the authentication and "
"authorization of a secured EJB home method invocation."
-msgstr ""
+msgstr "安全化ãŒå›³ã‚‰ã‚ŒãŸ EJB ホームメソッド呼ã³å‡ºã—ã®èªè¨¼ã¨æ‰¿èªã«é–¢é€£ã™ã‚‹æ‰‹é †ã®å›³è§£"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:535
@@ -1910,7 +2340,7 @@
msgid ""
"provides a view of the client to server communication we will discuss. The "
"numbered steps shown are:"
-msgstr ""
+msgstr "ã“ã‚Œã‹ã‚‰èª¬æ˜Žã™ã‚‹ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ã‚µãƒ¼ãƒãƒ¼ã¸ã®é€šä¿¡ã‚’図解ã—ã¦ã„ã¾ã™ã€‚ ステップ番å·ã”ã¨ä»¥ä¸‹ã«ç¤ºã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:540
@@ -1935,6 +2365,9 @@
"later authentication on the server. The identity of the client is not "
"authenticated on the client."
msgstr ""
+"クライアントã¯ã¾ãš JAAS ãƒã‚°ã‚¤ãƒ³ã‚’è¡Œã„èªè¨¼ã«å¯¾ã—㦠principal ã¨è¨¼æ˜Žæ›¸ã‚’確立ã—ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“。 図ã§ã¯ <emphasis>Client Side Login (クライアントå´ã®ãƒã‚°ã‚¤ãƒ³)</emphasis> ã¨è¨˜ã•ã‚Œã¦ã„ã¾ã™ã€‚ ã“れ㌠JBoss ã§ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒãã®ãƒã‚°ã‚¤ãƒ³ ID を確立ã™ã‚‹æ–¹æ³•ã§ã™ã€‚ JNDI "
+"<literal>InitialContext</literal> プãƒãƒ‘ティ経由ã§ãƒã‚°ã‚¤ãƒ³æƒ…å ±ã‚’æ示ã™ã‚‹ã‚µãƒãƒ¼ãƒˆãŒåˆ¥ã®è¨å®šã§æä¾›ã•ã‚Œã¾ã™ã€‚ JAAS ãƒã‚°ã‚¤ãƒ³ã«ã‚ˆã‚Š <literal>LoginContext</"
+"literal> ã®ä½œæˆã€ 使用ã™ã‚‹è¨å®šåãŒæ¸¡ã•ã‚Œã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ ã“ã® 1 度ãã‚Šã®ãƒã‚°ã‚¤ãƒ³ã¯ãƒã‚°ã‚¤ãƒ³ã® principal ã¨è¨¼æ˜Žæ›¸ã‚’後ã«ç¶šãã™ã¹ã¦ã® EJB メソッド呼ã³å‡ºã—ã«é–¢é€£ä»˜ã‘ã¾ã™ã€‚ ã“ã®ãƒ—ãƒã‚»ã‚¹ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’èªè¨¼ã—ãªã„å ´åˆãŒã‚ã‚‹ã®ã§æ³¨æ„ã—ã¦ãã ã•ã„。 クライアントå´ã®ãƒã‚°ã‚¤ãƒ³ã®æ€§è³ªã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒä½¿ç”¨ã™ã‚‹ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®è¨å®šã«ä¾å˜ã—ã¾ã™ã€‚ ã“ã®ä¾‹ã§ã¯ã€ <literal>other</literal> クライアントå´ãƒã‚°ã‚¤ãƒ³è¨å®šã‚¨ãƒ³ãƒˆãƒªã¯ <literal>ClientLoginModule</literal> モジュール (<literal>org.jboss.security.ClientLoginModule</literal>) を使用ã™ã‚‹ã‚ˆã†è¨å®šã•ã‚Œã¦ã„ã¾ã™ã€‚ ã“ã‚Œã¯å˜ç´”ã«ã‚µãƒ¼ãƒãƒ¼ä¸Šã§å¾Œã»ã©è¡Œã‚れるèªè¨¼ç”¨ã«ãƒ¦ãƒ¼ã‚¶ãƒ¼åã¨ãƒ‘スワードを JBoss EJB 呼ã³å‡ºã—層ã«ãƒã‚¤ãƒ³ãƒ‰ã™ã‚‹ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§ã™ã€‚ クライアント㮠ID ã¯ã‚¯ãƒ©ã!
‚¤ã‚¢ãƒ³ãƒˆä¸Šã§ã¯èªè¨¼ã•ã‚Œã¾ã›ã‚“。"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:545
@@ -1946,16 +2379,17 @@
"server. The invocation includes the method arguments passed by the client "
"along with the user identity and credentials from the client-side JAAS login "
"performed in step 1."
-msgstr ""
+msgstr "後åŠã€ クライアント㯠EJB ホームインターフェースをå–å¾—ã—ã¦ã‹ã‚‰ bean ã®ä½œæˆã‚’試行ã—ã¾ã™ã€‚ ã“ã®ã‚¤ãƒ™ãƒ³ãƒˆã«ã¯ <emphasis>Home Method Invocation</emphasis> ã®ãƒ©ãƒ™ãƒ«ãŒä»˜ã‘られã¾ã™ã€‚ ã“ã®çµæžœã€ ホームインターフェースã®ãƒ¡ã‚½ãƒƒãƒ‰å‘¼ã³å‡ºã—㌠JBoss サーãƒãƒ¼ã«é€ä¿¡ã•ã‚Œã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ 呼ã³å‡ºã—ã«ã¯ã€ ステップ 1 ã§è¡Œã‚ã‚ŒãŸã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ JAAS ãƒã‚°ã‚¤ãƒ³ã‹ã‚‰ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ ID ãŠã‚ˆã³è¨¼æ˜Žæ›¸ã¨å…±ã«ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«ã‚ˆã£ã¦æ¸¡ã•ã‚Œã‚‹ãƒ¡ã‚½ãƒƒãƒ‰ã®å¼•æ•°ã‚‚å«ã¾ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:550
#, no-c-format
+#, fuzzy
msgid ""
"On the server side, the security interceptor first requires authentication "
"of the user invoking the call, which, as on the client side, involves a JAAS "
"login."
-msgstr ""
+msgstr "サーãƒãƒ¼å´ã§ã¯ã€ 最åˆã«ã‚»ã‚ュリティインターセプタãŒãƒ¦ãƒ¼ã‚¶ãƒ¼å‘¼ã³å‡ºã—コールã®èªè¨¼ã‚’å¿…è¦ã¨ã—〠ã“ã‚Œã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ã§ã¯ JAAS ãƒã‚°ã‚¤ãƒ³ã‚’å¿…è¦ã¨ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:555
@@ -1967,7 +2401,7 @@
"EJB security domain is <literal>jwdomain</literal>. If the JAAS login "
"authenticates the user, a JAAS <literal>Subject</literal> is created that "
"contains the following in its <literal>PrincipalsSet</literal>:"
-msgstr ""
+msgstr "EJB ãŒå®‰å…¨åŒ–ã•ã‚Œã¦ã„る状態ã§ã‚»ã‚ュリティドメインã¯ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®é¸æŠžã‚’è¡Œã„ã¾ã™ã€‚ ã‚»ã‚ュリティドメインå㯠<literal>LoginContext</literal> コンストラクタã«æ¸¡ã•ã‚Œã‚‹ãƒã‚°ã‚¤ãƒ³è¨å®šã‚¨ãƒ³ãƒˆãƒªåã¨ã—ã¦ä½¿ç”¨ã•ã‚Œã¾ã™ã€‚ EJB ã‚»ã‚ュリティドメイン㯠<literal>jwdomain</literal> ã«ãªã‚Šã¾ã™ã€‚ JAAS ãƒã‚°ã‚¤ãƒ³ãŒãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’èªè¨¼ã™ã‚‹ã¨ã€ JAAS <literal>Subject</literal> ãŒä½œæˆã•ã‚Œã€ ãã® <literal>PrincipalsSet</literal> 内ã«ã¯æ¬¡ãŒå«ã¾ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:560
@@ -1975,7 +2409,7 @@
msgid ""
"A <literal>java.security.Principal</literal> that corresponds to the client "
"identity as known in the deployment security environment."
-msgstr ""
+msgstr "<literal>java.security.Principal</literal>〠導入セã‚ュリティ環境ã§æ—¢çŸ¥ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆ ID ã«è©²å½“ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:565
@@ -1989,7 +2423,7 @@
"literal>. These roles are used to validate the roles assigned to methods in "
"<literal>ejb-jar.xml</literal> and the <literal>EJBContext.isCallerInRole"
"(String)</literal> method implementation."
-msgstr ""
+msgstr "<literal>Roles</literal> ã¨ã„ã†åå‰ã® <literal>java.security.acl.Group</literal>〠アプリケーションドメインã‹ã‚‰ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«å‰²ã‚Šå½“ã¦ã‚‰ã‚Œã‚‹ãƒãƒ¼ãƒ«åã‚’å«ã¿ã¾ã™ã€‚ ã“れらãƒãƒ¼ãƒ«åを表示ã™ã‚‹ãŸã‚ã« <literal>org.jboss.security.SimplePrincipal</literal> オブジェクトãŒä½¿ç”¨ã•ã‚Œã¾ã™ã€‚ <literal>SimplePrincipal</literal> ã¯å˜ç´”ãªæ–‡å—列ベース㮠<literal>Principal</literal> 実装ã§ã™ã€‚ ã“れらã®ãƒãƒ¼ãƒ«ã‚’使ã£ã¦ <literal>ejb-jar.xml</literal> ã«ã‚るメソッドã«å‰²ã‚Šå½“ã¦ã‚‰ã‚Œã‚‹ãƒãƒ¼ãƒ«ãŠã‚ˆã³ <literal>EJBContext.isCallerInRole(String)</literal> メソッド実装を確èªã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:570
@@ -2007,7 +2441,7 @@
"mapping the deployment security environment principal is used as the "
"<literal>getCallerPrincipal</literal> method value. That is, the operational "
"principal is the same as the application domain principal."
-msgstr ""
+msgstr "オプション㮠<literal>CallerPrincipal</literal> ã¨ã„ã†åå‰ã® <literal>java.security.acl.Group</literal>〠アプリケーションドメインã®å‘¼ã³å‡ºã—å´ã® ID ã«è©²å½“ã™ã‚‹å˜ä¸€ã® <literal>org.jboss.security.SimplePrincipal</literal> ã‚’å«ã¿ã¾ã™ã€‚ <literal>CallerPrincipal</literal> ã®å”¯ä¸€ã®ã‚°ãƒ«ãƒ¼ãƒ—メンãƒãƒ¼ã¯ <literal>EJBContext.getCallerPrincipal()</literal> メソッドã«ã‚ˆã£ã¦è¿”ã•ã‚Œã‚‹å€¤ã«ãªã‚Šã¾ã™ã€‚ 稼åƒã‚»ã‚ュリティ環境ã§æ—¢çŸ¥ã® <literal>Principal</literal> ãŒã‚¢ãƒ—リケーションã«å¯¾ã—ã¦æ—¢çŸ¥ã®åå‰ã‚’æŒã¤ <literal>Principal</literal> ã«ãƒžãƒƒãƒ”ングãŒè¡Œãˆã‚‹ã‚ˆã†ã«ã™ã‚‹ã“ã¨ãŒã“ã®ãƒžãƒƒãƒ”ングã®ç›®çš„ã§ã™ã€‚ <literal>CallerPrincipal</literal> マッピングãŒãªã„ã¨ã€ 導入セã‚ュリティ環境㮠principal ㌠<literal>getCallerPrincipal</literal> メソッド値ã¨ã—ã¦ä½¿ç”¨ã•ã‚Œã¾ã™ã€‚ ã¤ã¾ã‚Šã€ ç¨¼åƒ principal ã¯ã‚¢ãƒ—リケーションドã!
ƒ¡ã‚¤ãƒ³ã® principal ã¨åŒã˜ã‚‚ã®ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:577
@@ -2020,16 +2454,21 @@
"An_illustration_of_the_steps_involved_in_the_authentication_and_authorization_of_a_secured_EJB_home_method_invocation."
"\"/>. Performing the authorization this entails the following steps:"
msgstr ""
+"ã‚»ã‚ュリティインターセプタãƒã‚§ãƒƒã‚¯ã®æœ€å¾Œã®ã‚¹ãƒ†ãƒƒãƒ—ã¯ã€ èªè¨¼ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒè¦æ±‚メソッドを呼ã³å‡ºã™ã“ã¨ãŒã§ãるパーミッションをæŒã£ã¦ã„ã‚‹ã‹ç¢ºèªã™ã‚‹ã“ã¨ã§ã™ã€‚ ã“ã‚Œã¯ã€ <xref linkend="
+"\"How_the_JaasSecurityManager_Uses_JAAS-"
+"An_illustration_of_the_steps_involved_in_the_authentication_and_authorization_of_a_secured_EJB_home_method_invocation."
+"\"/> ã«ç¤ºã™ã‚ˆã†ã« <emphasis>Server Side Authorization (サーãƒãƒ¼å´ã®æ‰¿èª)</emphasis> ã¨ã„ã†ãƒ©ãƒ™ãƒ«ãŒä»˜ã„ã¦ã„ã¾ã™ã€‚ 承èªã‚’è¡Œã†ã¨æ¬¡ã®ã‚¹ãƒ†ãƒƒãƒ—ãŒå¼•ãèµ·ã“ã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:582
#, no-c-format
+#, fuzzy
msgid ""
"Obtain the names of the roles allowed to access the EJB method from the EJB "
"container. The role names are determined by <literal>ejb-jar.xml</literal> "
"descriptor role-name elements of all <literal>method-permission</literal> "
"elements containing the invoked method."
-msgstr ""
+msgstr "EJB コンテナã‹ã‚‰ EJB メソッドã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ãŒè¨±å¯ã•ã‚Œã‚‹ãƒãƒ¼ãƒ«åã‚’å–å¾—ã—ã¾ã™ã€‚ ã“ã®ãƒãƒ¼ãƒ«å㯠<literal>ejb-jar.xml</literal> 記述åã® role-name エレメントã®å‘¼ã³å‡ºã—メソッドをå«ã‚€ã™ã¹ã¦ã® <literal>method-permission</literal> エレメントã«ã‚ˆã£ã¦ç¢ºå®šã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:587
@@ -2044,11 +2483,12 @@
"group contains a <literal>SimplePrincipal</literal> with the assigned role "
"name. Access is allowed if any role name is a member of the <literal>Roles</"
"literal> group. Access is denied if none of the role names are members."
-msgstr ""
+msgstr "割り当ã¦ã‚‰ã‚ŒãŸãƒãƒ¼ãƒ«ãŒãªã„〠ã¾ãŸã¯ãƒ¡ã‚½ãƒƒãƒ‰ãŒ <literal>exclude-list</literal> エレメントã«æŒ‡å®šã•ã‚Œã¦ã„ã‚‹å ´åˆã€ メソッドã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã¯æ‹’å¦ã•ã‚Œã¾ã™ã€‚ ã“れ以外ã¯ã€ <literal>doesUserHaveRole</literal> メソッドãŒã‚»ã‚ュリティ管ç†ã§ã‚»ã‚ュリティインターセプタã«ã‚ˆã‚Šå‘¼ã³å‡ºã•ã‚Œã¦ã€ 呼ã³å‡ºã—å´ãŒå‰²ã‚Šå½“ã¦ã‚‰ã‚ŒãŸãƒãƒ¼ãƒ«åã‚’æŒã£ã¦ã„ã‚‹ã‹ãŒç¢ºèªã•ã‚Œã¾ã™ã€‚ ã“ã®ãƒ¡ã‚½ãƒƒãƒ‰ã¯ãƒãƒ¼ãƒ«åを使ã£ã¦å復ã—〠èªè¨¼ãƒ¦ãƒ¼ã‚¶ãƒ¼ã® Subject <literal>Roles</literal> グループã«å‰²ã‚Šå½“ã¦ãƒãƒ¼ãƒ«åã‚’æŒã¤ <literal>SimplePrincipal</literal> ãŒå«ã¾ã‚Œã¦ã„ã‚‹ã‹ã©ã†ã‹ã‚’ãƒã‚§ãƒƒã‚¯ã—ã¾ã™ã€‚ ã„ãšã‚Œã‹ã®ãƒãƒ¼ãƒ«å㌠<literal>Roles</literal> グループã®ãƒ¡ãƒ³ãƒãƒ¼ã§ã‚ã‚Œã°ã‚¢ã‚¯ã‚»ã‚¹ãŒè¨±å¯ã•ã‚Œã¾ã™ã€‚ ã„ãšã‚Œã®ãƒãƒ¼ãƒ«åもメンãƒãƒ¼ã§ã¯ãªã„å ´åˆã¯ã‚¢ã‚¯ã‚»ã‚¹ãŒæ‹’å¦ã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:592
#, no-c-format
+#, fuzzy
msgid ""
"If the EJB was configured with a custom security proxy, the method "
"invocation is delegated to it. If the security proxy wants to deny access to "
@@ -2057,7 +2497,7 @@
"method is allowed and the method invocation passes to the next container "
"interceptor. Note that the <literal>SecurityProxyInterceptor</literal> "
"handles this check and this interceptor is not shown."
-msgstr ""
+msgstr "EJB ãŒã‚«ã‚¹ã‚¿ãƒ ã®ã‚»ã‚ュリティプãƒã‚ã‚·ã§è¨å®šã•ã‚Œã¦ã„ãŸå ´åˆã€ メソッド呼ã³å‡ºã—ã¯ãã‚Œã«å§”ä»»ã•ã‚Œã¾ã™ã€‚ ã‚»ã‚ュリティプãƒã‚ã‚·ãŒå‘¼ã³å‡ºã—å´ã«å¯¾ã—ã¦ã‚¢ã‚¯ã‚»ã‚¹ã‚’æ‹’å¦ã—ãŸã„å ´åˆã€ <literal>java.lang.SecurityException</literal> を投ã’ã¾ã™ã€‚ <literal>SecurityException</literal> ãŒæŠ•ã’られãªã‹ã£ãŸå ´åˆã€ EJB メソッドã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã¯è¨±å¯ã•ã‚Œãƒ¡ã‚½ãƒƒãƒ‰å‘¼ã³å‡ºã—ã¯æ¬¡ã®ã‚³ãƒ³ãƒ†ãƒŠã‚¤ãƒ³ã‚¿ãƒ¼ã‚»ãƒ—ã‚¿ã«æ¸¡ã—ã¾ã™(??渡ã•ã‚Œã¾ã™??)。 <literal>SecurityProxyInterceptor</literal> ãŒã“ã®ãƒã‚§ãƒƒã‚¯ã‚’処ç†ã™ã‚‹ãŸã‚ã“ã®ã‚¤ãƒ³ã‚¿ãƒ¼ã‚»ãƒ—ã‚¿ã¯è¡¨ç¤ºã•ã‚Œãªã„ã®ã§æ³¨æ„ã—ã¦ãã ã•ã„。"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:599
@@ -2076,17 +2516,18 @@
"the associated MBean service is discussed in following section. In the "
"absence of any user-defined cache, a default cache that maintains credential "
"information for a configurable period of time is used."
-msgstr ""
+msgstr "ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ±ã¯å„è¦æ±‚ã”ã¨æ示ã•ã‚Œèªè¨¼ã•ã‚Œãªã‘ã‚Œã°ãªã‚‰ãªã„è¦æ±‚ã®ã‚¹ãƒ†ãƒ¼ãƒˆãƒ¬ã‚¹å±žæ€§ã¨ã—ã¦å‡¦ç†ã•ã‚Œã‚‹ãŸã‚〠安全化ã•ã‚ŒãŸ EJB メソッド呼ã³å‡ºã—ã¾ãŸã¯å®‰å…¨åŒ–ã•ã‚ŒãŸã‚¦ã‚§ãƒ–コンテントアクセスã¯ã™ã¹ã¦å‘¼ã³å‡ºã—å´ã®èªè¨¼ã¨æ‰¿èªãŒå¿…è¦ã«ãªã‚Šã¾ã™ã€‚ JAAS ãƒã‚°ã‚¤ãƒ³ãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ã‚µãƒ¼ãƒãƒ¼ã¸ã®äº¤ä¿¡ã‚’å¿…è¦ã¨ã™ã‚‹å ´åˆã€ 複雑ãªæ¼”ç®—ã¨ãªã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ ãªãœãªã‚‰ã€ <literal>JaasSecurityManager</literal> ã¯å‰å›žæˆåŠŸã—ãŸãƒã‚°ã‚¤ãƒ³ã‹ã‚‰ã® principal ãŠã‚ˆã³è¨¼æ˜Žæ›¸æƒ…å ±ã®ä¿å˜ã«ä½¿ç”¨ã™ã‚‹èªè¨¼ã‚ャッシュã®æ¦‚念をサãƒãƒ¼ãƒˆã™ã‚‹ãŸã‚ã§ã™ã€‚ 次ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã®é–¢é€£ MBean サービスã§è¨˜è¼‰ã•ã‚Œã¦ã„るよã†ã« <literal>JaasSecurityManager</literal> è¨å®šã®ä¸€éƒ¨ã¨ã—ã¦èªè¨¼ã‚ャッシュã®ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã‚’指定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ユーザー定義ã®ã‚ャッシュãŒã!
ªã„å ´åˆã€ è¨å®šå¯èƒ½ãªæœŸé–“ä¸ã«è¨¼æ˜Žæ›¸æƒ…å ±ã‚’ç®¡ç†ã™ã‚‹ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®ã‚ャッシュãŒä½¿ç”¨ã•ã‚Œã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:605
#, no-c-format
msgid "The JaasSecurityManagerService MBean"
-msgstr ""
+msgstr "JaasSecurityManagerService MBean"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:606
#, no-c-format
+#, fuzzy
msgid ""
"The <literal>JaasSecurityManagerService</literal> MBean service manages "
"security managers. Although its name begins with <emphasis>Jaas</emphasis>, "
@@ -2098,7 +2539,7 @@
"implementation by providing an alternate implementation of the "
"<literal>AuthenticationManager</literal> and <literal>RealmMapping</literal> "
"interfaces."
-msgstr ""
+msgstr "<literal>JaasSecurityManagerService</literal> MBean サービスã¯ã‚»ã‚ュリティ管ç†ã‚’管ç†ã—ã¾ã™ã€‚ ãã®åå‰ã¯ <emphasis>Jaas</emphasis> ã§å§‹ã¾ã‚Šã¾ã™ãŒã€ 処ç†ã™ã‚‹ã‚»ã‚ュリティ管ç†ã¯ãã®å®Ÿè£…㧠JAAS を使用ã™ã‚‹å¿…è¦ã¯ã‚ã‚Šã¾ã›ã‚“。 ã“ã®åå‰ã¯ã€ デフォルトã®ã‚»ã‚ュリティ管ç†å®Ÿè£…㌠<literal>JaasSecurityManager</literal> ã§ã‚ã‚‹ã“ã¨ã«ç”±æ¥ã—ã¦ã„ã¾ã™ã€‚ <literal>JaasSecurityManagerService</literal> ã®ä¸»ãªå½¹å‰²ã¯ã‚»ã‚ュリティ管ç†å®Ÿè£…を外在ã•ã›ã‚‹ã“ã¨ã§ã™ã€‚ <literal>AuthenticationManager</literal> ãŠã‚ˆã³ <literal>RealmMapping</literal> ã®å„インターフェースã®ä»£æ›¿å®Ÿè£…ã‚’æä¾›ã™ã‚‹ã“ã¨ã§ã‚»ã‚ュリティ管ç†å®Ÿè£…を変更ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:609
@@ -2125,7 +2566,7 @@
"<literal>SecurityManagerClassName</literal> attribute using a constructor "
"that takes the name of the security domain. For example, consider the "
"following container security configuration snippet:"
-msgstr ""
+msgstr "<literal>JaasSecurityManagerService</literal> ã® 2 番目ã«åŸºæœ¬ã¨ãªã‚‹å½¹å‰²ã¯ JNDI <literal>javax.naming.spi.ObjectFactory</literal> 実装をæä¾›ã™ã‚‹ã“ã¨ã§ã‚»ã‚ュリティ管ç†å®Ÿè£…ã®ãƒžãƒƒãƒ”ングã«ã‚³ãƒ¼ãƒ‰ä¸è¦ã®ã‚·ãƒ³ãƒ—ルãªç®¡ç†ã¨ãªã‚‹ JNDI åを実ç¾ã™ã‚‹ã“ã¨ã§ã™ã€‚ <literal>security-domain</literal> デプãƒã‚¤ãƒ¡ãƒ³ãƒˆè¨˜è¿°åエレメントを使ã£ã¦ã‚»ã‚ュリティ管ç†å®Ÿè£…ã® JNDI åを指定ã™ã‚‹ã“ã¨ã§ã‚»ã‚ュリティを有効ã«ã™ã‚‹ã¨è¨˜è¼‰ã•ã‚Œã¦ã„ã¾ã™ã€‚ JNDIåを指定ã™ã‚‹å ´åˆã€ 使用ã™ã‚‹ã‚ªãƒ–ジェクトãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°ãŒãã“ã«ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“。 ã‚»ã‚ュリティ管ç†ã®ãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°ã«å¯¾ã™ã‚‹ JNDI åã®è¨å®šã‚’簡略化ã™ã‚‹ãŸã‚〠<literal>JaasSecurityManagerService</literal> ã¯ã€ <literal>java:/jaas</literal> åé…下㫠JNDI ObjectFactory ã¨ã—ã¦æ¬¡ã®ãƒãƒ¼ãƒŸãƒ³ã‚°ã‚·ã‚¹ãƒ†ãƒ å‚照をãれ自体ã¨çµåˆã™ã‚‹ã“ã¨ã§ã‚»ã‚ュãƒ!
ªãƒ†ã‚£ç®¡ç†ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã‹ã‚‰åå‰ã¸ã®é–¢é€£ã‚’管ç†ã—ã¾ã™ã€‚ ã“ã‚Œã«ã‚ˆã‚Šã€ <literal>java:/jaas/XYZ</literal> ã¨ã„ã†å½¢å¼ã®å‘½åè¦å‰‡ã‚’ <literal>security-domain</literal> エレメントã®å€¤ã¨ã—ã¦ä½¿ç”¨ã™ã‚‹ã“ã¨ãŒã§ãるよã†ã«ãªã‚Šã€ <literal>XYZ</literal> ã‚»ã‚ュリティドメインã®ã‚»ã‚ュリティ管ç†ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ãŒå¿…è¦ã«å¿œã˜ã¦ä½œæˆã•ã‚Œã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ ã‚»ã‚ュリティドメインã®åå‰ã‚’å–るコンストラクタを使用ã™ã‚‹ <literal>SecurityManagerClassName</literal> 属性ã«ã‚ˆã£ã¦æŒ‡å®šã•ã‚Œã‚‹ã‚¯ãƒ©ã‚¹ã®ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã‚’作æˆã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šæœ€åˆã®æ¤œç´¢ã§ <literal>java:/jaas/XYZ</literal> ãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°ã«å¯¾ã—ã¦ãƒ‰ãƒ¡ã‚¤ãƒ³ <literal>XYZ</literal> ã®ã‚»ã‚ュリティ管ç†ãŒä½œæˆã•ã‚Œã¾ã™ã€‚ ãŸã¨ãˆã°ã€ 次ã«ç¤ºã™ã‚³ãƒ³ãƒ†ãƒŠã‚»ã‚ュリティè¨å®šã®ä¸€éƒ¨ã‚’見ã¦ã¿ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:612
@@ -2138,6 +2579,12 @@
" <!-- ... -->\n"
"</jboss>"
msgstr ""
+"<jboss>\n"
+" <!-- Configure all containers to be secured under the \"hades\" "
+"security domain -->\n"
+" <security-domain>java:/jaas/hades</security-domain>\n"
+" <!-- ... -->\n"
+"</jboss>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:613
@@ -2149,7 +2596,7 @@
"AuthenticationManager and RealmMapping security interfaces and will be of "
"the type specified by the <literal>JaasSecurityManagerService</"
"literal><literal>SecurityManagerClassName</literal> attribute."
-msgstr ""
+msgstr "åå‰ <literal>java:/jaas/hades</literal> を検索ã™ã‚‹ã¨ <literal>hades</literal> ã¨ã„ã†åå‰ã®ã‚»ã‚ュリティドメインã«é–¢é€£ä»˜ã‘られã¦ã„ã‚‹ã‚»ã‚ュリティ管ç†ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ãŒè¿”ã•ã‚Œã¾ã™ã€‚ ã“ã®ã‚»ã‚ュリティ管ç†ã¯ AuthenticationManager ãŠã‚ˆã³ RealmMapping ã®å„ã‚»ã‚ュリティインターフェースを実装ã—〠<literal>JaasSecurityManagerService</literal><literal>SecurityManagerClassName</literal> 属性ã«ã‚ˆã£ã¦æŒ‡å®šã•ã‚Œã‚‹ã‚¿ã‚¤ãƒ—ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:616
@@ -2159,7 +2606,7 @@
"default for use in the standard JBoss distribution, and you can often use "
"the default configuration as is. The configurable attributes of the "
"<literal>JaasSecurityManagerService</literal> include:"
-msgstr ""
+msgstr "<literal>JaasSecurityManagerService</literal> MBean ã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ã¯æ¨™æº– JBoss ディストリビューションã§ä½¿ç”¨ã•ã‚Œã‚‹ã‚ˆã†è¨å®šã•ã‚Œã€ ã¾ãŸãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®è¨å®šã‚’ãã®ã¾ã¾ä½¿ç”¨ã§ãã‚‹å ´åˆãŒå¤šãã‚ã‚Šã¾ã™ã€‚ <literal>JaasSecurityManagerService</literal> ã®è¨å®šå¯èƒ½ãªå±žæ€§ã«ã¯æ¬¡ã®ã‚ˆã†ãªã‚‚ã®ãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:621
@@ -2171,7 +2618,7 @@
"literal> and <literal>org.jboss.security.RealmMapping</literal> interfaces. "
"If not specified this defaults to the JAAS-based <literal>org.jboss.security."
"plugins.JaasSecurityManager</literal>."
-msgstr ""
+msgstr "<emphasis role=\"bold\">SecurityManagerClassName</emphasis>: ã‚»ã‚ュリティ管ç†å®Ÿè£…ã‚’æä¾›ã™ã‚‹ã‚¯ãƒ©ã‚¹åã§ã™ã€‚ 実装㯠<literal>org.jboss.security.AuthenticationManager</literal> ãŠã‚ˆã³ <literal>org.jboss.security.RealmMapping</literal> ã®ä¸¡ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã‚’サãƒãƒ¼ãƒˆã—ã¦ã„ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“。 指定ãŒãªã„ã¨ã€ JAAS ベース㮠<literal>org.jboss.security.plugins.JaasSecurityManager</literal> ã«ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆè¨å®šã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:626
@@ -2186,6 +2633,8 @@
"literal>) does not meet your needs. This is a rather deep configuration that "
"generally should not be set unless you know what you are doing."
msgstr ""
+"<emphasis role=\"bold\">CallbackHandlerClassName</emphasis>: <literal>JaasSecurityManager</literal> ã«ã‚ˆã£ã¦ä½¿ç”¨ã•ã‚Œã‚‹ <literal>javax.security.auth.callback."
+"CallbackHandler</literal> 実装をæä¾›ã™ã‚‹ã‚¯ãƒ©ã‚¹åã§ã™ã€‚ デフォルトã®å®Ÿè£… (<literal>org.jboss.security.auth.callback.SecurityAssociationHandler</literal>) ãŒãƒ‹ãƒ¼ã‚ºã«é©åˆã—ãªã„å ´åˆã¯ <literal>JaasSecurityManager</literal> ã§ä½¿ç”¨ã•ã‚Œã‚‹ãƒãƒ³ãƒ‰ãƒ©ã‚’上書ãã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã“ã‚Œã¯ã€ è¨å®šå†…容を熟知ã—ã¦ã„ãªã„é™ã‚Šä¸€èˆ¬çš„ã«ã¯è¡Œã‚れるã¹ãã§ã¯ãªã„高度ã§è©³ç´°ãªè¨å®šã¨ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:631
@@ -2197,6 +2646,8 @@
"defaults to <literal>org.jboss.security.SubjectSecurityProxyFactory</"
"literal>."
msgstr ""
+"<emphasis role=\"bold\">SecurityProxyFactoryClassName</emphasis>: <literal>org.jboss.security."
+"SecurityProxyFactory</literal>実装をæä¾›ã™ã‚‹ã‚¯ãƒ©ã‚¹åã§ã™ã€‚ 指定ã•ã‚Œã¦ã„ãªã„ã¨ã€ デフォルト㧠<literal>org.jboss.security.SubjectSecurityProxyFactory</literal> ã«è¨å®šã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:636
@@ -2210,7 +2661,7 @@
"looking up the <literal>CachePolicy</literal> for a domain. If this fails, "
"the location is treated as a single <literal>CachePolicy</literal> for all "
"security domains. As a default, a timed cache policy is used."
-msgstr ""
+msgstr "<emphasis role=\"bold\">AuthenticationCacheJndiName</emphasis>: ã‚»ã‚ュリティ証明ã®ã‚ャッシュãƒãƒªã‚·ãƒ¼ã®å ´æ‰€ã‚’指定ã—ã¾ã™ã€‚ 最åˆã¯ã€ ã‚»ã‚ュリティドメインã”ã¨ã« <literal>CachePolicy</literal> インスタンスを返ã™ã“ã¨ãŒã§ãã‚‹ <literal>ObjectFactory</literal> ã®å ´æ‰€ã¨ã—ã¦æ‰±ã‚ã‚Œã¾ã™ã€‚ ã“ã‚Œã¯ãƒ‰ãƒ¡ã‚¤ãƒ³ã® <literal>CachePolicy</literal> を検索ã™ã‚‹ã¨ãã«ã“ã®åå‰ã«ã‚»ã‚ュリティドメインã®åå‰ã‚’è¿½åŠ ã™ã‚‹ã“ã¨ã§è¡Œã‚ã‚Œã¾ã™ã€‚ ã“ã‚ŒãŒå¤±æ•—ã™ã‚‹ã¨ã€ ã“ã®å ´æ‰€ã¯ã™ã¹ã¦ã®ã‚»ã‚ュリティドメインã«å¯¾ã—ã¦å˜ä¸€ã® <literal>CachePolicy</literal> ã¨ã—ã¦æ‰±ã‚ã‚Œã¾ã™ã€‚ デフォルトã§ã¯ã€ 時間制é™ã‚’è¨ã‘ãŸã‚ャッシュãƒãƒªã‚·ãƒ¼ãŒä½¿ç”¨ã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:641
@@ -2225,7 +2676,7 @@
"to force authentication to occur every time. This has no affect if the "
"<literal>AuthenticationCacheJndiName</literal> has been changed from the "
"default value."
-msgstr ""
+msgstr "<emphasis role=\"bold\">DefaultCacheTimeout</emphasis>: 秒å˜ä½ã®æ™‚間制é™ãŒè¨ã‘られãŸãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã‚ャッシュãƒãƒªã‚·ãƒ¼ã‚¿ã‚¤ãƒ アウトを指定ã—ã¾ã™ã€‚ デフォルト値㯠1800 秒 (30 分) ã«ãªã‚Šã¾ã™ã€‚ タイムアウトã«ä½¿ç”¨ã™ã‚‹å€¤ã¯é »ç¹ã«è¡Œã‚れるèªè¨¼å‹•ä½œé–“ã®ãƒˆãƒ¬ãƒ¼ãƒ‰ã‚ªãƒ•ã§ã€ è¨¼æ˜Žæƒ…å ±ãŒä¿å˜ã•ã‚Œã¦ã„ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ±ã¨ä¸€è‡´ã—ã¦ã„ãªã„å¯èƒ½æ€§ãŒã‚る時間ã«ãªã‚Šã¾ã™ã€‚ ã‚»ã‚ュリティ証明ã®ã‚ャッシュを無効ã«ã—ãŸã„å ´åˆã¯ã€ ã“れを 0 ã«è¨å®šã—ã¦æ¯Žå›žã€ èªè¨¼ãŒå¼·åˆ¶çš„ã«å®Ÿæ–½ã•ã‚Œã‚‹ã‚ˆã†ã«ã—ã¾ã™ã€‚ <literal>AuthenticationCacheJndiName</literal> ãŒãã®ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆå€¤ã‹ã‚‰å¤‰æ›´ã•ã‚Œã¦ã„ã‚‹å ´åˆã¯åŠ¹æžœãŒã‚ã‚Šã¾ã›ã‚“。"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:646
@@ -2238,7 +2689,7 @@
"meaningful. The default resolution is 60 seconds(1 minute). This has no "
"affect if the <literal>AuthenticationCacheJndiName</literal> has been "
"changed from the default value."
-msgstr ""
+msgstr "<emphasis role=\"bold\">DefaultCacheResolution</emphasis>: 秒å˜ä½ã§æ™‚間制é™ãŒè¨ã‘られãŸãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®ã‚ャッシュãƒãƒªã‚·ãƒ¼ãƒªã‚¾ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã§ã™ã€‚ ã‚ャッシュã®ç¾åœ¨ã®ã‚¿ã‚¤ãƒ スタンプãŒæ›´æ–°ã•ã‚Œã‚‹é–“隔を制御ã—〠タイムアウトãŒæ„義をãªã™ã‚ˆã† <literal>DefaultCacheTimeout</literal> 未満ã§ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“。 デフォルトã®ãƒªã‚¾ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã¯ 60 秒 (1 分) ã§ã™ã€‚ <literal>AuthenticationCacheJndiName</literal> ãŒãã®ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆå€¤ã‹ã‚‰å¤‰æ›´ã•ã‚Œã¦ã„ã‚‹å ´åˆã¯åŠ¹æžœãŒã‚ã‚Šã¾ã›ã‚“。"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:651
@@ -2248,7 +2699,7 @@
"Specifies the principal to use for unauthenticated users. This setting makes "
"it possible to set default permissions for users who have not been "
"authenticated."
-msgstr ""
+msgstr "<emphasis role=\"bold\">DefaultUnauthenticatedPrincipal</emphasis>: èªè¨¼ã•ã‚Œã¦ã„ãªã„ユーザーã«å¯¾ã—ã¦ä½¿ç”¨ã™ã‚‹ principal を指定ã—ã¾ã™ã€‚ ã“ã®è¨å®šã«ã‚ˆã‚Šã€ èªè¨¼ã•ã‚Œã¦ã„ãªã„ユーザーã«å¯¾ã—ã¦ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®ãƒ‘ーミッションをè¨å®šã™ã‚‹ã“ã¨ãŒå¯èƒ½ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:656
@@ -2258,7 +2709,7 @@
"useful operations. These include flushing any security domain authentication "
"cache at runtime, getting the list of active users in a security domain "
"authentication cache, and any of the security manager interface methods."
-msgstr ""
+msgstr "<literal>JaasSecurityManagerService</literal> ã¯ã€ 起動時ã«ã‚»ã‚ュリティドメインèªè¨¼ã‚ャッシュをフラッシュã™ã‚‹æ©Ÿèƒ½ã€ ã‚»ã‚ュリティドメインèªè¨¼ã‚ャッシュ内ã®ã‚¢ã‚¯ãƒ†ã‚£ãƒ–ãªãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ä¸€è¦§ã‚’å–å¾—ã™ã‚‹æ©Ÿèƒ½ã€ ã‚らゆるセã‚ュリティ管ç†ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã®ãƒ¡ã‚½ãƒƒãƒ‰ãªã©å½¹ã«ç«‹ã¤æ©Ÿèƒ½ã‚‚サãƒãƒ¼ãƒˆã—ã¦ã„ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:659
@@ -2270,12 +2721,14 @@
"<literal>public void flushAuthenticationCache(String securityDomain)</"
"literal>."
msgstr ""
+"ã‚»ã‚ュリティドメインèªè¨¼ã‚ャッシュã®ãƒ•ãƒ©ãƒƒã‚·ãƒ¥æ©Ÿèƒ½ã‚’使用ã™ã‚‹ã¨ã€ 基礎ã¨ãªã‚‹ã‚¹ãƒˆã‚¢ãŒæ›´æ–°ã•ã‚Œã¦ã„ã¦ç›´ã¡ã«ãã®ã‚¹ãƒˆã‚¢ã®çŠ¶æ…‹ã‚’使用ã—ãŸã„å ´åˆã«ã‚ャッシュã•ã‚Œã¦ã„る証明書をã™ã¹ã¦ãƒ‰ãƒãƒƒãƒ—ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ MBean 演算ã®ç½²å㯠<literal>public void flushAuthenticationCache(String securityDomain)</"
+"literal> ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:662 J2EE_Security_On_JBOSS.xml:669
#, no-c-format
msgid "This can be invoked programmatically using the following code snippet:"
-msgstr ""
+msgstr "次ã®ã‚³ãƒ¼ãƒ‰ã®éƒ¨åˆ†ã‚’使用ã—ã¦ãƒ—ãƒã‚°ãƒ©ãƒ çš„ã«å‘¼ã³å‡ºã™ã“ã¨ãŒå¯èƒ½ã§ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:665
@@ -2288,6 +2741,12 @@
"String[] signature = {\"java.lang.String\"};\n"
"server.invoke(jaasMgr, \"flushAuthenticationCache\", params, signature);"
msgstr ""
+"MBeanServer server = ...;\n"
+"String jaasMgrName = \"jboss.security:service=JaasSecurityManager\";\n"
+"ObjectName jaasMgr = new ObjectName(jaasMgrName);\n"
+"Object[] params = {domainName};\n"
+"String[] signature = {\"java.lang.String\"};\n"
+"server.invoke(jaasMgr, \"flushAuthenticationCache\", params, signature);"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:666
@@ -2298,6 +2757,8 @@
"that are not expired. The MBean operation signature is: <literal>public List "
"getAuthenticationCachePrincipals(String securityDomain)</literal>."
msgstr ""
+"アクティブユーザーã®ä¸€è¦§ã‚’å–å¾—ã™ã‚‹ã¨ã€ 失効ã—ã¦ã„ãªã„ã‚»ã‚ュリティドメインèªè¨¼ã‚ャッシュ内㮠<literal>Principals</literal> ã‚ーã®ã‚¹ãƒŠãƒƒãƒ—ショットを得るã“ã¨ãŒã§ãã¾ã™ã€‚ MBean 演算ã®ç½²å㯠<literal>public List "
+"getAuthenticationCachePrincipals(String securityDomain)</literal> ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:672
@@ -2312,12 +2773,20 @@
"\", \n"
" params, signature);"
msgstr ""
+"MBeanServer server = ...;\n"
+"String jaasMgrName = \"jboss.security:service=JaasSecurityManager\";\n"
+"ObjectName jaasMgr = new ObjectName(jaasMgrName);\n"
+"Object[] params = {domainName};\n"
+"String[] signature = {\"java.lang.String\"};\n"
+"List users = (List) server.invoke(jaasMgr, \"getAuthenticationCachePrincipals"
+"\", \n"
+" params, signature);"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:673
#, no-c-format
msgid "The security manager has a few additional access methods."
-msgstr ""
+msgstr "ã‚»ã‚ュリティ管ç†ã«ã¯è¿½åŠ ã§ã„ãã¤ã‹ã®ã‚¢ã‚¯ã‚»ã‚¹ãƒ¡ã‚½ãƒƒãƒ‰ãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:676
@@ -2332,6 +2801,14 @@
"public Set getUserRoles(String securityDomain, Principal principal, Object "
"credential);"
msgstr ""
+"public boolean isValid(String securityDomain, Principal principal, Object "
+"credential);\n"
+"public Principal getPrincipal(String securityDomain, Principal principal);\n"
+"public boolean doesUserHaveRole(String securityDomain, Principal "
+"principal, \n"
+" Object credential, Set roles);\n"
+"public Set getUserRoles(String securityDomain, Principal principal, Object "
+"credential);"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:677
@@ -2341,13 +2818,13 @@
"literal> and <literal>RealmMapping</literal> interface method of the "
"associated security domain named by the <literal>securityDomain</literal> "
"argument."
-msgstr ""
+msgstr "<literal>securityDomain</literal> 引数ã«ã‚ˆã‚Šåå‰ãŒä¸Žãˆã‚‰ã‚ŒãŸé–¢é€£ã‚»ã‚ュリティドメイン㮠<literal>AuthenticationManager</literal> ãŠã‚ˆã³ <literal>RealmMapping</literal> ã®è©²å½“インターフェースメソッドã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’æä¾›ã—ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:683
#, no-c-format
msgid "The JaasSecurityDomain MBean"
-msgstr ""
+msgstr "JaasSecurityDomain MBean"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:684
@@ -2359,7 +2836,7 @@
"and a <literal>TrustManagerFactory</literal> for supporting SSL and other "
"cryptographic use cases. The additional configurable attributes of the "
"<literal>JaasSecurityDomain</literal> include:"
-msgstr ""
+msgstr "<literal>org.jboss.security.plugins.JaasSecurityDomain</literal> 㯠<literal>JaasSecurityManager</literal> ã®æ‹¡å¼µã§ã€ SSL ã‚„ä»–ã®æš—å·ã®ä½¿ç”¨ã«å¯¾å¿œã™ã‚‹ã‚ˆã† <literal>KeyStore</literal>〠JSSE <literal>KeyManagerFactory</literal>〠<literal>TrustManagerFactory</literal> ã®æ¦‚å¿µã‚’è¿½åŠ ã—ã¾ã™ã€‚ <literal>JaasSecurityDomain</literal> ã®è¨å®šå¯èƒ½ãªå±žæ€§ã«ã¯æ¬¡ã®ã‚ˆã†ãªã‚‚ã®ãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:689
@@ -2369,7 +2846,7 @@
"<literal>KeyStore</literal> implementation. This is the type argument passed "
"to the <literal>java.security.KeyStore.getInstance(String type)</literal> "
"factory method. The default is <literal>JKS</literal>."
-msgstr ""
+msgstr "<emphasis role=\"bold\">KeyStoreType</emphasis>: <literal>KeyStore</literal> 実装ã®ã‚¿ã‚¤ãƒ—ã§ã™ã€‚ <literal>java.security.KeyStore.getInstance(String type)</literal> ファクトリメソッドã«æ¸¡ã•ã‚Œã‚‹ã‚¿ã‚¤ãƒ—引数ã«ãªã‚Šã¾ã™ã€‚ デフォルト㯠<literal>JKS</literal> ã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:694
@@ -2380,6 +2857,8 @@
"<literal>InputStream</literal> to initialize the <literal>KeyStore</"
"literal>. If the string is not a value URL, it is treated as a file."
msgstr ""
+"<emphasis role=\"bold\">KeyStoreURL</emphasis>: <literal>KeyStore</literal> データベースã®å ´æ‰€ã¸ã® URL ã§ã™ã€‚ <literal>InputStream</literal> ã‚’å–å¾—ã—㦠<literal>KeyStore</"
+"literal> ã‚’åˆæœŸåŒ–ã™ã‚‹ãŸã‚ã«ä½¿ç”¨ã•ã‚Œã¾ã™ã€‚ æ–‡å—列㌠URL 値ã§ã¯ãªã„å ´åˆã€ ファイルã¨ã—ã¦æ‰±ã‚ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:699
@@ -2392,16 +2871,17 @@
"create a PBE secret key used with the encode/decode operations. The "
"<literal>KeyStorePass</literal> attribute value format is one of the "
"following:"
-msgstr ""
+msgstr "<emphasis role=\"bold\">KeyStorePass</emphasis>: <literal>KeyStore</literal> データベースã®å†…容ã«é–¢é€£ä»˜ã‘られるパスワードã§ã™ã€‚ ã¾ãŸã€ <literal>KeyStorePass</literal> ã¯ã€ æš—å·åŒ–・復å·åŒ–ã®æ¼”ç®—ã§ä½¿ç”¨ã•ã‚Œã‚‹ PBE 秘密éµã‚’作æˆã™ã‚‹ <literal>Salt</literal> ãŠã‚ˆã³ <literal>IterationCount</literal> ã®å±žæ€§ã¨çµ„ã¿åˆã‚ã›ã¦ã‚‚使用ã•ã‚Œã¾ã™ã€‚ <literal>KeyStorePass</literal> 属性値ã®å½¢å¼ã¯ä»¥ä¸‹ã®ã„ãšã‚Œã‹ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:704
#, no-c-format
+#, fuzzy
msgid ""
"The plaintext password for the <literal>KeyStore</literal> The "
"<literal>toCharArray()</literal> value of the string is used without any "
"manipulation."
-msgstr ""
+msgstr "<literal>KeyStore</literal> ã®ãƒ—レーテã‚ストパスワード〠文å—列㮠<literal>toCharArray()</literal> ã¯æ“作無ã—ã«ä½¿ç”¨ã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:709
@@ -2412,7 +2892,7 @@
"command line that will be passed to the <literal>Runtime.exec(String)</"
"literal> method to execute a platform-specific command. The first line of "
"the command output is used as the password."
-msgstr ""
+msgstr "プレーンテã‚ストã®ãƒ‘スワードをå–å¾—ã™ã‚‹ãŸã‚実行ã™ã‚‹ã‚³ãƒžãƒ³ãƒ‰ã€ <literal>{EXT}...</literal> ã®å½¢å¼ã«ãªã‚Šã¾ã™ã€‚ <literal>...</literal> ã¯ãƒ—ラットフォーム固有ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’実行ã™ã‚‹ãŸã‚ã« <literal>Runtime.exec(String)</literal> メソッドã«æ¸¡ã•ã‚Œã‚‹æ£ç¢ºãªã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã«ãªã‚Šã¾ã™ã€‚ コマンド出力㮠1 行目ãŒãƒ‘スワードã¨ã—ã¦ä½¿ç”¨ã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:714
@@ -2425,6 +2905,8 @@
"from classname by invoking a <literal>toCharArray()</literal> method if "
"found, otherwise, the <literal>toString()</literal> method is used."
msgstr ""
+"プレーンテã‚ストã®ãƒ‘スワードをå–å¾—ã™ã‚‹ãŸã‚ã«ä½œæˆã™ã‚‹ã‚¯ãƒ©ã‚¹ã§ã™ã€‚ <literal>"
+"{CLASS}classname[:ctorarg]</literal> ã®å½¢å¼ã«ãªã‚Šã€ <literal>[:ctorarg]</literal> 㯠<literal>classname</literal> ã®ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã‚’作æˆã™ã‚‹ã¨ãã«ã‚³ãƒ³ã‚¹ãƒˆãƒ©ã‚¯ã‚¿ã«æ¸¡ã•ã‚Œã‚‹ã‚ªãƒ—ションã®æ–‡å—列ã«ãªã‚Šã¾ã™ã€‚ パスワードã¯ã€ <literal>toCharArray()</literal> メソッドãŒè¦‹ã¤ã‹ã‚Œã°ã“れを呼ã³å‡ºã—ã¦ã‚¯ãƒ©ã‚¹åã‹ã‚‰å–å¾—ã•ã‚Œã¾ã™ã€‚ ã“れ以外㯠<literal>toString()</literal> メソッドãŒä½¿ç”¨ã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:721
@@ -2433,6 +2915,8 @@
"<emphasis role=\"bold\">Salt</emphasis>: The <literal>PBEParameterSpec</"
"literal> salt value."
msgstr ""
+"<emphasis role=\"bold\">Salt</emphasis>: <literal>PBEParameterSpec</"
+"literal> salt ã®å€¤ã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:726
@@ -2440,7 +2924,7 @@
msgid ""
"<emphasis role=\"bold\">IterationCount</emphasis>: The "
"<literal>PBEParameterSpec</literal> iteration count value."
-msgstr ""
+msgstr "<emphasis role=\"bold\">IterationCount</emphasis>: <literal>PBEParameterSpec</literal> ã®å復カウント値ã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:731
@@ -2450,7 +2934,7 @@
"<literal>TrustStore</literal> implementation. This is the type argument "
"passed to the <literal>java.security.KeyStore.getInstance(String type)</"
"literal> factory method. The default is <literal>JKS</literal>."
-msgstr ""
+msgstr "<emphasis role=\"bold\">TrustStoreType</emphasis>: <literal>TrustStore</literal> 実装ã®ã‚¿ã‚¤ãƒ—ã§ã™ã€‚ <literal>java.security.KeyStore.getInstance(String type)</literal> ファクトリメソッドã«æ¸¡ã•ã‚Œã‚‹ã‚¿ã‚¤ãƒ—引数ã«ãªã‚Šã¾ã™ã€‚ デフォルト㯠<literal>JKS</literal> ã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:736
@@ -2461,16 +2945,19 @@
"<literal>InputStream</literal> to initialize the <literal>KeyStore</"
"literal>. If the string is not a value URL, it is treated as a file."
msgstr ""
+"<emphasis role=\"bold\">TrustStoreURL</emphasis>: <literal>TrustStore</literal> データベースã®å ´æ‰€ã¸ã® URL ã§ã™ã€‚ ã“れを使用ã—㦠<literal>InputStream</literal> ã‚’å–å¾—ã— <literal>KeyStore</"
+"literal> ã‚’åˆæœŸåŒ–ã—ã¾ã™ã€‚ æ–‡å—列㌠URL 値ã§ã¯ãªã„å ´åˆã€ ファイルã¨ã—ã¦æ‰±ã‚ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:741
#, no-c-format
+#, fuzzy
msgid ""
"<emphasis role=\"bold\">TrustStorePass</emphasis>: The password associated "
"with the trust store database contents. The <literal>TrustStorePass</"
"literal> is a simple password and doesn't have the same configuration "
"options as the <literal>KeyStorePass</literal>."
-msgstr ""
+msgstr "<emphasis role=\"bold\">TrustStorePass</emphasis>: trust store (??) データベースã®å†…容ã«é–¢é€£ä»˜ã‘られるパスワードã§ã™ã€‚ <literal>TrustStorePass</literal> ã¯ã‚·ãƒ³ãƒ—ルãªãƒ‘スワードã§ã€ <literal>KeyStorePass</literal> ã¨åŒã˜ã‚ˆã†ãªè¨å®šã‚ªãƒ—ションã¯ã‚ã‚Šã¾ã›ã‚“。"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:746
@@ -2483,13 +2970,13 @@
"<literal><domain></literal> is the name passed to the MBean "
"constructor. The name defaults to <literal>jboss.security:"
"service=JaasSecurityManager</literal>."
-msgstr ""
+msgstr "<emphasis role=\"bold\">ManagerServiceName</emphasis>: ã‚»ã‚ュリティ管ç†ã‚µãƒ¼ãƒ“ス MBean ã® JMX オブジェクトåæ–‡å—列をè¨å®šã—ã¾ã™ã€‚ <literal>java:/jaas/<domain></literal> é…下ã®ã‚»ã‚ュリティ管ç†ã¨ã—ã¦ã® <literal>JaasSecurityDomain</literal> 登録ã«ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã‚’登録ã™ã‚‹ãŸã‚ã«ä½¿ç”¨ã—ã¾ã™ã€‚ <literal><domain></literal> 㯠MBean コンストラクタã«æ¸¡ã•ã‚Œã‚‹åå‰ã§ã™ã€‚ ã“ã®åå‰ã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ã¯ <literal>jboss.security:service=JaasSecurityManager</literal> ã«è¨å®šã•ã‚Œã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:756
#, no-c-format
msgid "Defining Security Domains"
-msgstr ""
+msgstr "ã‚»ã‚ュリティドメインを定義ã™ã‚‹"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:757
@@ -2500,7 +2987,7 @@
"configuration policy defines a set of named security domains that each "
"define a stack of login modules that will be called upon to authenticate and "
"authorize users."
-msgstr ""
+msgstr "JBoss ã«ãŠã‘ã‚‹èªè¨¼ãŠã‚ˆã³æ‰¿èªç”¨ã®ã‚»ã‚ュリティドメイン群をè¨å®šã™ã‚‹æ¨™æº–çš„ãªæ–¹æ³•ã¯ã€ XML ãƒã‚°ã‚¤ãƒ³è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã‚’使用ã™ã‚‹æ–¹æ³•ã§ã™ã€‚ ãƒã‚°ã‚¤ãƒ³è¨å®šãƒãƒªã‚·ãƒ¼ã¯ã€ ユーザーをèªè¨¼ãŠã‚ˆã³æ‰¿èªã™ã‚‹ãŸã‚呼ã³å‡ºã•ã‚Œã‚‹ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ã‚¹ã‚¿ãƒƒã‚¯ã‚’定義ã™ã‚‹ named ã‚»ã‚ュリティドメイン群ã®ã‚»ãƒƒãƒˆã‚’定義ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:760
@@ -2510,23 +2997,26 @@
"\"Defining_Security_Domains-The_XMLLoginConfig_DTD\"/>. This DTD can be "
"found in <literal>docs/dtd/security_config.dtd</literal>."
msgstr ""
+"XML è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã¯ <xref linkend="
+"\"Defining_Security_Domains-The_XMLLoginConfig_DTD\"/> ã§ç¤ºã™ã‚ˆã†ã« DTD ã«å¾“ã„ã¾ã™ã€‚ ã“ã® DTD 㯠<literal>docs/dtd/security_config.dtd</literal> ã«ã‚ã‚Šã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:764
#, no-c-format
msgid "The XMLLoginConfig DTD"
-msgstr ""
+msgstr "XMLLoginConfig DTD"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:776
#, no-c-format
+#, fuzzy
msgid ""
"The following example shows a simple configuration named jmx-console that is "
"backed by a single login module. The login module is configured by a simple "
"set of name/value configuration pairs that have meaning to the login module "
"in question. We'll see what these options mean later, for now we'll "
"just be concerned with the structure of the configuration file."
-msgstr ""
+msgstr "次ã®ä¾‹ã§ã¯å˜ä¸€ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«æ”¯ãˆã‚‰ã‚ŒãŸ jmx-console ã¨å‘¼ã°ã‚Œã‚‹ã‚·ãƒ³ãƒ—ルãªè¨å®šã‚’示ã—ã¦ã„ã¾ã™ã€‚ ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:779
@@ -2544,6 +3034,17 @@
" </authentication>\n"
"</application-policy>"
msgstr ""
+"<application-policy name=\"jmx-console\">\n"
+" <authentication>\n"
+" <login-module code=\"org.jboss.security.auth.spi."
+"UsersRolesLoginModule\" flag=\"required\">\n"
+" <module-option name=\"usersProperties\">props/jmx-console-"
+"users.properties</module-option>\n"
+" <module-option name=\"rolesProperties\">props/jmx-console-"
+"roles.properties</module-option>\n"
+" </login-module>\n"
+" </authentication>\n"
+"</application-policy>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:780
@@ -2556,7 +3057,7 @@
"in their deployment descriptors. (See the <literal>security-domain</literal> "
"elements in <literal>jboss.xml</literal>, <literal>jboss-web.xml</literal> "
"and <literal>jboss-service.xml</literal> files for examples)"
-msgstr ""
+msgstr "<literal>application-policy</literal> ã® <literal>name</literal> 属性ã¯ãƒã‚°ã‚¤ãƒ³è¨å®šåã§ã™ã€‚ アプリケーションãƒãƒªã‚·ãƒ¼ã‚¨ãƒ¬ãƒ¡ãƒ³ãƒˆã¯ <literal>java:/jaas</literal> コンテã‚ストé…下㫠JNDI ã«ã‚ã‚‹ãã®åå‰ã§çµåˆã•ã‚Œã¾ã™ã€‚ アプリケーションã¯ãã®ãƒ‡ãƒ—ãƒã‚¤ãƒ¡ãƒ³ãƒˆè¨˜è¿°åã«ã‚ã‚‹ã“ã® JNDI åã§ã‚»ã‚ュリティドメインã«ãƒªãƒ³ã‚¯ã—ã¾ã™ã€‚ (例〠<literal>jboss.xml</literal>〠<literal>jboss-web.xml</literal>〠<literal>jboss-service.xml</literal> ã®å„ファイルã«ã‚ã‚‹ <literal>security-domain</literal> エレメントをå‚ç…§)"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:783
@@ -2566,7 +3067,7 @@
"element specifies the class name of the login module implementation. The "
"<literal>required</literal> flag attribute controls the overall behavior of "
"the authentication stack. The allowed values and meanings are:"
-msgstr ""
+msgstr "<literal>login-module</literal> エレメント㮠<literal>code</literal> 属性ã¯ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«å®Ÿè£…ã®ã‚¯ãƒ©ã‚¹åを指定ã—ã¾ã™ã€‚ <literal>required</literal> フラグ属性ã¯èªè¨¼ã‚¹ã‚¿ãƒƒã‚¯ã®å…¨ä½“çš„ãªå‹•ä½œã‚’制御ã—ã¾ã™ã€‚ 許å¯ã•ã‚Œã¦ã„る値ã¨æ„味ã¯æ¬¡ã®é€šã‚Šã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:788
@@ -2576,7 +3077,7 @@
"succeed for the authentication to be successful. If any required module "
"fails, the authentication will fail. The remaining login modules in the "
"stack will be called regardless of the outcome of the authentication."
-msgstr ""
+msgstr "<emphasis role=\"bold\">required</emphasis>: èªè¨¼ãŒæˆåŠŸã™ã‚‹ã«ã¯ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒæˆåŠŸã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ å¿…è¦ã¨ãªã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ã„ãšã‚Œã‹ãŒå¤±æ•—ã™ã‚‹ã¨ãã®èªè¨¼ã¯å¤±æ•—ã—ã¾ã™ã€‚ スタック内ã®æ®‹ã‚Šã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯èªè¨¼ã®çµæžœã«é–¢ä¿‚ãªãコールã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:793
@@ -2585,7 +3086,7 @@
"<emphasis role=\"bold\">requisite</emphasis>: The login module is required "
"to succeed. If it succeeds, authentication continues down the login stack. "
"If it fails, control immediately returns to the application."
-msgstr ""
+msgstr "<emphasis role=\"bold\">requisite</emphasis>: ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒæˆåŠŸã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ æˆåŠŸã™ã‚‹ã¨èªè¨¼ã¯ãƒã‚°ã‚¤ãƒ³ã‚¹ã‚¿ãƒƒã‚¯ã‚’続行ã—ã¾ã™ã€‚ 失敗ã™ã‚‹ã¨åˆ¶å¾¡ã¯ç›´ã¡ã«ã‚¢ãƒ—リケーションã«æˆ»ã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:798
@@ -2594,7 +3095,7 @@
"<emphasis role=\"bold\">sufficient</emphasis>: The login module is not "
"required to succeed. If it does succeed, control immediately returns to the "
"application. If it fails, authentication continues down the login stack."
-msgstr ""
+msgstr "<emphasis role=\"bold\">sufficient</emphasis>: ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒæˆåŠŸã™ã‚‹å¿…è¦ã¯ã‚ã‚Šã¾ã›ã‚“。 æˆåŠŸã™ã‚‹ã¨åˆ¶å¾¡ã¯ç›´ã¡ã«ã‚¢ãƒ—リケーションã«æˆ»ã‚Šã¾ã™ã€‚ 失敗ã™ã‚‹ã¨èªè¨¼ã¯ãƒã‚°ã‚¤ãƒ³ã‚¹ã‚¿ãƒƒã‚¯ã‚’続行ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:803
@@ -2603,16 +3104,17 @@
"<emphasis role=\"bold\">optional</emphasis>: The login module is not "
"required to succeed. Authentication still continues to proceed down the "
"login stack regardless of whether the login module succeeds or fails."
-msgstr ""
+msgstr "<emphasis role=\"bold\">optional</emphasis>: ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒæˆåŠŸã™ã‚‹å¿…è¦ã¯ã‚ã‚Šã¾ã›ã‚“。 ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®æˆåŠŸã¾ãŸã¯å¤±æ•—ã«é–¢ã‚らãšã€ èªè¨¼ã¯ãƒã‚°ã‚¤ãƒ³ã‚¹ã‚¿ãƒƒã‚¯ã‚’続行ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:808
#, no-c-format
+#, fuzzy
msgid ""
"The following example shows the definition of a security domain that uses "
"multiple login modules. Since both modules are marked as sufficient, only "
"one of them need to succeed for login to proceed."
-msgstr ""
+msgstr "次ã®ä¾‹ã§ã¯ã€ 複数ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’使用ã™ã‚‹ã‚»ã‚ュリティドメインã®å®šç¾©ã‚’示ã—ã¦ã„ã¾ã™ã€‚ ã„ãšã‚Œã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚‚ sufficient ã¨ãƒžãƒ¼ã‚¯ã•ã‚Œã‚‹ãŸã‚〠ãƒã‚°ã‚¤ãƒ³ã‚’続行ã™ã‚‹ã«ã¯ã„ãšã‚Œã‹ 1 ã¤ã ã‘ãŒæˆåŠŸã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:811
@@ -2633,6 +3135,20 @@
" </authentication>\n"
"</application-policy>"
msgstr ""
+"<application-policy name=\"todo\">\n"
+" <authentication>\n"
+" <login-module code=\"org.jboss.security.auth.spi.LdapLoginModule"
+"\" \n"
+" flag=\"sufficient\">\n"
+" <!-- LDAP configuration -->\n"
+" </login-module>\n"
+" <login-module code=\"org.jboss.security.auth.spi."
+"DatabaseServerLoginModule\" \n"
+" flag=\"sufficient\">\n"
+" <!-- database configuration -->\n"
+" </login-module>\n"
+" </authentication>\n"
+"</application-policy>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:812
@@ -2642,13 +3158,13 @@
"name/value pairs using the <literal>module-option</literal> elements. We'"
"ll cover module options in more depth when we look at the individual login "
"modules available in JBoss AS."
-msgstr ""
+msgstr "å„ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«ã¯ç‹¬è‡ªã®è¨å®šã‚ªãƒ—ションセットãŒã‚ã‚Šã¾ã™ã€‚ ã“れら㯠<literal>module-option</literal> エレメントを使用ã™ã‚‹åå‰ã¨å€¤ã®çµ„ã¿åˆã‚ã›ã‚»ãƒƒãƒˆã¨ãªã‚Šã¾ã™ã€‚ モジュールã®ã‚ªãƒ—ションã«ã¤ã„ã¦ã¯ã€ JBoss AS ã§ä½¿ç”¨ã§ãã‚‹ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’個別ã«èª¬æ˜Žã—ã¦ã„ãéš›ã«è§¦ã‚Œã‚‹ã“ã¨ã«ã—ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:816
#, no-c-format
msgid "Loading Security Domains"
-msgstr ""
+msgstr "ã‚»ã‚ュリティドメインをãƒãƒ¼ãƒ‰ã™ã‚‹"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:817
@@ -2659,7 +3175,7 @@
"literal> MBean is responsible for loading security configurations from this "
"configurations from a local configuration file. The MBean is defined as "
"shown below."
-msgstr ""
+msgstr "èªè¨¼ã‚»ã‚ュリティドメイン㯠<literal>conf/login-config.xml</literal> ファイルã§é™çš„ã«è¨å®šã•ã‚Œã¾ã™ã€‚ <literal>XMLLoginConfig</literal> MBean ã¯ãƒãƒ¼ã‚«ãƒ«è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã‹ã‚‰ã“ã®è¨å®šã«ã‚ˆã‚‹ã‚»ã‚ュリティè¨å®šã‚’ãƒãƒ¼ãƒ‰ã™ã‚‹å½¹ç›®ã‚’æžœãŸã—ã¾ã™ã€‚ MBean ã¯ä»¥ä¸‹ã«ç¤ºã™ã‚ˆã†ã«å®šç¾©ã•ã‚Œã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:820
@@ -2671,12 +3187,17 @@
"attribute>\n"
"</mbean>"
msgstr ""
+"<mbean code=\"org.jboss.security.auth.login.XMLLoginConfig\"\n"
+" name=\"jboss.security:service=XMLLoginConfig\">\n"
+" <attribute name=\"ConfigResource\">login-config.xml</"
+"attribute>\n"
+"</mbean>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:821
#, no-c-format
msgid "The MBean supports the following attributes:"
-msgstr ""
+msgstr "MBean ã¯ä»¥ä¸‹ã®å±žæ€§ã«å¯¾å¿œã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:826
@@ -2685,7 +3206,7 @@
"<emphasis role=\"bold\">ConfigURL</emphasis>: specifies the URL of the XML "
"login configuration file that should be loaded by this MBean on startup. "
"This must be a valid URL string representation."
-msgstr ""
+msgstr "<emphasis role=\"bold\">ConfigURL</emphasis>: 起動時ã«ã“ã® MBean ã«ã‚ˆã‚Šãƒãƒ¼ãƒ‰ã•ã‚Œã‚‹ã¹ã XML 炉食ã„ã‚“è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã® URL を指定ã—ã¾ã™ã€‚ 有効㪠URL æ–‡å—列表記ã§ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“。"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:831
@@ -2695,7 +3216,7 @@
"name of the XML login configuration file that should be loaded by this MBean "
"on startup. The name is treated as a classpath resource for which a URL is "
"located using the thread context class loader."
-msgstr ""
+msgstr "<emphasis role=\"bold\">ConfigResource</emphasis>: 起動時ã«ã“ã® MBean ã«ã‚ˆã£ã¦ãƒãƒ¼ãƒ‰ã•ã‚Œã‚‹ã¹ã XML ãƒã‚°ã‚¤ãƒ³è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã®ãƒªã‚½ãƒ¼ã‚¹åを指定ã—ã¾ã™ã€‚ ã“ã®åå‰ã¯ã€ スレッドコンテã‚ストクラスãƒãƒ¼ãƒ€ãƒ¼ã‚’使ã£ã¦é…ç½®ã•ã‚Œã‚‹ URL ã®ã‚¯ãƒ©ã‚¹ãƒ‘スリソースã¨ã—ã¦æ‰±ã‚ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:836
@@ -2703,7 +3224,7 @@
msgid ""
"<emphasis role=\"bold\">ValidateDTD</emphasis>: a flag indicating if the XML "
"configuration should be validated against its DTD. This defaults to true."
-msgstr ""
+msgstr "<emphasis role=\"bold\">ValidateDTD</emphasis>: XML è¨å®šãŒãã® DTD ã«å¯¾ã—ã¦æ¤œè¨¼ã•ã‚Œãªã‘ã‚Œã°ãªã‚‰ãªã„å ´åˆã«ãƒ•ãƒ©ã‚°ãŒç¤ºã•ã‚Œã¾ã™ã€‚ デフォルトã§ã¯ true ã«è¨å®šã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:841
@@ -2718,6 +3239,9 @@
"be used to add/remove a deployment specific security configuration "
"dynamically."
msgstr ""
+"MBean ã¯èµ·å‹•æ™‚ã«ãƒã‚°ã‚¤ãƒ³è¨å®šã‚’å‹•çš„ã«æ‹¡å¼µã§ãる次ã®ã‚ˆã†ãªæ©Ÿèƒ½ã«ã‚‚対応ã—ã¦ã„ã¾ã™ã€‚ ãƒã‚°ã‚¤ãƒ³è¨å®šã®å¤‰æ›´ã‚’試行ã™ã‚‹å‹•ä½œã¯ã‚»ã‚ュリティ管ç†ã§å®Ÿè¡Œã™ã‚‹å ´åˆã«ã¯ã™ã¹ã¦ <literal>javax.security.auth.AuthPermission(\"refreshLoginConfiguration\")</"
+"literal> ã‚’å¿…è¦ã¨ã™ã‚‹ã®ã§æ³¨æ„ã—ã¦ãã ã•ã„。 <literal>org.jboss.book."
+"security.service.SecurityConfig</literal> サービスã¯ã€ デプãƒã‚¤ãƒ¡ãƒ³ãƒˆå›ºæœ‰ã®ã‚»ã‚ュリティè¨å®šã‚’å‹•çš„ã«è¿½åŠ ã¾ãŸã¯å‰Šé™¤ã™ã‚‹ãŸã‚ã®ä½¿ç”¨æ–¹æ³•ã‚’示ã—ã¦ã„ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:846
@@ -2728,6 +3252,8 @@
"current configuration under the given <literal>appName</literal>. This "
"replaces any existing entry under that name."
msgstr ""
+"<literal>void addAppConfig(String appName, AppConfigurationEntry[] entries)</"
+"literal>: 特定ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«è¨å®šã‚¹ã‚¿ãƒƒã‚¯ã‚’特定㮠<literal>appName</literal> é…下ã«ã‚ã‚‹ç¾åœ¨ã®è¨å®šã«è¿½åŠ ã—ã¾ã™ã€‚ ã“ã‚Œã¯ã“ã®åå‰ã®é…下ã«ã‚ã‚‹æ—¢å˜ã‚¨ãƒ³ãƒˆãƒªã‚’ç½®ãæ›ãˆã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:851
@@ -2736,7 +3262,7 @@
"<literal>void removeAppConfig(String appName)</literal>: this removes the "
"login module configuration registered under the given <literal>appName</"
"literal>."
-msgstr ""
+msgstr "<literal>void removeAppConfig(String appName)</literal>: 特定㮠<literal>appName</literal> é…下ã«ç™»éŒ²ã•ã‚Œã¦ã„ã‚‹ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«è¨å®šã‚’削除ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:856
@@ -2747,7 +3273,7 @@
"or legacy Sun login configuration file. Note that all login configurations "
"must be added or none will be added. It returns the names of the login "
"configurations that were added."
-msgstr ""
+msgstr "<literal>String[] loadConfig(URL configURL) throws Exception</literal>: XML ã¾ãŸã¯ãƒ¬ã‚¬ã‚·ãƒ¼ãª Sun ãƒã‚°ã‚¤ãƒ³è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã®ã„ãšã‚Œã‹è¡¨ã™ URL ã‹ã‚‰ 1 ã¤ã¾ãŸã¯è¤‡æ•°ã®ãƒã‚°ã‚¤ãƒ³è¨å®šã‚’ãƒãƒ¼ãƒ‰ã—ã¾ã™ã€‚ ã™ã¹ã¦ã®ãƒã‚°ã‚¤ãƒ³è¨å®šãŒè¿½åŠ ã•ã‚Œãªã‘ã‚Œã°ãªã‚‰ãªã„ã‹ã€ ã‚ã‚‹ã„ã¯ä½•ã‚‚è¿½åŠ ã•ã‚Œã¾ã›ã‚“。 è¿½åŠ ã•ã‚ŒãŸãƒã‚°ã‚¤ãƒ³è¨å®šåã‚’è¿”ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:861
@@ -2763,7 +3289,7 @@
msgid ""
"<literal>String displayAppConfig(String appName)</literal>: this operation "
"displays a simple string format of the named configuration if it exists."
-msgstr ""
+msgstr "<literal>String displayAppConfig(String appName)</literal>: ã“ã®æ¼”ç®—ã¯ã€ 指定ã•ã‚ŒãŸè¨å®šãŒå˜åœ¨ã™ã‚Œã°ãã®ã‚·ãƒ³ãƒ—ルãªæ–‡å—列形å¼ã‚’表示ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:871
@@ -2773,7 +3299,7 @@
"<literal>javax.security.auth.login.Configuration</literal> to be used. The "
"default configuration simply references the <literal>XMLLoginConfig</"
"literal> MBean."
-msgstr ""
+msgstr "<literal>SecurityConfig</literal> MBean ã¯ä½¿ç”¨ã•ã‚Œã‚‹ <literal>javax.security.auth.login.Configuration</literal> ã‚’é¸æŠžã™ã‚‹å½¹ç›®ã‚’æžœãŸã—ã¾ã™ã€‚ デフォルトã®è¨å®šã¯å˜ç´”ã« <literal>XMLLoginConfig</literal> MBean ã‚’å‚ç…§ã—ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:874
@@ -2785,12 +3311,17 @@
"service=XMLLoginConfig</attribute>\n"
" </mbean>"
msgstr ""
+"<mbean code=\"org.jboss.security.plugins.SecurityConfig\" \n"
+" name=\"jboss.security:service=SecurityConfig\">\n"
+" <attribute name=\"LoginConfig\">jboss.security:"
+"service=XMLLoginConfig</attribute>\n"
+" </mbean>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:875
#, no-c-format
msgid "There is one configurable attribute:"
-msgstr ""
+msgstr "è¨å®šå¯èƒ½ãªå±žæ€§ã¯ 1 ã¤ã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:880
@@ -2806,10 +3337,13 @@
"Sun <literal>Configuration</literal> implementation described in the "
"<literal>Configuration</literal> class JavaDocs is used."
msgstr ""
+"<emphasis role=\"bold\">LoginConfig</emphasis>: デフォルト㮠JAAS ãƒã‚°ã‚¤ãƒ³è¨å®šã‚’æä¾›ã™ã‚‹ MBean ã® JMX <literal>ObjectName</literal> æ–‡å—列を指定ã—ã¾ã™ã€‚ <literal>SecurityConfig</literal> ãŒèµ·å‹•ã•ã‚Œã‚‹ã¨ã€ ãã® <literal>getConfiguration"
+"(Configuration currentConfig)</literal> 演算をコールã—ã¦ã€ ã“ã® MBean ã«ãã® <literal>javax.security.auth.login.Configuration</literal> ãŒå•ã„åˆã‚ã›ã‚‰ã‚Œã¾ã™ã€‚ <literal>LoginConfig</literal> 属性ãŒæŒ‡å®šã•ã‚Œã¦ã„ãªã„å ´åˆã€ <literal>Configuration</literal> クラス JavaDocs ã«è¨˜è¼‰ã•ã‚Œã¦ã„るデフォルト㮠Sun <literal>Configuration</literal> 実装ãŒä½¿ç”¨ã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:885
#, no-c-format
+#, fuzzy
msgid ""
"In addition to allowing for a custom JAAS login configuration "
"implementation, this service allows configurations to be chained together in "
@@ -2817,7 +3351,7 @@
"stack and latter pop it. This is a feature used by the security unit tests "
"to install custom login configurations into a default JBoss installation. "
"Pushing a new configuration is done using:"
-msgstr ""
+msgstr "カスタムJAAS ãƒã‚°ã‚¤ãƒ³è¨å®šå®Ÿè£…ãŒå¯èƒ½ã«ãªã‚‹ä»–〠ã“ã®ã‚µãƒ¼ãƒ“スã«ã‚ˆã‚Šè¤‡æ•°ã®è¨å®šã‚’起動時㫠1 スタック内ã«ãƒã‚§ãƒ¼ãƒ³åŒ–ã™ã‚‹ã“ã¨ãŒã§ãるよã†ã«ãªã‚‹ãŸã‚〠ãƒã‚°ã‚¤ãƒ³è¨å®šã‚’ãã®ã‚¹ã‚¿ãƒƒã‚¯ã«ãƒ—ッシュã—ã¦ã‹ã‚‰å¾Œæ—¥ã€ 使用ã™ã‚‹ã“ã¨ãŒã§ãるよã†ã«ãªã‚Šã¾ã™(??pop it)。 ã“ã‚Œã¯ã‚«ã‚¹ã‚¿ãƒ ãƒã‚°ã‚¤ãƒ³ã®è¨å®šã‚’デフォルト㮠JBoss インストールã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹ãŸã‚ã‚»ã‚ュリティユニットテストã§ä½¿ç”¨ã•ã‚Œã‚‹æ©Ÿèƒ½ã«ãªã‚Šã¾ã™ã€‚ æ–°ã—ã„è¨å®šã‚’プッシュã™ã‚‹ã«ã¯æ¬¡ã‚’使用ã—ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:888
@@ -2826,6 +3360,8 @@
"public void pushLoginConfig(String objectName) throws\n"
" JMException, MalformedObjectNameException;"
msgstr ""
+"public void pushLoginConfig(String objectName) throws\n"
+" JMException, MalformedObjectNameException;"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:889
@@ -2834,19 +3370,19 @@
"The <literal>objectName</literal> parameters specifies an MBean similar to "
"the <literal>LoginConfig</literal> attribute. The current login "
"configuration may be removed using:"
-msgstr ""
+msgstr "<literal>objectName</literal> パラメータ㯠<literal>LoginConfig</literal> 属性ã«ä¼¼ãŸ MBean を指定ã—ã¾ã™ã€‚ ç¾åœ¨ã®ãƒã‚°ã‚¤ãƒ³è¨å®šã¯æ¬¡ã‚’使ã£ã¦å‰Šé™¤ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:892
#, no-c-format
msgid "public void popLoginConfig() throws JMException;"
-msgstr ""
+msgstr "public void popLoginConfig() throws JMException;"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:896
#, no-c-format
msgid "The DynamicLoginConfig service"
-msgstr ""
+msgstr "DynamicLoginConfig サービス"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:897
@@ -2860,13 +3396,13 @@
"configuration as part of a deployment (or just as a standalone service) "
"rather than having to edit the static <literal>login-config.xml</literal> "
"file."
-msgstr ""
+msgstr "<literal>login-config.xml</literal> ファイル内ã§å®šç¾©ã•ã‚Œã‚‹ã‚»ã‚ュリティドメインã¯åŸºæœ¬çš„ã«é™çš„ã§ã™ã€‚ JBoss ãŒèµ·å‹•ã™ã‚‹ã¨èªã¿è¾¼ã¾ã‚Œã¾ã™ãŒã€ æ–°è¦ã®ã‚»ã‚ュリティドメインã®è¿½åŠ ã‚„æ—¢å˜ãƒ‰ãƒ¡ã‚¤ãƒ³ã®å®šç¾©ã®å¤‰æ›´ã¯å®¹æ˜“ã§ã¯ã‚ã‚Šã¾ã›ã‚“。 <literal>DynamicLoginConfig</literal> サービスを使用ã™ã‚‹ã¨å‹•çš„ã«ã‚»ã‚ュリティドメインã®å°Žå…¥ã‚’è¡Œã†ã“ã¨ãŒã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚ ã“ã‚Œã«ã‚ˆã‚Šã€ é™çš„㪠<literal>login-config.xml</literal> ファイルを編集ã™ã‚‹ã®ã§ã¯ãªã〠JAAS ãƒã‚°ã‚¤ãƒ³è¨å®šã‚’å°Žå…¥ã®ä¸€éƒ¨ã¨ã—㦠(ã¾ãŸã¯ã‚¹ã‚¿ãƒ³ãƒ‰ã‚¢ãƒãƒ¼ãƒ³ã®ã‚µãƒ¼ãƒ“スã¨ã—ã¦) 指定ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ "
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:900
#, no-c-format
msgid "The service supports the following attributes:"
-msgstr ""
+msgstr "ã“ã®ã‚µãƒ¼ãƒ“スã¯æ¬¡ã®å±žæ€§ã«å¯¾å¿œã—ã¦ã„ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:905
@@ -2875,7 +3411,7 @@
"<emphasis role=\"bold\">AuthConfig</emphasis>: The resource path to the JAAS "
"login configuration file to use. This defaults to <literal>login-config.xml</"
"literal>"
-msgstr ""
+msgstr "<emphasis role=\"bold\">AuthConfig</emphasis>: 使用ã™ã‚‹ JAAS ãƒã‚°ã‚¤ãƒ³è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã¸ã®ãƒªã‚½ãƒ¼ã‚¹ãƒ‘スã§ã™ã€‚ デフォルトã§ã¯ <literal>login-config.xml</literal> ã«è¨å®šã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:910
@@ -2885,11 +3421,12 @@
"<literal>XMLLoginConfig</literal> service name to use for loading. This "
"service must support a <literal>String loadConfig(URL)</literal> operation "
"to load the configurations."
-msgstr ""
+msgstr "<emphasis role=\"bold\">LoginConfigService</emphasis>: ãƒãƒ¼ãƒ‰ã«ä½¿ç”¨ã™ã‚‹ <literal>XMLLoginConfig</literal> サービスåã§ã™ã€‚ ã“ã®ã‚µãƒ¼ãƒ“スã¯è¨å®šã‚’ãƒãƒ¼ãƒ‰ã™ã‚‹ãŸã‚ <literal>String loadConfig(URL)</literal> 演算ã«å¯¾å¿œã—ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“。"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:915
#, no-c-format
+#, fuzzy
msgid ""
"<emphasis role=\"bold\">SecurityManagerService</emphasis>: The "
"<literal>SecurityManagerService</literal> name used to flush the registered "
@@ -2897,7 +3434,7 @@
"<literal>flushAuthenticationCache(String)</literal> operation to flush the "
"case for the argument security domain. Setting this triggers the flush of "
"the authentication caches when the service is stopped."
-msgstr ""
+msgstr "<emphasis role=\"bold\">SecurityManagerService</emphasis>: 登録セã‚ュリティドメインã®ãƒ•ãƒ©ãƒƒã‚·ãƒ¥ã«ä½¿ç”¨ã•ã‚Œã‚‹ <literal>SecurityManagerService</literal> åã§ã™ã€‚ ã“ã®ã‚µãƒ¼ãƒ“スã¯å¼•æ•°(??argument)ã‚»ã‚ュリティドメインã®ã‚±ãƒ¼ã‚¹(case? typo of cashe?)ã®ãƒ•ãƒ©ãƒƒã‚·ãƒ¥ã‚’ã™ã‚‹ãŸã‚ <literal>flushAuthenticationCache(String)</literal> 演算ã«å¯¾å¿œã—ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“。 ã“れをè¨å®šã™ã‚‹ã¨ã‚µãƒ¼ãƒ“スãŒåœæ¢ã•ã‚ŒãŸå ´åˆã«èªè¨¼ã‚ャッシュã®ãƒ•ãƒ©ãƒƒã‚·ãƒ¥ã‚’引ãèµ·ã“ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:920
@@ -2905,7 +3442,7 @@
msgid ""
"Here is an example MBean definition using the <literal>DynamicLoginConfig</"
"literal> service."
-msgstr ""
+msgstr "<literal>DynamicLoginConfig</literal> サービスを使ã£ãŸ MBean 定義ã®ä¾‹ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:923
@@ -2933,6 +3470,27 @@
" </mbean>\n"
"</server>"
msgstr ""
+"<server>\n"
+" <mbean code=\"org.jboss.security.auth.login.DynamicLoginConfig\" name="
+"\"...\">\n"
+" <attribute name=\"AuthConfig\">login-config.xml</"
+"attribute>\n"
+"\n"
+" <!-- The service which supports dynamic processing of login-"
+"config.xml\n"
+" configurations.\n"
+" -->\n"
+" <depends optional-attribute-name=\"LoginConfigService\">\n"
+" jboss.security:service=XMLLoginConfig </depends>\n"
+"\n"
+" <!-- Optionally specify the security mgr service to use when\n"
+" this service is stopped to flush the auth caches of the domains\n"
+" registered by this service.\n"
+" -->\n"
+" <depends optional-attribute-name=\"SecurityManagerService\">\n"
+" jboss.security:service=JaasSecurityManager </depends>\n"
+" </mbean>\n"
+"</server>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:924
@@ -2943,13 +3501,13 @@
"<literal>loadConfig</literal> with the appropriate resource URL. When the "
"service is stopped the configurations are removed. The resource specified "
"may be either an XML file, or a Sun JAAS login configuration."
-msgstr ""
+msgstr "ã“れ㯠<literal>loadConfig</literal> ã‚’é©åˆ‡ãªãƒªã‚½ãƒ¼ã‚¹ URL ã§å‘¼ã³å‡ºã™ã“ã¨ã«ã‚ˆã‚ŠæŒ‡å®šã® <literal>LoginConfigService</literal> MBean を使ã£ãŸæŒ‡å®š <literal>AuthConfig</literal> リソースをãƒãƒ¼ãƒ‰ã—ã¾ã™ã€‚ サービスãŒåœæ¢ã™ã‚‹ã¨è¨å®šã¯å‰Šé™¤ã•ã‚Œã¾ã™ã€‚ 指定ã•ã‚Œã‚‹ãƒªã‚½ãƒ¼ã‚¹ã¯ XML ファイルã¾ãŸã¯ Sun JAAS ãƒã‚°ã‚¤ãƒ³è¨å®šã®ã„ãšã‚Œã§ã‚‚構ã„ã¾ã›ã‚“。"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:930
#, no-c-format
msgid "Using JBoss Login Modules"
-msgstr ""
+msgstr "JBoss ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’使用ã™ã‚‹"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:931
@@ -2962,13 +3520,13 @@
"information for very customized needs in JBoss. Before we explore the "
"individual login modules, let's take a look at a few login module "
"configuration options that are common to multiple modules."
-msgstr ""
+msgstr "JBoss ã«ã¯ã»ã¨ã‚“ã©ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ç®¡ç†ã®ãƒ‹ãƒ¼ã‚ºã«åˆã†ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒè¤‡æ•°åŒæ¢±ã•ã‚Œã¦ã„ã¾ã™ã€‚ JBoss ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã‚’ãƒªãƒ¬ãƒ¼ã‚·ãƒ§ãƒŠãƒ«ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã€ LDAP サーãƒãƒ¼ã¾ãŸã¯ãƒ•ãƒ©ãƒƒãƒˆãƒ•ã‚¡ã‚¤ãƒ«ç¾¤ã‹ã‚‰èªã¿å–ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã¾ãŸã€ ã“れらã®ã‚³ã‚¢ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«åŠ ãˆã€ JBoss 㯠JBoss ã«ãŠã„ã¦é«˜åº¦ã«ã‚«ã‚¹ã‚¿ãƒžã‚¤ã‚ºã•ã‚ŒãŸãƒ‹ãƒ¼ã‚ºã«å¯¾å¿œã™ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã‚’æä¾›ã§ãã‚‹ãã®ä»–ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚‚ã„ãã¤ã‹æä¾›ã—ã¦ã„ã¾ã™ã€‚ ãã‚Œãžã‚Œã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’個別ã«èª¬æ˜Žã—ã¦ã„ãå‰ã«ã€ 複数ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«å…±é€šã¨ãªã‚‹ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«è¨å®šã®ã‚ªãƒ—ションをã„ãã¤ã‹è¦‹ã¦ã¿ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:935
#, no-c-format
msgid "Password Stacking"
-msgstr ""
+msgstr "Password Stacking"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:936
@@ -2983,7 +3541,7 @@
"managed in a central LDAP server but application-specific roles are stored "
"in the application's relational database. The password-stacking module "
"option captures this relationship."
-msgstr ""
+msgstr "å„ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯èªè¨¼ã¨æ‰¿èªã®ä¸¡ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã‚’æä¾›ã™ã‚‹å½¢ã§è¤‡æ•°ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’ 1 スタック内ã«ãƒã‚§ãƒ¼ãƒ³åŒ–ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã“ã‚Œã¯å¤šãã®ä½¿ç”¨ä¾‹ã«å½¹ç«‹ã¡ã¾ã™ãŒã€ èªè¨¼ã¨æ‰¿èªãŒè¤‡æ•°ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ç®¡ç†ã‚¹ãƒˆã‚¢ã«æ¸¡ã‚Šåˆ†è£‚ã—ã¦ã„ã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã™ã€‚ å‰è¿°ã®ä¾‹ã§ã¯ã€ LDAP ã¨ãƒªãƒ¬ãƒ¼ã‚·ãƒ§ãƒŠãƒ«ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã‚’çµåˆã—ã¦ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’ã„ãšã‚Œã‹ã®ã‚·ã‚¹ãƒ†ãƒ ã§èªè¨¼ã§ãるよã†ã«ã™ã‚‹æ–¹æ³•ã‚’示ã—ã¾ã—ãŸã€‚ ã“ã“ã§ã¯ã€ ユーザーã¯ä¸å¤® LDAP サーãƒãƒ¼ã§ç®¡ç†ã•ã‚Œã¦ã„ã‚‹ãŒã‚¢ãƒ—リケーション固有ã®ãƒãƒ¼ãƒ«ã¯ã‚¢ãƒ—リケーションã®ãƒªãƒ¬ãƒ¼ã‚·ãƒ§ãƒŠãƒ«ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã«æ ¼ç´ã•ã‚Œã¦ã„ã‚‹å ´åˆã‚’考ãˆã¦ã¿ã¦ãã ã•ã„。 password-stacking ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚ªãƒ—ションãŒã“ã®é–¢ä¿‚ã‚’ã‚ャプãƒãƒ£ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:941
@@ -3000,10 +3558,14 @@
"login.name</literal> and <literal>javax.security.auth.login.password</"
"literal> respectively."
msgstr ""
+"<emphasis role=\"bold\">password-stacking</emphasis>: <literal>password-"
+"stacking</literal> オプション㌠<literal>useFirstPass</literal> ã«è¨å®šã•ã‚Œã‚‹ã¨ã€ ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã¾ãšãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«å…±æœ‰çŠ¶æ…‹ãƒžãƒƒãƒ—ã«ã‚るプãƒãƒ‘ティå <literal>javax.security.auth.login.name</literal> 㨠<literal>javax.security.auth.login.password</literal> ã®é…下ã§ãã‚Œãžã‚Œå…±æœ‰ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼åã¨ãƒ‘スワードを探ã—ã¾ã™ã€‚ ã“れらãŒè¦‹ã¤ã‹ã‚‹ã¨ principal åã¨ãƒ‘スワードã¨ã—ã¦ä½¿ç”¨ã•ã‚Œã¾ã™ã€‚ 見ã¤ã‹ã‚‰ãªã„å ´åˆã¯ã€ principal åã¨ãƒ‘スワードã¯ã“ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§è¨å®šã•ã‚Œãã‚Œãžã‚Œãƒ—ãƒãƒ‘ティå <literal>javax.security.auth.login.name</literal> 㨠<literal>javax.security.auth.login.password</"
+"literal> ã®é…下ã«æ ¼ç´ã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:946
#, no-c-format
+#, fuzzy
msgid ""
"To use password stacking, each login module should set <literal>password-"
"stacking</literal> to <literal>useFirstPass</literal>. If a previous module "
@@ -3011,12 +3573,14 @@
"stacking modules will consider the user authenticated and only attempt to "
"provide a set of roles for the authorization step."
msgstr ""
+"パスワードスタッã‚ングを使用ã™ã‚‹ã«ã¯ã€ å„ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒ <literal>password-"
+"stacking</literal> ã‚’ <literal>useFirstPass</literal> ã«è¨å®šã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ "
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:949
#, no-c-format
msgid "The following listing shows how password stacking could be used:"
-msgstr ""
+msgstr "以下ã¯ãƒ‘スワードスタッã‚ングã®ä½¿ã„æ–¹ã«ã¤ã„ã¦è¡¨ç¤ºã—ã¦ã„ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:952
@@ -3041,6 +3605,24 @@
" </authentication>\n"
"</application-policy>"
msgstr ""
+"<application-policy name=\"todo\">\n"
+" <authentication>\n"
+" <login-module code=\"org.jboss.security.auth.spi.LdapLoginModule"
+"\" \n"
+" flag=\"required\">\n"
+" <!-- LDAP configuration -->\n"
+" <module-option name=\"password-stacking\">useFirstPass</"
+"module-option>\n"
+" </login-module>\n"
+" <login-module code=\"org.jboss.security.auth.spi."
+"DatabaseServerLoginModule\" \n"
+" flag=\"required\">\n"
+" <!-- database configuration --> \n"
+" <module-option name=\"password-stacking\">useFirstPass</"
+"module-option>\n"
+" </login-module>\n"
+" </authentication>\n"
+"</application-policy>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:953
@@ -3049,13 +3631,14 @@
"When using password stacking, it is usually appropriate to set all modules "
"to be required to make sure that all modules are considered and have chance "
"to contribute roles to the authorization process."
-msgstr ""
+msgstr "パスワードスタッã‚ングを使用ã™ã‚‹å ´åˆã€ 一般的ã«ã¯ã™ã¹ã¦ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒæ‰¿èªãƒ—ãƒã‚»ã‚¹ã«å¯¾ã—ã¦ãƒãƒ¼ãƒ«ã‚’æä¾›ã™ã‚‹ã¨ã¿ãªã—〠ãれをæä¾›ã™ã‚‹æ©Ÿä¼šã‚’与ãˆã‚‰ã‚Œã‚‹ã‚ˆã†å…¨ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒå¿…è¦ã¨ãªã‚‹ã‚ˆã†ã«è¨å®šã™ã‚‹ã®ãŒé©å½“ã§ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:959
#, no-c-format
+#, fuzzy
msgid "Password Hashing"
-msgstr ""
+msgstr "パスワードãƒãƒƒã‚·ãƒ¥"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:960
@@ -3066,7 +3649,7 @@
"with plain text passwords, but can also be configured to support hashed "
"passwords to prevent plain text passwords from being stored on the server "
"side."
-msgstr ""
+msgstr "ã»ã¨ã‚“ã©ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆæä¾›ã®ãƒ‘スワードをユーザー管ç†ã‚·ã‚¹ãƒ†ãƒ ã«ä¿å˜ã•ã‚Œã¦ã„るパスワードã¨æ¯”較ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ ã“れらã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ä¸€èˆ¬çš„ã«ãƒ—レーンテã‚ストã®ãƒ‘スワードã§å‹•ä½œã—ã¾ã™ãŒã€ サーãƒãƒ¼å´ã§ãƒ—レーンテã‚ストã®ãƒ‘スワードãŒä¿å˜ã•ã‚Œãªã„よã†ãƒãƒƒã‚·ãƒ¥åŒ–ã—ãŸãƒ‘スワードã«å¯¾å¿œã™ã‚‹ã‚ˆã†è¨å®šã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:965
@@ -3077,7 +3660,7 @@
"password. There is no default so this option must be specified to enable "
"hashing. Typical values are <literal>MD5</literal> and <literal>SHA</"
"literal>."
-msgstr ""
+msgstr "<emphasis role=\"bold\">hashAlgorithm</emphasis>: パスワードã®ãƒãƒƒã‚·ãƒ¥åŒ–ã«ä½¿ç”¨ã™ã‚‹ <literal>java.security.MessageDigest</literal> アルゴリズムåã§ã™ã€‚ デフォルトã¯ãªã„ãŸã‚〠ãƒãƒƒã‚·ãƒ¥åŒ–を有効ã«ã™ã‚‹ã«ã¯ã“ã®ã‚ªãƒ—ションを指定ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ 一般的ãªå€¤ã¯ <literal>MD5</literal> ã‚„ <literal>SHA</literal> ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:970
@@ -3087,16 +3670,17 @@
"hashed pass and must be either <literal>base64</literal>, <literal>hex</"
"literal> or <literal>rfc2617</literal>. The default is <literal>base64</"
"literal>."
-msgstr ""
+msgstr "<emphasis role=\"bold\">hashEncoding</emphasis>: ãƒãƒƒã‚·ãƒ¥åŒ–パスã®æ–‡å—列形å¼ã§ã€ <literal>base64</literal>〠<literal>hex</literal>〠<literal>rfc2617</literal> ã®ã„ãšã‚Œã‹ã«ãªã‚‰ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“。 デフォルト㯠<literal>base64</literal> ã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:975
#, no-c-format
+#, fuzzy
msgid ""
"<emphasis role=\"bold\">hashCharset</emphasis>: The encoding used to convert "
"the clear text password to a byte array. The platform default encoding is "
"the default."
-msgstr ""
+msgstr "<emphasis role=\"bold\">hashCharset</emphasis>: クリアテã‚ストã®ãƒ‘スワードをãƒã‚¤ãƒˆã‚¢ãƒ¬ã‚¤ã«å¤‰æ›ã™ã‚‹ãŸã‚ã«ä½¿ç”¨ã™ã‚‹ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã§ã™ã€‚ プラットフォームデフォルトエンコーディングã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ã™ã€‚ (defalut??)"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:980
@@ -3106,11 +3690,12 @@
"hashing algorithm should be applied to the password the user submits. The "
"hashed user password will be compared against the value in the login module, "
"which is expected to be a hash of the password. The default is true."
-msgstr ""
+msgstr "<emphasis role=\"bold\">hashUserPassword</emphasis>: ユーザーãŒã‚µãƒ–ミットã™ã‚‹ãƒ‘スワードã«å¯¾ã—ã¦ãƒãƒƒã‚·ãƒ¥ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ãŒé©ç”¨ã•ã‚Œãªã‘ã‚Œã°ãªã‚‰ãªã„ã“ã¨ã‚’示ã—ã¾ã™ã€‚ ãƒãƒƒã‚·ãƒ¥åŒ–ã•ã‚ŒãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒ‘スワードã¯ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«å†…ã®å€¤ã«å¯¾ã—ã¦æ¯”較ã•ã‚Œã€ ã“ã‚Œã¯ãƒ‘スワードã®ãƒãƒƒã‚·ãƒ¥ã§ã‚ã‚‹ã“ã¨ãŒæœŸå¾…ã•ã‚Œã¦ã„ã¾ã™ã€‚ デフォルト㯠true ã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:985
#, no-c-format
+#, fuzzy
msgid ""
"<emphasis role=\"bold\">hashStorePassword</emphasis>: This indicates that "
"the hashing algorithm should be applied to the password stored on the server "
@@ -3119,17 +3704,18 @@
"be comare. JBoss uses the hash algorithm (for digest, this would be "
"<literal>rfc2617</literal>) to compute a server-side hash that should match "
"the hashed value sent from the client."
-msgstr ""
+msgstr "<emphasis role=\"bold\">hashStorePassword</emphasis>: サーãƒãƒ¼å´ã«æ ¼ç´ã•ã‚Œã¦ã„るパスワードã«å¯¾ã—ã¦ãƒãƒƒã‚·ãƒ¥ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ãŒé©ç”¨ã•ã‚Œãªã‘ã‚Œã°ãªã‚‰ãªã„ã“ã¨ã‚’示ã—ã¾ã™ã€‚ ã“ã‚Œã¯ã€ ユーザーãŒãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒ‘スワードã®ãƒãƒƒã‚·ãƒ¥ã¨å…±ã«æ¯”較用ã®ã‚µãƒ¼ãƒãƒ¼ã‹ã‚‰ã®è¦æ±‚固有トークンをサブミットã™ã‚‹ãƒ€ã‚¤ã‚¸ã‚§ã‚¹ãƒˆèªè¨¼ã«ä½¿ç”¨ã•ã‚Œã¾ã™ã€‚ (comare?? => compared?) JBoss ã¯ãƒãƒƒã‚·ãƒ¥ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ (ダイジェストã®å ´åˆã€ <literal>rfc2617</literal> ã«ãªã‚‹) を使用ã—ã¦ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰é€ä¿¡ã•ã‚Œã‚‹ãƒãƒƒã‚·ãƒ¥åŒ–ã•ã‚ŒãŸå€¤ã¨ä¸€è‡´ã™ã¹ãサーãƒãƒ¼å´ã®ãƒãƒƒã‚·ãƒ¥ã‚’計算ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:990
#, no-c-format
+#, fuzzy
msgid ""
"The following is an login module configuration that assigns unauthenticated "
"users the principal name <literal>nobody</literal> and contains based64-"
"encoded, MD5 hashes of the passwords in a <literal>usersb64.properties</"
"literal> file."
-msgstr ""
+msgstr "以下ã¯ã€ 未èªè¨¼ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã« principal å <literal>nobody</literal> を割り当ã¦ã¦ã€ <literal>usersb64.properties</literal> ファイル内ã®ãƒ‘スワード㮠based64 エンコード化 MD5 ãƒãƒƒã‚·ãƒ¥ã‚’å«ã‚€ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®è¨å®šã«ãªã‚Šã¾ã™ã€‚assigns the principal name 'nobody' to unahtenticated users??"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:993
@@ -3150,6 +3736,20 @@
" </application-policy>\n"
"</policy>"
msgstr ""
+"<policy>\n"
+" <application-policy name=\"testUsersRoles\">\n"
+" <authentication>\n"
+" <login-module code=\"org.jboss.security.auth.spi."
+"UsersRolesLoginModule\"\n"
+" flag=\"required\">\n"
+" <module-option name=\"hashAlgorithm\">MD5</module-"
+"option>\n"
+" <module-option name=\"hashEncoding\">base64</module-"
+"option> \n"
+" </login-module>\n"
+" </authentication>\n"
+" </application-policy>\n"
+"</policy>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:994
@@ -3158,7 +3758,7 @@
"If you need to generate passwords in code, <literal>the org.jboss.security."
"Util</literal> class provides a static helper method that will hash a "
"password using a given encoding."
-msgstr ""
+msgstr "コードã§ãƒ‘スワードを生æˆã™ã‚‹å¿…è¦ãŒã‚ã‚‹å ´åˆã¯ã€ <literal>the org.jboss.security.Util</literal> クラスãŒç‰¹å®šã®ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã‚’使ã£ã¦ãƒ‘スワードをãƒãƒƒã‚·ãƒ¥ã™ã‚‹é™çš„ãªãƒ˜ãƒ«ãƒ‘ーメソッドをæä¾›ã—ã¦ã„ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:997
@@ -3170,19 +3770,23 @@
" null,\n"
" \"password\");"
msgstr ""
+"String hashedPassword = Util.createPasswordHash(\"MD5\",\n"
+" Util.BASE64_ENCODING,\n"
+" null,\n"
+" null,\n"
+" \"password\");"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:998
#, no-c-format
-msgid ""
-"OpenSSL provides an alternative way to quickly generate hashed passwords."
-msgstr ""
+msgid "OpenSSL provides an alternative way to quickly generate hashed passwords."
+msgstr "手çŸã«ãƒãƒƒã‚·ãƒ¥åŒ–ã•ã‚ŒãŸãƒ‘スワードを生æˆã™ã‚‹ä»£æ›¿æ–¹æ³•ã¯ OpenSSL ãŒæä¾›ã—ã¦ã„ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1001
#, no-c-format
msgid "echo -n password | openssl dgst -md5 -binary | openssl base64"
-msgstr ""
+msgstr "echo -n password | openssl dgst -md5 -binary | openssl base64"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1002
@@ -3190,13 +3794,13 @@
msgid ""
"In both cases, the text password should hash to \"X03MO1qnZdYdgyfeuILPmQ=="
"\". This is the value that would need to be stored in the user store."
-msgstr ""
+msgstr "ã„ãšã‚Œã®å ´åˆã‚‚〠テã‚ストパスワード㯠\"X03MO1qnZdYdgyfeuILPmQ==\" ã«ãƒãƒƒã‚·ãƒ¥ã—ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“。 ユーザーã®ã‚¹ãƒˆã‚¢ã«æ ¼ç´ã•ã‚Œã‚‹å¿…è¦ãŒã‚る値ãŒã“ã®å€¤ã§ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1008
#, no-c-format
msgid "Unauthenticated Identity"
-msgstr ""
+msgstr "未èªè¨¼ã® ID"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1009
@@ -3209,7 +3813,7 @@
"methods on EJBs that do not require a specific role. Such a principal has no "
"associated roles and so can only access either unsecured EJBs or EJB methods "
"that are associated with the unchecked permission constraint."
-msgstr ""
+msgstr "ã™ã¹ã¦ã®è¦æ±‚ãŒèªè¨¼æ¸ˆã¿ã§ç€ä¿¡ã™ã‚‹ã‚ã‘ã§ã¯ã‚ã‚Šã¾ã›ã‚“。 未èªè¨¼ ID ã¯ã€ 関連付ã‘られã¦ã„ã‚‹èªè¨¼æƒ…å ±ã‚’æŒãŸãªã„è¦æ±‚ã«ç‰¹å®šã® ID (guest ãªã©) を割り当ã¦ã‚‹ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®è¨å®šã‚ªãƒ—ションã«ãªã‚Šã¾ã™ã€‚ ã“れを使用ã™ã‚‹ã¨ä¿è·ã•ã‚Œã¦ã„ãªã„サーブレットãŒç‰¹å®šã®ãƒãƒ¼ãƒ«ã‚’å¿…è¦ã¨ã—ãªã„ EJB ã§ãƒ¡ã‚½ãƒƒãƒ‰ã‚’呼ã³å‡ºã™ã“ã¨ãŒã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚ ã“ã®ã‚ˆã†ãª principal ã¯é–¢é€£ä»˜ã‘られãŸãƒãƒ¼ãƒ«ãŒãªã„ãŸã‚〠未ãƒã‚§ãƒƒã‚¯ã®ãƒ‘ーミッション制é™ã«é–¢é€£ä»˜ã‘られã¦ã„る安全化ã•ã‚Œã¦ã„ãªã„ EJB ã¾ãŸã¯ EJB メソッドã®ã„ãšã‚Œã‹ã«ã—ã‹ã‚¢ã‚¯ã‚»ã‚¹ã§ãã¾ã›ã‚“。"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1014
@@ -3218,13 +3822,13 @@
"<emphasis role=\"bold\">unauthenticatedIdentity</emphasis>: This defines the "
"principal name that should be assigned to requests that contain no "
"authentication information."
-msgstr ""
+msgstr "<emphasis role=\"bold\">unauthenticatedIdentity</emphasis>: èªè¨¼æƒ…å ±ã‚’æŒãŸãªã„è¦æ±‚ã«å‰²ã‚Šå½“ã¦ã‚‰ã‚Œã‚‹ã¹ã principal åを定義ã—ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1022
#, no-c-format
msgid "UsersRolesLoginModule"
-msgstr ""
+msgstr "UsersRolesLoginModule"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1023
@@ -3241,7 +3845,7 @@
"classpath. The primary purpose of this login module is to easily test the "
"security settings of multiple users and roles using properties files "
"deployed with the application."
-msgstr ""
+msgstr "<literal>UsersRolesLoginModule</literal> ã¯ã‚·ãƒ³ãƒ—ルãªãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§ã€ Java プãƒãƒ‘ティファイル群ã‹ã‚‰ãƒãƒ¼ãƒ‰ã•ã‚Œã‚‹è¤‡æ•°ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŠã‚ˆã³ãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒãƒ¼ãƒ«ã«å¯¾å¿œã—ã¾ã™ã€‚ ユーザーåã‹ã‚‰ãƒ‘スワードã¸ã®ãƒžãƒƒãƒ”ングファイル㯠<literal>users.properties</literal> ã¨å‘¼ã°ã‚Œã€ ユーザーåã‹ã‚‰ãƒãƒ¼ãƒ«ã¸ã®ãƒžãƒƒãƒ”ングファイル㯠<literal>roles.properties</literal> ã¨å‘¼ã°ã‚Œã¾ã™ã€‚ ã“ã®ãƒ—ãƒãƒ‘ティファイルã¯åˆæœŸåŒ–ä¸ã«åˆæœŸåŒ–メソッドスレッドコンテã‚ストクラスãƒãƒ¼ãƒ€ãƒ¼ã‚’使ã£ã¦ãƒãƒ¼ãƒ‰ã•ã‚Œã¾ã™ã€‚ ã¤ã¾ã‚Šã€ ã“れらã®ãƒ•ã‚¡ã‚¤ãƒ«ã¯ J2EE deployment JAR〠JBoss ã®è¨å®šãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã€ ã¾ãŸã¯ JBoss サーãƒãƒ¼ã‚„システムクラスパス上ã®ã„ãšã‚Œã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«ã‚‚é…ç½®ã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã¨ã„ã†ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ アプリケーションã§é…å‚™ã•ã‚Œã‚‹ãƒ—ãƒãƒ‘ティファイルを使ã£ã!
¦è¤‡æ•°ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚„ãƒãƒ¼ãƒ«ã®ã‚»ã‚ュリティè¨å®šã‚’ç°¡å˜ã«ãƒ†ã‚¹ãƒˆã§ãã‚‹ã“ã¨ãŒã“ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ä¸»ãªç›®çš„ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1026
@@ -3250,7 +3854,7 @@
"The <literal>users.properties</literal> file uses a "
"<literal>username=password</literal> format with each user entry on a "
"separate line as show here:"
-msgstr ""
+msgstr "以下ã«ç¤ºã™ã‚ˆã†ã«ã€ <literal>users.properties</literal> ファイルã¯å„ユーザーエントリã«å¯¾ã—㦠1 è¡Œã”ã¨ã« <literal>username=password</literal> ã®å½¢å¼ã‚’使用ã—ã¦ã„ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1029
@@ -3260,6 +3864,9 @@
"username2=password2\n"
"..."
msgstr ""
+"username1=password1\n"
+"username2=password2\n"
+"..."
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1030
@@ -3267,7 +3874,7 @@
msgid ""
"The <literal>roles.properties</literal> file uses as <literal>username=role1,"
"role2,...</literal> format with an optional group name value. For example:"
-msgstr ""
+msgstr "<literal>roles.properties</literal> ファイル㯠<literal>username=role1,role2,...</literal> ã®å½¢å¼ã‚’使用ã—〠ãã®å½¢å¼ã«ã‚ªãƒ—ションã§ã‚°ãƒ«ãƒ¼ãƒ—ã®å€¤ã‚’ã¨ã‚Šã¾ã™ã€‚ ãŸã¨ãˆã°ã€"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1033
@@ -3277,6 +3884,9 @@
"username1.RoleGroup1=role3,role4,...\n"
"username2=role1,role3,..."
msgstr ""
+"username1=role1,role2,...\n"
+"username1.RoleGroup1=role3,role4,...\n"
+"username2=role1,role3,..."
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1034
@@ -3289,7 +3899,7 @@
"<literal>username.Roles=...</literal>, where the <literal>Roles</literal> "
"group name is the standard name the <literal>JaasSecurityManager</literal> "
"expects to contain the roles which define the users permissions."
-msgstr ""
+msgstr "プãƒãƒ‘ティåã® <literal>username.XXX</literal> å½¢å¼ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼åãƒãƒ¼ãƒ«ã‚’特定ã®æŒ‡å®šãƒãƒ¼ãƒ«ã‚°ãƒ«ãƒ¼ãƒ—ã«å‰²ã‚Šå½“ã¦ã‚‹ãŸã‚ã«ä½¿ç”¨ã—ã¾ã™ã€‚ プãƒãƒ‘ティåã® <literal>XXX</literal> ã®éƒ¨åˆ†ã¯ã‚°ãƒ«ãƒ¼ãƒ—åã«ãªã‚Šã¾ã™ã€‚ <literal>username=...</literal> å½¢å¼ã¯ <literal>username.Roles=...</literal> ã®ç•¥ã§ã€ <literal>Roles</literal> グループå㯠<literal>JaasSecurityManager</literal> ãŒãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒ‘ーミッションを定義ã™ã‚‹ãƒãƒ¼ãƒ«ã‚’å«ã‚€ãŸã‚ã«æœŸå¾…ã™ã‚‹æ¨™æº–åã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1037
@@ -3297,7 +3907,7 @@
msgid ""
"The following would be equivalent definitions for the <literal>jduke</"
"literal> username:"
-msgstr ""
+msgstr "次ã¯ã„ãšã‚Œã‚‚ユーザーå <literal>jduke</literal> ã®å®šç¾©ã§åŒç‰ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1040
@@ -3306,13 +3916,15 @@
"jduke=TheDuke,AnimatedCharacter\n"
"jduke.Roles=TheDuke,AnimatedCharacter"
msgstr ""
+"jduke=TheDuke,AnimatedCharacter\n"
+"jduke.Roles=TheDuke,AnimatedCharacter"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1041 J2EE_Security_On_JBOSS.xml:1101
#: J2EE_Security_On_JBOSS.xml:1210 J2EE_Security_On_JBOSS.xml:1338
#, no-c-format
msgid "The supported login module configuration options include the following:"
-msgstr ""
+msgstr "サãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ã‚‹ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«è¨å®šã‚ªãƒ—ションã«ã¯æ¬¡ã®ã‚ˆã†ãªã‚‚ã®ãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1046
@@ -3321,7 +3933,7 @@
"<emphasis role=\"bold\">usersProperties</emphasis>: The name of the "
"properties resource containing the username to password mappings. This "
"defaults to <literal>users.properties</literal>."
-msgstr ""
+msgstr "<emphasis role=\"bold\">usersProperties</emphasis>: ユーザーåã‹ã‚‰ãƒ‘スワードã¸ã®ãƒžãƒƒãƒ”ングをå«ã‚€ãƒ—ãƒãƒ‘ティリソースåã§ã™ã€‚ デフォルトã§ã¯ <literal>users.properties</literal> ã«è¨å®šã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1051
@@ -3330,7 +3942,7 @@
"<emphasis role=\"bold\">rolesProperties</emphasis>: The name of the "
"properties resource containing the username to roles mappings. This defaults "
"to <literal>roles.properties</literal>."
-msgstr ""
+msgstr "<emphasis role=\"bold\">rolesProperties</emphasis>: ユーザーåã‹ã‚‰ãƒãƒ¼ãƒ«ã¸ã®ãƒžãƒƒãƒ”ングをå«ã‚€ãƒ—ãƒãƒ‘ティリソースåã§ã™ã€‚ デフォルトã§ã¯ <literal>roles.properties</literal> ã«è¨å®šã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1056
@@ -3338,13 +3950,13 @@
msgid ""
"This login module supports password stacking, password hashing and "
"unauthenticated identity."
-msgstr ""
+msgstr "ã“ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ãƒ‘スワードスタッã‚ング〠パスワードãƒãƒƒã‚·ãƒ¥ã€ 未èªè¨¼ ID ã«å¯¾å¿œã—ã¦ã„ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1062
#, no-c-format
msgid "LdapLoginModule"
-msgstr ""
+msgstr "LdapLoginModule"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1063
@@ -3354,7 +3966,7 @@
"implementation that authenticates against an LDAP server. You would use the "
"<literal>LdapLoginModule</literal> if your username and credentials are "
"stored in an LDAP server that is accessible using a JNDI LDAP provider."
-msgstr ""
+msgstr "<literal>LdapLoginModule</literal> 㯠<literal>LoginModule</literal> 実装ã§ã‚り〠LDAP サーãƒãƒ¼ã«å¯¾ã—ã¦èªè¨¼ã‚’è¡Œã„ã¾ã™ã€‚ ユーザーåãŠã‚ˆã³è¨¼æ˜Žæ›¸ãŒ JNDI LDAP プãƒãƒã‚¤ãƒ€ã‚’使ã£ã¦ã‚¢ã‚¯ã‚»ã‚¹å¯èƒ½ãª LDAP サーãƒãƒ¼ã«æ ¼ç´ã•ã‚Œã¦ã„ã‚‹å ´åˆã¯ã€ <literal>LdapLoginModule</literal> を使用ã™ã‚‹ã“ã¨ã«ãªã‚‹ã§ã—ょã†ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1066
@@ -3363,7 +3975,7 @@
"The LDAP connectivity information is provided as configuration options that "
"are passed through to the environment object used to create JNDI initial "
"context. The standard LDAP JNDI properties used include the following:"
-msgstr ""
+msgstr "LDAP ã®æŽ¥ç¶šæ€§æƒ…å ±ã¯ JNDI åˆæœŸã‚³ãƒ³ãƒ†ã‚ストã®ä½œæˆã«ä½¿ç”¨ã•ã‚Œã‚‹ç’°å¢ƒã‚ªãƒ–ジェクトã«æ¸¡ã•ã‚Œã‚‹è¨å®šã‚ªãƒ—ションã¨ã—ã¦æä¾›ã•ã‚Œã¾ã™ã€‚ 使用ã•ã‚Œã‚‹æ¨™æº–的㪠LDAP JNDI プãƒãƒ‘ティã«ã¯æ¬¡ã®ã‚ˆã†ãªã‚‚ã®ãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1071
@@ -3373,7 +3985,7 @@
"classname of the <literal>InitialContextFactory</literal> implementation. "
"This defaults to the Sun LDAP provider implementation <literal>com.sun.jndi."
"ldap.LdapCtxFactory</literal>."
-msgstr ""
+msgstr "<emphasis role=\"bold\">java.naming.factory.initial</emphasis>: <literal>InitialContextFactory</literal> 実装ã®ã‚¯ãƒ©ã‚¹åã§ã™ã€‚ デフォルトã§ã¯ Sun LDAP プãƒãƒã‚¤ãƒ€å®Ÿè£…ã¨ãªã‚‹ <literal>com.sun.jndi.ldap.LdapCtxFactory</literal> ã«è¨å®šã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1076
@@ -3381,7 +3993,7 @@
msgid ""
"<emphasis role=\"bold\">java.naming.provider.url</emphasis>: The LDAP URL "
"for the LDAP server"
-msgstr ""
+msgstr "<emphasis role=\"bold\">java.naming.provider.url</emphasis>: LDAP サーãƒãƒ¼ã® LDAP URL ã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1081
@@ -3389,7 +4001,7 @@
msgid ""
"<emphasis role=\"bold\">java.naming.security.authentication</emphasis>: The "
"security level to use. This defaults to <literal>simple</literal>."
-msgstr ""
+msgstr "<emphasis role=\"bold\">java.naming.security.authentication</emphasis>: 使用ã™ã‚‹ã‚»ã‚ュリティレベルã§ã™ã€‚ デフォルトã§ã¯ <literal>simple</literal> ã«è¨å®šã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1086
@@ -3397,7 +4009,7 @@
msgid ""
"<emphasis role=\"bold\">java.naming.security.protocol</emphasis>: The "
"transport protocol to use for secure access, such as, SSL."
-msgstr ""
+msgstr "<emphasis role=\"bold\">java.naming.security.protocol</emphasis>: SSL ãªã©ã‚»ã‚ュアãªã‚¢ã‚¯ã‚»ã‚¹ã«ä½¿ç”¨ã™ã‚‹è»¢é€ãƒ—ãƒãƒˆã‚³ãƒ«ã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1091
@@ -3406,7 +4018,7 @@
"<emphasis role=\"bold\">java.naming.security.principal</emphasis>: The "
"principal for authenticating the caller to the service. This is built from "
"other properties as described below."
-msgstr ""
+msgstr "<emphasis role=\"bold\">java.naming.security.principal</emphasis>: 呼ã³å‡ºã—å´ã‚’サービスã«å¯¾ã—ã¦èªè¨¼ã™ã‚‹ãŸã‚ã® principal ã§ã™ã€‚ 以下ã«ç¤ºã™ã‚ˆã†ã«ä»–ã®ãƒ—ãƒãƒ‘ティã‹ã‚‰æ§‹ç¯‰ã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1096
@@ -3415,7 +4027,7 @@
"<emphasis role=\"bold\">java.naming.security.credentials</emphasis>: The "
"value of the property depends on the authentication scheme. For example, it "
"could be a hashed password, clear-text password, key, certificate, and so on."
-msgstr ""
+msgstr "<emphasis role=\"bold\">java.naming.security.credentials</emphasis>: èªè¨¼ã‚¹ã‚ームã«ä¾å˜ã™ã‚‹ãƒ—ãƒãƒ‘ティã®å€¤ã§ã™ã€‚ ãŸã¨ãˆã°ã€ ãƒãƒƒã‚·ãƒ¥åŒ–ã•ã‚ŒãŸãƒ‘スワード〠クリアテã‚ストã®ãƒ‘スワード〠ã‚ー〠証明書ãªã©ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1106
@@ -3424,7 +4036,7 @@
"<emphasis role=\"bold\">principalDNPrefix</emphasis>: A prefix to add to the "
"username to form the user distinguished name. See "
"<literal>principalDNSuffix</literal> for more info."
-msgstr ""
+msgstr "<emphasis role=\"bold\">principalDNPrefix</emphasis>: ユーザーを見分ã‘ã‚‹ãŸã‚ã®åå‰ã‚’構æˆã™ã‚‹ãŸã‚ã«ãƒ¦ãƒ¼ã‚¶ãƒ¼åã«è¿½åŠ ã™ã‚‹ãƒ—レフィックスã§ã™ã€‚ 詳細ã«ã¤ã„ã¦ã¯ <literal>principalDNSuffix</literal> ã‚’ã”覧ãã ã•ã„。"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1111
@@ -3436,7 +4048,7 @@
"enter the fully distinguished name. Using this property and "
"<literal>principalDNSuffix</literal> the <literal>userDN</literal> will be "
"formed as <literal>principalDNPrefix + username + principalDNSuffix</literal>"
-msgstr ""
+msgstr "<emphasis role=\"bold\">principalDNSuffix</emphasis>: ユーザーを見分ã‘ã‚‹ãŸã‚ã®åå‰ã‚’構æˆã™ã‚‹å ´åˆã«ãƒ¦ãƒ¼ã‚¶ãƒ¼åã«è¿½åŠ ã™ã‚‹ã‚µãƒ•ã‚£ã‚¯ã‚¹ã§ã™ã€‚ ユーザーã«ãƒ¦ãƒ¼ã‚¶ãƒ¼åã®å…¥åŠ›ã‚’求ã‚ã‚‹å ´åˆã«ä¾¿åˆ©ã§ã€ ユーザーã¯å®Œå…¨ãªè˜åˆ¥åを入力ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã›ã‚“。 ã“ã®ãƒ—ãƒãƒ‘ティãŠã‚ˆã³ <literal>principalDNSuffix</literal> を使用ã™ã‚‹ã¨ã€ <literal>userDN</literal> 㯠<literal>principalDNPrefix + username + principalDNSuffix</literal> ã¨ã„ã†æ§‹æˆã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1116
@@ -3450,6 +4062,8 @@
"<literal>PasswordCallback</literal>. This allows for passing non-"
"<literal>char[]</literal> credential information to the LDAP server."
msgstr ""
+"<emphasis role=\"bold\">useObjectCredential</emphasis>: 証明書㌠JAAS "
+"<literal>PasswordCallback</literal> を使ã£ãŸ <literal>char[]</literal> パスワードã¨ã—ã¦ã§ã¯ãªã <literal>org.jboss.security.auth.callback.ObjectCallback</literal> タイプ㮠<literal>Callback</literal> を使ã£ãŸã‚ã„ã¾ã„㪠<literal>Object</literal> ã¨ã—ã¦å–å¾—ã•ã‚Œã‚‹ã¹ãã§ã‚ã‚‹ã“ã¨ã‚’示㙠true ã‹ false ã®å€¤ã§ã™ã€‚ ã“ã‚Œã«ã‚ˆã‚Š <literal>char[]</literal> 以外ã®è¨¼æ˜Žæ›¸æƒ…å ±ã‚’ LDAP サーãƒãƒ¼ã«æ¸¡ã™ã“ã¨ãŒã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1121
@@ -3457,7 +4071,7 @@
msgid ""
"<emphasis role=\"bold\">rolesCtxDN</emphasis>: The fixed distinguished name "
"to the context to search for user roles."
-msgstr ""
+msgstr "<emphasis role=\"bold\">rolesCtxDN</emphasis>: ユーザーãƒãƒ¼ãƒ«ã‚’検索ã™ã‚‹ãŸã‚ã®ã‚³ãƒ³ãƒ†ã‚ストã«å¯¾ã™ã‚‹å›ºå®šã®è˜åˆ¥åã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1126
@@ -3468,7 +4082,7 @@
"context to search for user roles. This differs from <literal>rolesCtxDN</"
"literal> in that the context to search for a user's roles can be unique "
"for each user."
-msgstr ""
+msgstr "<emphasis role=\"bold\">userRolesCtxDNAttributeName</emphasis>: ユーザーãƒãƒ¼ãƒ«ã‚’検索ã™ã‚‹ãŸã‚ã®ã‚³ãƒ³ãƒ†ã‚ストã«å¯¾ã™ã‚‹è˜åˆ¥åã‚’å«ã‚€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚ªãƒ–ジェクト内ã®å±žæ€§åã§ã™ã€‚ ユーザーã®ãƒãƒ¼ãƒ«ã‚’検索ã™ã‚‹ãŸã‚ã®ã‚³ãƒ³ãƒ†ã‚ストãŒå„ユーザーã«å¯¾ã—ã¦å›ºæœ‰ã§ã‚ã‚‹ã¨ã„ã†ç‚¹ã§ <literal>rolesCtxDN</literal> ã¨ç•°ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1131
@@ -3477,7 +4091,7 @@
"<emphasis role=\"bold\">roleAttributeID</emphasis>: The name of the "
"attribute that contains the user roles. If not specified this defaults to "
"<literal>roles</literal>."
-msgstr ""
+msgstr "<emphasis role=\"bold\">roleAttributeID</emphasis>: ユーザーãƒãƒ¼ãƒ«ã‚’å«ã‚€å±žæ€§åã§ã™ã€‚ 指定ãŒãªã„ã¨ã€ デフォルトã§ã¯ <literal>roles</literal> ã«è¨å®šã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1136
@@ -3493,7 +4107,7 @@
"directory schemas (e.g., MS ActiveDirectory), role attributes in the user "
"object are stored as DNs to role objects instead of as simple names, in "
"which case, this property should be set to true. The default is false."
-msgstr ""
+msgstr "<emphasis role=\"bold\">roleAttributeIsDN</emphasis>: <literal>roleAttributeID</literal> ãŒãƒãƒ¼ãƒ«ã‚ªãƒ–ジェクトã®å®Œå…¨è˜åˆ¥åã‚’å«ã‚€ã‹ãã®ãƒãƒ¼ãƒ«åã‚’å«ã‚€ã‹ã‚’示ã™ãƒ•ãƒ©ã‚°ã§ã™ã€‚ false ãªã‚‰ã€ ãƒãƒ¼ãƒ«å㌠<literal>roleAttributeID</literal> ã®å€¤ã‹ã‚‰å–å¾—ã•ã‚Œã¾ã™ã€‚ true ãªã‚‰ã€ ãƒãƒ¼ãƒ«å±žæ€§ã¯ãƒãƒ¼ãƒ«ã‚ªãƒ–ジェクトã®è˜åˆ¥åを表ã—ã¾ã™ã€‚ ãƒãƒ¼ãƒ«åã¯è˜åˆ¥åã§ãã®ã‚³ãƒ³ãƒ†ã‚ストåã® <literal>roleNameAttributeId</literal> 属性値ã‹ã‚‰å–å¾—ã•ã‚Œã¾ã™ã€‚ 特定ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚¹ã‚ームã§ã¯ (MS ActiveDirectory ãªã©)〠ユーザーオブジェクトã«ã‚ã‚‹ãƒãƒ¼ãƒ«å±žæ€§ãŒå˜ç´”ãªåå‰ã§ã¯ãªããƒãƒ¼ãƒ«ã‚ªãƒ–ジェクトã«å¯¾ã™ã‚‹ DN ã¨ã—ã¦æ ¼ç´ã•ã‚Œã‚‹ã®ã§ã€ ã“ã†ã—ãŸå ´åˆã«ã¯ã“ã®ãƒ—ãƒãƒ‘ティ㯠true ã«è¨å®šã•ã‚Œãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“。 デフォルト㯠false ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1141
@@ -3505,7 +4119,7 @@
"<literal>roleAttributeIsDN</literal> property is set to true, this property "
"is used to find the role object's name attribute. The default is "
"<literal>group</literal>."
-msgstr ""
+msgstr "<emphasis role=\"bold\">roleNameAttributeID</emphasis>: ãƒãƒ¼ãƒ«åã‚’å«ã‚€ <literal>roleCtxDN</literal> è˜åˆ¥åã®å€¤ã«ã‚ˆã£ã¦ãƒã‚¤ãƒ³ãƒˆã•ã‚Œã‚‹ã‚³ãƒ³ãƒ†ã‚ストã®å±žæ€§åã§ã™ã€‚ <literal>roleAttributeIsDN</literal> プãƒãƒ‘ティ㌠true ã«è¨å®šã•ã‚Œã‚‹ã¨ã€ ã“ã®ãƒ—ãƒãƒ‘ティã¯ãƒãƒ¼ãƒ«ã‚ªãƒ–ジェクトã®åå‰å±žæ€§ã®æ¤œç´¢ã«ä½¿ç”¨ã•ã‚Œã¾ã™ã€‚ デフォルト㯠<literal>group</literal> ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1146
@@ -3515,7 +4129,7 @@
"in the object containing the user roles that corresponds to the userid. This "
"is used to locate the user roles. If not specified this defaults to "
"<literal>uid</literal>."
-msgstr ""
+msgstr "<emphasis role=\"bold\">uidAttributeID</emphasis>: userid ã«ç›¸å½“ã™ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒãƒ¼ãƒ«ã‚’å«ã‚€ã‚ªãƒ–ジェクト内ã®å±žæ€§åã§ã™ã€‚ ユーザーãƒãƒ¼ãƒ«ã®æ¤œç´¢ã«ä½¿ç”¨ã—ã¾ã™ã€‚ 指定ã•ã‚Œã¦ã„ãªã„ã¨ã€ デフォルトã§ã¯ <literal>uid</literal> ã«è¨å®šã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1151
@@ -3526,7 +4140,7 @@
"distinguished name. If false, just the username is used as the match value "
"against the <literal>uidAttributeName</literal> attribute. If true, the full "
"<literal>userDN</literal> is used as the match value."
-msgstr ""
+msgstr "<emphasis role=\"bold\">matchOnUserDN</emphasis>: ユーザーãƒãƒ¼ãƒ«ã®æ¤œç´¢ãŒãƒ¦ãƒ¼ã‚¶ãƒ¼ã®å®Œå…¨è˜åˆ¥åã§ä¸€è‡´ã™ã¹ãã‹ã©ã†ã‹ã‚’示㙠true ã¾ãŸã¯ false ã®ãƒ•ãƒ©ã‚°ã§ã™ã€‚ false ãªã‚‰ã€ <literal>uidAttributeName</literal> 属性ã«å¯¾ã—ã¦ä¸€è‡´ã™ã‚‹å€¤ã¨ã—ã¦ãƒ¦ãƒ¼ã‚¶ãƒ¼åã ã‘ãŒä½¿ç”¨ã•ã‚Œã¾ã™ã€‚ true ãªã‚‰ã€ 一致ã™ã‚‹å€¤ã¨ã—ã¦å®Œå…¨ãª <literal>userDN</literal> ãŒä½¿ç”¨ã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1156
@@ -3536,7 +4150,7 @@
"name that should be assigned to requests that contain no authentication "
"information. This behavior is inherited from the "
"<literal>UsernamePasswordLoginModule</literal> superclass."
-msgstr ""
+msgstr "<emphasis role=\"bold\">unauthenticatedIdentity</emphasis>: èªè¨¼æƒ…å ±ã‚’æŒãŸãªã„è¦æ±‚ã«å‰²ã‚Šå½“ã¦ã‚‰ã‚Œã‚‹ã¹ã principal åã§ã™ã€‚ ã“ã®å‹•ä½œã¯ <literal>UsernamePasswordLoginModule</literal> スーパークラスã‹ã‚‰å¼•ã継ãŒã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1161
@@ -3548,7 +4162,7 @@
"not be a desirable feature. Set this to false to reject empty passwords or "
"true to have the LDAP server validate the empty password. The default is "
"true."
-msgstr ""
+msgstr "<emphasis role=\"bold\">allowEmptyPasswords</emphasis>: LDAP サーãƒãƒ¼ã«ç©ºã®ãƒ‘スワード (é•·ã• 0) ãŒæ¸¡ã•ã‚Œã‚‹ã¹ãã‹ç¤ºã™ãƒ•ãƒ©ã‚°ã§ã™ã€‚ 空ã®ãƒ‘スワードを anonymous ãƒã‚°ã‚¤ãƒ³ã¨ã—ã¦æ‰±ã† LDAP サーãƒãƒ¼ãŒã‚り〠ã“ã‚ŒãŒæœ›ã¾ã—ã„機能ã§ã¯ãªã„å ´åˆãŒã‚ã‚Šã¾ã™ã€‚ ã“れを false ã«è¨å®šã™ã‚‹ã¨ç©ºã®ãƒ‘スワードを拒å¦ã—ã¾ã™ã€‚ true ã«è¨å®šã™ã‚‹ã¨ LDAP サーãƒãƒ¼ãŒç©ºã®ãƒ‘スワードを検証ã—ã¾ã™ã€‚ デフォルト㯠true ã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1166
@@ -3566,10 +4180,13 @@
"<literal>String</literal> password or the <literal>Object</literal> "
"credential depending on the <literal>useObjectCredential</literal> option."
msgstr ""
+"ユーザーã®èªè¨¼ã¯ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«è¨å®šã‚ªãƒ—ションをベースã«ã—㟠LDAP サーãƒãƒ¼ã«æŽ¥ç¶šã™ã‚‹ã“ã¨ã§è¡Œã‚ã‚Œã¾ã™ã€‚ LDAP サーãƒãƒ¼ã¸ã®æŽ¥ç¶šã¯ã€ 本セクションã§å‰è¿°ã—㟠LDAP JNDI プãƒãƒ‘ティã‹ã‚‰æ§‹æˆã•ã‚Œã‚‹ç’°å¢ƒã§ <literal>InitialLdapContext</literal> を作æˆã—ã¦è¡Œã„ã¾ã™ã€‚ <literal>principalDNPrefix</literal> オプション値㨠<literal>principalDNSuffix</literal> オプション値ã¨ã®çµ„ã¿åˆã‚ã›ã§ã‚³ãƒ¼ãƒ«ãƒãƒƒã‚¯ãƒãƒ³ãƒ‰ãƒ©ã«ã‚ˆã‚Šå–å¾—ã•ã‚Œã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®è˜åˆ¥åã« <literal>Context.SECURITY_PRINCIPAL</literal> ãŒè¨å®šã•ã‚Œã€ <literal>useObjectCredential</literal> オプションã«å¿œã˜ã¦ <literal>String</literal> パスワード㋠<literal>Object</literal> 証明書ã®ã„ãšã‚Œã‹ã« <literal>Context."
+"SECURITY_CREDENTIALS</literal> プãƒãƒ‘ティãŒè¨å®šã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1169
#, no-c-format
+#, fuzzy
msgid ""
"Once authentication has succeeded by virtue of being able to create an "
"<literal>InitialLdapContext</literal> instance, the user's roles are "
@@ -3578,13 +4195,13 @@
"<literal>uidAttributeName</literal> option values. The roles names are "
"obtaining by invoking the <literal>toString</literal> method on the role "
"attributes in the search result set."
-msgstr ""
+msgstr "<literal>InitialLdapContext</literal> インスタンス作æˆã®åŠ¹åŠ›ã«ã‚ˆã‚Šèªè¨¼ãŒæˆåŠŸã™ã‚‹ã¨ã€ <literal>rolesCtxDN</literal> ã®å ´æ‰€ã§ <literal>roleAttributeName</literal> 㨠<literal>uidAttributeName</literal> ã®ã‚ªãƒ—ション値ã«è¨å®šã•ã‚Œã‚‹æ¤œç´¢å±žæ€§ã‚’使ã£ãŸæ¤œç´¢ãŒå®Ÿè¡Œã•ã‚Œã¦ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒãƒ¼ãƒ«ãŒå•ã„åˆã‚ã›ã‚‰ã‚Œã¾ã™ã€‚ãƒãƒ¼ãƒ«åã¯æ¤œç´¢çµæžœã‚»ãƒƒãƒˆå†…ã®ãƒãƒ¼ãƒ«å±žæ€§ã§ <literal>toString</literal> メソッドを呼ã³å‡ºã™ã“ã¨ã§å–å¾—ã•ã‚Œã¾ã™ã€‚ ?? obtaining => onbtained??"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1172
#, no-c-format
msgid "The following is a sample <literal>login-config.xml</literal> entry."
-msgstr ""
+msgstr "次ã«ã‚µãƒ³ãƒ—ル㮠<literal>login-config.xml</literal> エントリを示ã—ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1175
@@ -3627,6 +4244,42 @@
" </authentication>\n"
" </application-policy>"
msgstr ""
+"<application-policy name=\"testLDAP\">\n"
+" <authentication>\n"
+" <login-module code=\"org.jboss.security.auth.spi."
+"LdapLoginModule\"\n"
+" flag=\"required\">\n"
+" <module-option name=\"java.naming.factory.initial\"> \n"
+" com.sun.jndi.ldap.LdapCtxFactory\n"
+" </module-option>\n"
+" <module-option name=\"java.naming.provider.url\">\n"
+" ldap://ldaphost.jboss.org:1389/\n"
+" </module-option>\n"
+" <module-option name=\"java.naming.security.authentication"
+"\">\n"
+" simple\n"
+" </module-option>\n"
+" <module-option name=\"principalDNPrefix\">uid=</"
+"module-option> \n"
+" <module-option name=\"principalDNSuffix\">\n"
+" ,ou=People,dc=jboss,dc=org\n"
+" </module-option>\n"
+"\n"
+" <module-option name=\"rolesCtxDN\">\n"
+" ou=Roles,dc=jboss,dc=org\n"
+" </module-option>\n"
+" <module-option name=\"uidAttributeID\">member</"
+"module-option>\n"
+" <module-option name=\"matchOnUserDN\">true</module-"
+"option>\n"
+"\n"
+" <module-option name=\"roleAttributeID\">cn</module-"
+"option>\n"
+" <module-option name=\"roleAttributeIsDN\">false </"
+"module-option>\n"
+" </login-module>\n"
+" </authentication>\n"
+" </application-policy>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1176
@@ -3634,7 +4287,7 @@
msgid ""
"An LDIF file representing the structure of the directory this data operates "
"against is shown below."
-msgstr ""
+msgstr "ã“ã®ãƒ‡ãƒ¼ã‚¿ãŒå‹•ä½œã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®æ§‹é€ を表㙠LDIF ファイルを以下ã«ç¤ºã—ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1179
@@ -3673,6 +4326,38 @@
"member: uid=jduke,ou=People,dc=jboss,dc=org\n"
"description: the JBossAdmin group"
msgstr ""
+"dn: dc=jboss,dc=org\n"
+"objectclass: top\n"
+"objectclass: dcObject\n"
+"objectclass: organization\n"
+"dc: jboss\n"
+"o: JBoss\n"
+"\n"
+"dn: ou=People,dc=jboss,dc=org\n"
+"objectclass: top\n"
+"objectclass: organizationalUnit\n"
+"ou: People\n"
+"\n"
+"dn: uid=jduke,ou=People,dc=jboss,dc=org\n"
+"objectclass: top\n"
+"objectclass: uidObject\n"
+"objectclass: person\n"
+"uid: jduke\n"
+"cn: Java Duke\n"
+"sn: Duke\n"
+"userPassword: theduke\n"
+"\n"
+"dn: ou=Roles,dc=jboss,dc=org\n"
+"objectclass: top\n"
+"objectclass: organizationalUnit\n"
+"ou: Roles\n"
+"\n"
+"dn: cn=JBossAdmin,ou=Roles,dc=jboss,dc=org\n"
+"objectclass: top\n"
+"objectclass: groupOfNames\n"
+"cn: JBossAdmin\n"
+"member: uid=jduke,ou=People,dc=jboss,dc=org\n"
+"description: the JBossAdmin group"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1180
@@ -3685,7 +4370,7 @@
"server is located on host <literal>ldaphost.jboss.org</literal> on port "
"1389, and that the LDAP simple authentication method will be use to connect "
"to the LDAP server."
-msgstr ""
+msgstr "<literal>testLDAP</literal> ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®è¨å®šã‚’見直ã—ã¦ã¿ã‚‹ã¨ã€ <literal>java.naming.factory.initial</literal>〠<literal>java.naming.factory.url</literal>〠<literal>java.naming.security</literal> ã®å„オプションã¯ã€ Sun LDAP JNDI プãƒãƒã‚¤ãƒ€å®Ÿè£…ãŒä½¿ç”¨ã•ã‚Œã‚‹ã“ã¨ã€ LDAP サーãƒãƒ¼ã¯ãƒ›ã‚¹ãƒˆ <literal>ldaphost.jboss.org</literal> ã®ãƒãƒ¼ãƒˆ 1389 ã«ã‚ã‚‹ã“ã¨ã€ LDAP ã®ã‚·ãƒ³ãƒ—ルãªèªè¨¼ãƒ¡ã‚½ãƒƒãƒ‰ãŒ LDAP サーãƒãƒ¼ã®æŽ¥ç¶šã«ä½¿ç”¨ã•ã‚Œã‚‹ã“ã¨ã‚’示ã—ã¦ã„ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1183
@@ -3702,7 +4387,7 @@
"this example). This is the way most LDAP servers work, however, if your LDAP "
"server handles authentication differently you will need to set the "
"authentication credentials in a way that makes sense for your server."
-msgstr ""
+msgstr "ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯èªè¨¼ã‚’試ã¿ã¦ã„るユーザーを表㙠DN を使ã£ã¦ LDAP サーãƒãƒ¼ã«æŽ¥ç¶šã‚’試行ã—ã¾ã™ã€‚ ã“ã® DN ã¯å‰è¿°ã—ãŸã‚ˆã†ã«æ¸¡ã•ã‚ŒãŸ <literal>principalDNPrefix</literal>〠ユーザーã®ãƒ¦ãƒ¼ã‚¶ãƒ¼å〠<literal>principalDNSuffix</literal> ã‹ã‚‰æ§‹æˆã•ã‚Œã¾ã™ã€‚ ã“ã®ä¾‹ã§ã¯ã€ ユーザー <literal>jduke</literal> ㌠<literal>uid=jduke,ou=People,dc=jboss,dc=org</literal> ã«ãƒžãƒƒãƒ”ングã—ã¦ã„ã¾ã™ã€‚ LDAP サーãƒãƒ¼ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ã‚¨ãƒ³ãƒˆãƒªã® <literal>userPassword</literal> 属性 (ã“ã®ä¾‹ã§ã¯ <literal>theduke</literal> ) を使ã£ã¦ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’èªè¨¼ã™ã‚‹ã¨ä»®å®šã—ã¦ã„ã¾ã™ã€‚ ã»ã¨ã‚“ã©ã® LDAP サーãƒãƒ¼ãŒå‹•ä½œã™ã‚‹ã®ã¯ã“ã®æ–¹æ³•ã«ãªã‚Šã¾ã™ãŒã€ ã”使用㮠LDAP サーãƒãƒ¼ã®èªè¨¼å‡¦ç†ãŒã“ã‚Œã¨ç•°ãªã‚‹å ´åˆã€ サーãƒãƒ¼ã®å‡¦ç†æ–¹æ³•ã«å¿œã˜ã¦èªè¨¼è¨¼æ˜Žæ›¸ã®è¨å®šã‚’è¡Œã†å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1186
@@ -3719,6 +4404,9 @@
"literal>. The search would locate <literal>cn=JBossAdmin</literal> under the "
"roles entry."
msgstr ""
+"èªè¨¼ãŒæˆåŠŸã™ã‚‹ã¨ã€ ユーザーã¨ä¸€è‡´ã™ã‚‹ <literal>uidAttributeID</literal> ã‚’æŒã¤ã‚¨ãƒ³ãƒˆãƒªã® <literal>rolesCtxDN</literal> サブツリー検索を行ã„承èªãŒãƒ™ãƒ¼ã‚¹ã¨ã™ã‚‹ãƒãƒ¼ãƒ«ãŒæ¤œç´¢ã•ã‚Œã¾ã™ã€‚ <literal>matchOnUserDN</literal> ã‚’ true ã«ã™ã‚‹ã¨æ¤œç´¢ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®å®Œå…¨ DN をベースã¨ã—ã¾ã™ã€‚ ã“れ以外〠検索ã¯å…¥åŠ›ã•ã‚ŒãŸå®Ÿéš›ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼åをベースã¨ã—ã¾ã™ã€‚ ã“ã®ä¾‹ã§ã¯ã€ 検索㯠<literal>ou=Roles,"
+"dc=jboss,dc=org</literal> ã§ã€ <literal>uid=jduke,ou=People,dc=jboss,dc=org</"
+"literal> ã¨åŒç‰ã¨ãªã‚‹ <literal>member</literal> 属性をæŒã¤ã‚¨ãƒ³ãƒˆãƒªã‚’検索ã—ã¾ã™ã€‚ ã“ã®æ¤œç´¢ã¯ãƒãƒ¼ãƒ«ã‚¨ãƒ³ãƒˆãƒªé…下㧠<literal>cn=JBossAdmin</literal> を検索ã™ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1189
@@ -3728,7 +4416,7 @@
"literal> option. In this example, the attribute is <literal>cn</literal>. "
"The value returned would be <literal>JBossAdmin</literal>, so the jduke user "
"is assigned to the <literal>JBossAdmin</literal> role."
-msgstr ""
+msgstr "検索㯠<literal>roleAttributeID</literal> オプションã«æŒ‡å®šã•ã‚Œã‚‹å±žæ€§ã‚’è¿”ã—ã¾ã™ã€‚ ã“ã®ä¾‹ã§ã¯ã€ 属性㯠<literal>cn</literal> ã«ãªã‚Šã¾ã™ã€‚ è¿”ã•ã‚Œã‚‹å€¤ã¯ <literal>JBossAdmin</literal> ã«ãªã‚‹ãŸã‚〠jduke ユーザー㌠<literal>JBossAdmin</literal> ãƒãƒ¼ãƒ«ã«å‰²ã‚Šå½“ã¦ã‚‰ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1192
@@ -3742,7 +4430,7 @@
"authentication module is often paired with another login module, such as the "
"database login module, that can provide roles more suitable to the "
"application being developed."
-msgstr ""
+msgstr "ãƒãƒ¼ã‚«ãƒ«ã® LDAP サーãƒãƒ¼ãŒ ID ã‚„èªè¨¼ã‚µãƒ¼ãƒ“スをæä¾›ã—ã¦ã„るケースã¯é »ç¹ã«è¦‹ã‚‰ã‚Œã¾ã™ãŒã€ 承èªã‚µãƒ¼ãƒ“スã¯ä½¿ç”¨ã§ãã¾ã›ã‚“。 ã“ã‚Œã¯ã‚¢ãƒ—リケーションãƒãƒ¼ãƒ«ãŒå¸¸ã« LDAP グループ上ã§æ£ã—ãマッピングを行ã‚ãªã„ã®ã§ã€ LDAP 管ç†è€…ã¯å¤–部アプリケーション固有ã®ãƒ‡ãƒ¼ã‚¿ã‚’ä¸å¤® LDAP サーãƒãƒ¼å†…ã«è¨±å¯ã™ã‚‹ã“ã¨ã«æŠµæŠ—ã‚’æ„Ÿã˜ã‚‹ã“ã¨ãŒå¤šã„ãŸã‚ã§ã™ã€‚ ã“ã®ç†ç”±ã‹ã‚‰ã€ LDAP èªè¨¼ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯é–‹ç™ºã•ã‚Œã¦ã„るアプリケーションã«å¯¾ã—ã¦ã‚ˆã‚Šé©åˆ‡ãªãƒãƒ¼ãƒ«ã‚’æä¾›ã™ã‚‹ã“ã¨ãŒã§ãるデータベースãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãªã©åˆ¥ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¨çµ„ã¿åˆã‚ã›ã¦ä½¿ç”¨ã•ã‚Œã‚‹ã“ã¨ãŒå¤šããªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1195
@@ -3750,13 +4438,13 @@
msgid ""
"This login module also supports unauthenticated identity and password "
"stacking."
-msgstr ""
+msgstr "ã“ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚‚未èªè¨¼ ID ãŠã‚ˆã³ãƒ‘スワードスタッã‚ングã«å¯¾å¿œã—ã¦ã„ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1201
#, no-c-format
msgid "DatabaseServerLoginModule"
-msgstr ""
+msgstr "DatabaseServerLoginModule"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1202
@@ -3767,7 +4455,7 @@
"login module if you have your username, password and role information "
"relational database. The <literal>DatabaseServerLoginModule</literal> is "
"based on two logical tables:"
-msgstr ""
+msgstr "<literal>DatabaseServerLoginModule</literal> ã¯èªè¨¼ãŠã‚ˆã³ãƒãƒ¼ãƒ«ã®ãƒžãƒƒãƒ”ングã«å¯¾å¿œã™ã‚‹ JDBC ベースã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§ã™ã€‚ ユーザーå〠パスワード〠ãƒãƒ¼ãƒ«æƒ…å ±ã®ãƒªãƒ¬ãƒ¼ã‚·ãƒ§ãƒŠãƒ«ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ãŒã‚ã‚‹å ´åˆã«ã¯ã€ ã“ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’使用ã™ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ <literal>DatabaseServerLoginModule</literal> 㯠2 ã¤ã®è«–ç†è¡¨ã«åŸºã¥ã„ã¦ã„ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1205
@@ -3776,10 +4464,13 @@
"Table Principals(PrincipalID text, Password text)\n"
"Table Roles(PrincipalID text, Role text, RoleGroup text)"
msgstr ""
+"Table Principals(PrincipalID text, Password text)\n"
+"Table Roles(PrincipalID text, Role text, RoleGroup text)"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1206
#, no-c-format
+#, fuzzy
msgid ""
"The <literal>Principals</literal> table associates the user "
"<literal>PrincipalID</literal> with the valid password and the "
@@ -3803,7 +4494,7 @@
"literal><literal>java</literal> with a role named <literal>caller_java</"
"literal> in the <literal>CallerPrincipal</literal><literal>RoleGroup</"
"literal> in the <literal>Roles</literal> table:"
-msgstr ""
+msgstr "<literal>Principals</literal> 表ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ <literal>PrincipalID</literal> を有効ãªãƒ‘スワードã«é–¢é€£ä»˜ã‘〠<literal>Roles</literal> 表ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ <literal>PrincipalID</literal> ã‚’ãã®ãƒãƒ¼ãƒ«ã‚»ãƒƒãƒˆã«é–¢é€£ä»˜ã‘ã¾ã™ã€‚ ユーザーパーミッションã«ä½¿ç”¨ã•ã‚Œã‚‹ãƒãƒ¼ãƒ«ã¯ <literal>Roles</literal> ã® <literal>RoleGroup</literal> コラム値"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1209
@@ -3814,6 +4505,10 @@
"INSERT INTO Roles VALUES('java', 'caller_java', '"
"CallerPrincipal')"
msgstr ""
+"INSERT INTO Principals VALUES('java', 'echoman')\n"
+"INSERT INTO Roles VALUES('java', 'Echo', 'Roles')\n"
+"INSERT INTO Roles VALUES('java', 'caller_java', '"
+"CallerPrincipal')"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1215
@@ -3823,7 +4518,7 @@
"<literal>DataSource</literal> of the database containing the logical "
"<literal>Principals</literal> and <literal>Roles</literal> tables. If not "
"specified this defaults to <literal>java:/DefaultDS</literal>."
-msgstr ""
+msgstr "<emphasis role=\"bold\">dsJndiName</emphasis>: è«–ç†çš„㪠<literal>Principals</literal> ãŠã‚ˆã³ <literal>Roles</literal> ã®å„表をå«ã‚“ã§ã„るデータベース㮠<literal>DataSource</literal> ã«å¯¾ã™ã‚‹JNDI åã§ã™ã€‚ 指定ã•ã‚Œã¦ã„ãªã„ã¨ã€ デフォルトã§ã¯ <literal>java:/DefaultDS</literal> ã«è¨å®šã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1220
@@ -3833,7 +4528,7 @@
"query equivalent to: <literal>select Password from Principals where "
"PrincipalID=?</literal>. If not specified this is the exact prepared "
"statement that will be used."
-msgstr ""
+msgstr "<emphasis role=\"bold\">principalsQuery</emphasis>: 準備ステートメントクエリーã§ã€ <literal>select Password from Principals where PrincipalID=?</literal> ã¨åŒç‰ã«ãªã‚Šã¾ã™ã€‚ 指定ã•ã‚Œã¦ã„ãªã„ã¨ã€ ã“ã‚ŒãŒä½¿ç”¨ã•ã‚Œã‚‹æ£ç¢ºãªæº–備ステートメントã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1225
@@ -3843,7 +4538,7 @@
"equivalent to: <literal>select Role, RoleGroup from Roles where PrincipalID=?"
"</literal>. If not specified this is the exact prepared statement that will "
"be used."
-msgstr ""
+msgstr "<emphasis role=\"bold\">rolesQuery</emphasis>: 準備ステートメントクエリーã§ã€ <literal>select Role, RoleGroup from Roles where PrincipalID=?</literal> ã¨åŒç‰ã«ãªã‚Šã¾ã™ã€‚ 指定ã•ã‚Œã¦ã„ãªã„ã¨ã€ ã“ã‚ŒãŒä½¿ç”¨ã•ã‚Œã‚‹æ£ç¢ºãªæº–備ステートメントã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1230
@@ -3853,7 +4548,7 @@
"indicating if the password comparison should ignore case. This can be useful "
"for hashed password encoding where the case of the hashed password is not "
"significant."
-msgstr ""
+msgstr "<emphasis role=\"bold\">ignorePasswordCase</emphasis>: パスワード比較ã§å¤§æ–‡å—ã¨å°æ–‡å—ã®åŒºåˆ¥ã‚’無視ã™ã¹ãã‹ã©ã†ã‹ã‚’示ã™ãƒ–ーリーンフラグã§ã™ã€‚ ãƒãƒƒã‚·ãƒ¥åŒ–パスワードã®å¤§æ–‡å—ã¨å°æ–‡å—ã®åŒºåˆ¥ãŒé‡è¦ã§ã¯ãªã„å ´åˆã€ ãƒãƒƒã‚·ãƒ¥åŒ–パスワードã®ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã«ä¾¿åˆ©ãªå ´åˆãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1235
@@ -3862,7 +4557,7 @@
"<emphasis role=\"bold\">principalClass</emphasis>: An option that specifies "
"a <literal>Principal</literal> implementation class. This must support a "
"constructor taking a string argument for the principal name."
-msgstr ""
+msgstr "<emphasis role=\"bold\">principalClass</emphasis>: <literal>Principal</literal> 実装クラスを指定ã™ã‚‹ã‚ªãƒ—ションã§ã™ã€‚ principal åã®æ–‡å—列引数をå–るコンストラクタã«å¯¾å¿œã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1240
@@ -3870,7 +4565,7 @@
msgid ""
"As an example <literal>DatabaseServerLoginModule</literal> configuration, "
"consider a custom table schema like the following:"
-msgstr ""
+msgstr "<literal>DatabaseServerLoginModule</literal> è¨å®šã®ä¾‹ã¨ã—ã¦ã€ 次ã®ã‚ˆã†ãªã‚«ã‚¹ã‚¿ãƒ ã®è¡¨ã‚¹ã‚ームを見ã¦ã¿ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1243
@@ -3879,12 +4574,14 @@
"CREATE TABLE Users(username VARCHAR(64) PRIMARY KEY, passwd VARCHAR(64))\n"
"CREATE TABLE UserRoles(username VARCHAR(64), userRoles VARCHAR(32))"
msgstr ""
+"CREATE TABLE Users(username VARCHAR(64) PRIMARY KEY, passwd VARCHAR(64))\n"
+"CREATE TABLE UserRoles(username VARCHAR(64), userRoles VARCHAR(32))"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1244
#, no-c-format
msgid "A corresponding <literal>login-config.xml</literal> entry would be:"
-msgstr ""
+msgstr "該当ã™ã‚‹ <literal>login-config.xml</literal> エントリã¯æ¬¡ã®ã‚ˆã†ã«ãªã‚‹ã§ã—ょã†ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1247
@@ -3909,6 +4606,24 @@
" </application-policy>\n"
"</policy>"
msgstr ""
+"<policy>\n"
+" <application-policy name=\"testDB\">\n"
+" <authentication>\n"
+" <login-module code=\"org.jboss.security.auth.spi."
+"DatabaseServerLoginModule\"\n"
+" flag=\"required\">\n"
+" <module-option name=\"dsJndiName\">java:/"
+"MyDatabaseDS</module-option>\n"
+" <module-option name=\"principalsQuery\">\n"
+" select passwd from Users username where username=?</"
+"module-option>\n"
+" <module-option name=\"rolesQuery\">\n"
+" select userRoles, 'Roles' from UserRoles where "
+"username=?</module-option>\n"
+" </login-module>\n"
+" </authentication>\n"
+" </application-policy>\n"
+"</policy>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1248
@@ -3916,13 +4631,13 @@
msgid ""
"This module supports password stacking, password hashing and unathenticated "
"identity."
-msgstr ""
+msgstr "ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ãƒ‘スワードスタッã‚ング〠パスワードãƒãƒƒã‚·ãƒ¥ã€ 未èªè¨¼ ID ã«å¯¾å¿œã—ã¦ã„ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1254
#, no-c-format
msgid "BaseCertLoginModule"
-msgstr ""
+msgstr "BaseCertLoginModule"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1255
@@ -3937,7 +4652,7 @@
"<literal>CertRolesLoginModule</literal> and "
"<literal>DatabaseCertLoginModule</literal> extend the behavior to obtain the "
"authorization roles from either a properties file or database."
-msgstr ""
+msgstr "X509 証明書をベースã¨ã—ã¦ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’èªè¨¼ã™ã‚‹ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§ã™ã€‚ 一般的ãªä½¿ç”¨ç”¨é€”ã¯ã‚¦ã‚§ãƒ–層ã§ã® <literal>CLIENT-CERT</literal> èªè¨¼ã«ãªã‚Šã¾ã™ã€‚ ã“ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯èªè¨¼ã—ã‹è¡Œã„ã¾ã›ã‚“。 安全化ã•ã‚ŒãŸã‚¦ã‚§ãƒ–ã‚„ EJB コンãƒãƒ¼ãƒãƒ³ãƒˆã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’完全ã«å®šç¾©ã™ã‚‹ã«ã¯æ‰¿èªãƒãƒ¼ãƒ«ã‚’å–å¾—ã™ã‚‹æ©Ÿèƒ½ã‚’æŒã¤åˆ¥ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¨ä½µç”¨ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ ã“ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã® 2 ã¤ã®ã‚µãƒ–クラス <literal>CertRolesLoginModule</literal> 㨠<literal>DatabaseCertLoginModule</literal> ã¯ãã®å‹•ä½œã‚’æ‹¡å¼µã—ã¦ãƒ—ãƒãƒ‘ティファイルã¾ãŸã¯ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã®ã„ãšã‚Œã‹ã‹ã‚‰æ‰¿èªãƒãƒ¼ãƒ«ã‚’å–å¾—ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1258
@@ -3950,6 +4665,8 @@
"<literal>org.jboss.security.plugins.JaasSecurityDomain</literal> MBean as "
"shown in this <literal>jboss-service.xml</literal> configuration fragment:"
msgstr ""
+"<literal>BaseCertLoginModule</literal> ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®æ¤œè¨¼ã‚’è¡Œã†ãŸã‚ã« <literal>KeyStore</"
+"literal> ã‚’å¿…è¦ã¨ã—ã¾ã™ã€‚ ã“れ㯠<literal>org.jboss.security.SecurityDomain</literal> 実装を使ã£ã¦å–å¾—ã—ã¾ã™ã€‚ ã“ã® <literal>jboss-service.xml</literal> è¨å®šã®éƒ¨åˆ†ä¾‹ã§ç¤ºã™ã‚ˆã†ã«ã€ <literal>SecurityDomain</literal> 実装ã¯ä¸€èˆ¬çš„ã«ã¯ <literal>org.jboss.security.plugins.JaasSecurityDomain</literal> MBean を使ã£ã¦è¨å®šã—ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1261
@@ -3966,6 +4683,16 @@
"attribute>\n"
"</mbean>"
msgstr ""
+"<mbean code=\"org.jboss.security.plugins.JaasSecurityDomain\"\n"
+" name=\"jboss.ch8:service=SecurityDomain\">\n"
+" <constructor>\n"
+" <arg type=\"java.lang.String\" value=\"jmx-console\"/>\n"
+" </constructor>\n"
+" <attribute name=\"KeyStoreURL\">resource:localhost.keystore</"
+"attribute>\n"
+" <attribute name=\"KeyStorePass\">unit-tests-server</"
+"attribute>\n"
+"</mbean>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1262
@@ -3979,7 +4706,7 @@
"authorization, one would first modify the <literal>web.xml</literal> to "
"declare the resources to be secured, along with the allowed roles and "
"security domain to be used for authentication and authorization."
-msgstr ""
+msgstr "上記ã¯ã€ <literal>jmx-console</literal> ã¨ã„ã†åå‰ã‚’æŒã¤ã‚»ã‚ュリティドメインを作æˆã—〠ã“ã® <literal>SecurityDomain</literal> 実装㯠<literal>java:/jaas/jmx-console</literal> ã« JBossSX ã‚»ã‚ュリティドメインã®å‘½åパターンãŒç¶šãåå‰ã®é…下 JNDI 経由ã§ä½¿ç”¨å¯èƒ½ã§ã™ã€‚ クライアント証明書ã¨ãƒãƒ¼ãƒ«ãƒ™ãƒ¼ã‚¹ã®æ‰¿èªã‚’使用ã—㦠<literal>jmx-console.war</literal>ãªã©ã®ã‚¦ã‚§ãƒ–アプリケーションã®å®‰å…¨åŒ–を図るã«ã¯ã€ ã¾ãš <literal>web.xml</literal> を編集ã—ã¦å®‰å…¨åŒ–ã™ã‚‹ãƒªã‚½ãƒ¼ã‚¹ã®ä»–〠èªè¨¼ã¨æ‰¿èªã«ä½¿ç”¨ã™ã‚‹è¨±å¯ãƒãƒ¼ãƒ«ã¨ã‚»ã‚ュリティドメインを宣言ã—ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1265
@@ -4016,6 +4743,36 @@
" </security-role>\n"
"</web-app>"
msgstr ""
+"<?xml version=\"1.0\"?>\n"
+"<!DOCTYPE web-app PUBLIC\n"
+" \"-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
+"\"\n"
+" \"http://java.sun.com/dtd/web-app_2_3.dtd\">\n"
+"<web-app> \n"
+" ... \n"
+" <security-constraint>\n"
+" <web-resource-collection>\n"
+" <web-resource-name>HtmlAdaptor</web-resource-name>\n"
+" <description>An example security config that only allows "
+"users with\n"
+" the role JBossAdmin to access the HTML JMX console web\n"
+" application </description>\n"
+" <url-pattern>/*</url-pattern>\n"
+" <http-method>GET</http-method>\n"
+" <http-method>POST</http-method>\n"
+" </web-resource-collection>\n"
+" <auth-constraint>\n"
+" <role-name>JBossAdmin</role-name>\n"
+" </auth-constraint>\n"
+" </security-constraint>\n"
+" <login-config>\n"
+" <auth-method>CLIENT-CERT</auth-method>\n"
+" <realm-name>JBoss JMX Console</realm-name>\n"
+" </login-config>\n"
+" <security-role>\n"
+" <role-name>JBossAdmin</role-name>\n"
+" </security-role>\n"
+"</web-app>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1266
@@ -4023,7 +4780,7 @@
msgid ""
"Next we, need to specify the JBoss security domain in <literal>jboss-web."
"xml</literal>:"
-msgstr ""
+msgstr "次ã«ã€ JBoss ã‚»ã‚ュリティドメインを <literal>jboss-web.xml</literal> ã§æŒ‡å®šã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1269
@@ -4033,6 +4790,9 @@
" <security-domain>java:/jaas/jmx-console</security-domain>\n"
"</jboss-web>"
msgstr ""
+"<jboss-web>\n"
+" <security-domain>java:/jaas/jmx-console</security-domain>\n"
+"</jboss-web>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1270
@@ -4041,7 +4801,7 @@
"Finally, you need to define the login module configuration for the jmx-"
"console security domain you just specified. This is done in the "
"<literal>conf/login-config.xml</literal> file."
-msgstr ""
+msgstr "最後ã«ã€ ã„ã¾æŒ‡å®šã—ãŸã°ã‹ã‚Šã® jmx-console ã‚»ã‚ュリティドメイン用ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«è¨å®šã‚’定義ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ <literal>conf/login-config.xml</literal> ファイルã§è¡Œã„ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1273
@@ -4070,6 +4830,28 @@
" </authentication>\n"
"</application-policy>"
msgstr ""
+"<application-policy name=\"jmx-console\">\n"
+" <authentication>\n"
+" <login-module code=\"org.jboss.security.auth.spi."
+"BaseCertLoginModule\" \n"
+" flag=\"required\">\n"
+" <module-option name=\"password-stacking\">useFirstPass</"
+"module-option>\n"
+" <module-option name=\"securityDomain\">java:/jaas/jmx-"
+"console</module-option>\n"
+" </login-module>\n"
+" <login-module code=\"org.jboss.security.auth.spi."
+"UsersRolesLoginModule\" \n"
+" flag=\"required\">\n"
+" <module-option name=\"password-stacking\">useFirstPass</"
+"module-option>\n"
+" <module-option name=\"usersProperties\">jmx-console-users."
+"properties</module-option>\n"
+" <module-option name=\"rolesProperties\">jmx-console-roles."
+"properties</module-option>\n"
+" </login-module>\n"
+" </authentication>\n"
+"</application-policy>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1274
@@ -4084,6 +4866,9 @@
"created using the client certificate distinguished name. Consider the "
"following certificate:"
msgstr ""
+"ã“ã“㧠<literal>BaseCertLoginModule</literal> ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã®èªè¨¼ã«ä½¿ç”¨ã•ã‚Œã€ <literal>UsersRolesLoginModule</literal> 㯠<literal>password-stacking=useFirstPass</"
+"literal> オプションã®ãŸã‚承èªã«ã®ã¿ä½¿ç”¨ã•ã‚Œã¾ã™ã€‚ <literal>localhost.keystore</literal> ãŠã‚ˆã³"
+"<literal>jmx-console-roles.properties</literal> ã®ã„ãšã‚Œã«ã‚‚クライアント証明書ã«é–¢é€£ä»˜ã‘られる principal ã«ãƒžãƒƒãƒ”ングã™ã‚‹ã‚¨ãƒ³ãƒˆãƒªãŒå¿…è¦ã¨ãªã‚Šã¾ã™ã€‚ デフォルトã§ã¯ã€ principal ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸è˜åˆ¥åを使ã£ã¦ä½œæˆã•ã‚Œã¾ã™ã€‚ 次ã®è¨¼æ˜Žæ›¸ã‚’見ã¦ã¿ã¾ã—ょã†ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1277
@@ -4103,6 +4888,19 @@
" MD5: 4A:9C:2B:CD:1B:50:AA:85:DD:89:F6:1D:F5:AF:9E:AB\n"
" SHA1: DE:DE:86:59:05:6C:00:E8:CC:C0:16:D3:C2:68:BF:95:B8:83:E9:58"
msgstr ""
+"[starksm at banshee9100 conf]$ keytool -printcert -file unit-tests-client."
+"export\n"
+"Owner: CN=unit-tests-client, OU=JBoss Inc., O=JBoss Inc., ST=Washington, "
+"C=US\n"
+"Issuer: CN=jboss.com, C=US, ST=Washington, L=Snoqualmie Pass, "
+"EMAILADDRESS=admin\n"
+"@jboss.com, OU=QA, O=JBoss Inc.\n"
+"Serial number: 100103\n"
+"Valid from: Wed May 26 07:34:34 PDT 2004 until: Thu May 26 07:34:34 PDT "
+"2005\n"
+"Certificate fingerprints:\n"
+" MD5: 4A:9C:2B:CD:1B:50:AA:85:DD:89:F6:1D:F5:AF:9E:AB\n"
+" SHA1: DE:DE:86:59:05:6C:00:E8:CC:C0:16:D3:C2:68:BF:95:B8:83:E9:58"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1278
@@ -4116,6 +4914,8 @@
"escape the problem characters using a backslash ('<literal>\\</"
"literal>') as shown here:"
msgstr ""
+"<literal>localhost.keystore</literal> 㯠<literal>CN=unit-tests-client, OU=JBoss Inc., O=JBoss Inc., "
+"ST=Washington, C=US</literal> ã®ã‚¨ã‚¤ãƒªã‚¢ã‚¹ã§æ ¼ç´ã•ã‚Œã‚‹ã“ã®è¨¼æ˜Žæ›¸ã‚’å¿…è¦ã¨ã—〠<literal>jmx-console-roles.properties</literal> ã‚‚åŒã˜ã‚¨ãƒ³ãƒˆãƒªã®ã‚¨ãƒ³ãƒˆãƒªãŒå¿…è¦ã¨ãªã‚Šã¾ã™ã€‚ DN ã¯é€šå¸¸ã¯åŒºåˆ‡ã‚Šæ–‡å—ã¨ã—ã¦æ‰±ã‚れる多ãã®æ–‡å—ã‚’å«ã‚“ã§ã„ã‚‹ãŸã‚〠以下ã«ç¤ºã™ã‚ˆã†ã«ãƒãƒƒã‚¯ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ ('<literal>\\</literal>') を使ã£ã¦è©²å½“æ–‡å—ã«é–¢ã™ã‚‹å•é¡Œã‚’回é¿ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1281
@@ -4126,16 +4926,21 @@
"\\=Washington,\\ C\\=US=JBossAdmin\n"
"admin=JBossAdmin"
msgstr ""
+"# A sample roles.properties file for use with the UsersRolesLoginModule\n"
+"CN\\=unit-tests-client,\\ OU\\=JBoss\\ Inc.,\\ O\\=JBoss\\ Inc.,\\ ST"
+"\\=Washington,\\ C\\=US=JBossAdmin\n"
+"admin=JBossAdmin"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1285
#, no-c-format
msgid "IdentityLoginModule"
-msgstr ""
+msgstr "IdentityLoginModule"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1286
#, no-c-format
+#, fuzzy
msgid ""
"The <literal>IdentityLoginModule</literal> is a simple login module that "
"associates a hard-coded user name a to any subject authenticated against the "
@@ -4145,12 +4950,18 @@
"development environments when you want to test the security associated with "
"a given principal and associated roles."
msgstr ""
+"<literal>IdentityLoginModule</literal> ã¯ã‚·ãƒ³ãƒ—ルãªãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§ã€ ãƒãƒ¼ãƒ‰ã‚³ãƒ¼ãƒ‰åŒ–ã•ã‚ŒãŸãƒ¦ãƒ¼ã‚¶ãƒ¼åをモジュールã«å¯¾ã—ã¦èªè¨¼ã•ã‚Œã‚‹ã‚µãƒ–ジェクトã«é–¢é€£ä»˜ã‘ã¾ã™ã€‚ <literal>principal</literal>オプションã§æŒ‡å®šã•ã‚Œã‚‹åå‰ã‚’使ã£ã¦ <literal>SimplePrincipal</literal> インスタンスを作æˆã—ã¾ã™ã€‚ 固定 ID をサービスã«ä¸Žãˆã‚‹å¿…è¦ãŒã‚ã‚‹å ´åˆã€ 特定㮠principal ã¨é–¢é€£ãƒãƒ¼ãƒ«ã«é–¢é€£ã¥ã‘られãŸã‚»ã‚ュリティをテストã™ã‚‹å ´åˆã®é–‹ç™ºç’°å¢ƒã€ ãªã©ã§ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯å½¹ã«ç«‹ã¡ã¾ã™ã€‚ "
+"??"
+"This login module "
+"is useful when you need to provide a fixed identity to a service, and in "
+"development environments when you want to test the security associated with "
+"a given principal and associated roles."
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1289
#, no-c-format
msgid "The supported login module configuration options include:"
-msgstr ""
+msgstr "サãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ã‚‹ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«è¨å®šã‚ªãƒ—ションã«ã¯æ¬¡ã®ã‚ˆã†ãªã‚‚ã®ãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1294
@@ -4168,7 +4979,7 @@
msgid ""
"<emphasis role=\"bold\">roles</emphasis>: This is a comma-delimited list of "
"roles that will be assigned to the user."
-msgstr ""
+msgstr "<emphasis role=\"bold\">roles</emphasis>: ユーザーã«å‰²ã‚Šå½“ã¦ã‚‰ã‚Œã‚‹ãƒãƒ¼ãƒ«ã‚’コンマã§åŒºåˆ‡ã£ãŸä¸€è¦§ã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1304
@@ -4177,7 +4988,7 @@
"A sample XMLLoginConfig configuration entry that would authenticate all "
"users as the principal named <literal>jduke</literal> and assign role names "
"of <literal>TheDuke</literal>, and <literal>AnimatedCharacter</literal> is:"
-msgstr ""
+msgstr "ã™ã¹ã¦ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’ <literal>jduke</literal> ã¨ã„ã†åå‰ã® principal ã¨ã—ã¦èªè¨¼ã—ãƒãƒ¼ãƒ«å <literal>TheDuke</literal>〠ãŠã‚ˆã³ <literal>AnimatedCharacter</literal> を割り当ã¦ã‚‹ã‚µãƒ³ãƒ—ル㮠XMLLoginConfig è¨å®šã‚¨ãƒ³ãƒˆãƒªã‚’示ã—ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1307
@@ -4198,18 +5009,32 @@
" </application-policy>\n"
"</policy>"
msgstr ""
+"<policy>\n"
+" <application-policy name=\"testIdentity\">\n"
+" <authentication>\n"
+" <login-module code=\"org.jboss.security.auth.spi."
+"IdentityLoginModule\"\n"
+" flag=\"required\">\n"
+" <module-option name=\"principal\">jduke</module-"
+"option>\n"
+" <module-option name=\"roles\">TheDuke,"
+"AnimatedCharater</module-option>\n"
+" </login-module>\n"
+" </authentication>\n"
+" </application-policy>\n"
+"</policy>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1308
#, no-c-format
msgid "This module supports password stacking."
-msgstr ""
+msgstr "ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ãƒ‘スワードスタッã‚ングã«å¯¾å¿œã—ã¦ã„ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1314
#, no-c-format
msgid "RunAsLoginModule"
-msgstr ""
+msgstr "RunAsLoginModule"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1315
@@ -4229,7 +5054,7 @@
#: J2EE_Security_On_JBOSS.xml:1318
#, no-c-format
msgid "The only login module configuration option is:"
-msgstr ""
+msgstr "ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«è¨å®šã‚ªãƒ—ション㯠1 ã¤ã®ã¿ã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1323
@@ -4244,11 +5069,12 @@
#: J2EE_Security_On_JBOSS.xml:1331
#, no-c-format
msgid "ClientLoginModule"
-msgstr ""
+msgstr "ClientLoginModule"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1332
#, no-c-format
+#, fuzzy
msgid ""
"The <literal>ClientLoginModule</literal> is an implementation of "
"<literal>LoginModule</literal> for use by JBoss clients for the "
@@ -4266,7 +5092,7 @@
"course, you could always set the <literal>org.jboss.security."
"SecurityAssociation</literal> information directly, but this is considered "
"an internal API that is subject to change without notice."
-msgstr ""
+msgstr "<literal>ClientLoginModule</literal> ã¯ã€ 呼ã³å‡ºã—å´ã® ID ã¨è¨¼æ˜Žæ›¸ã®ç¢ºç«‹ã« JBoss クライアントã«ã‚ˆã£ã¦ä½¿ç”¨ã•ã‚Œã‚‹ <literal>LoginModule</literal> ã®å®Ÿè£…ã«ãªã‚Šã¾ã™ã€‚ <literal>org.jboss.security.SecurityAssociation.principal</literal> ã‚’ <literal>callbackhandler</literal> ã«ã‚ˆã£ã¦å…¥åŠ›ã•ã‚Œã‚‹ <literal>NameCallback</literal> ã®å€¤ã«è¨å®šã—〠<literal>org.jboss.security.SecurityAssociation.credential</literal> ã‚’ <literal>callbackhandler</literal> ã«ã‚ˆã£ã¦å…¥åŠ›ã•ã‚Œã‚‹ <literal>PasswordCallback</literal> ã®å€¤ã«è¨å®šã—ã¾ã™ã€‚ クライアントãŒç¾åœ¨ã®ã‚¹ãƒ¬ãƒƒãƒ‰ã®å‘¼ã³å‡ºã—å´ã‚’確立ã™ã‚‹ãŸã‚ã®ãƒ¡ã‚«ãƒ‹ã‚ºãƒ ã¨ã—ã¦ã¯ã‚µãƒãƒ¼ãƒˆã•ã‚Œã¦ã„る唯一ã®ãƒ¡ã‚«ãƒ‹ã‚ºãƒ ã«ãªã‚Šã¾ã™ã€‚ スタンドアãƒãƒ¼ãƒ³ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚¢ãƒ—リケーションãŠã‚ˆã³ã‚µãƒ¼ãƒãƒ¼ç’°å¢ƒ"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1335
@@ -4277,7 +5103,7 @@
"invocation layer for subsequent authentication on the server. If you need to "
"perform client-side authentication of users you would need to configure "
"another login module in addition to the <literal>ClientLoginModule</literal>."
-msgstr ""
+msgstr "ã“ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯èªè¨¼ã¯ä¸€åˆ‡è¡Œã‚ãªã„ã®ã§æ³¨æ„ã—ã¦ãã ã•ã„。 å˜ã«ä¸Žãˆã‚‰ã‚ŒãŸãƒã‚°ã‚¤ãƒ³æƒ…å ±ã‚’ã‚µãƒ¼ãƒãƒ¼ä¸Šã§å¾Œç¶šã™ã‚‹èªè¨¼ç”¨ã« JBoss サーãƒãƒ¼ EJB 呼ã³å‡ºã—層ã«ã‚³ãƒ”ーã™ã‚‹ã ã‘ã§ã™ã€‚ ユーザーã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´èªè¨¼ã‚’実行ã™ã‚‹å¿…è¦ãŒã‚ã‚‹å ´åˆã¯ã€ <literal>ClientLoginModule</literal> ã«åŠ ãˆã¦åˆ¥ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’è¨å®šã™ã‚‹å¿…è¦ãŒã‚ã‚‹ã§ã—ょã†ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1343
@@ -4290,7 +5116,7 @@
"thread must perform its own login. When set to false the login identity and "
"credentials are global variables that apply to all threads in the VM. The "
"default for this option is false."
-msgstr ""
+msgstr "<emphasis role=\"bold\">multi-threaded</emphasis>: マルãƒã‚¹ãƒ¬ãƒƒãƒ‰åŒ–ã•ã‚ŒãŸã‚ªãƒ—ション㌠true ã«è¨å®šã•ã‚Œã‚‹å ´åˆã¯ã€ å„ãƒã‚°ã‚¤ãƒ³ã‚¹ãƒ¬ãƒƒãƒ‰ã¯ãれ独自㮠principal ã¨è¨¼æ˜Žæ›¸ã®ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ã‚’æŒã¤ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ 複数ユーザー㮠ID ãŒç•°ãªã‚‹ã‚¹ãƒ¬ãƒƒãƒ‰ã§ã‚¢ã‚¯ãƒ†ã‚£ãƒ–ã«ãªã£ã¦ã„るよã†ãªã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆç’°å¢ƒã§å½¹ã«ç«‹ã¡ã¾ã™ã€‚ true ã®å ´åˆã€ ãã‚Œãžã‚Œç•°ãªã‚‹ã‚¹ãƒ¬ãƒƒãƒ‰ã¯ç‹¬è‡ªã®ãƒã‚°ã‚¤ãƒ³ã‚’è¡Œã†å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ false ã«è¨å®šã™ã‚‹ã¨ã€ ãƒã‚°ã‚¤ãƒ³ã® ID ãŠã‚ˆã³è¨¼æ˜Žæ›¸ã¯ã‚°ãƒãƒ¼ãƒãƒ«å¤‰æ•°ã¨ãªã‚Š VM 内ã®ã™ã¹ã¦ã®ã‚¹ãƒ¬ãƒƒãƒ‰ã«é©ç”¨ã—ã¾ã™ã€‚ ã“ã®ã‚ªãƒ—ションã®ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã¯ false ã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1348
@@ -4306,6 +5132,8 @@
"you want to perform client-side authentication of clients using some other "
"login module such as the <literal>LdapLoginModule</literal>."
msgstr ""
+"<emphasis role=\"bold\">password-stacking</emphasis>: <literal>password-"
+"stacking</literal> オプション㌠<literal>useFirstPass</literal> ã«è¨å®šã•ã‚Œã‚‹ã¨ã€ ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã¾ãšå…±æœ‰ãƒ¦ãƒ¼ã‚¶ãƒ¼åã¨ãƒ‘スワードをãã‚Œãžã‚Œ <literal>javax.security.auth.login.name</literal> 㨠<literal>javax.security.auth.login.password</literal> を使ã£ã¦ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«å…±æœ‰çŠ¶æ…‹ãƒžãƒƒãƒ—内ã§æ¤œç´¢ã—ã¾ã™ã€‚ ã“ã‚Œã«ã‚ˆã‚Šã€ ã“れよりå‰ã«è¨å®šã•ã‚ŒãŸãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒ JBoss ã«æ¸¡ã•ã‚Œã‚‹ã¹ã有効ãªãƒ¦ãƒ¼ã‚¶ãƒ¼åã¨ãƒ‘スワードを確立ã™ã‚‹ã“ã¨ãŒã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚ <literal>LdapLoginModule</literal> ãªã©ãã®ä»–ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’使ã£ã¦ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´èªè¨¼ã‚’è¡Œã„ãŸã„å ´åˆã¯ã€ ã“ã®ã‚ªãƒ—ションを使用ã™ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1353
@@ -4319,7 +5147,7 @@
"simply clear the <literal>SecurityAssociation</literal>. A <literal>restore-"
"login-identity</literal> of true is needed if one need to change identities "
"and then restore the original caller identity."
-msgstr ""
+msgstr "<emphasis role=\"bold\">restore-login-identity</emphasis>: <literal>restore-login-identity</literal> ㌠true ã®å ´åˆã€ <literal>login()</literal> メソッドã«å¯¾ã™ã‚‹ã‚¨ãƒ³ãƒˆãƒªä¸Šã«è¦‹ãˆã‚‹ <literal>SecurityAssociation</literal> ã® principal ã¨è¨¼æ˜Žæ›¸ã¯åœæ¢ã¾ãŸã¯ãƒã‚°ã‚¢ã‚¦ãƒˆã®ã„ãšã‚Œã‹ã§ä¿å˜ã¾ãŸã¯å¾©å…ƒã•ã‚Œã¾ã™ã€‚ false ã®å ´åˆ (デフォルト)〠åœæ¢ãŠã‚ˆã³ãƒã‚°ã‚¢ã‚¦ãƒˆã¯ <literal>SecurityAssociation</literal> を消去ã™ã‚‹ã ã‘ã§ã™ã€‚ ID を変更ã—ã¦ã‹ã‚‰ã‚ªãƒªã‚¸ãƒŠãƒ«ã®å‘¼ã³å‡ºã—å´ ID を復元ã™ã‚‹å¿…è¦ãŒã‚ã‚‹å ´åˆã¯ <literal>restore-login-identity</literal> ã‚’ true ã«ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1358
@@ -4328,7 +5156,7 @@
"A sample login configuration for <literal>ClientLoginModule</literal> is the "
"default configuration entry found in the JBoss distribution <literal>client/"
"auth.conf</literal> file. The configuration is:"
-msgstr ""
+msgstr "サンプル㮠<literal>ClientLoginModule</literal> ã®ãƒã‚°ã‚¤ãƒ³è¨å®šã¯ JBoss ディストリビューション㮠<literal>client/auth.conf</literal> ファイルã«ã‚るデフォルトã®è¨å®šã‚¨ãƒ³ãƒˆãƒªã«ãªã‚Šã¾ã™ã€‚ è¨å®šã¯æ¬¡ã®é€šã‚Šã§ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1361
@@ -4343,16 +5171,25 @@
" // Put your login modules that need jBoss here\n"
"};"
msgstr ""
+"other {\n"
+" // Put your login modules that work without jBoss here\n"
+" \n"
+" // jBoss LoginModule\n"
+" org.jboss.security.ClientLoginModule required;\n"
+" \n"
+" // Put your login modules that need jBoss here\n"
+"};"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1367
#, no-c-format
msgid "Writing Custom Login Modules"
-msgstr ""
+msgstr "カスタムã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’記述ã™ã‚‹"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1368
#, no-c-format
+#, fuzzy
msgid ""
"If the login modules bundled with the JBossSX framework do not work with "
"your security environment, you can write your own custom login module "
@@ -4365,7 +5202,7 @@
"<literal>JaasSecurityManager</literal>. This section examines this "
"requirement and introduces two abstract base <literal>LoginModule</literal> "
"implementations that can help you implement your own custom login modules."
-msgstr ""
+msgstr "JBossSX フレームワークã«åŒæ¢±ã•ã‚Œã¦ã„ã‚‹ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒä½¿ç”¨ã—ã¦ã„ã‚‹ã‚»ã‚ュリティ環境ã¨ã†ã¾ã動作ã—ãªã„å ´åˆã€ 独自ã®ã‚«ã‚¹ã‚¿ãƒ ãƒã‚°ã‚¤ãƒ³å®Ÿè£…を記述ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ <literal>JaasSecurityManager</literal> ㌠<literal>Subject</literal> principal セットã®ç‰¹å®šã®ä½¿ç”¨ãƒ‘ターンを期待ã—ã¦ã„㟠<literal>JaasSecurityManager</literal> アーã‚テクãƒãƒ£ã«é–¢ã™ã‚‹ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã‚’æ€ã„出ã—ã¦ã¿ã¦ãã ã•ã„。 JAAS Subject クラスã®æƒ…å ±ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸æ©Ÿèƒ½ãŠã‚ˆã³ <literal>JaasSecurityManager</literal> ã¨å‹•ä½œã™ã‚‹ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒè¨˜è¿°å¯èƒ½ãªã“れらã®æ©Ÿèƒ½ã«ã¤ã„ã¦æœŸå¾…ã§ãる使用方法をç†è§£ã—ã¦ãŠãå¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ 本セクションã§ã¯ã“ã®è¦ä»¶ã«ã¤ã„ã¦è¦‹ã¦ã„ã〠ã¾ãŸç‹¬è‡ªã®ã‚«ã‚¹ã‚¿ãƒ ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®å®Ÿè£…ã«å½¹ç«‹ã¤æŠ½è±¡çš„㪠(??) <literal>LoginModule</literal> 実装を 2 ã¤ç´¹ä!
»‹ã—ã¦ã„ãã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1371
@@ -4373,7 +5210,7 @@
msgid ""
"You can obtain security information associated with a <literal>Subject</"
"literal> in six ways in JBoss using the following methods:"
-msgstr ""
+msgstr "JBoss ã§ã¯ <literal>Subject</literal> ã«é–¢é€£ä»˜ã‘られるセã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ±ã¯ 6 通りã®æ–¹æ³•ã§å–å¾—ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1374
@@ -4386,6 +5223,12 @@
"java.util.Set getPublicCredentials()\n"
"java.util.Set getPublicCredentials(java.lang.Class c)"
msgstr ""
+"java.util.Set getPrincipals()\n"
+"java.util.Set getPrincipals(java.lang.Class c)\n"
+"java.util.Set getPrivateCredentials()\n"
+"java.util.Set getPrivateCredentials(java.lang.Class c)\n"
+"java.util.Set getPublicCredentials()\n"
+"java.util.Set getPublicCredentials(java.lang.Class c)"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1375
@@ -4395,11 +5238,12 @@
"the most natural choice: the principals sets obtained via "
"<literal>getPrincipals()</literal> and <literal>getPrincipals(java.lang."
"Class)</literal>. The usage pattern is as follows:"
-msgstr ""
+msgstr "<literal>Subject</literal> ID ãŠã‚ˆã³ãƒãƒ¼ãƒ«ã«ã¤ã„ã¦ã€ JBossSX ã¯ã‚‚ã£ã¨ã‚‚自然ãªé¸æŠžã‚’è¡Œã„ã¾ã™ã€‚ principal セット㯠<literal>getPrincipals()</literal> ãŠã‚ˆã³ <literal>getPrincipals(java.lang.Class)</literal> 経由ã§å–å¾—ã•ã‚Œã¾ã™ã€‚ 使用パターンã¯æ¬¡ã®é€šã‚Šã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1380
#, no-c-format
+#, fuzzy
msgid ""
"User identities (username, social security number, employee ID, and so on) "
"are stored as <literal>java.security.Principal</literal> objects in the "
@@ -4411,6 +5255,8 @@
"instances may be added to the <literal>Subject</literal><literal>Principals</"
"literal> set as needed."
msgstr ""
+"ユーザー ID (ユーザーå〠ソーシャルセã‚ュリティ番å·ã€ 従æ¥å“¡ ID ãªã©) 㯠<literal>Subject</literal><literal>Principals</literal> セット内㫠<literal>java.security.Principal</literal> オブジェクトã¨ã—ã¦æ ¼ç´ã•ã‚Œã¾ã™ã€‚ ゆーã–ーID を表㙠<literal>Principal</literal> 実装ã¯ãã® principal åã«åŸºã¥ã„ã¦æ¯”較ãŠã‚ˆã³åŒç‰ã‚’è¡Œã†å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ (?? equality) é©åˆ‡ãªå®Ÿè£…㯠<literal>org.jboss.security.SimplePrincipal</literal> ã¨ã—ã¦ä½¿ç”¨å¯èƒ½ã§ã™ã€‚?? "
+"å¿…è¦ã«å¿œã˜ã¦ãã®ä»–ã® <literal>Principal</literal> インスタンスを <literal>Subject</literal><literal>Principals</literal> セットã«è¿½åŠ ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1385
@@ -4439,13 +5285,13 @@
"identity suitable for the application. If a <literal>Subject</literal> does "
"not have a <literal>CallerPrincipal</literal><literal>Group</literal>, the "
"application identity is the same as operational environment identity."
-msgstr ""
+msgstr "割り当ã¦ã‚‰ã‚ŒãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒãƒ¼ãƒ«ã‚‚ <literal>Principals</literal> ã«æ ¼ç´ã•ã‚Œã¾ã™ãŒã€ <literal>java.security.acl.Group</literal> インスタンスを使ã£ã¦æŒ‡å®šãƒãƒ¼ãƒ«ã‚»ãƒƒãƒˆã«ã‚°ãƒ«ãƒ¼ãƒ—化ã•ã‚Œã¾ã™ã€‚ <literal>Group</literal> インターフェース㯠<literal>Principal</literal> 㨠<literal>Group</literal> ã®ä¸¡æ–¹ã¾ãŸã¯ã„ãšã‚Œã‹ã²ã¨ã¤ã®é›†åˆã‚’定義ã—〠<literal>java.security.Principal</literal> ã®ã‚µãƒ–インターフェースã¨ãªã‚Šã¾ã™ã€‚ <literal>Subject</literal> ã«å‰²ã‚Šå½“ã¦ã‚‰ã‚Œã‚‹ãƒãƒ¼ãƒ«ã‚»ãƒƒãƒˆæ•°ã«åˆ¶é™ã¯ã‚ã‚Šã¾ã›ã‚“。 ç¾åœ¨ã€ JBossSX フレームワークã¯ã‚ˆã知られãŸãƒãƒ¼ãƒ«ã‚»ãƒƒãƒˆ <literal>Roles</literal> 㨠<literal>CallerPrincipal</literal> ã® 2 ã¤ã‚’使用ã—ã¦ã„ã¾ã™ã€‚ <literal>Roles</literal> グループ㯠<literal>Subject</literal> ãŒèªè¨¼ã•ã‚Œã¦ã„るアプリケーションドメイン内ã§æ—¢çŸ¥ã®æŒ‡å®šãƒãƒ¼ãƒ«ã«å¯¾ã™ã‚‹ <literal>Principal</l!
iteral> 群ã®é›†åˆã«ãªã‚Šã¾ã™ã€‚ ã“ã®ãƒãƒ¼ãƒ«ã‚»ãƒƒãƒˆã¯ <literal>EJBContext.isCallerInRole(String)</literal> ã®ã‚ˆã†ãªãƒ¡ã‚½ãƒƒãƒ‰ã«ã‚ˆã£ã¦ä½¿ç”¨ã•ã‚Œã¾ã™ã€‚ EJB ã¯ç¾åœ¨ã®å‘¼ã³å‡ºã—å´ãŒæŒ‡å®šã‚¢ãƒ—リケーションã®ãƒ‰ãƒ¡ã‚¤ãƒ³ãƒãƒ¼ãƒ«ã«å±žã—ã¦ã„ã‚‹ã‹ã©ã†ã‹ã‚’確èªã™ã‚‹ãŸã‚ã«ã“れを使用ã§ãã¾ã™ã€‚メソッドã®ãƒ‘ーミッションãƒã‚§ãƒƒã‚¯ã‚’è¡Œã†ã‚»ã‚ュリティインターセプタãƒã‚¸ãƒƒã‚¯ã‚‚ã“ã®ãƒãƒ¼ãƒ«ã‚»ãƒƒãƒˆã‚’使用ã—ã¾ã™ã€‚ <literal>CallerPrincipal</literal><literal>Group</literal> ã¯ã‚¢ãƒ—リケーションドメイン内ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«å‰²ã‚Šå½“ã¦ã‚‰ã‚Œã‚‹å˜ä¸€ã® <literal>Principal</literal> ID ã‹ã‚‰æ§‹æˆã•ã‚Œã¾ã™ã€‚ <literal>EJBContext.getCallerPrincipal() </literal> メソッド㯠<literal>CallerPrincipal</literal> を使ã£ã¦ã‚¢ãƒ—リケーションドメインãŒãã®å‹•ä½œç’°å¢ƒ ID ã‹ã‚‰ã‚¢ãƒ—リケーションã«é©ã—ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ ID ã¸ã®ãƒžãƒƒãƒ”ングを行ãˆã‚‹ã‚ˆã!
†ã«ã—ã¾ã™ã€‚ <literal>Subject</literal> ã« <literal>CallerPrinci
pal</literal><literal>Group</literal> ãŒãªã„å ´åˆã€ アプリケーション ID ã¯å‹•ä½œç’°å¢ƒ ID ã¨åŒã˜ã‚‚ã®ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1391
#, no-c-format
msgid "Support for the Subject Usage Pattern"
-msgstr ""
+msgstr "Subject ã®ä½¿ç”¨ãƒ‘ターンã®ã‚µãƒãƒ¼ãƒˆ"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1392
@@ -4462,7 +5308,7 @@
"key tasks specific to an operation environment security infrastructure. The "
"key details of the class are highlighted in the following class fragment. "
"The JavaDoc comments detail the responsibilities of subclasses."
-msgstr ""
+msgstr "å‰è¿°ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã§èª¬æ˜Žã—㟠<literal>Subject</literal> ã®ä½¿ç”¨ãƒ‘ターンã®æ£ã—ã„実装を簡略化ã™ã‚‹ãŸã‚〠JBossSX ã«ã¯æ£ã—ã„ <literal>Subject</literal> ã®ä½¿ç”¨ã‚’強制的ã«å®Ÿè¡Œã™ã‚‹ãƒ†ãƒ³ãƒ—レートパターンをæŒã¤èªè¨¼ <literal>Subject</literal> ã®ç§»æ¤ã‚’処ç†ã™ã‚‹ 2 ã¤ã®æŠ½è±¡ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒå«ã¾ã‚Œã¦ã„ã¾ã™ã€‚ ã“ã® 2 ã¤ã®ã‚‚ã£ã¨ã‚‚汎用ãªã‚¯ãƒ©ã‚¹ã¯ <literal>org.jboss.security.auth.spi.AbstractServerLoginModule</literal> クラスã«ãªã‚Šã¾ã™ã€‚ <literal>javax.security.auth.spi.LoginModule</literal> インターフェースã®æ˜Žç¢ºãªå®Ÿè£…ã‚’æä¾›ã—〠動作環境セã‚ュリティインフラストラクãƒãƒ£å›ºæœ‰ã¨ãªã‚‹é‡è¦ãªä½œæ¥ã®æŠ½è±¡ãƒ¡ã‚½ãƒƒãƒ‰ã‚’æä¾›ã—ã¦ã„ã¾ã™ã€‚ ã“ã®ã‚¯ãƒ©ã‚¹ã®é‡è¦éƒ¨åˆ†ã«ã¤ã„ã¦ã¯æ¬¡ã®ä¾‹ã§å¼·èª¿ã—ã¾ã™ã€‚ JavaDoc ã¯ã‚µãƒ–クラスãŒæžœãŸã™å½¹å‰²ã«ã¤ã„ã¦è©³ã—ãコメントã—ã¦ã„ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1395
@@ -4567,10 +5413,109 @@
" abstract protected Group[] getRoleSets() throws LoginException;\n"
"}"
msgstr ""
+"package org.jboss.security.auth.spi;\n"
+"/**\n"
+" * This class implements the common functionality required for a JAAS\n"
+" * server-side LoginModule and implements the JBossSX standard\n"
+" * Subject usage pattern of storing identities and roles. Subclass\n"
+" * this module to create your own custom LoginModule and override the\n"
+" * login(), getRoleSets(), and getIdentity() methods.\n"
+" */\n"
+"public abstract class AbstractServerLoginModule\n"
+" implements javax.security.auth.spi.LoginModule\n"
+"{\n"
+" protected Subject subject;\n"
+" protected CallbackHandler callbackHandler;\n"
+" protected Map sharedState;\n"
+" protected Map options;\n"
+" protected Logger log;\n"
+"\n"
+" /** Flag indicating if the shared credential should be used */\n"
+" protected boolean useFirstPass;\n"
+" /** \n"
+" * Flag indicating if the login phase succeeded. Subclasses that\n"
+" * override the login method must set this to true on successful\n"
+" * completion of login\n"
+" */\n"
+" protected boolean loginOk;\n"
+" \n"
+" // ...\n"
+" /**\n"
+" * Initialize the login module. This stores the subject,\n"
+" * callbackHandler and sharedState and options for the login\n"
+" * session. Subclasses should override if they need to process\n"
+" * their own options. A call to super.initialize(...) must be\n"
+" * made in the case of an override.\n"
+" *\n"
+" * <p>\n"
+" * The options are checked for the <em>password-stacking</"
+"em> parameter.\n"
+" * If this is set to \"useFirstPass\", the login identity will be taken "
+"from the\n"
+" * <code>javax.security.auth.login.name</code> value of the "
+"sharedState map,\n"
+" * and the proof of identity from the\n"
+" * <code>javax.security.auth.login.password</code> value of "
+"the sharedState map.\n"
+" *\n"
+" * @param subject the Subject to update after a successful login.\n"
+" * @param callbackHandler the CallbackHandler that will be used to "
+"obtain the\n"
+" * the user identity and credentials.\n"
+" * @param sharedState a Map shared between all configured login module "
+"instances\n"
+" * @param options the parameters passed to the login module.\n"
+" */\n"
+" public void initialize(Subject subject,\n"
+" CallbackHandler callbackHandler,\n"
+" Map sharedState,\n"
+" Map options)\n"
+" {\n"
+" // ...\n"
+" }\n"
+" \n"
+"\n"
+" /**\n"
+" * Looks for javax.security.auth.login.name and\n"
+" * javax.security.auth.login.password values in the sharedState\n"
+" * map if the useFirstPass option was true and returns true if\n"
+" * they exist. If they do not or are null this method returns\n"
+" * false. \n"
+" * Note that subclasses that override the login method\n"
+" * must set the loginOk var to true if the login succeeds in\n"
+" * order for the commit phase to populate the Subject. This\n"
+" * implementation sets loginOk to true if the login() method\n"
+" * returns true, otherwise, it sets loginOk to false.\n"
+" */\n"
+" public boolean login() \n"
+" throws LoginException\n"
+" {\n"
+" // ...\n"
+" }\n"
+" \n"
+" /**\n"
+" * Overridden by subclasses to return the Principal that\n"
+" * corresponds to the user primary identity.\n"
+" */\n"
+" abstract protected Principal getIdentity();\n"
+" \n"
+" /**\n"
+" * Overridden by subclasses to return the Groups that correspond\n"
+" * to the role sets assigned to the user. Subclasses should\n"
+" * create at least a Group named \"Roles\" that contains the roles\n"
+" * assigned to the user. A second common group is\n"
+" * \"CallerPrincipal,\" which provides the application identity of\n"
+" * the user rather than the security domain identity.\n"
+" * \n"
+" * @return Group[] containing the sets of roles\n"
+" */\n"
+" abstract protected Group[] getRoleSets() throws LoginException;\n"
+"}"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1396
#, no-c-format
+#, fuzzy
msgid ""
"You'll need to pay attention to the <literal>loginOk</literal> instance "
"variable. This must be set to true if the login succeeds, false otherwise by "
@@ -4581,6 +5526,9 @@
"together with control flags that do not require that the login module "
"succeed in order for the overall login to succeed."
msgstr ""
+"<literal>loginOk</literal> インスタンス変数ã«ç‰¹ã«æ³¨ç›®ã—ã¦ãã ã•ã„。 ãƒã‚°ã‚¤ãƒ³ãŒæˆåŠŸã™ã‚‹å ´åˆã¯ true ã«è¨å®šã•ã‚Œãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“。 ã“れ以外〠ãƒã‚°ã‚¤ãƒ³ãƒ¡ã‚½ãƒƒãƒ‰ã‚’上書ãã™ã‚‹ã‚µãƒ–クラスã«ã‚ˆã£ã¦ false ã«ãªã‚Šã¾ã™ã€‚ ã“ã®å¤‰æ•°ã®è¨å®šã‚’誤るã¨ã€ コミットメソッドãŒå¿…è¦ãªã¨ãã« subject ã‚’æ›´æ–°ã—ãªã„〠ã¾ãŸã¯æ›´æ–°ã™ã¹ãã§ã¯ãªã„ã¨ãã«æ›´æ–°ã—ã¦ã—ã¾ã†ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ 全体的ãªãƒã‚°ã‚¤ãƒ³ãŒæˆåŠŸã™ã‚‹ãŸã‚ã«ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒæˆåŠŸã™ã‚‹å¿…è¦ãŒãªã„制御フラグã§ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«åŒå£«ãŒãƒã‚§ãƒ¼ãƒ³åŒ–ã™ã‚‹ã“ã¨ãŒã§ãるよã†ãƒã‚°ã‚¤ãƒ³ãƒ•ã‚§ãƒ¼ã‚ºã®çµæžœã®è¿½è·¡ãŒè¿½åŠ ã•ã‚Œã¾ã—ãŸã€‚ "
+"??false otherwise by any subclasses that override the login method "
+"??to allow login modules to be chained together with control flags that do not require that the login module succeed in order for the overall login to succeed"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1399
@@ -4595,7 +5543,7 @@
"and password) to a principal with no roles. The key details of the class are "
"highlighted in the following class fragment. The JavaDoc comments detail the "
"responsibilities of subclasses."
-msgstr ""
+msgstr "<literal>org.jboss.security.auth.spi.UsernamePasswordLoginModule</literal> ã¯ã‚«ã‚¹ã‚¿ãƒ ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«é©ã—㟠2 番目ã®æŠ½è±¡ãƒ™ãƒ¼ã‚¹ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«ãªã‚Šã¾ã™ã€‚ ã“ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã•ã‚‰ã«æ–‡å—列ベースã®ãƒ¦ãƒ¼ã‚¶ãƒ¼åをユーザー IDã¨ã—ã¾ãŸ <literal>char[]</literal> パスワードをèªè¨¼è¨¼æ˜Žæ›¸ã¨ã—ã¦å¼·åˆ¶ã™ã‚‹ã“ã¨ã§ã‚«ã‚¹ã‚¿ãƒ ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®å®Ÿè£…を簡略化ã—ã¾ã™ã€‚ ã¾ãŸã€ ãƒãƒ¼ãƒ«ã®ãªã„ principal ã¸ã® anonymous ユーザー (null ユーザーåã¨ãƒ‘スワードã§ç¤ºã•ã‚Œã‚‹) ã®ãƒžãƒƒãƒ”ングã«ã‚‚対応ã—ã¦ã„ã¾ã™ã€‚ クラスã®é‡è¦éƒ¨åˆ†ã¯æ¬¡ã®ä¾‹ã§å¼·èª¿ã—ã¦ã„ã¾ã™ã€‚ JavaDoc ã¯ã‚µãƒ–クラスãŒæžœãŸã™å½¹å‰²ã«ã¤ã„ã¦è©³ã—ãコメントã—ã¦ã„ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1402
@@ -4693,6 +5641,97 @@
" throws LoginException;\n"
"}"
msgstr ""
+"package org.jboss.security.auth.spi;\n"
+"\n"
+"/**\n"
+" * An abstract subclass of AbstractServerLoginModule that imposes a\n"
+" * an identity == String username, credentials == String password\n"
+" * view on the login process. Subclasses override the\n"
+" * getUsersPassword() and getUsersRoles() methods to return the\n"
+" * expected password and roles for the user.\n"
+" */\n"
+"public abstract class UsernamePasswordLoginModule\n"
+" extends AbstractServerLoginModule\n"
+"{\n"
+" /** The login identity */\n"
+" private Principal identity;\n"
+" /** The proof of login identity */\n"
+" private char[] credential;\n"
+" /** The principal to use when a null username and password are seen */\n"
+" private Principal unauthenticatedIdentity;\n"
+"\n"
+" /**\n"
+" * The message digest algorithm used to hash passwords. If null then\n"
+" * plain passwords will be used. */\n"
+" private String hashAlgorithm = null;\n"
+"\n"
+" /**\n"
+" * The name of the charset/encoding to use when converting the\n"
+" * password String to a byte array. Default is the platform's\n"
+" * default encoding.\n"
+" */\n"
+" private String hashCharset = null;\n"
+"\n"
+" /** The string encoding format to use. Defaults to base64. */\n"
+" private String hashEncoding = null;\n"
+" \n"
+" // ...\n"
+" \n"
+" /** \n"
+" * Override the superclass method to look for an\n"
+" * unauthenticatedIdentity property. This method first invokes\n"
+" * the super version.\n"
+" *\n"
+" * @param options,\n"
+" * @option unauthenticatedIdentity: the name of the principal to\n"
+" * assign and authenticate when a null username and password are\n"
+" * seen.\n"
+" */\n"
+" public void initialize(Subject subject,\n"
+" CallbackHandler callbackHandler,\n"
+" Map sharedState,\n"
+" Map options)\n"
+" {\n"
+" super.initialize(subject, callbackHandler, sharedState,\n"
+" options);\n"
+" // Check for unauthenticatedIdentity option.\n"
+" Object option = options.get(\"unauthenticatedIdentity\");\n"
+" String name = (String) option;\n"
+" if (name != null) {\n"
+" unauthenticatedIdentity = new SimplePrincipal(name);\n"
+" }\n"
+" }\n"
+" \n"
+" // ...\n"
+" \n"
+" /**\n"
+" * A hook that allows subclasses to change the validation of the\n"
+" * input password against the expected password. This version\n"
+" * checks that neither inputPassword or expectedPassword are null\n"
+" * and that inputPassword.equals(expectedPassword) is true;\n"
+" *\n"
+" * @return true if the inputPassword is valid, false otherwise.\n"
+" */\n"
+" protected boolean validatePassword(String inputPassword,\n"
+" String expectedPassword)\n"
+" {\n"
+" if (inputPassword == null || expectedPassword == null) {\n"
+" return false;\n"
+" }\n"
+" return inputPassword.equals(expectedPassword);\n"
+" }\n"
+" \n"
+" /**\n"
+" * Get the expected password for the current username available\n"
+" * via the getUsername() method. This is called from within the\n"
+" * login() method after the CallbackHandler has returned the\n"
+" * username and candidate password.\n"
+" *\n"
+" * @return the valid password String\n"
+" */\n"
+" abstract protected String getUsersPassword()\n"
+" throws LoginException;\n"
+"}"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1403
@@ -4705,7 +5744,7 @@
"string-based semantic is valid, then subclass "
"<literal>UsernamePasswordLoginModule</literal>, otherwise subclass "
"<literal>AbstractServerLoginModule</literal>."
-msgstr ""
+msgstr "<literal>AbstractServerLoginModule</literal> 対 <literal>UsernamePasswordLoginModule</literal>〠ã©ã¡ã‚‰ã®ã‚µãƒ–クラスã«ã™ã‚‹ã‹ã‚’é¸æŠžã™ã‚‹å ´åˆã€ å˜ç´”ã«æ–‡å—列ベースã®ãƒ¦ãƒ¼ã‚¶ãƒ¼åã¨è¨¼æ˜Žæ›¸ãŒèªè¨¼ã‚’è¡Œã†ãŸã‚ã«è¨˜è¿°ã—ã¦ã„ã‚‹ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«ä½¿ç”¨ã§ãã‚‹ã‹ã©ã†ã‹ãŒåŸºæœ¬ã¨ãªã‚Šã¾ã™ã€‚ æ–‡å—列ベースã®ã‚»ãƒžãƒ³ãƒ†ã‚£ãƒƒã‚¯ãŒæœ‰åŠ¹ãªã‚‰ã‚µãƒ–クラス㯠<literal>UsernamePasswordLoginModule</literal> ã«ã—〠ã“れ以外㯠<literal>AbstractServerLoginModule</literal> ã«ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1406
@@ -4719,7 +5758,7 @@
"<literal>UsernamePasswordLoginModule</literal> to ensure that your login "
"module provides the authenticated <literal>Principal</literal> information "
"in the form expected by the JBossSX security manager."
-msgstr ""
+msgstr "カスタムãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’記述ã™ã‚‹éš›ã«è¡Œã†å¿…è¦ãŒã‚るステップをé¸æŠžã™ã‚‹ãƒ™ãƒ¼ã‚¹ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚¯ãƒ©ã‚¹ã«å¿œã˜ã¦æ¬¡ã«ç¤ºã—ã¾ã™ã€‚ ã‚»ã‚ュリティインフラストラクãƒãƒ£ã¨çµ±åˆã•ã›ã‚‹ã‚«ã‚¹ã‚¿ãƒ ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’記述ã™ã‚‹å ´åˆã¯ã€ <literal>AbstractServerLoginModule</literal> ã¾ãŸã¯ <literal>UsernamePasswordLoginModule</literal> ã®ã‚µãƒ–クラス化ã‹ã‚‰é–‹å§‹ã—ã¦ã€ ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒèªè¨¼ã•ã‚ŒãŸ <literal>Principal</literal> æƒ…å ±ã‚’ JBossSX ã‚»ã‚ュリティ管ç†ãŒæœŸå¾…ã™ã‚‹å½¢å¼ã§æä¾›ã™ã‚‹ã‚ˆã†ã«ã—ã¦ãã ã•ã„。"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1409
@@ -4727,7 +5766,7 @@
msgid ""
"When subclassing the <literal>AbstractServerLoginModule</literal>, you need "
"to override the following:"
-msgstr ""
+msgstr "<literal>AbstractServerLoginModule</literal> をサブクラス化ã™ã‚‹å ´åˆã«ã¯æ¬¡ã‚’上書ãã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1414 J2EE_Security_On_JBOSS.xml:1439
@@ -4735,16 +5774,17 @@
msgid ""
"<literal>void initialize(Subject, CallbackHandler, Map, Map)</literal>: if "
"you have custom options to parse."
-msgstr ""
+msgstr "<literal>void initialize(Subject, CallbackHandler, Map, Map)</literal>: 解æžã™ã‚‹ã‚«ã‚¹ã‚¿ãƒ ã®ã‚ªãƒ—ションãŒã‚ã‚‹å ´åˆã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1419
#, no-c-format
+#, fuzzy
msgid ""
"<literal>boolean login()</literal>: to perform the authentication activity. "
"Be sure to set the <literal>loginOk</literal> instance variable to true if "
"login succeeds, false if it fails."
-msgstr ""
+msgstr "<literal>boolean login()</literal>: èªè¨¼ã‚¢ã‚¯ãƒ†ã‚£ãƒ“ティを実行ã™ã‚‹ãŸã‚。 ãƒã‚°ã‚¤ãƒ³ãŒæˆåŠŸã™ã‚‹å ´åˆ <literal>loginOk</literal> インスタンス変数を必㚠true ã«è¨å®šã—ã¦ãã ã•ã„。 失敗ã™ã‚‹å ´åˆã¯ false ã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1424
@@ -4753,7 +5793,7 @@
"<literal>Principal getIdentity()</literal>: to return the "
"<literal>Principal</literal> object for the user authenticated by the "
"<literal>log()</literal> step."
-msgstr ""
+msgstr "<literal>Principal getIdentity()</literal>: <literal>log()</literal> ã®ã‚¹ãƒ†ãƒƒãƒ—ã§èªè¨¼ã•ã‚Œã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ã® <literal>Principal</literal> オブジェクトを返ã™ãŸã‚。"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1429 J2EE_Security_On_JBOSS.xml:1444
@@ -4765,7 +5805,7 @@
"<literal>login()</literal>. A second common <literal>Group</literal> is "
"named <literal>CallerPrincipal</literal> and provides the user's "
"application identity rather than the security domain identity."
-msgstr ""
+msgstr "<literal>Group[] getRoleSets()</literal>: <literal>login()</literal> ã®é–“ã«èªè¨¼ã•ã‚Œã‚‹ <literal>Principal</literal> ã«å‰²ã‚Šå½“ã¦ã‚‰ã‚Œã‚‹ãƒãƒ¼ãƒ«ã‚’å«ã‚€ <literal>Roles</literal> ã¨ã„ã†åå‰ã® <literal>Group</literal> ã‚’å°‘ãªãã¨ã‚‚ 1 ã¤è¿”ã™ãŸã‚。 2 番目ã«å…±é€šã® <literal>Group</literal> 㯠<literal>CallerPrincipal</literal> ã§ã€ ã‚»ã‚ュリティドメイン ID ã§ã¯ãªãユーザーã®ã‚¢ãƒ—リケーション ID ã‚’æä¾›ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1434
@@ -4773,7 +5813,7 @@
msgid ""
"When subclassing the <literal>UsernamePasswordLoginModule</literal>, you "
"need to override the following:"
-msgstr ""
+msgstr "<literal>UsernamePasswordLoginModule</literal> をサブクラス化ã™ã‚‹å ´åˆã¯æ¬¡ã‚’上書ãã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1449
@@ -4784,13 +5824,16 @@
"literal> method. The <literal>getUsersPassword()</literal> method is called "
"from within <literal>login()</literal> after the <literal>callbackhandler</"
"literal> returns the username and candidate password."
-msgstr ""
+msgstr "<literal>String getUsersPassword()</literal>: <literal>getUsername()</literal> メソッドã§ç¾åœ¨ä½¿ç”¨å¯èƒ½ãªãƒ¦ãƒ¼ã‚¶ãƒ¼åã«å¯¾ã™ã‚‹æœŸå¾…パスワードを返ã™ãŸã‚。 <literal>getUsersPassword()</literal> メソッド㯠<literal>callbackhandler</literal> ãŒãƒ¦ãƒ¼ã‚¶ãƒ¼åã¨å€™è£œãƒ‘スワードを返ã—ãŸå¾Œã« <literal>login()</literal> 内ã‹ã‚‰å‘¼ã³å‡ºã•ã‚Œã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1457
#, no-c-format
+#, fuzzy
msgid "A Custom LoginModule Example"
msgstr ""
+"カスタムãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ä¾‹ "
+"?? LoginModule no space"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1458
@@ -4805,7 +5848,7 @@
"current user being authenticated. Similarly, a lookup of the form "
"<literal>roles/<username></literal> returns the requested user's "
"roles."
-msgstr ""
+msgstr "本セクションã§ã¯ã‚«ã‚¹ã‚¿ãƒ ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ä¾‹ã‚’見ã¦ã„ãã¾ã™ã€‚ <literal>UsernamePasswordLoginModule</literal> ã‚’æ‹¡å¼µã—ユーザーã®ãƒ‘スワードã¨ãƒãƒ¼ãƒ«åã‚’ JNDI 検索ã§å–å¾—ã—ã¾ã™ã€‚ <literal>password/<username></literal> å½¢å¼ (<literal><username></literal> ã¯èªè¨¼ã•ã‚Œã¦ã„ã‚‹ç¾åœ¨ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼) ã®åå‰ã‚’使ã£ã¦ã‚³ãƒ³ãƒ†ã‚ストã®æ¤œç´¢ã‚’実行ã™ã‚‹ã¨ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒ‘スワードを返㙠JNDI コンテã‚ストãŒã‚ã‚‹ã¨ã„ã†ã®ãŒç›®çš„ã§ã™ã€‚ å˜ç´”ã« <literal>roles/<username></literal> å½¢å¼ã‚’検索ã™ã‚‹ã¨è¦æ±‚ã—ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒãƒ¼ãƒ«ãŒè¿”ã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1461
@@ -4821,12 +5864,14 @@
"and roles from the JNDI store. The <literal>JndiUserAndPass</literal> does "
"not concern itself with the JAAS <literal>LoginModule</literal> operations."
msgstr ""
+"ã“ã®ä¾‹ã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã¯ãƒ–ックサンプル㮠<literal>src/main/org/jboss/book/security/ex2</literal> ディレクトリã«ã‚ã‚Šã¾ã™ã€‚ <xref linkend=\"A_Custom_LoginModule_Example-_A_JndiUserAndPass_custom_login_module\"/> ã§ã¯ <literal>JndiUserAndPass</literal> カスタムãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã‚’示ã—ã¾ã™ã€‚ ã“れ㯠JBoss "
+"<literal>UsernamePasswordLoginModule</literal> ã‚’æ‹¡å¼µã™ã‚‹ãŸã‚〠<literal>JndiUserAndPass</literal> ãŒè¡Œã†ã®ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒ‘スワードã¨ãƒãƒ¼ãƒ«ã‚’ JNDI ストアã‹ã‚‰å–å¾—ã™ã‚‹ã“ã¨ã ã‘ã§ã™ã€‚ <literal>JndiUserAndPass</literal> ã¯ç›´æŽ¥ JAAS <literal>LoginModule</literal> ã®å‹•ä½œã«ã¯é–¢ä¿‚ã—ã¾ã›ã‚“。"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1464
#, no-c-format
msgid "A JndiUserAndPass custom login module"
-msgstr ""
+msgstr "JndiUserAndPass カスタムãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1465
@@ -4925,6 +5970,98 @@
" } \n"
"}"
msgstr ""
+"package org.jboss.book.security.ex2;\n"
+" \n"
+"import java.security.acl.Group;\n"
+"import java.util.Map;\n"
+"import javax.naming.InitialContext;\n"
+"import javax.naming.NamingException;\n"
+"import javax.security.auth.Subject;\n"
+"import javax.security.auth.callback.CallbackHandler;\n"
+"import javax.security.auth.login.LoginException;\n"
+"\n"
+"import org.jboss.security.SimpleGroup;\n"
+"import org.jboss.security.SimplePrincipal;\n"
+"import org.jboss.security.auth.spi.UsernamePasswordLoginModule;\n"
+"\n"
+"/** \n"
+" * An example custom login module that obtains passwords and roles\n"
+" * for a user from a JNDI lookup.\n"
+" * \n"
+" * @author Scott.Stark at jboss.org\n"
+" * @version $Revision: 1.12 $\n"
+"*/\n"
+"public class JndiUserAndPass \n"
+" extends UsernamePasswordLoginModule\n"
+"{\n"
+" /** The JNDI name to the context that handles the password/username "
+"lookup */\n"
+" private String userPathPrefix;\n"
+" /** The JNDI name to the context that handles the roles/ username lookup "
+"*/\n"
+" private String rolesPathPrefix;\n"
+" \n"
+" /**\n"
+" * Override to obtain the userPathPrefix and rolesPathPrefix options.\n"
+" */\n"
+" public void initialize(Subject subject, CallbackHandler "
+"callbackHandler,\n"
+" Map sharedState, Map options)\n"
+" {\n"
+" super.initialize(subject, callbackHandler, sharedState, options);\n"
+" userPathPrefix = (String) options.get(\"userPathPrefix\");\n"
+" rolesPathPrefix = (String) options.get(\"rolesPathPrefix\");\n"
+" }\n"
+" \n"
+" /**\n"
+" * Get the roles the current user belongs to by querying the\n"
+" * rolesPathPrefix + '/' + super.getUsername() JNDI location.\n"
+" */\n"
+" protected Group[] getRoleSets() throws LoginException\n"
+" {\n"
+" try {\n"
+" InitialContext ctx = new InitialContext();\n"
+" String rolesPath = rolesPathPrefix + '/' + super."
+"getUsername();\n"
+"\n"
+" String[] roles = (String[]) ctx.lookup(rolesPath);\n"
+" Group[] groups = {new SimpleGroup(\"Roles\")};\n"
+" log.info(\"Getting roles for user=\"+super.getUsername());\n"
+" for(int r = 0; r < roles.length; r ++) {\n"
+" SimplePrincipal role = new SimplePrincipal(roles[r]);\n"
+" log.info(\"Found role=\"+roles[r]);\n"
+" groups[0].addMember(role);\n"
+" }\n"
+" return groups;\n"
+" } catch(NamingException e) {\n"
+" log.error(\"Failed to obtain groups for\n"
+" user=\"+super.getUsername(), e);\n"
+" throw new LoginException(e.toString(true));\n"
+" }\n"
+" }\n"
+" \n"
+" /** \n"
+" * Get the password of the current user by querying the\n"
+" * userPathPrefix + '/' + super.getUsername() JNDI location.\n"
+" */\n"
+" protected String getUsersPassword() \n"
+" throws LoginException\n"
+" {\n"
+" try {\n"
+" InitialContext ctx = new InitialContext();\n"
+" String userPath = userPathPrefix + '/' + super."
+"getUsername();\n"
+" log.info(\"Getting password for user=\"+super.getUsername());\n"
+" String passwd = (String) ctx.lookup(userPath);\n"
+" log.info(\"Found password=\"+passwd);\n"
+" return passwd;\n"
+" } catch(NamingException e) {\n"
+" log.error(\"Failed to obtain password for\n"
+" user=\"+super.getUsername(), e);\n"
+" throw new LoginException(e.toString(true));\n"
+" }\n"
+" } \n"
+"}"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1466
@@ -4942,7 +6079,7 @@
"password of <literal>theduke</literal> and an array of roles names equal to "
"<literal>{\"TheDuke\", \"Echo\"}</literal> regardless of what the username "
"is. You can experiment with other implementations as you wish."
-msgstr ""
+msgstr "JNDI ストアã®è©³ç´°ã«ã¤ã„ã¦ã¯ <literal>org.jboss.book.security.ex2.service.JndiStore</literal> MBean ã‚’ã”覧ãã ã•ã„。 ã“ã®ã‚µãƒ¼ãƒ“ス㯠<literal>javax.naming.Context</literal> プãƒã‚シを返㙠<literal>ObjectFactory</literal> ã‚’ JNDI ã«çµåˆã—ã¾ã™ã€‚ プãƒã‚シ㯠<literal>password</literal> ãŠã‚ˆã³ <literal>roles</literal> ã«å¯¾ã™ã‚‹æ¤œç´¢åã®ãƒ—レフィックスをãƒã‚§ãƒƒã‚¯ã™ã‚‹ã“ã¨ã§ãã‚Œã«å¯¾ã—ã¦è¡Œã‚れる検索動作を処ç†ã—ã¾ã™ã€‚ åå‰ãŒ <literal>password</literal> ã§å§‹ã¾ã‚‹å ´åˆã¯ã€ ユーザーã®ãƒ‘スワードãŒè¦æ±‚ã•ã‚Œã¦ã„ã¾ã™ã€‚ åå‰ãŒ <literal>roles</literal> ã§å§‹ã¾ã‚‹å ´åˆã¯ã€ ユーザーã®ãƒãƒ¼ãƒ«ãŒè¦æ±‚ã•ã‚Œã¦ã„ã¾ã™ã€‚ サンプルã®å®Ÿè£…ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼åã«é–¢ä¿‚ãªã常㫠<literal>theduke</literal> ã®ãƒ‘スワード㨠<literal>{\"TheDuke\", \"Echo\"}</literal> ã«ç‰ã—ã„ãƒãƒ¼ãƒ«åã®é…列を返ã—ã¾ã™ã€‚ 状æ³ã«å¿œã˜ã¦åˆ¥ã®å®Ÿè£…ã§ãƒ!
†ã‚¹ãƒˆã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1469
@@ -4951,7 +6088,7 @@
"The example code includes a simple session bean for testing the custom login "
"module. To build, deploy and run the example, execute the following command "
"in the examples directory."
-msgstr ""
+msgstr "サンプルコードã«ã¯ã‚«ã‚¹ã‚¿ãƒ ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’テストã™ã‚‹ç›®çš„ã§ã‚·ãƒ³ãƒ—ルãªã‚»ãƒƒã‚·ãƒ§ãƒ³ bean ãŒå«ã¾ã‚Œã¦ã„ã¾ã™ã€‚ ã“ã®ã‚µãƒ³ãƒ—ルを構築〠導入〠ãã—ã¦ç¨¼åƒã•ã›ã‚‹ã«ã¯ã€ サンプルã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã§æ¬¡ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’実行ã—ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1472
@@ -4966,16 +6103,27 @@
" [java] [INFO,ExClient] Created Echo\n"
" [java] [INFO,ExClient] Echo.echo('Hello') = Hello"
msgstr ""
+"[examples]$ ant -Dchap=security -Dex=2 run-example\n"
+"...\n"
+"run-example2:\n"
+" [echo] Waiting for 5 seconds for deploy...\n"
+" [java] [INFO,ExClient] Login with username=jduke, password=theduke\n"
+" [java] [INFO,ExClient] Looking up EchoBean2\n"
+" [java] [INFO,ExClient] Created Echo\n"
+" [java] [INFO,ExClient] Echo.echo('Hello') = Hello"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1473
#, no-c-format
+#, fuzzy
msgid ""
"The choice of using the <literal>JndiUserAndPass</literal> custom login "
"module for the server side authentication of the user is determined by the "
"login configuration for the example security domain. The EJB JAR "
"<literal>META-INF/jboss.xml</literal> descriptor sets the security domain"
msgstr ""
+"サーãƒãƒ¼å´ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼èªè¨¼ã«å¯¾ã—㦠<literal>JndiUserAndPass</literal> カスタムãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’使用ã™ã‚‹é¸æŠžã¯ã‚µãƒ³ãƒ—ルã®ã‚»ã‚ュリティドメインã®ãƒã‚°ã‚¤ãƒ³è¨å®šã«ã‚ˆã£ã¦ç¢ºå®šã•ã‚Œã¾ã™ã€‚ EJB JAR <literal>META-INF/jboss.xml</literal> 記述åã¯ã“ã®ã‚»ã‚ュリティドメインをè¨å®šã—ã¾ã™ã€‚ "
+"?? end period ??"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1476
@@ -4986,6 +6134,10 @@
" <security-domain>java:/jaas/security-ex2</security-domain>\n"
"</jboss>"
msgstr ""
+"<?xml version=\"1.0\"?>\n"
+"<jboss>\n"
+" <security-domain>java:/jaas/security-ex2</security-domain>\n"
+"</jboss>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1477
@@ -4993,7 +6145,7 @@
msgid ""
"The SAR <literal>META-INF/login-config.xml</literal> descriptor defines the "
"login module configuration."
-msgstr ""
+msgstr "SAR <literal>META-INF/login-config.xml</literal> 記述åã¯ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®è¨å®šã‚’定義ã—ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1480
@@ -5012,12 +6164,24 @@
" </authentication>\n"
"</application-policy>"
msgstr ""
+"<application-policy name = \"security-ex2\">\n"
+" <authentication>\n"
+" <login-module code=\"org.jboss.book.security.ex2.JndiUserAndPass"
+"\"\n"
+" flag=\"required\">\n"
+" <module-option name = \"userPathPrefix\">/security/store/"
+"password</module-option>\n"
+" <module-option name = \"rolesPathPrefix\">/security/store/"
+"roles</module-option>\n"
+" </login-module>\n"
+" </authentication>\n"
+"</application-policy>"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1488
#, no-c-format
msgid "The Secure Remote Password (SRP) Protocol"
-msgstr ""
+msgstr "Secure Remote Password (SRP) プãƒãƒˆã‚³ãƒ«"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1489
@@ -5026,7 +6190,7 @@
"The SRP protocol is an implementation of a public key exchange handshake "
"described in the Internet standards working group request for comments 2945"
"(RFC2945). The RFC2945 abstract states:"
-msgstr ""
+msgstr "インターãƒãƒƒãƒˆæ¨™æº–ワークグループã«ã‚ˆã‚‹ RFC2945 ã«è¨˜è¼‰ã•ã‚Œã¦ã„るよã†ã«ã€ SRP プãƒãƒˆã‚³ãƒ«ã¯ãƒ‘ブリックã‚ー交æ›ãƒãƒ³ãƒ‰ã‚·ã‚§ã‚¤ã‚¯ã®å®Ÿè£…ã«ãªã‚Šã¾ã™ã€‚ RFC2945 ã®è¦ç´„ã¯æ¬¡ã®ã‚ˆã†ã«è¨˜ã•ã‚Œã¦ã„ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1492
@@ -5043,7 +6207,7 @@
"required to store or manage any long-term keys. SRP offers both security and "
"deployment advantages over existing challenge-response techniques, making it "
"an ideal drop-in replacement where secure password authentication is needed."
-msgstr ""
+msgstr "ã“ã®ãƒ‰ã‚ュメントã«ã¯æš—å·åŒ–æ–¹å¼ã‚’採用ã—ã¦ã„る強固ãªãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯èªè¨¼ãƒ¡ã‚«ãƒ‹ã‚ºãƒ ã¨ã—ã¦çŸ¥ã‚‰ã‚Œã‚‹ SRP (Secure Remote Password) プãƒãƒˆã‚³ãƒ«ã«ã¤ã„ã¦è¨˜è¼‰ã•ã‚Œã¦ã„ã¾ã™ã€‚ ã“ã®ãƒ¡ã‚«ãƒ‹ã‚ºãƒ ã¯å¾“æ¥ã®å†ä½¿ç”¨å¯èƒ½ãªãƒ‘スワードã«é–¢é€£ã™ã‚‹å®‰å…¨ä¸Šã®å•é¡Œã‚’排除ã—ãªãŒã‚‰ã€ ユーザーãŒå…¥åŠ›ã™ã‚‹ãƒ‘スワードを使ã£ã¦å®‰å…¨ãªæŽ¥ç¶šäº¤æ¸‰ã«é©ã—ã¦ã„ã¾ã™ã€‚ ã“ã®ã‚·ã‚¹ãƒ†ãƒ ã¯èªè¨¼ã®ãƒ—ãƒã‚»ã‚¹ã§å®‰å…¨ãªã‚ーã®äº¤æ›ã‚‚è¡Œã„セッションä¸ã«ã‚»ã‚ュリティ層を有効ã«ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ (プライãƒã‚·ãƒ¼ã¨æ•´åˆæ€§ã®ä¿è·)。 ä¿¡é ¼ã§ãã‚‹ã‚ーサーãƒãƒ¼ã‚„証明書ã®ã‚¤ãƒ³ãƒ•ãƒ©ã‚¹ãƒˆãƒ©ã‚¯ãƒãƒ£ã‚’å¿…è¦ã¨ã›ãšã€ クライアントã¯é•·ã„ã‚ーをä¿ç®¡ã—ãŸã‚Šç®¡ç†ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã›ã‚“。 æ—¢å˜ã®ãƒãƒ£ãƒ¬ãƒ³ã‚¸ãƒ¬ã‚¹ãƒãƒ³ã‚¹æŠ€è¡“ã«å¯¾ã—㦠SRP ã¯ã‚»ã‚ュリティã¨å°Žå…¥ã®ä¸¡é¢ã«ãŠã‘る利点をæä¾›ã™ã‚‹ãŸã‚!
〠安全ãªãƒ‘スワードèªè¨¼ãŒå¿…è¦ã¨ã•ã‚Œã‚‹å ´é¢ã§ç½®ãæ›ãˆãŒå®¹æ˜“ãªç†æƒ³ã®ãƒ¡ã‚«ãƒ‹ã‚ºãƒ ã¨ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1495
@@ -5054,6 +6218,8 @@
"the SRP algorithm and its history can be found at <ulink url=\"http://www-cs-"
"students.stanford.edu/~tjw/srp/\"></ulink>."
msgstr ""
+"注記: RFC2945 ã®å®Œå…¨ãªè©³ç´°ã¯ <ulink url=\"http://www.rfc-editor.org/rfc.html\"></ulink> ã‚’ã”覧ãã ã•ã„。 SRP アルゴリズムãŠã‚ˆã³ãã®å±¥æ´ã«é–¢ã™ã‚‹è©³ç´°ã¯ <ulink url=\"http://www-cs-"
+"students.stanford.edu/~tjw/srp/\"></ulink> ã‚’ã”覧ãã ã•ã„。"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1498
@@ -5065,7 +6231,7 @@
"the server. This is in contrast to other public key-based algorithms that "
"require client certificates and the corresponding certificate management "
"infrastructure."
-msgstr ""
+msgstr "SRP ã¯ã‚³ãƒ³ã‚»ãƒ—トやセã‚ュリティã®ç‚¹ã«ãŠã„ã¦ã¯ Diffie-Hellman ãŠã‚ˆã³ RSAãªã©ã®ä»–ã®ãƒ‘ブリックã‚ー交æ›ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã¨åŒæ§˜ã§ã™ã€‚ SRP ã¯ã‚µãƒ¼ãƒãƒ¼å´ã«ã‚¯ãƒªã‚¢ãƒ†ã‚ストã®ãƒ‘スワードãŒå˜åœ¨ã™ã‚‹å¿…è¦ã®ãªã„方法ã§ã‚·ãƒ³ãƒ—ルãªæ–‡å—列パスワードをベースã¨ã—ã¦ã„ã¾ã™ã€‚ ã“ã®ç‚¹ãŒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã‚„該当ã™ã‚‹è¨¼æ˜Žæ›¸ã®ç®¡ç†ã‚¤ãƒ³ãƒ•ãƒ©ã‚¹ãƒˆãƒ©ã‚¯ãƒãƒ£ã‚’å¿…è¦ã¨ã™ã‚‹ä»–ã®ãƒ‘ブリックã‚ーベースã®ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã¨å¯¾ç…§çš„ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1501
@@ -5080,7 +6246,7 @@
"traditional shared password based encryption schemes that require the sender "
"and receiver to know the shared password. Public key algorithms eliminate "
"the need to share passwords."
-msgstr ""
+msgstr " Diffie-Hellman ãŠã‚ˆã³ RSA ã®ã‚ˆã†ãªã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã¯ãƒ‘ブリックã‚ー交æ›ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã¨ã—ã¦çŸ¥ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ パブリックã‚ーアルゴリズムã®æ¦‚念ã¨ã¯ã€ 誰ã§ã‚‚見るã“ã¨ãŒã§ãるパブリックã‚ーã¨è‡ªåˆ†ã—ã‹çŸ¥ã‚‰ãªã„プライベートã‚ー㮠2 ã¤ã®ã‚ーをæŒã¤ã¨ã„ã†ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ 誰ã‹ãŒã‚ãªãŸã«æš—å·åŒ–ã•ã‚ŒãŸæƒ…å ±ã‚’é€ä¿¡ã—ãŸã„å ´åˆã€ ã‚ãªãŸã®ãƒ‘ブリックã‚ーを使ã£ã¦ãã®æƒ…å ±ã‚’æš—å·åŒ–ã—ã¾ã™ã€‚ ã“ã®æƒ…å ±ã¯ã‚ãªãŸã®ãƒ—ライベートã‚ーを使ã†ã“ã¨ãŒã§ãã‚‹ã‚ãªãŸã®ã¿è§£èªã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã“れをé€ä¿¡è€…ã¨å—信者ãŒå…±æœ‰ãƒ‘スワードを知ã£ã¦ã„ã‚‹å¿…è¦ãŒã‚る従æ¥ã®å…±æœ‰ãƒ‘スワードベースã®æš—å·ã‚¹ã‚ームã¨æ¯”ã¹ã¦ã¿ã‚‹ã¨ã€ パブリックã‚ーアルゴリズムã¯ãƒ‘スワードを共有ã™ã‚‹ã¨ã„ã†å¿…è¦æ€§ã‚’解消ã—ã¦ã„ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1504
@@ -5088,7 +6254,7 @@
msgid ""
"The JBossSX framework includes an implementation of SRP that consists of the "
"following elements:"
-msgstr ""
+msgstr "JBossSX フレームワークã«ã¯æ¬¡ã®è¦ç´ ã‹ã‚‰æ§‹æˆã•ã‚Œã‚‹ SRP ã®å®Ÿè£…ãŒå«ã¾ã‚Œã¦ã„ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1509
@@ -5096,7 +6262,7 @@
msgid ""
"An implementation of the SRP handshake protocol that is independent of any "
"particular client/server protocol"
-msgstr ""
+msgstr "ã„ãšã‚Œã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆï¼ã‚µãƒ¼ãƒãƒ¼ãƒ—ãƒãƒˆã‚³ãƒ«ã«ã‚‚ä¾å˜ã—ãªã„ SRP ãƒãƒ³ãƒ‰ã‚·ã‚§ã‚¤ã‚¯ãƒ—ãƒãƒˆã‚³ãƒ«ã®å®Ÿè£…"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1514
@@ -5104,7 +6270,7 @@
msgid ""
"An RMI implementation of the handshake protocol as the default client/server "
"SRP implementation"
-msgstr ""
+msgstr "デフォルトã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆï¼ã‚µãƒ¼ãƒãƒ¼ SRP 実装ã¨ã—ã¦ã®ãƒãƒ³ãƒ‰ã‚·ã‚§ã‚¤ã‚¯ãƒ—ãƒãƒˆã‚³ãƒ«ã® RMI 実装"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1519
@@ -5112,7 +6278,7 @@
msgid ""
"A client side JAAS <literal>LoginModule</literal> implementation that uses "
"the RMI implementation for use in authenticating clients in a secure fashion"
-msgstr ""
+msgstr "安全ãªæ–¹æ³•ã«ã‚ˆã‚‹ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆèªè¨¼ã‚’目的ã¨ã™ã‚‹ RMI 実装を使用ã™ã‚‹ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ JAAS <literal>LoginModule</literal> 実装"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1524
@@ -5123,7 +6289,7 @@
"externalizes the configuration of the verification information store. It "
"also establishes an authentication cache that is bound into the JBoss server "
"JNDI namespace."
-msgstr ""
+msgstr "RMI サーãƒãƒ¼å®Ÿè£…を管ç†ã™ã‚‹ JMX MBean〠ã“ã® MBean ã«ã‚ˆã‚Š RMI サーãƒãƒ¼å®Ÿè£…㌠JMX フレームワークã«ãƒ—ラグインå¯èƒ½ã¨ãªã‚Šã€ æ¤œè¨¼æƒ…å ±ã®ã‚¹ãƒˆã‚¢ã®è¨å®šã‚’外部化ã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚ ã¾ãŸã€ JBoss サーãƒãƒ¼ JNDI åå‰ç©ºé–“ã«çµåˆã•ã‚Œã‚‹èªè¨¼ã‚ャッシュを確立ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1529
@@ -5131,7 +6297,7 @@
msgid ""
"A server side JAAS <literal>LoginModule</literal> implementation that uses "
"the authentication cache managed by the SRP JMX MBean."
-msgstr ""
+msgstr "SRP JMX MBean ã«ã‚ˆã£ã¦ç®¡ç†ã•ã‚Œã‚‹èªè¨¼ã‚ャッシュを使用ã™ã‚‹ã‚µãƒ¼ãƒãƒ¼å´ JAAS <literal>LoginModule</literal> 実装"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1534
@@ -5139,13 +6305,13 @@
msgid ""
"gives a diagram of the key components involved in the JBossSX implementation "
"of the SRP client/server framework."
-msgstr ""
+msgstr "SRP クライアントï¼ã‚µãƒ¼ãƒãƒ¼ãƒ•ãƒ¬ãƒ¼ãƒ ワーク㮠JBossSX 実装を必è¦ã¨ã™ã‚‹é‡è¦ãªã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã«é–¢ã™ã‚‹å›³ã‚’示ã—ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1538
#, no-c-format
msgid "The JBossSX components of the SRP client-server framework."
-msgstr ""
+msgstr "SRP クライアントサーãƒãƒ¼ãƒ•ãƒ¬ãƒ¼ãƒ ワーク㮠JBossSX コンãƒãƒ¼ãƒãƒ³ãƒˆ"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1545
@@ -5158,7 +6324,7 @@
"configuration entry that includes the <literal>org.jboss.security.srp.jaas."
"SRPLoginModule</literal>. This module supports the following configuration "
"options:"
-msgstr ""
+msgstr "クライアントå´ã§ã¯ã€ SRP 㯠<literal>org.jboss.security.srp.SRPServerInterface</literal> プãƒã‚シ経由ã§èªè¨¼ã‚µãƒ¼ãƒãƒ¼ã«é€šä¿¡ã™ã‚‹ã‚«ã‚¹ã‚¿ãƒ ã® JAAS <literal>LoginModule</literal> 実装ã¨ã—ã¦è¡¨ç¤ºã•ã‚Œã¾ã™ã€‚ クライアント㯠<literal>org.jboss.security.srp.jaas.SRPLoginModule</literal> ã‚’å«ã‚€ãƒã‚°ã‚¤ãƒ³è¨å®šã‚¨ãƒ³ãƒˆãƒªã‚’作æˆã™ã‚‹ã“ã¨ã§ SRP を使ã£ãŸèªè¨¼ã‚’有効ã«ã—ã¾ã™ã€‚ ã“ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯æ¬¡ã®è¨å®šã‚ªãƒ—ションã«å¯¾å¿œã—ã¦ã„ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1550
@@ -5167,7 +6333,7 @@
"<emphasis role=\"bold\">principalClassName</emphasis>: This option is no "
"longer supported. The principal class is now always <literal>org.jboss."
"security.srp.jaas.SRPPrincipal</literal>."
-msgstr ""
+msgstr "<emphasis role=\"bold\">principalClassName</emphasis>: ã“ã®ã‚ªãƒ—ションã¯ã‚µãƒãƒ¼ãƒˆã•ã‚Œãªããªã‚Šã¾ã—ãŸã€‚ principal クラスã¯å¸¸ã« <literal>org.jboss.security.srp.jaas.SRPPrincipal</literal> ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1555
@@ -5179,7 +6345,7 @@
"and <literal>srpServerRmiUrl</literal> options are specified, the "
"<literal>srpServerJndiName</literal> is tried before "
"<literal>srpServerRmiUrl</literal>."
-msgstr ""
+msgstr "<emphasis role=\"bold\">srpServerJndiName</emphasis>: SRP èªè¨¼ã‚µãƒ¼ãƒãƒ¼ã¨ã®é€šä¿¡ã«ä½¿ç”¨ã™ã‚‹ <literal>SRPServerInterface</literal> オブジェクト㮠JNDI åã§ã™ã€‚ <literal>srpServerJndiName</literal> ãŠã‚ˆã³ <literal>srpServerRmiUrl</literal> ã®ä¸¡ã‚ªãƒ—ションã¨ã‚‚ã«æŒ‡å®šã•ã‚Œã¦ã„ã‚‹å ´åˆã¯ã€ <literal>srpServerRmiUrl</literal> より先㫠<literal>srpServerJndiName</literal> ãŒè©¦è¡Œã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1560
@@ -5188,17 +6354,18 @@
"<emphasis role=\"bold\">srpServerRmiUrl</emphasis>: The RMI protocol URL "
"string for the location of the <literal>SRPServerInterface</literal> proxy "
"to use for communicating with the SRP authentication server."
-msgstr ""
+msgstr "<emphasis role=\"bold\">srpServerRmiUrl</emphasis>: SRP èªè¨¼ã‚µãƒ¼ãƒãƒ¼ã¨ã®é€šä¿¡ã«ä½¿ç”¨ã™ã‚‹ <literal>SRPServerInterface</literal> プãƒã‚ã‚·ã®å ´æ‰€ã® RMI プãƒãƒˆã‚³ãƒ« URL æ–‡å—列ã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1565
#, no-c-format
+#, fuzzy
msgid ""
"<emphasis role=\"bold\">externalRandomA</emphasis>: A true/false flag "
"indicating if the random component of the client public key A should come "
"from the user callback. This can be used to input a strong cryptographic "
"random number coming from a hardware token for example."
-msgstr ""
+msgstr "<emphasis role=\"bold\">externalRandomA</emphasis>: クライアントパブリックã‚ーã®ãƒ©ãƒ³ãƒ€ãƒ コンãƒãƒ¼ãƒãƒ³ãƒˆãŒãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ã‚³ãƒ¼ãƒ«ãƒãƒƒã‚¯ã‹ã‚‰æ¥ã‚‹ã¹ãã‹ã©ã†ã‹ã‚’示㙠true ã¾ãŸã¯ false ã®ãƒ•ãƒ©ã‚°ã«ãªã‚Šã¾ã™ã€‚ ãŸã¨ãˆã°ã€ ã“れを使用ã—ã¦ãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢ãƒˆãƒ¼ã‚¯ãƒ³ã‹ã‚‰ã®å¼·å›ºãªæš—å·å¼ã«ã‚ˆã‚‹ãƒ©ãƒ³ãƒ€ãƒ ãªç•ªå·ã‚’入力ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1570
@@ -5211,6 +6378,8 @@
"private key and the challenge object sent as a <literal>javax.crypto."
"SealedObject</literal>."
msgstr ""
+"<emphasis role=\"bold\">hasAuxChallenge</emphasis>: サーãƒãƒ¼ãŒæ¤œè¨¼ã‚’è¡Œã†ãŸã‚ã®è¿½åŠ ãƒãƒ£ãƒ¬ãƒ³ã‚¸ã¨ã—ã¦ã‚µãƒ¼ãƒãƒ¼ã«é€ä¿¡ã•ã‚Œã‚‹æ–‡å—列を示㙠true ã¾ãŸã¯ false ã®ãƒ•ãƒ©ã‚°ã«ãªã‚Šã¾ã™ã€‚ クライアントセッションãŒæš—å·æ–‡ã«å¯¾å¿œã™ã‚‹å ´åˆã«ã¯ã€ セッションã®ãƒ—ライベートã‚ーãŠã‚ˆã³ <literal>javax.crypto."
+"SealedObject</literal> ã¨ã—ã¦é€ä¿¡ã•ã‚Œã‚‹ãƒãƒ£ãƒ¬ãƒ³ã‚¸ã‚ªãƒ–ジェクトを使ã£ã¦ä¸€æ™‚çš„ãªæš—å·æ–‡ãŒä½œæˆã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1575
@@ -5219,7 +6388,7 @@
"<emphasis role=\"bold\">multipleSessions</emphasis>: a true/false flag "
"indicating if a given client may have multiple SRP login sessions active "
"simultaneously."
-msgstr ""
+msgstr "<emphasis role=\"bold\">multipleSessions</emphasis>: 特定ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒåŒæ™‚ã«è¤‡æ•°ã® SRP ãƒã‚°ã‚¤ãƒ³ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚’アクティブã«ã§ãã‚‹ã‹ã©ã†ã‹ã‚’示㙠true ã¾ãŸã¯ false ã®ãƒ•ãƒ©ã‚°ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1580
@@ -5241,7 +6410,7 @@
"authentication credentials to be used for validation of access to security "
"J2EE components. An example login configuration entry that demonstrates such "
"a setup is:"
-msgstr ""
+msgstr "<literal>SRPLoginModule</literal> ã¯ã€ ã‚»ã‚ュリティ J2EE コンãƒãƒ¼ãƒãƒ³ãƒˆç¾¤ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã®æ¤œè¨¼ã« SRP èªè¨¼è¨¼æ˜Žæ›¸ãŒä½¿ç”¨ã•ã‚Œã‚‹ã‚ˆã†æ¨™æº–ã® <literal>ClientLoginModule</literal> ã¨å…±ã«è¨å®šã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ ã“ã®ã‚ˆã†ãªè¨å®šã‚’示ã™ã‚µãƒ³ãƒ—ルã®ãƒã‚°ã‚¤ãƒ³è¨å®šã‚¨ãƒ³ãƒˆãƒªã‚’次ã«ç¤ºã—ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1586
@@ -5257,6 +6426,15 @@
" ;\n"
"};"
msgstr ""
+"srp {\n"
+" org.jboss.security.srp.jaas.SRPLoginModule required\n"
+" srpServerJndiName=\"SRPServerInterface\"\n"
+" ;\n"
+" \n"
+" org.jboss.security.ClientLoginModule required\n"
+" password-stacking=\"useFirstPass\"\n"
+" ;\n"
+"};"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1587
@@ -5268,7 +6446,7 @@
"exposing an RMI accessible version of the SRPServerInterface as well as "
"updating the SRP authentication session cache. The configurable SRPService "
"MBean attributes include the following:"
-msgstr ""
+msgstr "JBoss サーãƒãƒ¼å´ã«ã¯é›†åˆçš„ã« SRP サーãƒãƒ¼ã‚’構æˆã™ã‚‹ã‚ªãƒ–ジェクト群ã®ç®¡ç†ã‚’行ㆠMBean ㌠2 ã¤ã‚ã‚Šã¾ã™ã€‚ プライマリサービス㯠<literal>org.jboss.security.srp.SRPService</literal> MBean ã§ã€ SRPServerInterface ã® RMI アクセスãŒå¯èƒ½ãªãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’公開ã™ã‚‹ã€ ã¾ãŸ SRP èªè¨¼ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚ャッシュを更新ã™ã‚‹ã“ã¨ãŒãã®å½¹ç›®ã¨ãªã‚Šã¾ã™ã€‚ è¨å®šå¯èƒ½ãª SRPService MBean 属性ã«ã¯æ¬¡ã®ã‚ˆã†ãªã‚‚ã®ãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1592
@@ -5279,7 +6457,7 @@
"<literal>SRPService</literal> binds the serializable dynamic proxy to the "
"<literal>SRPServerInterface</literal>. If not specified it defaults to "
"<literal>srp/SRPServerInterface</literal>."
-msgstr ""
+msgstr "<emphasis role=\"bold\">JndiName</emphasis>: SRPServerInterface プãƒã‚ã‚·ãŒä½¿ç”¨å¯èƒ½ã§ã‚ã‚‹ã¹ãå ´æ‰€ã® JNDI åã§ã™ã€‚ <literal>SRPService</literal> ãŒé€£ç¶šåŒ–å¯èƒ½ãªå‹•çš„プãƒã‚ã‚·ã‚’ <literal>SRPServerInterface</literal> ã«çµåˆã™ã‚‹å ´æ‰€ãŒã“ã“ã«ãªã‚Šã¾ã™ã€‚ 指定ã•ã‚Œã¦ã„ãªã„ã¨ã€ デフォルトã§ã¯ <literal>srp/SRPServerInterface</literal> ã«è¨å®šã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1597
@@ -5289,7 +6467,7 @@
"the <literal>SRPVerifierSource</literal> implementation that should be used "
"by the <literal>SRPService</literal>. If not set it defaults to <literal>srp/"
"DefaultVerifierSource</literal>."
-msgstr ""
+msgstr "<emphasis role=\"bold\">VerifierSourceJndiName</emphasis>: <literal>SRPService</literal> ã«ã‚ˆã£ã¦ä½¿ç”¨ã•ã‚Œã‚‹ã¹ã <literal>SRPVerifierSource</literal> 実装㮠JNDI åã§ã™ã€‚ è¨å®šã•ã‚Œã¦ã„ãªã„ã¨ã€ デフォルトã§ã¯ <literal>srp/DefaultVerifierSource</literal> ã«è¨å®šã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1602
@@ -5300,7 +6478,7 @@
"literal> implementation to be used for caching authentication information is "
"bound. The SRP session cache is made available for use through this binding. "
"If not specified it defaults to <literal>srp/AuthenticationCache</literal>."
-msgstr ""
+msgstr "<emphasis role=\"bold\">AuthenticationCacheJndiName</emphasis>: ã“ã® JNDI åã®é…下ã«èªè¨¼æƒ…å ±ã‚’ã‚ャッシュã™ã‚‹ãŸã‚ã«ä½¿ç”¨ã™ã‚‹èªè¨¼ <literal>org.jboss.util.CachePolicy</literal> 実装ãŒçµåˆã•ã‚Œã¾ã™ã€‚ SRP セッションã‚ャッシュã¯ã“ã®ãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°ã‚’通ã˜ã¦ä½¿ç”¨å¯èƒ½ã«ãªã‚Šã¾ã™ã€‚ 指定ã•ã‚Œã¦ã„ãªã„ã¨ã€ デフォルトã§ã¯ <literal>srp/AuthenticationCache</literal> ã«è¨å®šã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1607
@@ -5309,7 +6487,7 @@
"<emphasis role=\"bold\">ServerPort</emphasis>: RMI port for the "
"<literal>SRPRemoteServerInterface</literal>. If not specified it defaults to "
"10099."
-msgstr ""
+msgstr "<emphasis role=\"bold\">ServerPort</emphasis>: <literal>SRPRemoteServerInterface</literal> ã® RMI ãƒãƒ¼ãƒˆã§ã™ã€‚ 指定ã•ã‚Œã¦ã„ãªã„ã¨ã€ デフォルトã§ã¯ 10099 ã«è¨å®šã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1612
@@ -5320,7 +6498,7 @@
"class name used during the export of the <literal>SRPServerInterface</"
"literal>. If not specified the default <literal>RMIClientSocketFactory</"
"literal> is used."
-msgstr ""
+msgstr "<emphasis role=\"bold\">ClientSocketFactory</emphasis>: <literal>SRPServerInterface</literal> ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆä¸ã«ä½¿ç”¨ã•ã‚Œã‚‹ã‚ªãƒ—ションã®ã‚«ã‚¹ã‚¿ãƒ <literal>java.rmi.server.RMIClientSocketFactory</literal> 実装クラスåã§ã™ã€‚ 指定ã•ã‚Œã¦ã„ãªã„ã¨ã€ デフォルト㮠<literal>RMIClientSocketFactory</literal> ãŒä½¿ç”¨ã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1617
@@ -5332,6 +6510,8 @@
"literal>. If not specified the default <literal>RMIServerSocketFactory</"
"literal> is used."
msgstr ""
+"<emphasis role=\"bold\">ServerSocketFactory</emphasis>: <literal>SRPServerInterface</"
+"literal> ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆä¸ã«ä½¿ç”¨ã•ã‚Œã‚‹ã‚ªãƒ—ションã®ã‚«ã‚¹ã‚¿ãƒ <literal>java.rmi.server.RMIServerSocketFactory</literal> 実装クラスåã§ã™ã€‚ 指定ã•ã‚Œã¦ã„ãªã„ã¨ã€ デフォルトã§ã¯ <literal>RMIServerSocketFactory</literal> ãŒä½¿ç”¨ã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1622
@@ -5340,7 +6520,7 @@
"<emphasis role=\"bold\">AuthenticationCacheTimeout</emphasis>: Specifies the "
"timed cache policy timeout in seconds. If not specified this defaults to "
"1800 seconds(30 minutes)."
-msgstr ""
+msgstr "<emphasis role=\"bold\">AuthenticationCacheTimeout</emphasis>: 時間指定ã•ã‚ŒãŸã‚ャッシュãƒãƒªã‚·ãƒ¼ã®ã‚¿ã‚¤ãƒ アウトを秒å˜ä½ã§æŒ‡å®šã—ã¾ã™ã€‚ 指定ã•ã‚Œã¦ã„ãªã„ã¨ã€ デフォルトã§ã¯ 1800 秒 (30 分) ã«è¨å®šã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1627
@@ -5350,18 +6530,19 @@
"the timed cache policy resolution in seconds. This controls the interval "
"between checks for timeouts. If not specified this defaults to 60 seconds(1 "
"minute)."
-msgstr ""
+msgstr "<emphasis role=\"bold\">AuthenticationCacheResolution</emphasis>: 時間指定ã•ã‚ŒãŸã‚ャッシュãƒãƒªã‚·ãƒ¼ã®ãƒªã‚¾ãƒ«ãƒ¼ã‚·ãƒ§ãƒ³ã‚’秒å˜ä½ã§æŒ‡å®šã—ã¾ã™ã€‚ タイムアウトã®ãƒã‚§ãƒƒã‚¯é–“隔を制御ã—ã¾ã™ã€‚ 指定ã•ã‚Œã¦ã„ãªã„ã¨ã€ デフォルトã§ã¯ 60秒 (1 分) ã«è¨å®šã•ã‚Œã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1632
#, no-c-format
+#, fuzzy
msgid ""
"<emphasis role=\"bold\">RequireAuxChallenge</emphasis>: Set if the client "
"must supply an auxiliary challenge as part of the verify phase. This gives "
"control over whether the <literal>SRPLoginModule</literal> configuration "
"used by the client must have the <literal>useAuxChallenge</literal> option "
"enabled."
-msgstr ""
+msgstr "<emphasis role=\"bold\">RequireAuxChallenge</emphasis>: クライアントãŒæ¤œè¨¼ãƒ•ã‚§ãƒ¼ã‚ºã®ä¸€éƒ¨ã¨ã—ã¦è£œåŠ©ãƒãƒ£ãƒ¬ãƒ³ã‚¸ã‚’供給ã—ãªã‘ã‚Œã°ãªã‚‰ãªã„ã‹ã©ã†ã‹ã‚’è¨å®šã—ã¾ã™ã€‚ "
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1637
@@ -5374,11 +6555,12 @@
"false meaning that the second attempt by a user to authentication will "
"succeed, but the resulting SRP session will not overwrite the previous SRP "
"session state."
-msgstr ""
+msgstr "<emphasis role=\"bold\">OverwriteSessions</emphasis>: æ—¢å˜ã‚»ãƒƒã‚·ãƒ§ãƒ³ã«å¯¾ã™ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼èªè¨¼ãŒæˆåŠŸã—ãŸã‚‰ç¾åœ¨ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚’上書ãã—ãªã‘ã‚Œã°ãªã‚‰ãªã„ã‹ã©ã†ã‹ã‚’示ã™ãƒ•ãƒ©ã‚°ã§ã™ã€‚ クライアントãŒãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒ¢ãƒ¼ãƒ‰ã”ã¨ã«è¤‡æ•°ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚’有効ã«ã—ã¦ã„ãªã‹ã£ãŸå ´åˆã«ã‚µãƒ¼ãƒãƒ¼ SRP セッションã‚ャッシュã®å‹•ä½œã‚’制御ã—ã¾ã™ã€‚ デフォルト㯠false ã§ã€ èªè¨¼ã™ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ã‚ˆã‚‹ 2 回目ã®è©¦è¡Œã¯æˆåŠŸã™ã‚‹ã¨ã„ã†æ„味ã«ãªã‚Šã¾ã™ãŒã€ çµæžœã¨ãªã‚‹ SRP セッションã¯å‰ã® SRP セッションã®çŠ¶æ…‹ã‚’上書ãã—ã¾ã›ã‚“。"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1642
#, no-c-format
+#, fuzzy
msgid ""
"The one input setting is the <literal>VerifierSourceJndiName</literal> "
"attribute. This is the location of the SRP password information store "
@@ -5391,7 +6573,7 @@
"example of the requirements for an <literal>SRPVerifierStore</literal> "
"service. The configurable <literal>SRPVerifierStoreService</literal> MBean "
"attributes include the following:"
-msgstr ""
+msgstr "ã‚‚ã†ã²ã¨ã¤ã®è¨å®šã¯ <literal>VerifierSourceJndiName</literal> 属性ã«ãªã‚Šã¾ã™ã€‚ ã“れ㯠JNDI を通ã˜ã¦åˆ©ç”¨å¯èƒ½ã¨ãªã‚‹ã‚ˆã†æä¾›ã•ã‚Œãªã‘ã‚Œã°ãªã‚‰ãªã„ SRP ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰æƒ…å ±ã‚¹ãƒˆã‚¢ã®å®Ÿè£…ã®å ´æ‰€ã«ãªã‚Šã¾ã™ã€‚ <literal>org.jboss.security.srp SRPVerifierStoreService</literal> ã¯æ°¸ç¶šçš„ãªæ ¼ç´ã¨ã—ã¦é€£ç¶šåŒ–ã•ã‚ŒãŸã‚ªãƒ–ジェクトã®ãƒ•ã‚¡ã‚¤ãƒ«ã‚’使用ã™ã‚‹ <literal>SRPVerifierStore</literal> インターフェースã®å®Ÿè£…ã«çµåˆã™ã‚‹ã‚µãƒ³ãƒ—ル㮠MBean サービスã«ãªã‚Šã¾ã™ã€‚稼åƒç’°å¢ƒç”¨ã¨ã—ã¦ã¯ç¾å®Ÿçš„ã§ã¯ã‚ã‚Šã¾ã›ã‚“ãŒã€ SRP プãƒãƒˆã‚³ãƒ«ã®ãƒ†ã‚¹ãƒˆãŒå¯èƒ½ã§ <literal>SRPVerifierStore</literal> ã«å¿…è¦ã¨ãªã‚‹è¦ä»¶ã®ä¾‹ã‚’確èªã§ãã¾ã™ã€‚ è¨å®šå¯èƒ½ãª <literal>SRPVerifierStoreService</literal> MBean 属性ã¯æ¬¡ã®é€šã‚Šã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1647
@@ -5419,7 +6601,7 @@
"The <literal>SRPVerifierStoreService</literal> MBean also supports "
"<literal>addUser</literal> and <literal>delUser</literal> operations for "
"addition and deletion of users. The signatures are:"
-msgstr ""
+msgstr "<literal>SRPVerifierStoreService</literal> MBean ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®è¿½åŠ ãŠã‚ˆã³å‰Šé™¤ã‚’行ㆠ<literal>addUser</literal> 㨠<literal>delUser</literal> ã®æ¼”ç®—ã«ã‚‚対応ã—ã¦ã„ã¾ã™ã€‚ ç½²åã¯æ¬¡ã®é€šã‚Šã§ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1660
@@ -5428,6 +6610,8 @@
"public void addUser(String username, String password) throws IOException;\n"
"public void delUser(String username) throws IOException;"
msgstr ""
+"public void addUser(String username, String password) throws IOException;\n"
+"public void delUser(String username) throws IOException;"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1661
@@ -5436,12 +6620,14 @@
"An example configuration of these services is presented in <xref linkend="
"\"Providing_Password_Information_for_SRP-The_SRPVerifierStore_interface\"/>."
msgstr ""
+"ã“れらã®ã‚µãƒ¼ãƒ“スã®è¨å®šä¾‹ã¯ <xref linkend="
+"\"Providing_Password_Information_for_SRP-The_SRPVerifierStore_interface\"/> ã«ç¤ºã—ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1665
#, no-c-format
msgid "Providing Password Information for SRP"
-msgstr ""
+msgstr "SRP ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰æƒ…å ±ã‚’æä¾›ã™ã‚‹"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1666
@@ -5454,13 +6640,13 @@
"provides an implementation of the <literal>SRPVerifierStore</literal> "
"interface that integrates with your existing security information stores. "
"The <literal>SRPVerifierStore</literal> interface is shown in."
-msgstr ""
+msgstr "<literal>SRPVerifierStore</literal> インターフェースã®ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆå®Ÿè£…ã¯ã€ 連続化ã—ãŸã‚ªãƒ–ジェクトã®ãƒ•ã‚¡ã‚¤ãƒ«ã¨ã—ã¦ã™ã¹ã¦ã®ãƒ‘スワードã®ãƒãƒƒã‚·ãƒ¥æƒ…å ±ãŒä½¿ç”¨å¯èƒ½ã§ã‚ã‚‹å¿…è¦ãŒã‚ã‚‹ãŸã‚実稼åƒã‚»ã‚ュリティ環境ã«ã¯é©ã•ãªã„å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ æ—¢å˜ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ±ã®ã‚¹ãƒˆã‚¢ã«çµ±åˆã™ã‚‹ <literal>SRPVerifierStore</literal> インターã£ãƒ•ã‚§ãƒ¼ã‚¹ã®å®Ÿè£…ã‚’æä¾›ã™ã‚‹ MBean サービスをæä¾›ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚<literal>SRPVerifierStore</literal> インターフェースを以下ã«ç¤ºã—ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1669
#, no-c-format
msgid "The SRPVerifierStore interface"
-msgstr ""
+msgstr "SRPVerifierStore インターフェース"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1670
@@ -5518,6 +6704,57 @@
" throws SecurityException;\n"
"}"
msgstr ""
+"package org.jboss.security.srp;\n"
+"\n"
+"import java.io.IOException;\n"
+"import java.io.Serializable;\n"
+"import java.security.KeyException;\n"
+"\n"
+"public interface SRPVerifierStore\n"
+"{\n"
+" public static class VerifierInfo implements Serializable\n"
+" {\n"
+" /**\n"
+" * The username the information applies to. Perhaps redundant\n"
+" * but it makes the object self contained.\n"
+" */\n"
+" public String username;\n"
+"\n"
+" /** The SRP password verifier hash */\n"
+" public byte[] verifier;\n"
+" /** The random password salt originally used to verify the password "
+"*/\n"
+" public byte[] salt;\n"
+" /** The SRP algorithm primitive generator */\n"
+" public byte[] g;\n"
+" /** The algorithm safe-prime modulus */\n"
+" public byte[] N;\n"
+" }\n"
+" \n"
+" /**\n"
+" * Get the indicated user's password verifier information.\n"
+" */\n"
+" public VerifierInfo getUserVerifier(String username)\n"
+" throws KeyException, IOException;\n"
+" /** \n"
+" * Set the indicated users' password verifier information. This\n"
+" * is equivalent to changing a user's password and should\n"
+" * generally invalidate any existing SRP sessions and caches.\n"
+" */\n"
+" public void setUserVerifier(String username, VerifierInfo info)\n"
+" throws IOException;\n"
+"\n"
+" /** \n"
+" * Verify an optional auxiliary challenge sent from the client to\n"
+" * the server. The auxChallenge object will have been decrypted\n"
+" * if it was sent encrypted from the client. An example of a\n"
+" * auxiliary challenge would be the validation of a hardware token\n"
+" * (SafeWord, SecureID, iButton) that the server validates to\n"
+" * further strengthen the SRP password exchange.\n"
+" */\n"
+" public void verifyUserChallenge(String username, Object auxChallenge)\n"
+" throws SecurityException;\n"
+"}"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1671
@@ -5529,7 +6766,7 @@
"method is called by the <literal>SRPService</literal> at that start of a "
"user SRP session to obtain the parameters needed by the SRP algorithm. The "
"elements of the <literal>VerifierInfo</literal> objects are:"
-msgstr ""
+msgstr "<literal>SRPVerifierStore</literal> 実装ã®ä¸»ãªæ©Ÿèƒ½ã¯ç‰¹å®šã®ãƒ¦ãƒ¼ã‚¶ãƒ¼åã«å¯¾ã—㦠<literal>SRPVerifierStore.VerifierInfo</literal> ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’æä¾›ã™ã‚‹ã“ã¨ã§ã™ã€‚ SRP アルゴリズムã§å¿…è¦ãªãƒ‘ラメータをユーザー SRP セッションãŒå–得開始ã™ã‚‹æ™‚点㧠<literal>getUserVerifier(String)</literal> メソッド㌠<literal>SRPService</literal> ã«ã‚ˆã£ã¦å‘¼ã³å‡ºã•ã‚Œã¾ã™ã€‚ <literal>VerifierInfo</literal> オブジェクトã®ã‚¨ãƒ¬ãƒ¡ãƒ³ãƒˆã¯æ¬¡ã®é€šã‚Šã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1676
@@ -5537,11 +6774,12 @@
msgid ""
"<emphasis role=\"bold\">username</emphasis>: The user's name or id used "
"to login."
-msgstr ""
+msgstr "<emphasis role=\"bold\">username</emphasis>: ãƒã‚°ã‚¤ãƒ³ã«ä½¿ç”¨ã•ã‚Œã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼åã¾ãŸã¯ ID ã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1681
#, no-c-format
+#, fuzzy
msgid ""
"<emphasis role=\"bold\">verifier</emphasis>: This is the one-way hash of the "
"password or PIN the user enters as proof of their identity. The <literal>org."
@@ -5552,6 +6790,8 @@
"function. The username is converted from a string to a <literal>byte[]</"
"literal> using the UTF-8 encoding."
msgstr ""
+"<emphasis role=\"bold\">verifier</emphasis>: ユーザー㌠ID ã®è¨¼æ˜Žã¨ã—ã¦å…¥åŠ›ã™ã‚‹ãƒ‘スワードã¾ãŸã¯ PIN ã®ä¸€æ–¹å‘ãƒãƒƒã‚·ãƒ¥ã§ã™ã€‚ <literal>org.jboss.security.Util</literal> クラスã«ã¯ãƒ‘スワードãƒãƒƒã‚·ãƒ³ã‚°ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ を実行ã™ã‚‹ <literal>calculateVerifier</literal> メソッドãŒã‚ã‚Šã¾ã™ã€‚ <literal>H(salt | H(username | ':' | password))</literal> 㯠RFC2945 ã§å®šç¾©ã•ã‚Œã¾ã™ã€‚ ã“ã® <literal>H</literal> 㯠SHA ã‚»ã‚ュアãƒãƒƒã‚·ãƒ¥ã®æ©Ÿèƒ½ã«ãªã‚Šã¾ã™ã€‚ ユーザーå㯠UTF-8 エンコーディングを使ã£ã¦æ–‡å—列ã‹ã‚‰ <literal>byte[]</literal> ã«å¤‰æ›ã•ã‚Œã¾ã™ã€‚ "
+"?? as defined by RFC2945, => is defined"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1686
@@ -5562,7 +6802,7 @@
"password database in the event that the database is compromised. It is a "
"value that should be generated from a cryptographically strong random number "
"algorithm when the user's existing clear-text password is hashed."
-msgstr ""
+msgstr "<emphasis role=\"bold\">salt</emphasis>: パスワードデータベースã«ä¸æ£ä¾µå…¥ãŒç™ºç”Ÿã—ãŸå ´åˆã«ã€ ãã®èªè¨¼æ©Ÿèƒ½ã«å¯¾ã—ã¦ã® brute force dictionary attack を困難ã«ã•ã›ã‚‹ãƒ©ãƒ³ãƒ€ãƒ æ•°ã«ãªã‚Šã¾ã™ã€‚ ユーザーã®æ—¢å˜ã®ã‚¯ãƒªã‚¢ãƒ†ã‚ストパスワードãŒãƒãƒƒã‚·ãƒ¥åŒ–ã•ã‚Œã‚‹å ´åˆã€ æš—å·æ–¹å¼ã®å¼·å›ºãªãƒ©ãƒ³ãƒ€ãƒ 数アルゴリズムã§ç”Ÿæˆã•ã‚Œã‚‹ã®ãŒé‡è¦ã¨ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1691
@@ -5573,7 +6813,7 @@
"setting. The <literal>org.jboss.security.srp.SRPConf</literal> utility class "
"provides several settings for g including a good default which can obtained "
"via <literal>SRPConf.getDefaultParams().g()</literal>."
-msgstr ""
+msgstr "<emphasis role=\"bold\">g</emphasis>: SRP アルゴリズム基本ã®ã‚¸ã‚§ãƒãƒ¬ãƒ¼ã‚¿ãƒ¼ã«ãªã‚Šã¾ã™ã€‚ 一般的ã«ã¯ã€ ユーザーã”ã¨ã®è¨å®šã‚ˆã‚Šã‚‚よã知られãŸå›ºå®šãƒ‘ラメータã¨ãªã‚Šã¾ã™ã€‚ <literal>org.jboss.security.srp.SRPConf</literal> ユーティリティクラス㯠<literal>SRPConf.getDefaultParams().g()</literal> ã‹ã‚‰å–å¾—å¯èƒ½ãªä¾¿åˆ©ãªãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã‚’å«ã‚€ g 用ã®è¨å®šã‚’複数æä¾›ã—ã¦ã„ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1696
@@ -5584,7 +6824,7 @@
"setting. The <literal>org.jboss.security.srp.SRPConf</literal> utility class "
"provides several settings for <literal>N</literal> including a good default "
"which can obtained via <literal>SRPConf.getDefaultParams().N()</literal>."
-msgstr ""
+msgstr "<emphasis role=\"bold\">N</emphasis>: SRP アルゴリズムsafe-prime モジュールã«ãªã‚Šã¾ã™ã€‚ 一般的ã«ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ã”ã¨ã®è¨å®šã‚ˆã‚Šã‚‚よã知られãŸå›ºå®šãƒ‘ラメータã«ãªã‚Šã¾ã™ã€‚ <literal>org.jboss.security.srp.SRPConf</literal> ユーティリティクラス㯠<literal>SRPConf.getDefaultParams().N()</literal> ã‹ã‚‰å–å¾—å¯èƒ½ãªä¾¿åˆ©ãªãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã‚’å«ã‚€ <literal>N</literal> 用ã®è¨å®šã‚’複数æä¾›ã—ã¦ã„ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1701
@@ -5597,7 +6837,7 @@
"<literal>setUserVerifier(String, VerifierInfo)</literal> method is not used "
"by the current SRPSerivce and may be implemented as no-op method, or even "
"one that throws an exception stating that the store is read-only."
-msgstr ""
+msgstr "ã“ã®ãŸã‚〠既å˜ã®ãƒ‘スワードストアを統åˆã™ã‚‹ãŸã‚ã®æœ€åˆã®ã‚¹ãƒ†ãƒƒãƒ—ã¨ãªã‚‹ã‚¹ãƒ†ãƒƒãƒ— 1 ã¯ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰æƒ…å ±ã®ãƒãƒƒã‚·ãƒ¥åŒ–ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’作æˆã™ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ パスワードãŒã™ã§ã«ä¸å¯é€†ã®ãƒãƒƒã‚·ãƒ¥åŒ–å½¢å¼ã§æ ¼ç´ã•ã‚Œã¦ã„ã‚‹å ´åˆã¯ã€ ãŸã¨ãˆã°ã‚¢ãƒƒãƒ—ã‚°ãƒ¬ãƒ¼ãƒ‰æ‰‹é †ã®ä¸€éƒ¨ã¨ã—ã¦ãƒ¦ãƒ¼ã‚¶ãƒ¼ã”ã¨ã«è¡Œã†ã—ã‹ã‚ã‚Šã¾ã›ã‚“。 <literal>setUserVerifier(String, VerifierInfo)</literal> メソッドã¯ç¾åœ¨ã® SRPSerivce ã§ã¯ä½¿ç”¨ã•ã‚Œãªã„ãŸã‚〠オプション無ã—ã®ãƒ¡ã‚½ãƒƒãƒ‰ã¨ã—ã¦ã‚ã‚‹ã„ã¯ã‚¹ãƒˆã‚¢ã¯èªã¿å–り専用ã§ã‚ã‚‹ã“ã¨ã‚’示ã™ä¾‹å¤–を投ã’るメソッドã¨ã—ã¦å®Ÿè£…ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1704
@@ -5611,7 +6851,7 @@
"configuration specifies the <literal>hasAuxChallenge</literal> option. This "
"can be used to integrate existing hardware token based schemes like SafeWord "
"or Radius into the SRP algorithm."
-msgstr ""
+msgstr "ステップ 2 ã¯ã€ ステップ 1 ã§ä½œæˆã—ãŸã‚¹ãƒˆã‚¢ã‹ã‚‰ <literal>VerifierInfo</literal> ã‚’å–å¾—ã™ã‚‹æ–¹æ³•ã‚’èªè˜ã§ãるカスタム㮠<literal>SRPVerifierStore</literal> インターフェース実装を作æˆã™ã‚‹ã“ã¨ã§ã™ã€‚ インタフェース㮠<literal>verifyUserChallenge(String, Object)</literal> メソッドã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆ <literal>SRPLoginModule</literal> è¨å®šãŒ <literal>hasAuxChallenge</literal> オプションを指定ã™ã‚‹å ´åˆã«ã®ã¿å‘¼ã³å‡ºã•ã‚Œã¾ã™ã€‚ ã“れを使用ã—㦠SafeWord ã‚„ Radius ã®ã‚ˆã†ãªã‚¹ã‚ームをベースã¨ã™ã‚‹æ—¢å˜ã®ãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢ãƒˆãƒ¼ã‚¯ãƒ³ã‚’ SRP アルゴリズムã«çµ±åˆã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1707
@@ -5624,17 +6864,18 @@
"the SRP example presented later in this chapter provides a Java properties "
"file based <literal>SRPVerifierStore</literal> implementation. Between the "
"two examples you should have enough to integrate your security store."
-msgstr ""
+msgstr "ステップ 3 ã¯ã€ ステップ 2 ã® <literal>SRPVerifierStore</literal> インターフェース実装を JNDI 経由ã§ä½¿ç”¨ã§ãるよã†ã«ã—ã¦ã‹ã‚‰å¿…è¦ãªè¨å®šå¯èƒ½ãƒ‘ラメータをã™ã¹ã¦å…¬è¡¨ã™ã‚‹ MBean を作æˆã™ã‚‹ã“ã¨ã§ã™ã€‚ デフォルト㮠<literal>org.jboss.security.srp.SRPVerifierStoreService</literal> 例ã«åŠ ãˆã¦ã€ æœ¬ç« ã®å¾ŒåŠã«è¨˜è¼‰ã™ã‚‹ SRP ã®ä¾‹ã§ã¯ Java プãƒãƒ‘ティファイルベース㮠<literal>SRPVerifierStore</literal> 実装を示ã—ã¾ã™ã€‚ ã‚»ã‚ュリティストアã®çµ±åˆã‚’è¡Œã†ã«ã¯ã“ã® 2 ã¤ã®ä¾‹ã§å分ã§ã—ょã†ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1714
#, no-c-format
msgid "Inside of the SRP algorithm"
-msgstr ""
+msgstr "SRP アルゴリズムã®å†…å´"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1715
#, no-c-format
+#, fuzzy
msgid ""
"The appeal of the SRP algorithm is that is allows for mutual authentication "
"of client and server using simple text passwords without a secure "
@@ -5643,6 +6884,8 @@
"references mentioned in a note earlier. There are six steps that are "
"performed to complete authentication:"
msgstr ""
+"SRP アルゴリズムã®è¦è«‹ã¯ã€ 安全ãªé€šä¿¡ãƒãƒ£ãƒ³ãƒãƒ«ãªã—ã§ã‚·ãƒ³ãƒ—ルãªãƒ†ã‚ストパスワードを使ã£ãŸã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ã‚µãƒ¼ãƒãƒ¼ã®ç›¸äº’èªè¨¼ã‚’許å¯ã™ã‚‹ã“ã¨ã§ã™ã€‚ ã„ã£ãŸã„ã©ã®ã‚ˆã†ã«ã—ã¦ã“れを行ã†ã®ã‹ä¸æ€è°ã«æ€ã‚れるã“ã¨ã§ã—ょã†ã€‚ アルゴリズムã®èƒŒæ™¯ã«ã‚る詳細ãŠã‚ˆã³ç†è«–ã«ã¤ã„ã¦ã¯å‰è¿°ã®æ³¨è¨˜ã«è¨˜è¼‰ã•ã‚Œã¦ã„ã‚‹ SRP å‚照をã”覧ãã ã•ã„。 èªè¨¼ã‚’完了ã™ã‚‹ã«ã¯ 6 ã¤ã®ã‚¹ãƒ†ãƒƒãƒ—を実行ã—ã¾ã™ã€‚ "
+"?? refer to the SRP refereces,, where??"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1720
@@ -5651,7 +6894,7 @@
"The client side <literal>SRPLoginModule</literal> retrieves the "
"SRPServerInterface instance for the remote authentication server from the "
"naming service."
-msgstr ""
+msgstr "ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ <literal>SRPLoginModule</literal> ã¯ãƒãƒ¼ãƒŸãƒ³ã‚°ã‚µãƒ¼ãƒ“スã‹ã‚‰ãƒªãƒ¢ãƒ¼ãƒˆèªè¨¼ã‚µãƒ¼ãƒãƒ¼ã® SRPServerInterface インスタンスを検索ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1725
@@ -5666,7 +6909,7 @@
"retrieve this information as part of the exchange protocol. The "
"<literal>getSRPParameters(username)</literal> call retrieves the SRP "
"parameters for the given username."
-msgstr ""
+msgstr "ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ <literal>SRPLoginModule</literal> ã¯æ¬¡ã«ãƒã‚°ã‚¤ãƒ³ã‚’試行ã—ã¦ã„るユーザーåã«é–¢é€£ä»˜ã‘られる SRP パラメータをè¦æ±‚ã—ã¾ã™ã€‚ ユーザーパスワード㌠SRP アルゴリズムã«ã‚ˆã£ã¦ä½¿ç”¨ã•ã‚Œã‚‹æ¤œè¨¼æ©Ÿèƒ½ã®å½¢å¼ã«æœ€åˆã«å¤‰æ›ã•ã‚Œã‚‹ã¨ãã«é¸æŠžã•ã‚Œãªã‘ã‚Œã°ãªã‚‰ãªã„ SRP アルゴリズムã«å¿…è¦ã¨ãªã‚‹ãƒ‘ラメータãŒã„ãã¤ã‹ã‚ã‚Šã¾ã™ã€‚ パラメータをãƒãƒ¼ãƒ‰ã‚³ãƒ¼ãƒ‰åŒ–ã™ã‚‹ã®ã§ã¯ãªã (å±é™ºæ€§ã‚’最å°é™ã«æŠ‘ãˆã¦å®Ÿè¡ŒãŒå¯èƒ½)〠JBossSX 実装ã«ã‚ˆã‚Šãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒã“ã®æƒ…å ±ã‚’äº¤æ›ãƒ—ãƒãƒˆã‚³ãƒ«ã®ä¸€éƒ¨ã¨ã—ã¦æ¤œå‡ºã™ã‚‹ã“ã¨ãŒã§ãるよã†ã«ãªã‚Šã¾ã™ã€‚ <literal>getSRPParameters(username)</literal> コールã¯ç‰¹å®šã®ãƒ¦ãƒ¼ã‚¶ãƒ¼åã® SRP パラメータを検索ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1730
@@ -5681,11 +6924,12 @@
"and passes in the username and client generated random number <literal>A</"
"literal>. The server returns its own random number <literal>B</literal>. "
"This step corresponds to the exchange of public keys."
-msgstr ""
+msgstr "ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ <literal>SRPLoginModule</literal> ã¯ã‚¹ãƒ†ãƒƒãƒ— 2 ã§å–å¾—ã—ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼å〠クリアテã‚ストã®ãƒ‘スワード〠SRP パラメータを使ã£ã¦ <literal>SRPClientSession</literal> オブジェクトを作æˆã™ã‚‹ã“ã¨ã§ SRP セッションを開始ã—ã¾ã™ã€‚ 次ã«ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯ãƒ—ライベート SRP セッションã‚ーã®ãƒ“ルドã«ä½¿ç”¨ã•ã‚Œã‚‹ãƒ©ãƒ³ãƒ€ãƒ æ•° A を作æˆã—ã¾ã™ã€‚ ãã—ã¦ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¯ <literal>SRPServerInterface.init</literal> メソッドを呼ã³å‡ºã—ã¦ã‚µãƒ¼ãƒãƒ¼å´ SRP セッションをåˆæœŸåŒ–ã—〠ユーザーåã¨ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã§ç”Ÿæˆã•ã‚ŒãŸãƒ©ãƒ³ãƒ€ãƒ æ•° <literal>A</literal> を渡ã—ã¾ã™ã€‚ サーãƒãƒ¼ã¯ã‚µãƒ¼ãƒãƒ¼ç‹¬è‡ªã®ãƒ©ãƒ³ãƒ€ãƒ æ•° <literal>B</literal> ã‚’è¿”ã—ã¦ãã¾ã™ã€‚ ã“ã®ã‚¹ãƒ†ãƒƒãƒ—ã¯ãƒ‘ブリックã‚ーã®äº¤æ›ã«ç›¸å½“ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1735
#, no-c-format
+#, fuzzy
msgid ""
"The client side <literal>SRPLoginModule</literal> obtains the private SRP "
"session key that has been generated as a result of the previous messages "
@@ -5702,11 +6946,12 @@
"response is saved as <literal>M2</literal>. This step corresponds to an "
"exchange of challenges. At this point the server has verified that the user "
"is who they say they are."
-msgstr ""
+msgstr "ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ <literal>SRPLoginModule</literal> ã¯å‰ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸äº¤æ›ã®çµæžœã¨ã—ã¦ç”Ÿæˆã•ã‚Œã¦ã„るプライベート SRP セッションã‚ーをå–å¾—ã—ã¾ã™ã€‚ ã“ã‚Œã¯ãƒ—ライベート証明書ã¨ã—ã¦ãƒã‚°ã‚¤ãƒ³ <literal>Subject</literal> ã«ä¿å˜ã•ã‚Œã¾ã™ã€‚ ステップ 4 ã§ã®ã‚µãƒ¼ãƒãƒ¼ã®ãƒãƒ£ãƒ¬ãƒ³ã‚¸ãƒ¬ã‚¹ãƒãƒ³ã‚¹ <literal>M2</literal> ㌠<literal>SRPClientSession.verify</literal> メソッドを呼ã³å‡ºã™ã“ã¨ã«ã‚ˆã‚Šæ¤œè¨¼ã•ã‚Œã¾ã™ã€‚ ã“ã‚ŒãŒæˆåŠŸã™ã‚‹ã¨ã€ クライアントã‹ã‚‰ã‚µãƒ¼ãƒãƒ¼ãŠã‚ˆã³ã‚µãƒ¼ãƒãƒ¼ã‹ã‚‰ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¸ã®ç›¸äº’èªè¨¼ãŒå®Œäº†ã•ã‚Œã¾ã™ã€‚ ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ <literal>SRPLoginModule</literal> ã¯æ¬¡ã«å¼•æ•°ã¨ã—ã¦ã‚µãƒ¼ãƒãƒ¼ãƒ©ãƒ³ãƒ€ãƒ æ•° <literal>B</literal> を渡ã—ã¦ã„ã‚‹ <literal>SRPClientSession.response</literal> メソッドを呼ã³å‡ºã™ã“ã¨ã§ã‚µãƒ¼ãƒãƒ¼ã«å¯¾ã—ã¦ãƒãƒ£ãƒ¬ãƒ³ã‚¸ <literal>M1</literal> を作æˆã—ã¾ã™ã€‚ ã“ã®ãƒãƒ£ãƒ!
¬ãƒ³ã‚¸ã¯ <literal>SRPServerInterface.verify</literal> メソッド経由ã§ã‚µãƒ¼ãƒãƒ¼ã«é€ä¿¡ã•ã‚Œã€ サーãƒãƒ¼ã®ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã¯ <literal>M2</literal> ã¨ã—ã¦ä¿å˜ã•ã‚Œã¾ã™ã€‚ ã“ã®ã‚¹ãƒ†ãƒƒãƒ—ã¯ãƒãƒ£ãƒ¬ãƒ³ã‚¸ã®äº¤æ›ã«ç›¸å½“ã—ã¾ã™ã€‚ ã“ã®æ™‚点ã§ã€ サーãƒãƒ¼ã¯?? who they say they are"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1740
#, no-c-format
+#, fuzzy
msgid ""
"The client side <literal>SRPLoginModule</literal> saves the login username "
"and <literal>M1</literal> challenge into the <literal>LoginModule</literal> "
@@ -5718,6 +6963,10 @@
"session. Its interception via a third partly cannot be used to obtain the "
"user's password."
msgstr ""
+"ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ <literal>SRPLoginModule</literal> ã¯ãƒã‚°ã‚¤ãƒ³ãƒ¦ãƒ¼ã‚¶ãƒ¼å㨠<literal>M1</literal> ãƒãƒ£ãƒ¬ãƒ³ã‚¸ã‚’ <literal>LoginModule</literal> sharedState?? 共有状態マップã«ä¿å˜ã—ã¾ã™ã€‚ ã“れ㌠Principal ã®åå‰ã¨è¨¼æ˜Žæ›¸ã¨ã—ã¦æ¨™æº– JBoss <literal>ClientLoginModule</literal> ã§ä½¿ç”¨ã•ã‚Œã¾ã™ã€‚ <literal>M1</"
+"literal> ãƒãƒ£ãƒ¬ãƒ³ã‚¸ã¯ J2EE コンãƒãƒ¼ãƒãƒ³ãƒˆä¸Šã®ã™ã¹ã¦ã®ãƒ¡ã‚½ãƒƒãƒ‰å‘¼ã³å‡ºã—㧠ID ã®è¨¼æ˜Žã¨ã—ã¦ãƒ‘スワードã®ä»£ã‚ã‚Šã«ä½¿ç”¨ã•ã‚Œã¾ã™ã€‚ <literal>M1</literal> ãƒãƒ£ãƒ¬ãƒ³ã‚¸ã¯ SRP セッションã«é–¢é€£ä»˜ã‘られãŸæš—å·æ–¹å¼ã®å¼·å›ºãªãƒãƒƒã‚·ãƒ¥ã«ãªã‚Šã¾ã™ã€‚ 第 3 者ã«ã‚ˆã‚‹ã‚¤ãƒ³ã‚¿ãƒ¼ã‚»ãƒ—ションã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒ‘スワードå–å¾—ã«ã¯ä½¿ç”¨ã§ãã¾ã›ã‚“。 "
+"?? interception = eavesdropping or else? "
+"Eavesdropping by a third party can not obtain the user's password?"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1745
@@ -5726,7 +6975,7 @@
"At the end of this authentication protocol, the SRPServerSession has been "
"placed into the SRPService authentication cache for subsequent use by the "
"<literal>SRPCacheLoginModule</literal>."
-msgstr ""
+msgstr "ã“ã®èªè¨¼ãƒ—ãƒãƒˆã‚³ãƒ«ã®æœ€å¾Œã§ã€ SRPServerSession 㯠<literal>SRPCacheLoginModule</literal> ã«ã‚ˆã£ã¦ç¶šã„ã¦ä½¿ç”¨ã§ãるよㆠSRPService èªè¨¼ã‚ャッシュã«é…ç½®ã•ã‚Œã¦ã„ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1750
@@ -5735,7 +6984,7 @@
"Although SRP has many interesting properties, it is still an evolving "
"component in the JBossSX framework and has some limitations of which you "
"should be aware. Issues of note include the following:"
-msgstr ""
+msgstr "SRP ã«ã¯å¤šãã®ä¾¿åˆ©ãªãƒ—ãƒãƒ‘ティãŒã‚ã‚Šã¾ã™ãŒã€ ã„ã¾ã JBossSX フレームーワーク内ã®é€²åŒ–ä¸ã®ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã§ã‚り〠èªè˜ã—ã¦ãŠãã¹ã制約ãŒã„ãã¤ã‹ã‚ã‚Šã¾ã™ã€‚ 注æ„ã™ã¹ã点ã«ã¯æ¬¡ã®ã‚ˆã†ãªã‚‚ã®ãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1755
@@ -5747,7 +6996,7 @@
"challenge to make requests as the associated username. Custom interceptors "
"that encrypt the challenge using the SRP session key can be used to prevent "
"this issue."
-msgstr ""
+msgstr "JBoss ãŒãƒ¡ã‚½ãƒƒãƒ‰è»¢é€ãƒ—ãƒãƒˆã‚³ãƒ«ã‚’èªè¨¼ãŒå®Ÿè¡Œã•ã‚Œã‚‹ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã‚³ãƒ³ãƒ†ãƒŠã‹ã‚‰åˆ†é›¢ã™ã‚‹æ–¹æ³•ã‚’利用ã—ã¦ã€ èªè¨¼ã•ã‚Œã¦ã„ãªã„ユーザー㌠SRP <literal>M1</literal> ã‚’ã®ãžã見ã¦åŠ¹æžœçš„ã«ãã®ãƒãƒ£ãƒ¬ãƒ³ã‚¸ã‚’使ã„関連付ã‘られãŸãƒ¦ãƒ¼ã‚¶ãƒ¼åã¨ã—ã¦è¦æ±‚ã‚’è¡Œã†ã“ã¨ãŒå¯èƒ½ã§ã™ã€‚ SRP セッションã‚ーを使ã£ã¦ãƒãƒ£ãƒ¬ãƒ³ã‚¸ã‚’æš—å·åŒ–ã™ã‚‹ã‚«ã‚¹ã‚¿ãƒ ã®ã‚¤ãƒ³ã‚¿ãƒ¼ã‚»ãƒ—タを使用ã™ã‚‹ã¨ã“ã®å•é¡Œã‚’防æ¢ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1760
@@ -5759,7 +7008,7 @@
"renegotiating the SRP authentication credentials. You must either set the "
"authentication cache timeout very long (up to 2,147,483,647 seconds, or "
"approximately 68 years), or handle re-authentication in your code on failure."
-msgstr ""
+msgstr "SRPService ã¯è¨å®šå¯èƒ½ãªæœŸé–“ã‚’éŽãŽã‚‹ã¨ã‚¿ã‚¤ãƒ アウトã™ã‚‹ SRP セッションã®ã‚ャッシュを管ç†ã—ã¦ã„ã¾ã™ã€‚ ã‚ャッシュãŒã‚¿ã‚¤ãƒ アウトã™ã‚‹ã¨ã€ SRP èªè¨¼è¨¼æ˜Žæ›¸ã‚’é€éŽçš„ã«å†äº¤æ¸‰ã™ã‚‹ãƒ¡ã‚«ãƒ‹ã‚ºãƒ ãŒç¾åœ¨ãªã„ãŸã‚〠続ã J2EE コンãƒãƒ¼ãƒãƒ³ãƒˆã‚¢ã‚¯ã‚»ã‚¹ã¯ã™ã¹ã¦å¤±æ•—ã—ã¾ã™ã€‚ èªè¨¼ã‚ャッシュã®ã‚¿ã‚¤ãƒ アウトをã‹ãªã‚Šé•·ã‚ã«è¨å®šã™ã‚‹ã‹ (最大 2,147,483,647 秒〠ã¾ãŸã¯ç´„ 68 å¹´é–“)〠失敗ã—ãŸã‚‰ç‹¬è‡ªã®ã‚³ãƒ¼ãƒ‰ã§å†èªè¨¼ã‚’処ç†ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1765
@@ -5771,7 +7020,7 @@
"effectively a stateful one. JBoss supports for multiple SRP sessions per "
"user, but you cannot encrypt data with one session key and then decrypt it "
"with another."
-msgstr ""
+msgstr "デフォルトã§ã¯ã€ 特定ユーザーåã® SRP セッション㯠1 ã¤ã®ã¿ã§ã™ã€‚ 交渉ã•ã‚Œã‚‹ SRP セッションã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ã‚µãƒ¼ãƒãƒ¼é–“ã§ã®æš—å·åŒ–・復å·åŒ–ã«ä½¿ç”¨ã•ã‚Œã‚‹ãƒ—ライベートセッションã‚ーを生æˆã—〠ã“ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã¯åŠ¹çŽ‡çš„ã«ã‚¹ãƒ†ãƒ¼ãƒˆãƒ•ãƒ«ã¨ãªã‚Šã¾ã™ã€‚ JBoss 㯠1 ユーザーã”ã¨ã«è¤‡æ•°ã® SRP セッションをサãƒãƒ¼ãƒˆã—ã¦ã„ã¾ã™ãŒã€ ã‚るセッションã‚ーã§æš—å·åŒ–ã—ãŸãƒ‡ãƒ¼ã‚¿ã‚’別ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚ーã§å¾©å·åŒ–ã™ã‚‹ã“ã¨ã¯ã§ãã¾ã›ã‚“。"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1770
@@ -5793,6 +7042,9 @@
"\"/> illustrates the operation of the SRPCacheLoginModule.login method "
"implementation."
msgstr ""
+"エンドツーエンド㮠SRP èªè¨¼ã‚’ J2EE コンãƒãƒ¼ãƒãƒ³ãƒˆã‚³ãƒ¼ãƒ«ã«ä½¿ç”¨ã™ã‚‹ã«ã¯ã€ コンãƒãƒ¼ãƒãƒ³ãƒˆãŒ <literal>org.jboss.security.srp.jaas.SRPCacheLoginModule</literal> を使用ã™ã‚‹ãŸã‚安全化ã•ã‚Œã¦ã„ã‚‹ã‚»ã‚ュリティドメインをè¨å®šã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ <literal>SRPCacheLoginModule</literal> ã«ã¯ <literal>cacheJndiName</literal> ã¨ã„ã†åå‰ã®å˜ä¸€è¨å®šã‚ªãƒ—ションãŒã‚り〠SRP èªè¨¼ <literal>CachePolicy</literal> インスタンス㮠JNDI ã®å ´æ‰€ã‚’è¨å®šã—ã¾ã™ã€‚ ã“れ㯠<literal>SRPService</literal> MBean ã® <literal>AuthenticationCacheJndiName</literal> 属性値ã«å¯¾å¿œã—ã¦ã„ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“。 <literal>SRPCacheLoginModule</literal> ã¯èªè¨¼ã‚ャッシュã«ã‚ã‚‹ <literal>SRPServerSession</literal> オブジェクトã‹ã‚‰ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãƒãƒ£ãƒ¬ãƒ³ã‚¸ã‚’å–å¾—ã—ã¦ã“れをユーザー証明書ã¨ã—ã¦æ¸¡ã•ã‚Œã‚‹ãƒãƒ£ãƒ¬ãƒ³ã‚¸ã¨æ¯”較ã™ã‚‹ã“ã¨ã§ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®!
証明書をèªè¨¼ã—ã¾ã™ã€‚ <xref linkend=\"Inside_of_the_SRP_algorithm-"
+"A_sequence_diagram_illustrating_the_interaction_of_the_SRPCacheLoginModule_with_the_SRP_session_cache."
+"\"/> ã§ã¯ SRPCacheLoginModule.login メソッド実装ã®å‹•ä½œã‚’説明ã—ã¦ã„ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1774
@@ -5800,13 +7052,13 @@
msgid ""
"A sequence diagram illustrating the interaction of the SRPCacheLoginModule "
"with the SRP session cache."
-msgstr ""
+msgstr "SRPCacheLoginModule ㌠SRP セッションã‚ャッシュã¨äº¤ä¿¡ã™ã‚‹é †åºã‚’示ã™å›³"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1782
#, no-c-format
msgid "An SRP example"
-msgstr ""
+msgstr "SRP ã®ä¾‹"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1783
@@ -5827,7 +7079,7 @@
"service is <literal>org.jboss.book.security.ex3.service."
"PropertiesVerifierStore</literal>. The following shows the contents of the "
"JAR that contains the example EJB and SRP services."
-msgstr ""
+msgstr "ã“ã“ã¾ã§ã¯ SRP ã«é–¢ã—ã¦ã¯ã‚ã¾ã‚Šè§¦ã‚Œã¦ã„ãªã‹ã£ãŸã®ã§ã€ ã“ã“ã‹ã‚‰ã¯ä¾‹ã‚’ã‚ã’ãªãŒã‚‰å®Ÿè·µçš„㪠SRP ã«ã¤ã„ã¦èª¬æ˜Žã—ã¦ã„ãã¾ã™ã€‚ ã“ã®ä¾‹ã¯ SRP 経由ã§ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´èªè¨¼ã‚’説明ã—ã¦ã„る他〠ã“ã‚Œã«ç¶šã„ã¦ãƒ¦ãƒ¼ã‚¶ãƒ¼è¨¼æ˜Žæ›¸ã¨ã—㦠SRP セッションãƒãƒ£ãƒ¬ãƒ³ã‚¸ã‚’使ã£ãŸã‚·ãƒ³ãƒ—ル㪠EJB ã¸ã®å®‰å…¨åŒ–ã•ã‚ŒãŸã‚¢ã‚¯ã‚»ã‚¹ã‚‚説明ã—ã¦ã„ã¾ã™ã€‚ ã“ã®ãƒ†ã‚¹ãƒˆã‚³ãƒ¼ãƒ‰ã¯ã‚µãƒ¼ãƒãƒ¼å´ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«è¨å®šãŠã‚ˆã³ SRP サービス群ã®æ§‹æˆç”¨ SAR ã‚’å«ã‚€ EJB JAR ã‚’å°Žå…¥ã—ã¦ã„ã¾ã™ã€‚ å‰è¿°ã®ä¾‹ã§ã¯ã€<literal>SecurityConfig</literal> MBean を使ã£ã¦å‹•çš„ã«ã‚µãƒ¼ãƒãƒ¼å´ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«è¨å®šã‚’インストールã—ã¾ã™ã€‚ ã“ã®ä¾‹ã§ã¯ã€ <literal>SRPVerifierStore</literal> インターフェースã®ã‚«ã‚¹ã‚¿ãƒ 実装も使用ã—ã¦ã„ã¾ã™ã€‚ ã“れ㯠<literal>SRPVerifierStoreService</literal> ã«ã‚ˆã£ã¦ä½¿ç”¨ã•!
れる連続化オブジェクトストアã¨ã—ã¦ã§ã¯ãªã〠Java プãƒãƒ‘ティファイルã‹ã‚‰ã‚·ãƒ¼ãƒ‰åŒ–ã•ã‚Œã‚‹ã‚¤ãƒ³ãƒ¡ãƒ¢ãƒªã®ã‚¹ãƒˆã‚¢ã‚’使用ã—ã¾ã™ã€‚ ã“ã®ã‚«ã‚¹ã‚¿ãƒ サービス㯠<literal>org.jboss.book.security.ex3.service.PropertiesVerifierStore</literal> ã«ãªã‚Šã¾ã™ã€‚ 次ã«ã‚µãƒ³ãƒ—ル㮠EJB 㨠SRP サービスをå«ã‚€ JAR ã®å†…容を示ã—ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1786
@@ -5844,6 +7096,16 @@
"users.properties\n"
"security-ex3.sar"
msgstr ""
+"[examples]$ jar tf output/security/security-ex3.jar \n"
+"META-INF/MANIFEST.MF\n"
+"META-INF/ejb-jar.xml\n"
+"META-INF/jboss.xml\n"
+"org/jboss/book/security/ex3/Echo.class\n"
+"org/jboss/book/security/ex3/EchoBean.class\n"
+"org/jboss/book/security/ex3/EchoHome.class\n"
+"roles.properties\n"
+"users.properties\n"
+"security-ex3.sar"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1787
@@ -5859,12 +7121,17 @@
"\"/> give the example client side and server side login module "
"configurations."
msgstr ""
+"ã“ã®ä¾‹ã®ã‚ー SRP 関連ã®ã‚¢ã‚¤ãƒ†ãƒ 㯠SRP MBean サービス群ã®æ§‹æˆã¨ SRP ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®æ§‹æˆã«ãªã‚Šã¾ã™ã€‚ <literal>security-ex3.sar</literal> ã® <literal>jboss-service.xml</literal> 記述åã‚’ <xref linkend=\"An_SRP_example-The_security_ex3."
+"sar_jboss_service.xml_descriptor_for_the_SRP_services\"/> ã«ç¤ºã—ã¾ã™ã€‚ <xref "
+"linkend=\"An_SRP_example-The_client_side_standard_JAAS_configuration\"/> ãŠã‚ˆã³ "
+"<xref linkend=\"An_SRP_example-The_server_side_XMLLoginConfig_configuration"
+"\"/> ã§ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«æ§‹æˆã¨ã‚µãƒ¼ãƒãƒ¼å´ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«æ§‹æˆã®ä¾‹ã‚’示ã—ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1790
#, no-c-format
msgid "The security-ex3.sar jboss-service.xml descriptor for the SRP services"
-msgstr ""
+msgstr "SRP サービス㮠security-ex3.sar jboss-service.xml 記述å"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1791
@@ -5910,12 +7177,51 @@
" </mbean>\n"
"</server>"
msgstr ""
+"<server>\n"
+" <!-- The custom JAAS login configuration that installs\n"
+" a Configuration capable of dynamically updating the\n"
+" config settings -->\n"
+"\n"
+" <mbean code=\"org.jboss.book.security.service.SecurityConfig\" \n"
+" name=\"jboss.docs.security:service=LoginConfig-EX3\">\n"
+" <attribute name=\"AuthConfig\">META-INF/login-config.xml</"
+"attribute>\n"
+" <attribute name=\"SecurityConfigName\">jboss.security:"
+"name=SecurityConfig</attribute>\n"
+" </mbean>\n"
+"\n"
+" <!-- The SRP service that provides the SRP RMI server and server "
+"side\n"
+" authentication cache -->\n"
+" <mbean code=\"org.jboss.security.srp.SRPService\" \n"
+" name=\"jboss.docs.security:service=SRPService\">\n"
+" <attribute name=\"VerifierSourceJndiName\">srp-test/security-"
+"ex3</attribute>\n"
+" <attribute name=\"JndiName\">srp-test/SRPServerInterface</"
+"attribute>\n"
+" <attribute name=\"AuthenticationCacheJndiName\">srp-test/"
+"AuthenticationCache</attribute>\n"
+" <attribute name=\"ServerPort\">0</attribute>\n"
+" <depends>jboss.docs.security:"
+"service=PropertiesVerifierStore</depends>\n"
+" </mbean>\n"
+"\n"
+" <!-- The SRP store handler service that provides the user password "
+"verifier\n"
+" information -->\n"
+" <mbean code=\"org.jboss.security.ex3.service.PropertiesVerifierStore"
+"\"\n"
+" name=\"jboss.docs.security:service=PropertiesVerifierStore\">\n"
+" <attribute name=\"JndiName\">srp-test/security-ex3</"
+"attribute>\n"
+" </mbean>\n"
+"</server>"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1792
#, no-c-format
msgid "The client side standard JAAS configuration"
-msgstr ""
+msgstr "クライアントå´ã®æ¨™æº– JAAS 構æˆ"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1793
@@ -5931,12 +7237,21 @@
" ;\n"
"};"
msgstr ""
+"srp {\n"
+" org.jboss.security.srp.jaas.SRPLoginModule required\n"
+" srpServerJndiName=\"srp-test/SRPServerInterface\"\n"
+" ;\n"
+" \n"
+" org.jboss.security.ClientLoginModule required\n"
+" password-stacking=\"useFirstPass\"\n"
+" ;\n"
+"};"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1794
#, no-c-format
msgid "The server side XMLLoginConfig configuration"
-msgstr ""
+msgstr "サーãƒãƒ¼å´ã® XMLLoginConfig 構æˆ"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1795
@@ -5959,6 +7274,22 @@
" </authentication>\n"
"</application-policy>"
msgstr ""
+"<application-policy name=\"security-ex3\">\n"
+" <authentication>\n"
+" <login-module code=\"org.jboss.security.srp.jaas."
+"SRPCacheLoginModule\"\n"
+" flag = \"required\">\n"
+" <module-option name=\"cacheJndiName\">srp-test/"
+"AuthenticationCache</module-option>\n"
+" </login-module>\n"
+" <login-module code=\"org.jboss.security.auth.spi."
+"UsersRolesLoginModule\"\n"
+" flag = \"required\">\n"
+" <module-option name=\"password-stacking\">useFirstPass</"
+"module-option>\n"
+" </login-module>\n"
+" </authentication>\n"
+"</application-policy>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1796
@@ -5974,7 +7305,7 @@
"because the <literal>SRPService</literal> needs an implementation of the "
"<literal>SRPVerifierStore</literal> interface for accessing user password "
"verification information."
-msgstr ""
+msgstr "サンプルã®ã‚µãƒ¼ãƒ“ス群㯠<literal>ServiceConfig</literal>〠<literal>PropertiesVerifierStore</literal> <literal>SRPService</literal> MBean ã«ãªã‚Šã¾ã™ã€‚ <literal>PropertiesVerifierStore</literal> ã® <literal>JndiName</literal> 属性㯠<literal>SRPService</literal> ã® <literal>VerifierSourceJndiName</literal> 属性ã¨åŒç‰ã§ã‚ã‚‹ã“ã¨ã€ <literal>SRPService</literal> 㯠<literal>PropertiesVerifierStore</literal> ã«ä¾å˜ã™ã‚‹ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。 <literal>SRPService</literal> ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰æ¤œè¨¼æƒ…å ±ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã« <literal>SRPVerifierStore</literal> ã®å®Ÿè£…ã‚’å¿…è¦ã¨ã™ã‚‹ãŸã‚ã“ã‚ŒãŒå¿…è¦ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1799
@@ -5989,11 +7320,12 @@
"stacking=\"useFirstPass\"</literal> value to propagate the user "
"authentication credentials generated by the <literal>SRPLoginModule</"
"literal> to the EJB invocation layer."
-msgstr ""
+msgstr "クライアントå´ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«æ§‹æˆã¯ JBoss サーãƒãƒ¼ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã® <literal>SRPService</literal> JndiName 属性値 (<literal>srp-test/SRPServerInterface</literal>) ã«ç›¸å½“ã™ã‚‹ <literal>srpServerJndiName</literal> オプション値を付ã‘㟠<literal>SRPLoginModule</literal> を利用ã—ã¾ã™ã€‚ <literal>SRPLoginModule</literal> ã§ç”Ÿæˆã•ã‚Œã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼èªè¨¼ã®è¨¼æ˜Žæ›¸ã‚’ EJB 呼ã³å‡ºã—層ã«ä¼æ’ã™ã‚‹ãŸã‚ <literal>password-stacking=\"useFirstPass\"</literal> 値ã§è¨å®šã•ã‚Œã‚‹ <literal>ClientLoginModule</literal> ã‚‚å¿…è¦ã¨ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1802
#, no-c-format
+#, fuzzy
msgid ""
"There are two issues to note about the server side login module "
"configuration. First, note the <literal>cacheJndiName=srp-test/"
@@ -6015,6 +7347,12 @@
"user's roles are coming the <literal>roles.properties</literal> file "
"included in the EJB JAR."
msgstr ""
+"サーãƒãƒ¼å´ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«æ§‹æˆã«ã¯æ³¨æ„ã™ã¹ã点㌠2 ã¤ã‚ã‚Šã¾ã™ã€‚ ã¾ãšã€ <literal>cacheJndiName=srp-test/AuthenticationCache</literal> è¨å®šã‚ªãƒ—ション㯠<literal>SRPCacheLoginModule</literal> ã« <literal>SRPService</literal> ã«å¯¾ã—ã¦èªè¨¼ã—ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ã® <literal>SRPServerSession</literal> ã‚’å«ã‚€ <literal>CachePolicy</literal> ã®å ´æ‰€ã‚’指示ã—ã¾ã™ã€‚ ã“ã®å€¤ã¯ <literal>SRPService</"
+"literal><literal>AuthenticationCacheJndiName</literal> 属性値ã«ç›¸å½“ã—ã¾ã™ã€‚ 次ã«ã€ ã“ã®æ§‹æˆã«ã¯ <literal>password-stacking=useFirstPass</literal> è¨å®šã‚ªãƒ—ション付ãã® <literal>UsersRolesLoginModule</"
+"literal> ãŒå«ã¾ã‚Œã¾ã™ã€‚ SRP ã¯èªè¨¼æŠ€è¡“ã§ã—ã‹ãªã„ãŸã‚〠<literal>SRPCacheLoginModule</literal> 付ãã® 2 番目ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’使用ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ principal ã®ãƒ‘ーミッションを確定ã™ã‚‹ principal ã®ãƒãƒ¼ãƒ«ã‚’è¨å®šã™ã‚‹ãŸã‚〠2 番目ã®ãƒã‚°ã‚¤ãƒ³ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ <literal>SRPCacheLoginModule</"
+"literal> ã«ã‚ˆã£ã¦ç¢ºèªã•ã‚Œã‚‹èªè¨¼è¨¼æ˜Žæ›¸ã‚’å—ã‘付ã‘るよã†è¨å®šã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ <literal>UsersRolesLoginModule</literal> ã¯æ‰¿èªã‚’ベースã¨ã—ãŸãƒ—ãƒãƒ‘ティファイル㧠SRP èªè¨¼ã‚’補強ã—ã¦ã„ã¾ã™ã€‚ ユーザーã®ãƒãƒ¼ãƒ«ã¯ EJB JAR ã«å«ã¾ã‚Œã‚‹ <literal>roles.properties</literal> ファイルã‹ã‚‰æ¥ã¾ã™ã€‚ "
+"?? coming the ... file => coming from the ... file? "
+"?? users who have auathenticated against ... => users who have been authenticated against...?"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1805
@@ -6022,7 +7360,7 @@
msgid ""
"Now, run the example 3 client by executing the following command from the "
"book examples directory:"
-msgstr ""
+msgstr "ã“ã“ã§ã€ ブックサンプルã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‹ã‚‰æ¬¡ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’実行ã—ã¦ã‚µãƒ³ãƒ—ル 3 ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚’稼åƒã—ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1808
@@ -6037,6 +7375,14 @@
" [java] Echo.echo()#1 = This is call 1\n"
" [java] Echo.echo()#2 = This is call 2"
msgstr ""
+"[examples]$ ant -Dchap=security -Dex=3 run-example\n"
+"...\n"
+"run-example3:\n"
+" [echo] Waiting for 5 seconds for deploy...\n"
+" [java] Logging in using the 'srp' configuration\n"
+" [java] Created Echo\n"
+" [java] Echo.echo()#1 = This is call 1\n"
+" [java] Echo.echo()#2 = This is call 2"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1809
@@ -6046,7 +7392,7 @@
"called <literal>ex3-trace.log</literal>. This is a detailed trace of the "
"client side of the SRP algorithm. The traces show step-by-step the "
"construction of the public keys, challenges, session key and verification."
-msgstr ""
+msgstr "<literal>examples/logs</literal> ディレクトリ㫠<literal>ex3-trace.log</literal> ã¨ã„ã†åå‰ã®ãƒ•ã‚¡ã‚¤ãƒ«ãŒã‚ã‚Šã¾ã™ã€‚ ã“れ㯠SRP アルゴリズムã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ã®è©³ç´°ãƒˆãƒ¬ãƒ¼ã‚¹ã«ãªã‚Šã¾ã™ã€‚ トレースã¯ã€ パブリックã‚ー〠ãƒãƒ£ãƒ¬ãƒ³ã‚¸ã€ セッションã‚ー〠検証ã®æ§‹æˆã‚’é †ã‚’è¿½ã£ã¦ç¤ºã—ã¦ã„ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1812
@@ -6070,7 +7416,7 @@
#: J2EE_Security_On_JBOSS.xml:1822
#, no-c-format
msgid "Running JBoss with a Java 2 security manager"
-msgstr ""
+msgstr "Java 2 ã‚»ã‚ュリティ管ç†ã§ JBoss を実行ã™ã‚‹"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1823
@@ -6082,7 +7428,7 @@
"by configuring the Java VM options in the <literal>run.bat</literal> or "
"<literal>run.sh</literal> scripts in the JBoss server distribution bin "
"directory. The two required VM options are as follows:"
-msgstr ""
+msgstr "デフォルトã§ã¯ JBoss サーãƒãƒ¼ã¯ Java 2 ã‚»ã‚ュリティ管ç†ã§ã¯èµ·å‹•ã—ã¾ã›ã‚“。 Java 2 パーミッションを使ã£ã¦ã‚³ãƒ¼ãƒ‰ã®ç‰¹æ¨©ã‚’制é™ã—ãŸã„å ´åˆã¯ã€ JBoss サーãƒãƒ¼ãŒã‚»ã‚ュリティ管ç†ã®ä¸‹ã§å®Ÿè¡Œã™ã‚‹ã‚ˆã†è¨å®šã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ ã“れ㯠JBoss サーãƒãƒ¼ãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ューション㮠bin ディレクトリ内㮠<literal>run.bat</literal> ã¾ãŸã¯ <literal>run.sh</literal> スクリプト㫠Java VM オプションをè¨å®šã™ã‚‹ã“ã¨ã§è¡Œã†ã“ã¨ãŒã§ãã¾ã™ã€‚ å¿…è¦ã¨ã•ã‚Œã‚‹ 2 ã¤ã® VM オプションã¯æ¬¡ã®é€šã‚Šã§ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1828
@@ -6096,7 +7442,7 @@
"name of a subclass of <literal>java.lang.SecurityManager</literal>. This "
"form specifies that the policy file should augment the default security "
"policy as configured by the VM installation."
-msgstr ""
+msgstr "<emphasis role=\"bold\">java.security.manager</emphasis>: デフォルトã®ã‚»ã‚ュリティ管ç†ãŒä½¿ç”¨ã•ã‚Œã‚‹ã“ã¨ã‚’指定ã™ã‚‹ãŸã‚ã«ã¯ä½•ã®å€¤ã‚‚付ã‘ãªã„ã§ä½¿ç”¨ã—ã¾ã™ã€‚ ã“ã‚ŒãŒå„ªå…ˆã•ã‚Œã‚‹ã‚»ã‚ュリティ管ç†ã¨ãªã‚Šã¾ã™ã€‚ ã¾ãŸã€ <literal>java.security.manager</literal> オプションã«å€¤ã‚’渡ã—ã¦ã‚«ã‚¹ã‚¿ãƒ ã®ã‚»ã‚ュリティ管ç†å®Ÿè£…を指定ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚ ã“ã®å€¤ã¯ <literal>java.lang.SecurityManager</literal> ã®ã‚µãƒ–クラスã®å®Œå…¨ä¿®é£¾ã‚¯ãƒ©ã‚¹åã«ãªã‚‰ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“。 ã“ã®å½¢å¼ã¯ã€ VM インストールã«ã‚ˆã£ã¦è¨å®šã•ã‚Œã‚‹ã‚ˆã†ã«ãƒãƒªã‚·ãƒ¼ãƒ•ã‚¡ã‚¤ãƒ«ãŒãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã‚»ã‚ュリティãƒãƒªã‚·ãƒ¼ã‚’補強ã—ãªã‘ã‚Œã°ãªã‚‰ãªã„ã“ã¨ã‚’指定ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1833
@@ -6112,6 +7458,8 @@
"should be used. The <literal>policyFileURL</literal> value can be any URL "
"for which a protocol handler exists, or a file path specification."
msgstr ""
+"<emphasis role=\"bold\">java.security.policy</emphasis>: VM ã®ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã‚»ã‚ュリティãƒãƒªã‚·ãƒ¼æƒ…å ±ã‚’è£œå¼·ã™ã‚‹ãƒãƒªã‚·ãƒ¼ãƒ•ã‚¡ã‚¤ãƒ«ã®æŒ‡å®šã«ä½¿ç”¨ã—ã¾ã™ã€‚ ã“ã®ã‚ªãƒ—ションã¯ã€ <literal>java.security."
+"policy=policyFileURL</literal> 㨠<literal>java.security.policy==policyFileURL</literal> ã® 2 ã¤ã®å½¢å¼ã‚’ã¨ã‚Šã¾ã™ã€‚ 1 番目ã®å½¢å¼ã¯ VM インストールã§è¨å®šã•ã‚Œã¦ã„るよã†ã«ãƒãƒªã‚·ãƒ¼ãƒ•ã‚¡ã‚¤ãƒ«ãŒãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®ã‚»ã‚ュリティãƒãƒªã‚·ãƒ¼ã‚’補強ã™ã‚‹ã“ã¨ã‚’指定ã—ã¾ã™ã€‚ 2 番目ã®å½¢å¼ã¯ç¤ºã•ã‚Œã¦ã„ã‚‹ãƒãƒªã‚·ãƒ¼ãƒ•ã‚¡ã‚¤ãƒ«ã®ã¿ã‚’使用ã™ã‚‹ã‚ˆã†æŒ‡å®šã—ã¾ã™ã€‚ <literal>policyFileURL</literal> 値ã¯ãƒ—ãƒãƒˆã‚³ãƒ«ãƒãƒ³ãƒ‰ãƒ©ãŒå˜åœ¨ã™ã‚‹ URL ã¾ãŸã¯ãƒ•ã‚¡ã‚¤ãƒ«ãƒ‘ス指定ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1838
@@ -6120,7 +7468,7 @@
"Both the <literal>run.bat</literal> and <literal>run.sh</literal> start "
"scripts reference an JAVA_OPTS variable which you can use to set the "
"security manager properties."
-msgstr ""
+msgstr "<literal>run.bat</literal> 㨠<literal>run.sh</literal> ã¯ã„ãšã‚Œã‚‚ã‚»ã‚ュリティ管ç†ãƒ—ãƒãƒ‘ティã®è¨å®šã«ä½¿ç”¨ã§ãã‚‹ JAVA_OPTS 変数をå‚ç…§ã™ã‚‹ã‚¹ã‚¯ãƒªãƒ—トを起動ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1841
@@ -6131,7 +7479,7 @@
"<literal>server.policy</literal> file that is contained in the default "
"configuration file set, you'll see that it contains the following "
"permission grant statement:"
-msgstr ""
+msgstr "Java 2 ã‚»ã‚ュリティã®æœ‰åŠ¹åŒ–ã¯ç°¡å˜ã§ã™ã€‚ Java 2 ã§ã¯è¨±å¯ãƒ‘ーミッションã®ç¢ºç«‹ã‚’è¡Œã†éƒ¨åˆ†ãŒè¤‡é›‘ã«ãªã‚Šã¾ã™ã€‚ デフォルトã®è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã‚»ãƒƒãƒˆã«å«ã¾ã‚Œã¦ã„ã‚‹ <literal>server.policy</literal> ファイルを見るã¨ã€ 次ã®ãƒ‘ーミッション許å¯ã‚¹ãƒ†ãƒ¼ãƒˆãƒ¡ãƒ³ãƒˆãŒå«ã¾ã‚Œã¦ã„ã‚‹ã®ãŒã‚ã‹ã‚Šã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1844
@@ -6142,6 +7490,10 @@
" permission java.security.AllPermission;\n"
"};"
msgstr ""
+"grant {\n"
+" // Allow everything for now\n"
+" permission java.security.AllPermission;\n"
+"};"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1845
@@ -6150,7 +7502,7 @@
"This effectively disables security permission checking for all code as it "
"says any code can do anything, which is not a reasonable default. What is a "
"reasonable set of permissions is entirely up to you."
-msgstr ""
+msgstr "上記ã¯ã€ 記述ã•ã‚Œã¦ã„るよã†ã«ã‚らゆるコードãŒã‚らゆるã“ã¨ã‚’è¡Œãˆã‚‹ã‚ˆã†ã‚»ã‚ュリティパーミッションã®ãƒã‚§ãƒƒã‚¯ã‚’ã™ã¹ã¦ã®ã‚³ãƒ¼ãƒ‰ã«å¯¾ã—ã¦åŠ¹æžœçš„ã«ç„¡åŠ¹ã«ã—ã¦ã„ã¾ã™ã€‚ ã“ã‚Œã¯é©åˆ‡ãªãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ã¯ã‚ã‚Šã¾ã›ã‚“。 é©åˆ‡ãªãƒ‘ーミッションセットã¨ã¯çŠ¶æ³ã«å¿œã˜ã¦å¤‰åŒ–ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1848
@@ -6159,30 +7511,32 @@
"The current set of JBoss specific <literal>java.lang.RuntimePermissions</"
"literal> that are required include:"
msgstr ""
+"ç¾åœ¨ã€ å¿…è¦ã¨ã•ã‚Œã‚‹ JBoss 固有㮠<literal>java.lang.RuntimePermissions</"
+"literal> セットã«ã¯æ¬¡ã®ã‚ˆã†ãªã‚‚ã®ãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:1854
#, no-c-format
msgid "TargetName"
-msgstr ""
+msgstr "ターゲットå"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:1857
#, no-c-format
msgid "What the permission allows"
-msgstr ""
+msgstr "パーミッションãŒè¨±å¯ã™ã‚‹å¯¾è±¡"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:1860
#, no-c-format
msgid "Risks"
-msgstr ""
+msgstr "å±é™ºæ€§"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:1867
#, no-c-format
msgid "org.jboss.security.SecurityAssociation.getPrincipalInfo"
-msgstr ""
+msgstr "org.jboss.security.SecurityAssociation.getPrincipalInfo"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:1870
@@ -6190,19 +7544,19 @@
msgid ""
"Access to the org.jboss.security.SecurityAssociation getPrincipal() and "
"getCredentials() methods."
-msgstr ""
+msgstr "org.jboss.security.SecurityAssociation getPrincipal() ãŠã‚ˆã³ getCredentials() ã®ãƒ¡ã‚½ãƒƒãƒ‰ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:1873
#, no-c-format
msgid "The ability to see the current thread caller and credentials."
-msgstr ""
+msgstr "ç¾åœ¨ã®ã‚¹ãƒ¬ãƒƒãƒ‰å‘¼ã³å‡ºã—å´ã¨è¨¼æ˜Žæ›¸ãŒè¡¨ç¤ºã•ã‚Œã¦ã—ã¾ã†"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:1878
#, no-c-format
msgid "org.jboss.security.SecurityAssociation.setPrincipalInfo"
-msgstr ""
+msgstr "org.jboss.security.SecurityAssociation.setPrincipalInfo"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:1881
@@ -6210,25 +7564,25 @@
msgid ""
"Access to the org.jboss.security.SecurityAssociation setPrincipal() and "
"setCredentials() methods."
-msgstr ""
+msgstr "org.jboss.security.SecurityAssociation setPrincipal() ãŠã‚ˆã³ setCredentials() ã®ãƒ¡ã‚½ãƒƒãƒ‰ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:1884
#, no-c-format
msgid "The ability to set the current thread caller and credentials."
-msgstr ""
+msgstr "ç¾åœ¨ã®ã‚¹ãƒ¬ãƒƒãƒ‰å‘¼ã³å‡ºã—å´ã¨è¨¼æ˜Žæ›¸ãŒè¨å®šå¯èƒ½ã¨ãªã‚‹"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:1889
#, no-c-format
msgid "org.jboss.security.SecurityAssociation.setServer"
-msgstr ""
+msgstr "org.jboss.security.SecurityAssociation.setServer"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:1892
#, no-c-format
msgid "Access to the org.jboss.security.SecurityAssociation setServer method."
-msgstr ""
+msgstr "org.jboss.security.SecurityAssociation setServer メソッドã¸ã®ã‚¢ã‚¯ã‚»ã‚¹"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:1895
@@ -6236,13 +7590,13 @@
msgid ""
"The ability to enable or disable multithread storage of the caller principal "
"and credential."
-msgstr ""
+msgstr "呼ã³å‡ºã—å´ principal ã¨è¨¼æ˜Žæ›¸ã®ãƒžãƒ«ãƒã‚¹ãƒ¬ãƒƒãƒ‰ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ã‚’有効ã¾ãŸã¯ç„¡åŠ¹ã«ã§ãã¦ã—ã¾ã†"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:1900
#, no-c-format
msgid "org.jboss.security.SecurityAssociation.setRunAsRole"
-msgstr ""
+msgstr "org.jboss.security.SecurityAssociation.setRunAsRole"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:1903
@@ -6250,13 +7604,13 @@
msgid ""
"Access to the org.jboss.security.SecurityAssociation pushRunAsRole and "
"popRunAsRole methods."
-msgstr ""
+msgstr "org.jboss.security.SecurityAssociation pushRunAsRole ãŠã‚ˆã³ popRunAsRole ã®ãƒ¡ã‚½ãƒƒãƒ‰ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:1906
#, no-c-format
msgid "The ability to change the current caller run-as role principal."
-msgstr ""
+msgstr "ç¾åœ¨ã®å‘¼ã³å‡ºã—å´ run-as ã®ãƒãƒ¼ãƒ« principal を変更ã§ãã¦ã—ã¾ã†"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1912
@@ -6267,7 +7621,7 @@
"to determine how the security manager is using your security policy file as "
"well as what policy files are contributing permissions. Running the VM as "
"follows shows the possible debugging flag settings:"
-msgstr ""
+msgstr "最後ã«ã€ ã‚»ã‚ュリティãƒãƒªã‚·ãƒ¼è¨å®šã®ãƒ‡ãƒãƒƒã‚°ã§ã‚ã¾ã‚ŠçŸ¥ã‚‰ã‚Œã¦ã„ãªã„部分ã«ã¤ã„ã¦è§¦ã‚Œã¦ãŠãã¾ã™ã€‚ ã‚»ã‚ュリティ管ç†ãŒã‚»ã‚ュリティãƒãƒªã‚·ãƒ¼ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ã©ã®ã‚ˆã†ã«æ‰±ã†ã‹ã€ ã©ã®ãƒãƒªã‚·ãƒ¼ãƒ•ã‚¡ã‚¤ãƒ«ãŒãƒ‘ーミッションを処ç†ã™ã‚‹ã‹ãªã©ã‚’確定ã™ã‚‹ãŸã‚ã«è¨å®šã§ãã‚‹å„種ã®ãƒ‡ãƒãƒƒã‚°ç”¨ãƒ•ãƒ©ã‚°ãŒã‚ã‚Šã¾ã™ã€‚ 以下ã®ã‚ˆã†ã« VM を実行ã™ã‚‹ã¨è¨å®šã§ãるデãƒãƒƒã‚°ç”¨ãƒ•ãƒ©ã‚°ã‚’表示ã—ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1915
@@ -6293,6 +7647,25 @@
"\n"
"Note: Separate multiple options with a comma"
msgstr ""
+"[bin]$ java -Djava.security.debug=help\n"
+" \n"
+"all turn on all debugging\n"
+"access print all checkPermission results\n"
+"combiner SubjectDomainCombiner debugging\n"
+"jar jar verification\n"
+"logincontext login context results\n"
+"policy loading and granting\n"
+"provider security provider debugging\n"
+"scl permissions SecureClassLoader assigns\n"
+"\n"
+"The following can be used with access:\n"
+"\n"
+"stack include stack trace\n"
+"domain dumps all domains in context\n"
+"failure before throwing exception, dump stack\n"
+" and domain that didn't have permission\n"
+"\n"
+"Note: Separate multiple options with a comma"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1916
@@ -6306,12 +7679,14 @@
"verbose, but not nearly as bad as the all mode as the security domain "
"information is only displayed on access failures."
msgstr ""
+"<literal>-Djava.security.debug=all</literal> ã§å®Ÿè¡Œã™ã‚‹ã¨ã€ ã»ã¨ã‚“ã©ã®å‡ºåŠ›ã‚’表示ã—ã¾ã™ãŒã‹ãªã‚Šã®é‡ã«ãªã‚Šã¾ã™ã€‚ 特定ã®ã‚»ã‚ュリティ障害ã«ã¤ã„ã¦ã¾ã£ãŸãç†è§£ã§ããªã„å ´åˆã«ã¯ã“ã“ã‹ã‚‰å§‹ã‚ã‚‹ã¨ã‚ˆã„ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“。 パーミッション障害ã®ãƒ‡ãƒãƒƒã‚°ã«å½¹ç«‹ã¤ãŒå†—長性ãŒå°‘ãªããªã‚‹è¨å®šã¯ <literal>-"
+"Djava.security.debug=access,failure</literal> ã§ã™ã€‚ ã“ã‚Œã§ã‚‚ã‹ãªã‚Šå†—é•·ã«ã¯ãªã‚Šã¾ã™ãŒã€ アクセス障害ã«é–¢ã™ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ‰ãƒ¡ã‚¤ãƒ³æƒ…å ±ã®ã¿ãŒè¡¨ç¤ºã•ã‚Œã‚‹ã®ã§ all モードã»ã©å¤§é‡ã«ã¯ãªã‚Šã¾ã›ã‚“。"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1922
#, no-c-format
msgid "Using SSL with JBoss using JSSE"
-msgstr ""
+msgstr "JSSE を使ã£ãŸ JBoss 㧠SSL を使用ã™ã‚‹"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1923
@@ -6324,7 +7699,7 @@
"certificate using the JDK keytool and included the resulting keystore file, "
"<literal>example.keystore</literal>. It was created using the following "
"command and input:"
-msgstr ""
+msgstr "JBoss 㯠SSL ã« Java Secure Socket Extension (JSSE) を使用ã—ã¾ã™ã€‚ JSSE 㯠JDK 1.4 ã«åŒæ¢±ã•ã‚Œã¦ã„ã¾ã™ã€‚ JSSE ã®ä½¿ç”¨ã‚’開始ã™ã‚‹ã«ã¯ã€ SSL サーãƒãƒ¼ã‚½ã‚±ãƒƒãƒˆã§ä½¿ç”¨ã§ãるよㆠX509 証明書ã®å½¢å¼ã§ãƒ‘ブリックã‚ーã¨ãƒ—ライベートã‚ーã®çµ„ã¿åˆã‚ã›ãŒå¿…è¦ã¨ãªã‚Šã¾ã™ã€‚ ã“ã®ä¾‹ã‚’示ã™ãŸã‚〠JDK ã‚ーツールを使ã£ã¦è‡ªå·±ç½²åã®è¨¼æ˜Žæ›¸ã‚’作æˆã—ãã®çµæžœã¨ãªã‚‹ã‚ーストアファイル <literal>example.keystore</literal> ã‚’å«ã¾ã›ã¦ã„ã¾ã™ã€‚ 次ã®ã‚³ãƒžãƒ³ãƒ‰ãŠã‚ˆã³å…¥åŠ›ã§ä½œæˆã—ã¾ã—ãŸã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1926
@@ -6334,6 +7709,9 @@
"+ssl -keyalg RSA -alias example -validity 3650 -dname \"cn=example,ou=admin "
"book,dc=jboss,dc=org\""
msgstr ""
+"keytool -genkey -keystore example.keystore -storepass rmi+ssl -keypass rmi"
+"+ssl -keyalg RSA -alias example -validity 3650 -dname \"cn=example,ou=admin "
+"book,dc=jboss,dc=org\""
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1927
@@ -6342,7 +7720,7 @@
"This produces a keystore file called <literal>example.keystore</literal>. A "
"keystore is a database of security keys. There are two different types of "
"entries in a keystore:"
-msgstr ""
+msgstr "ã“ã‚Œã«ã‚ˆã‚Šã€ <literal>example.keystore</literal> ã¨ã„ã†åå‰ã®ã‚ーストアファイルãŒç”Ÿæˆã•ã‚Œã¾ã™ã€‚ ã‚ーストアã¨ã¯ã‚»ã‚ュリティã‚ーã®ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã§ã™ã€‚ ã‚ーストアã«ã¯ 2 種類ã®ã‚¨ãƒ³ãƒˆãƒªãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1932
@@ -6355,7 +7733,7 @@
"chain for the corresponding public key. The <literal>keytool</literal> and "
"<literal>jarsigner</literal> tools only handle the later type of entry, that "
"is private keys and their associated certificate chains."
-msgstr ""
+msgstr "<emphasis role=\"bold\">key entries</emphasis>: å„エントリã¯æ…Žé‡ã«æ‰±ã†ã¹ãæš—å·ã‚ãƒ¼æƒ…å ±ã‚’ä¿æŒã—ã¦ãŠã‚Šã€ ã“ã‚Œã¯èªè¨¼ã®ãªã„アクセスを防æ¢ã™ã‚‹ãŸã‚ä¿è·å½¢å¼ã§æ ¼ç´ã•ã‚Œã¦ã„ã¾ã™ã€‚ 一般的ã«ã“ã®ç¨®ã®ã‚¨ãƒ³ãƒˆãƒªã«æ ¼ç´ã•ã‚Œã‚‹ã‚ーã¯æ©Ÿå¯†ã‚ーã§ã‚ã‚‹ã‹ã€ 該当ã™ã‚‹ãƒ‘ブリックã‚ーã®è¨¼æ˜Žæ›¸ãƒã‚§ãƒ¼ãƒ³ã‚’æŒã¤ãƒ—ライベートã‚ーã«ãªã‚Šã¾ã™ã€‚ <literal>keytool</literal> ãŠã‚ˆã³ <literal>jarsigner</literal> ã®ãƒ„ールã¯å¾Œè€…ã®ã‚¿ã‚¤ãƒ—ã®ã‚¨ãƒ³ãƒˆãƒªã€ ã¤ã¾ã‚Šãƒ—ライベートã‚ーã¨é–¢é€£ä»˜ã‘られる証明書ãƒã‚§ãƒ¼ãƒ³ã—ã‹å‡¦ç†ã—ã¾ã›ã‚“。"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1937
@@ -6367,7 +7745,7 @@
"public key in the certificate indeed belongs to the identity identified by "
"the subject (owner) of the certificate. The issuer of the certificate "
"vouches for this, by signing the certificate."
-msgstr ""
+msgstr "<emphasis role=\"bold\">trusted certificate entries</emphasis>: å„エントリã¯åˆ¥ã®ãƒ‘ーティã«å±žã™ã‚‹å˜ä¸€ã®ãƒ‘ブリックã‚ー証明書をå«ã‚“ã§ã„ã¾ã™ã€‚ ã‚ーストアã®ä¿æŒå´ãŒã“ã®è¨¼æ˜Žæ›¸ã®ãƒ‘ブリックã‚ーã¯å®Ÿéš›ã«è¨¼æ˜Žæ›¸ã®å¯¾è±¡ (ä¿æŒå´) ã«ã‚ˆã£ã¦è˜åˆ¥ã•ã‚Œã‚‹ ID ã«å±žã™ã‚‹ã“ã¨ã‚’ä¿¡é ¼ã—ã¦ã„ã‚‹ãŸã‚ã€ ä¿¡é ¼ã§ãる証明書ã¨å‘¼ã°ã‚Œã¾ã™ã€‚ 証明書ã®ç™ºè¡Œå´ã¯è¨¼æ˜Žæ›¸ã«ç½²åã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã“れをä¿è¨¼ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1942
@@ -6376,7 +7754,7 @@
"Listing the <literal>src/main/org/jboss/book/security/example.keystore</"
"literal> examples file contents using the keytool shows one self-signed "
"certificate:"
-msgstr ""
+msgstr "<literal>src/main/org/jboss/book/security/example.keystore</literal> ã®ã‚µãƒ³ãƒ—ルファイルã®å†…容を keytool を使ã£ã¦ä¸€è¦§è¡¨ç¤ºã•ã›ã‚‹ã¨è‡ªå·±ç½²å証明書㌠1 ã¤è¡¨ç¤ºã•ã‚Œã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1945
@@ -6409,6 +7787,32 @@
"*******************************************\n"
"*******************************************"
msgstr ""
+"[examples]$ keytool -list -v -keystore src/main/org/jboss/book/security/"
+"example.keystore\n"
+"Enter keystore password: rmi+ssl\n"
+"\n"
+"Keystore type: jks\n"
+"Keystore provider: SUN\n"
+"\n"
+"Your keystore contains 1 entry\n"
+"\n"
+"Alias name: example\n"
+"Creation date: Oct 31, 2006\n"
+"Entry type: keyEntry\n"
+"Certificate chain length: 1\n"
+"Certificate[1]:\n"
+"Owner: CN=example, OU=admin book, DC=jboss, DC=org\n"
+"Issuer: CN=example, OU=admin book, DC=jboss, DC=org\n"
+"Serial number: 45481c1b\n"
+"Valid from: Tue Oct 31 22:01:31 CST 2006 until: Fri Oct 28 23:01:31 CDT "
+"2016\n"
+"Certificate fingerprints:\n"
+" MD5: C2:CA:CA:D3:00:71:3E:32:CB:B3:C8:A8:4E:68:9A:BB\n"
+" SHA1: A6:44:EF:66:2A:49:14:B0:A4:14:74:8B:64:61:E4:E6:AF:E3:70:41\n"
+"\n"
+"\n"
+"*******************************************\n"
+"*******************************************"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1946
@@ -6432,12 +7836,17 @@
"\"Using_SSL_with_JBoss_using_JSSE-"
"A_sample_JaasSecurityDomain_config_for_RMISSL\"/>."
msgstr ""
+"JSSE ãŒç¨¼åƒã—ã¦ã„㦠JBoss サーãƒãƒ¼ã«ä½¿ç”¨ã™ã‚‹è¨¼æ˜Žæ›¸ã‚’æŒã¤ã‚ーストアãŒã‚ã‚Œã°ã€ JBoss ㌠EJB アクセス㫠SSL を使用ã™ã‚‹ã‚ˆã†è¨å®šã™ã‚‹æº–å‚™ãŒæ•´ã£ãŸã“ã¨ã«ãªã‚Šã¾ã™ã€‚ è¨å®šã¯ EJB 呼ã³å‡ºã—å´ RMI ソケットファクトリをè¨å®šã™ã‚‹ã“ã¨ã§è¡Œã†ã“ã¨ãŒã§ãã¾ã™ã€‚ JBossSX フレームワークã«ã¯ã€ SSP æš—å·åŒ–ソケット全体ã«æ¸¡ã‚Š RMI を使用ã§ãるよã†ã«ã™ã‚‹ <literal>java.rmi.server."
+"RMIServerSocketFactory</literal> ãŠã‚ˆã³ <literal>java.rmi.server."
+"RMIClientSocketFactory</literal> ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã®å®Ÿè£…ãŒå«ã¾ã‚Œã¾ã™ã€‚ 実装クラスã¯ãã‚Œãžã‚Œ <literal>org.jboss.security.ssl.RMISSLServerSocketFactory</literal> 㨠<literal>org.jboss."
+"security.ssl.RMISSLClientSocketFactory</literal> ã«ãªã‚Šã¾ã™ã€‚ EJB ã«å¯¾ã™ã‚‹ RMI アクセス㫠SSL ã®ä½¿ç”¨ã‚’有効ã«ã™ã‚‹ã«ã¯ 2 ã¤ã®ã‚¹ãƒ†ãƒƒãƒ—ãŒã‚ã‚Šã¾ã™ã€‚ 最åˆã« SSL サーãƒãƒ¼è¨¼æ˜Žæ›¸ã®ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã¨ã—ã¦ã‚ーストアã®ä½¿ç”¨ã‚’有効ã«ã™ã‚‹ã“ã¨ã§ã€ <literal>org.jboss.security.plugins.JaasSecurityDomain</literal> MBean ã‚’è¨å®šã™ã‚‹ã“ã¨ã§è¡Œãˆã¾ã™ã€‚ <literal>book/security/ex4</literal> ディレクトリ内㮠<literal>jboss-service.xml</literal> 記述åã¯ã€ <xref linkend=\"Using_SSL_with_JBoss_using_JSSE-"
+"A_sample_JaasSecurityDomain_config_for_RMISSL\"/> ã§ç¤ºã™ã‚ˆã†ã« <literal>JaasSecurityDomain</literal> 定義をå«ã‚“ã§ã„ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1949
#, no-c-format
msgid "A sample JaasSecurityDomain config for RMI/SSL"
-msgstr ""
+msgstr "RMI/SSL 用ã®ã‚µãƒ³ãƒ—ル JaasSecurityDomainè¨å®š"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1950
@@ -6455,6 +7864,17 @@
" <attribute name=\"KeyStorePass\">rmi+ssl</attribute>\n"
"</mbean>"
msgstr ""
+"<!-- The SSL domain setup -->\n"
+"<mbean code=\"org.jboss.security.plugins.JaasSecurityDomain\"\n"
+" name=\"jboss.security:service=JaasSecurityDomain,domain=RMI+SSL"
+"\">\n"
+" <constructor>\n"
+" <arg type=\"java.lang.String\" value=\"RMI+SSL\"/>\n"
+" </constructor>\n"
+" <attribute name=\"KeyStoreURL\">example.keystore</"
+"attribute>\n"
+" <attribute name=\"KeyStorePass\">rmi+ssl</attribute>\n"
+"</mbean>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1951
@@ -6468,6 +7888,8 @@
"require security keys. This configuration simply loads the example.keystore "
"from the example 4 MBean SAR using the indicated password."
msgstr ""
+"<literal>JaasSecurityDomain</literal> ã¯æ¨™æº–ã® <literal>JaasSecurityManager</literal> クラスã®ã‚µãƒ–クラスã«ãªã‚Šã€ ã‚ーストアã®æ¦‚å¿µã‚’è¿½åŠ ã™ã‚‹ä»–〠JSSE <literal>KeyManagerFactory</literal> ãŠã‚ˆã³ "
+"<literal>TrustManagerFactory</literal> ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚‚è¿½åŠ ã—ã¾ã™ã€‚ 基本ã®ã‚»ã‚ュリティ管ç†ã‚’æ‹¡å¼µã—ã¦ã‚»ã‚ュリティã‚ーを必è¦ã¨ã™ã‚‹ SSL ã‚„ä»–ã®æš—å·å¼æ¼”算をサãƒãƒ¼ãƒˆã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã“ã®è¨å®šã¯å˜ç´”ã«ç¤ºã•ã‚ŒãŸãƒ‘スワードを使ã£ã¦ã‚µãƒ³ãƒ—ル㮠4 MBean SAR ã‹ã‚‰ example.keystore ã‚’ãƒãƒ¼ãƒ‰ã—ã¾ã™ã€‚"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1954
@@ -6479,7 +7901,7 @@
"<xref linkend=\"EJBs_on_JBoss\"/> as well as an EJB setup that makes use of "
"this invoker. The top of the listing shows the <literal>jboss-service.xml</"
"literal> descriptor that defines the custom <literal>JRMPInovker</literal>"
-msgstr ""
+msgstr "次ã®ã‚¹ãƒ†ãƒƒãƒ—㯠SSL ã«å¯¾å¿œã™ã‚‹ JBossSX RMI ソケットファクトリを使用ã™ã‚‹ EJB 呼ã³å‡ºã—å´è¨å®šã‚’定義ã™ã‚‹ã“ã¨ã§ã™ã€‚ ã“れを行ã†ã«ã¯ã€ <xref linkend=\"EJBs_on_JBoss\"/> ã§è¦‹ã¦ã㟠<literal>JRMPInvoker</literal> ã®ã‚«ã‚¹ã‚¿ãƒ è¨å®šã‚’定義ã™ã‚‹ä»–〠ã“ã®å‘¼ã³å‡ºã—å´ã‚’使用ã™ã‚‹ EJB è¨å®šã‚’定義ã™ã‚‹ã“ã¨ã‚‚å¿…è¦ã«ãªã‚Šã¾ã™ã€‚ 一覧表示ã®å†’é ã§ã¯ã‚«ã‚¹ã‚¿ãƒ <literal>JRMPInovker</literal> を定義ã™ã‚‹ <literal>jboss-service.xml</literal> 記述åを示ã—ã¦ã„ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1957
@@ -6500,6 +7922,20 @@
"+SSL</depends>\n"
"</mbean>"
msgstr ""
+"<mbean code=\"org.jboss.invocation.jrmp.server.JRMPInvoker\"\n"
+" name=\"jboss:service=invoker,type=jrmp,socketType=SSL\">\n"
+" <attribute name=\"RMIObjectPort\">14445</attribute>\n"
+" <attribute name=\"RMIClientSocketFactory\"> \n"
+" org.jboss.security.ssl.RMISSLClientSocketFactory\n"
+" </attribute>\n"
+" <attribute name=\"RMIServerSocketFactory\">\n"
+" org.jboss.security.ssl.RMISSLServerSocketFactory\n"
+" </attribute>\n"
+" <attribute name=\"SecurityDomain\">java:/jaas/RMI+SSL</"
+"attribute>\n"
+" <depends>jboss.security:service=JaasSecurityDomain,domain=RMI"
+"+SSL</depends>\n"
+"</mbean>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1958
@@ -6509,7 +7945,7 @@
"<literal>stateless-ssl-invoker</literal> that uses our custom JRMPInvoker. "
"We can declare the invoker binding and connect it to <literal>EchoBean4</"
"literal> as shown in the following <literal>jboss.xml</literal> file."
-msgstr ""
+msgstr "SSL 呼ã³å‡ºã—å´ã‚’è¨å®šã™ã‚‹ã«ã¯ã€ カスタムJRMPInvoker を使用ã™ã‚‹ <literal>stateless-ssl-invoker</literal> ã¨ã„ã†åå‰ã®å‘¼ã³å‡ºã—å´ãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°ã‚’作æˆã—ã¾ã™ã€‚ 呼ã³å‡ºã—å´ãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°ã‚’宣言ã—ã¦ã€ 次㮠<literal>jboss.xml</literal> ファイルã«ç¤ºã™ã‚ˆã†ã« <literal>EchoBean4</literal> ã«æŽ¥ç¶šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1961
@@ -6567,6 +8003,57 @@
" </invoker-proxy-bindings>\n"
"</jboss>"
msgstr ""
+"<?xml version=\"1.0\"?>\n"
+"<jboss>\n"
+" <enterprise-beans>\n"
+" <session>\n"
+" <ejb-name>EchoBean4</ejb-name>\n"
+" <configuration-name>Standard Stateless SessionBean</"
+"configuration-name>\n"
+" <invoker-bindings>\n"
+" <invoker>\n"
+" <invoker-proxy-binding-name>\n"
+" stateless-ssl-invoker\n"
+" </invoker-proxy-binding-name>\n"
+" </invoker>\n"
+" </invoker-bindings>\n"
+" </session>\n"
+" </enterprise-beans>\n"
+" \n"
+" <invoker-proxy-bindings>\n"
+" <invoker-proxy-binding>\n"
+" <name>stateless-ssl-invoker</name>\n"
+" <invoker-mbean>jboss:service=invoker,type=jrmp,"
+"socketType=SSL</invoker-mbean>\n"
+" <proxy-factory>org.jboss.proxy.ejb.ProxyFactory</proxy-"
+"factory>\n"
+" <proxy-factory-config>\n"
+" <client-interceptors>\n"
+" <home>\n"
+" <interceptor>org.jboss.proxy.ejb."
+"HomeInterceptor</interceptor>\n"
+" <interceptor>org.jboss.proxy."
+"SecurityInterceptor</interceptor>\n"
+" <interceptor>org.jboss.proxy."
+"TransactionInterceptor</interceptor>\n"
+" <interceptor>org.jboss.invocation."
+"InvokerInterceptor</interceptor>\n"
+" </home>\n"
+" <bean>\n"
+" <interceptor>org.jboss.proxy.ejb."
+"StatelessSessionInterceptor</interceptor>\n"
+" <interceptor>org.jboss.proxy."
+"SecurityInterceptor</interceptor>\n"
+" <interceptor>org.jboss.proxy."
+"TransactionInterceptor</interceptor>\n"
+" <interceptor>org.jboss.invocation."
+"InvokerInterceptor</interceptor>\n"
+" </bean>\n"
+" </client-interceptors>\n"
+" </proxy-factory-config>\n"
+" </invoker-proxy-binding>\n"
+" </invoker-proxy-bindings>\n"
+"</jboss>"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1962
@@ -6580,6 +8067,8 @@
"EJB deployment is in fact using SSL. Start the JBoss server using the "
"default configuration and then run example 4b as follows:"
msgstr ""
+"サンプル 4 コードã¯ãƒ–ックサンプル㮠<literal>src/main/org/jboss/book/"
+"security/ex4</literal> ディレクトリé…下ã«ã‚ã‚Šã¾ã™ã€‚ ã“れもãã®å…¥åŠ›å¼•æ•°ã‚’返㙠echo メソッドをæŒã¤ã‚·ãƒ³ãƒ—ルãªã‚¹ãƒ†ãƒ¼ãƒˆãƒ¬ã‚¹ã‚»ãƒƒã‚·ãƒ§ãƒ³ bean ã«ãªã‚Šã¾ã™ã€‚ SSL ã¯å¤±æ•—ã—ãªã„é™ã‚Šã„ã¤ä½¿ç”¨ä¸ã§ã‚ã‚‹ã‹ã‚’知るã®ã¯é›£ã—ã„ãŸã‚〠サンプル 4 クライアントを 2 種類ã®æ–¹æ³•ã§å®Ÿè¡Œã—ã¦æœ¬å½“ã« EJB é…備㌠SSL を使用ã—ã¦ã„ã‚‹ã“ã¨ã‚’実演ã—ã¦ã¿ã¾ã™ã€‚ デフォルトè¨å®šã‚’使ã£ã¦ JBoss サーãƒãƒ¼ã‚’èµ·å‹•ã—サンプル 4b を次ã®ã‚ˆã†ã«å®Ÿè¡Œã—ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1965
@@ -6597,6 +8086,17 @@
"n: No trusted certificate found\n"
"..."
msgstr ""
+"[examples]$ ant -Dchap=security -Dex=4b run-example\n"
+"...\n"
+"run-example4b:\n"
+"...\n"
+" [java] Exception in thread \"main\" java.rmi.ConnectIOException: error "
+"during JRMP connect\n"
+"ion establishment; nested exception is: \n"
+" [java] javax.net.ssl.SSLHandshakeException: sun.security.validator."
+"ValidatorExceptio\n"
+"n: No trusted certificate found\n"
+"..."
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1966
@@ -6619,7 +8119,7 @@
"rather than <literal>-Dex=4b</literal> to pass the location of the correct "
"truststore using the <literal>javax.net.ssl.trustStore</literal> system "
"property:"
-msgstr ""
+msgstr "çµæžœãŒä¾‹å¤–ã¨ãªã‚‹ã®ã¯äºˆæœŸã—ã¦ã„ã‚‹ã“ã¨ã§ã€ ã“ã‚ŒãŒã‚µãƒ³ãƒ—ル㮠4b ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã®æ„図ã™ã‚‹ã¨ã“ã‚ã§ã™ã€‚ 例外スタックトレースãŒãƒ–ック形å¼ã«åˆã†ã‚ˆã†ç·¨é›†ã•ã‚Œã¦ã„ã‚‹ãŸã‚若干ã®é•ã„ãŒã‚ã‚‹ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„。 注目ã™ã¹ã点ã¯ã€ JBoss EJB コンテナã¨ã®é€šä¿¡ã« Sun JSSE クラスを使用ã—ã¦ã„ã‚‹ã“ã¨ã‚’例外ãŒæ˜Žç¢ºã«ç¤ºã—ã¦ã„ã‚‹ã“ã¨ã§ã™ã€‚ ã“ã®ä¾‹å¤–㯠JBoss サーãƒãƒ¼è¨¼æ˜Žæ›¸ã¨ã—ã¦ä½¿ç”¨ã—ã¦ã„る自己署åã®è¨¼æ˜Žæ›¸ã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®è¨¼æ˜Žæ¨©é™ã®ã„ãšã‚Œã‹ã«ã‚ˆã‚Šç½²åã•ã‚Œã¦ã„るよã†ã«ã¯èªè¨¼ã§ããªã„ã“ã¨ã‚’示ã—ã¦ã„ã¾ã™ã€‚ JSSE パッケージã«åŒæ¢±ã•ã‚Œã‚‹ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®ç½²å権é™ã‚ーストア㯠VeriSign〠Thawte〠RSA Data Security ãªã©ã‚ˆã知られãŸè¨¼æ˜Žæ¨©é™ã—ã‹å«ã‚“ã§ã„ãªã„ãŸã‚〠ã“ã®ä¾‹å¤–ã¯äºˆæœŸã•ã‚Œã‚‹çµæžœã¨ãªã‚Šã¾ã™ã€‚ EJB クライアントãŒè‡ªå·±ç½²åã®è¨¼æ˜Ž!
書を有効ã¨ã—ã¦å—ã‘付ã‘るよã†ã«ã™ã‚‹ã«ã¯ã€ JSSE クラスã«ä¿¡é ¼ã§ãるストアã¨ã—㦠<literal>example.keystore</literal> を使用ã™ã‚‹ã‚ˆã†æŒ‡ç¤ºã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ä¿¡é ¼ã§ãるストアã¨ã¯ä»–ã®è¨¼æ˜Žæ›¸ã®ç½²åã«ä½¿ç”¨ã™ã‚‹ãƒ‘ブリックã‚ー証明書をå«ã‚€ã‚ーストアã§ã™ã€‚ ã“れを行ã†ã«ã¯ã€ <literal>-Dex=4b</literal> ã§ã¯ãªã <literal>-Dex=4</literal> ã§ã‚µãƒ³ãƒ—ル 4 を実行㗠<literal>javax.net.ssl.trustStore</literal> システムプãƒãƒ‘ティを使ã£ã¦ä¿¡é ¼ã§ãるストアã®æ£ã—ã„å ´æ‰€ã‚’æ¸¡ã—ã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1969
@@ -6634,10 +8134,19 @@
" [java] Created Echo\n"
" [java] Echo.echo()#1 = This is call 1"
msgstr ""
+"[examples]$ ant -Dchap=security -Dex=4 run-example\n"
+"...\n"
+"run-example4:\n"
+" [copy] Copying 1 file to /tmp/jboss-4.2.0/server/production/deploy\n"
+" [echo] Waiting for 5 seconds for deploy...\n"
+"...\n"
+" [java] Created Echo\n"
+" [java] Echo.echo()#1 = This is call 1"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1970
#, no-c-format
+#, fuzzy
msgid ""
"This time the only indication that an SSL socket is involved is because of "
"the <literal>SSL handshakeCompleted</literal> message. This is coming from "
@@ -6649,6 +8158,9 @@
"random numbers that take time to seed the first time they are used. This "
"shows up as high CPU utilization and start up times."
msgstr ""
+"This time the only indication that an SSL socket is involved is because of "
+"the <literal>SSL handshakeCompleted</literal> message. "
+"ã“ã‚Œã¯ãƒ‡ãƒãƒƒã‚°ãƒ¬ãƒ™ãƒ«ã®ãƒã‚°ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¨ã—㦠<literal>RMISSLClientSocketFactory</literal> ã‹ã‚‰æ¥ã¾ã™ã€‚ log4j デãƒãƒƒã‚°ãƒ¬ãƒ™ãƒ«ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’出力ã™ã‚‹ã‚ˆã†ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚’è¨å®šã—ã¦ã„ãªã„å ´åˆã€ SSL ãŒå¿…è¦ã§ã‚ã£ãŸã“ã¨ã‚’直接示ã™ã‚‚ã®ã¯ãªã„ã§ã—ょã†ã€‚ 実行回数ã¨ã‚·ã‚¹ãƒ†ãƒ CPU上ã®è² è·ã«æ³¨æ„ã—ã¦ã¿ã‚‹ã¨ã€ å¿…ãšé•ã„ãŒã‚ã‚Šã¾ã™ã€‚ SRP ã¨åŒæ§˜ SSL ã¯æœ€åˆã«ä½¿ç”¨ã•ã‚Œã‚‹éš›ã«ã‚·ãƒ¼ãƒ‰ã‚’è¡Œã†ã®ã«æ™‚é–“ãŒã‹ã‹ã‚‹æš—å·æ–¹å¼ã®å¼·å›ºãªãƒ©ãƒ³ãƒ€ãƒ æ•°ã®ä½¿ç”¨ã‚’å¿…è¦ã¨ã—ã¾ã™ã€‚ CPU ã®ä½¿ç”¨çŽ‡ãŠã‚ˆã³èµ·å‹•å›žæ•°ãŒé«˜ã表示ã•ã‚Œã¾ã™ã€‚??"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1973
@@ -6657,7 +8169,7 @@
"One consequence of this is that if you are running on a system that is "
"slower than the one used to run the examples for the book, such as when "
"running example 4b, you may seen an exception similar to the following:"
-msgstr ""
+msgstr "ã“ã‚Œã«ä¼´ã†çµæžœã®ã²ã¨ã¤ã¨ã—ã¦ã€ ブックã®ã‚µãƒ³ãƒ—ルを実行ã™ã‚‹ãŸã‚ã«ä½¿ç”¨ã—ãŸã‚·ã‚¹ãƒ†ãƒ よりé…ã„システムã§å®Ÿè¡Œã—ã¦ã„ã‚‹å ´åˆã€ サンプル 4 b を実行ã—ã¦ã„ã‚‹å ´åˆãªã©ã€ 次ã®ã‚ˆã†ãªä¾‹å¤–ãŒè¡¨ç¤ºã•ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: programlisting
#: J2EE_Security_On_JBOSS.xml:1976
@@ -6667,6 +8179,9 @@
" at sun.rmi.transport.StreamRemoteCall.exceptionReceivedFromServer\n"
"..."
msgstr ""
+"javax.naming.NameNotFoundException: EchoBean4 not bound\n"
+" at sun.rmi.transport.StreamRemoteCall.exceptionReceivedFromServer\n"
+"..."
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1977
@@ -6677,13 +8192,13 @@
"the secure random number generator used by the SSL server socket. If you see "
"this issue, simply rerun the example again or increase the deployment wait "
"time in the <literal>build-security.xml</literal> Ant script."
-msgstr ""
+msgstr "クライアントãŒè¨±å¯ã•ã‚Œã¦ã„ã‚‹ã†ã¡ã« JBoss サーãƒãƒ¼ãŒã‚µãƒ³ãƒ—ル EJB ã®é…備を完了ã—ãªã‹ã£ãŸã“ã¨ãŒå•é¡Œã§ã™ã€‚ ã“れ㯠SSL サーãƒãƒ¼ã‚½ã‚±ãƒƒãƒˆã«ã‚ˆã‚Šä½¿ç”¨ã•ã‚Œã‚‹å®‰å…¨ãªãƒ©ãƒ³ãƒ€ãƒ 数生æˆã®æ©Ÿèƒ½ã®åˆæœŸè¨å®šæ™‚é–“ã«ã‚ˆã‚‹ã‚‚ã®ã§ã™ã€‚ ã“ã®å•é¡Œã«éé‡ã—ãŸå ´åˆã¯ã€ サンプルã«æˆ»ã£ã¦ <literal>build-security.xml</literal> Ant スクリプトã§é…備待機時間を増やã—ã¦ãã ã•ã„。"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1983
#, no-c-format
msgid "Configuring JBoss for use Behind a Firewall"
-msgstr ""
+msgstr "ファイアウォールã®å†…å´ã§ã®ä½¿ç”¨ã‚’目的ã¨ã™ã‚‹ JBoss ã®è¨å®š"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:1984
@@ -6698,36 +8213,39 @@
"Additional_ports_in_the_all_configuration\"/> shows the same information for "
"the additional ports that exist in the all configuration file set."
msgstr ""
+"JBoss ã¯å¾…æ©Ÿãƒãƒ¼ãƒˆã‚’é–‹ãサービスをベースã¨ã™ã‚‹å¤šãã®ã‚½ã‚±ãƒƒãƒˆã‚’åŒæ¢±ã—ã¦ã„ã¾ã™ã€‚ ã“ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã§ã¯ã€ ファイアウォールã®å†…å´ã«ã‚ã‚‹ JBoss ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹å ´åˆã«å‹•ä½œã™ã‚‹ã‚ˆã†è¨å®šãŒå¿…è¦ãªãƒãƒ¼ãƒˆã‚’é–‹ãサービスを説明ã—ã¦ã„ãã¾ã™ã€‚ 次ã®è¡¨ã§ã¯ã€ ãƒãƒ¼ãƒˆã€ ソケットタイプ〠デフォルトã®è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã‚»ãƒƒãƒˆã«ã‚るサービスã®é–¢é€£ã‚µãƒ¼ãƒ“スãªã©ã‚’示ã—ã¾ã™ã€‚ <xref linkend="
+"\"Configuring_JBoss_for_use_Behind_a_Firewall-"
+"Additional_ports_in_the_all_configuration\"/> ã§ã¯ all è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã‚»ãƒƒãƒˆã§çµ‚了ã™ã‚‹è¿½åŠ ãƒãƒ¼ãƒˆã®åŒæƒ…å ±ã‚’ç¤ºã—ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:1988
#, no-c-format
msgid "The ports found in the default configuration"
-msgstr ""
+msgstr "デフォルトè¨å®šã«ã‚ã‚‹ãƒãƒ¼ãƒˆ"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:1995 J2EE_Security_On_JBOSS.xml:2106
#, no-c-format
msgid "Port"
-msgstr ""
+msgstr "ãƒãƒ¼ãƒˆ"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:1998 J2EE_Security_On_JBOSS.xml:2109
#, no-c-format
msgid "Type"
-msgstr ""
+msgstr "タイプ"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:2001 J2EE_Security_On_JBOSS.xml:2112
#, no-c-format
msgid "Service"
-msgstr ""
+msgstr "サービス"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:2008
#, no-c-format
msgid "1098"
-msgstr ""
+msgstr "1098"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:2011 J2EE_Security_On_JBOSS.xml:2022
@@ -6738,177 +8256,177 @@
#: J2EE_Security_On_JBOSS.xml:2177 J2EE_Security_On_JBOSS.xml:2188
#, no-c-format
msgid "<entry>TCP</entry>"
-msgstr ""
+msgstr "<entry>TCP</entry>"
#. Tag: literal
#: J2EE_Security_On_JBOSS.xml:2015 J2EE_Security_On_JBOSS.xml:2026
#, no-c-format
msgid "org.jboss.naming.NamingService"
-msgstr ""
+msgstr "org.jboss.naming.NamingService"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:2019
#, no-c-format
msgid "1099"
-msgstr ""
+msgstr "1099"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:2030
#, no-c-format
msgid "4444"
-msgstr ""
+msgstr "4444"
#. Tag: literal
#: J2EE_Security_On_JBOSS.xml:2037
#, no-c-format
msgid "org.jboss.invocation.jrmp.server.JRMPInvoker"
-msgstr ""
+msgstr "org.jboss.invocation.jrmp.server.JRMPInvoker"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:2041
#, no-c-format
msgid "4445"
-msgstr ""
+msgstr "4445"
#. Tag: literal
#: J2EE_Security_On_JBOSS.xml:2048
#, no-c-format
msgid "org.jboss.invocation.pooled.server.PooledInvoker"
-msgstr ""
+msgstr "org.jboss.invocation.pooled.server.PooledInvoker"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:2052
#, no-c-format
msgid "8009"
-msgstr ""
+msgstr "8009"
#. Tag: literal
#: J2EE_Security_On_JBOSS.xml:2059 J2EE_Security_On_JBOSS.xml:2070
#, no-c-format
msgid "org.jboss.web.tomcat.tc4.EmbeddedTomcatService"
-msgstr ""
+msgstr "org.jboss.web.tomcat.tc4.EmbeddedTomcatService"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:2063
#, no-c-format
msgid "8080"
-msgstr ""
+msgstr "8080"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:2074
#, no-c-format
msgid "8083"
-msgstr ""
+msgstr "8083"
#. Tag: literal
#: J2EE_Security_On_JBOSS.xml:2081
#, no-c-format
msgid "org.jboss.web.WebService"
-msgstr ""
+msgstr "org.jboss.web.WebService"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:2085
#, no-c-format
msgid "8093"
-msgstr ""
+msgstr "8093"
#. Tag: literal
#: J2EE_Security_On_JBOSS.xml:2092
#, no-c-format
msgid "org.jboss.mq.il.uil2.UILServerILService"
-msgstr ""
+msgstr "org.jboss.mq.il.uil2.UILServerILService"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:2099
#, no-c-format
msgid "Additional ports in the all configuration"
-msgstr ""
+msgstr "all è¨å®šã®è¿½åŠ ãƒãƒ¼ãƒˆ"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:2119
#, no-c-format
msgid "1100"
-msgstr ""
+msgstr "1100"
#. Tag: literal
#: J2EE_Security_On_JBOSS.xml:2126 J2EE_Security_On_JBOSS.xml:2137
#: J2EE_Security_On_JBOSS.xml:2148
#, no-c-format
msgid "org.jboss.ha.jndi.HANamingService"
-msgstr ""
+msgstr "org.jboss.ha.jndi.HANamingService"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:2130
#, no-c-format
msgid "1101"
-msgstr ""
+msgstr "1101"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:2141
#, no-c-format
msgid "1102"
-msgstr ""
+msgstr "1102"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:2144 J2EE_Security_On_JBOSS.xml:2155
#: J2EE_Security_On_JBOSS.xml:2166 J2EE_Security_On_JBOSS.xml:2202
#, no-c-format
msgid "<entry>UDP</entry>"
-msgstr ""
+msgstr "<entry>UDP</entry>"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:2152
#, no-c-format
msgid "1161"
-msgstr ""
+msgstr "1161"
#. Tag: literal
#: J2EE_Security_On_JBOSS.xml:2159
#, no-c-format
msgid "org.jboss.jmx.adaptor.snmp.agent.SnmpAgentService"
-msgstr ""
+msgstr "org.jboss.jmx.adaptor.snmp.agent.SnmpAgentService"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:2163
#, no-c-format
msgid "1162"
-msgstr ""
+msgstr "1162"
#. Tag: literal
#: J2EE_Security_On_JBOSS.xml:2170
#, no-c-format
msgid "org.jboss.jmx.adaptor.snmp.trapd.TrapdService"
-msgstr ""
+msgstr "org.jboss.jmx.adaptor.snmp.trapd.TrapdService"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:2174
#, no-c-format
msgid "3528"
-msgstr ""
+msgstr "3528"
#. Tag: literal
#: J2EE_Security_On_JBOSS.xml:2181
#, no-c-format
msgid "org.jboss.invocation.iiop.IIOPInvoker"
-msgstr ""
+msgstr "org.jboss.invocation.iiop.IIOPInvoker"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:2185
#, no-c-format
msgid "4447"
-msgstr ""
+msgstr "4447"
#. Tag: literal
#: J2EE_Security_On_JBOSS.xml:2192
#, no-c-format
msgid "org.jboss.invocation.jrmp.server.JRMPInvokerHA"
-msgstr ""
+msgstr "org.jboss.invocation.jrmp.server.JRMPInvokerHA"
#. Tag: entry
#: J2EE_Security_On_JBOSS.xml:2196
#, no-c-format
msgid "45566"
-msgstr ""
+msgstr "45566"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:2197
@@ -6916,19 +8434,19 @@
msgid ""
"Plus two additional anonymous UDP ports, one can be set using the "
"<literal>rcv_port</literal>, and the other cannot be set."
-msgstr ""
+msgstr "åŠ ãˆã¦è¿½åŠ ã® anonymous UDP ãƒãƒ¼ãƒˆã§ã™ã€‚ <literal>rcv_port</literal> を使ã£ã¦è¨å®šã§ãã‚‹ã‚‚ã®ã¨ã§ããªã„ã‚‚ã®ã«ãªã‚Šã¾ã™ã€‚"
#. Tag: literal
#: J2EE_Security_On_JBOSS.xml:2206
#, no-c-format
msgid "org.jboss.ha.framework.server.ClusterPartition"
-msgstr ""
+msgstr "org.jboss.ha.framework.server.ClusterPartition"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:2215
#, no-c-format
msgid "How to Secure the JBoss Server"
-msgstr ""
+msgstr "JBoss Server ã®å®‰å…¨åŒ–を図る方法"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:2216
@@ -6938,13 +8456,13 @@
"removed to prevent unauthorized access to administrative functions in a "
"deployment. This section describes the various admin services and how to "
"secure them."
-msgstr ""
+msgstr "JBoss ã«ã¯å®‰å…¨åŒ–を図る必è¦ãŒã‚る〠ã¾ãŸã¯ãƒ‡ãƒ—ãƒã‚¤ãƒ¡ãƒ³ãƒˆã§ç®¡ç†æ©Ÿèƒ½ã«èªè¨¼ã®ãªã„アクセスを防æ¢ã™ã‚‹ãŸã‚削除ã™ã‚‹å¿…è¦ãŒã‚る管ç†ã‚¢ã‚¯ã‚»ã‚¹ãƒã‚¤ãƒ³ãƒˆãŒã„ãã¤ã‹åŒæ¢±ã•ã‚Œã¦ã„ã¾ã™ã€‚ ã“ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã§ã¯å„種管ç†ã‚µãƒ¼ãƒ“スãŠã‚ˆã³ãれらã®å®‰å…¨åŒ–を図る方法を説明ã—ã¦ã„ãã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:2220
#, no-c-format
msgid "The JMX Console"
-msgstr ""
+msgstr "JMX コンソール"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:2221
@@ -6955,13 +8473,13 @@
"to arbitrary admin type access like shutting down the server, stopping "
"services, deploying new services, etc. It should either be secured like any "
"other web application, or removed."
-msgstr ""
+msgstr "é…備ディレクトリã«ã‚ã‚‹ <literal>jmx-console.war</literal> 㯠JMX マイクãƒã‚«ãƒ¼ãƒãƒ«ã« HTML ビューをæä¾›ã—ã¾ã™ã€‚ ã“ã®ã‚ˆã†ã«ã€ サーãƒãƒ¼ã®ã‚·ãƒ£ãƒƒãƒˆãƒ€ã‚¦ãƒ³ã€ サービスã®åœæ¢ã€ æ–°ã—ã„サービスã®é…å‚™ãªã©ã®ã‚ˆã†ãªä»»æ„ã®ç®¡ç†ã‚¿ã‚¤ãƒ—アクセスã«ã‚¢ã‚¯ã‚»ã‚¹ã‚’æä¾›ã—ã¾ã™ã€‚ ä»–ã®ã‚¦ã‚§ãƒ–アプリケーションã®ç”¨ã«å®‰å…¨åŒ–を図るã‹ã€ 削除ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:2227
#, no-c-format
msgid "The Web Console"
-msgstr ""
+msgstr "ウェブコンソール"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:2228
@@ -6977,12 +8495,14 @@
"commented out setup for a security domain in <literal>WEB-INF/jboss-web.xml</"
"literal>."
msgstr ""
+"<literal>deploy/management</literal> ディレクトリã«ã‚ã‚‹ <literal>web-console.war</literal> 㯠JMX マイクãƒã‚«ãƒ¼ãƒãƒ«ã¸ã®ã‚‚ã†ã²ã¨ã¤ã®ã‚¦ã‚§ãƒ–アプリケーションビューã«ãªã‚Šã¾ã™ã€‚ ã“ã‚Œã¯ã‚¢ãƒ—レット㨠HTML ビューã®çµ„ã¿åˆã‚ã›ã‚’使用ã—㦠<literal>jmx-console.war</literal> ã¨ã—ã¦ç®¡ç†æ©Ÿèƒ½ã¸ã®åŒãƒ¬ãƒ™ãƒ«ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’æä¾›ã—ã¾ã™ã€‚ ã“ã®ã‚ˆã†ã«ã€ 安全化を図るã‹å‰Šé™¤ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ <literal>web-console.war</literal> ã¯ãã® <literal>WEB-INF/web.xml</literal> ã«åŸºæœ¬çš„ãªã‚»ã‚ュリティ用ã®ãƒ†ãƒ³ãƒ—レートをコメントアウトã•ã‚ŒãŸå½¢ã§å«ã‚€ä»–〠<literal>WEB-INF/jboss-web.xml</"
+"literal> ã«ã¯ã‚»ã‚ュリティドメイン用ã®è¨å®šãŒã‚³ãƒ¡ãƒ³ãƒˆã‚¢ã‚¦ãƒˆã•ã‚ŒãŸå½¢ã§å«ã¾ã‚Œã¦ã„ã¾ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:2234
#, no-c-format
msgid "The HTTP Invokers"
-msgstr ""
+msgstr "HTTP 呼ã³å‡ºã—å´"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:2235
@@ -7004,12 +8524,15 @@
"domain setup in the <literal>http-invoker.sar/invoker.war/WEB-INF/jboss-web."
"xml</literal> descriptor."
msgstr ""
+"é…備ディレクトリã«ã‚ã‚‹ <literal>http-invoker.sar</literal> 㯠EJB ãŠã‚ˆã³ JNDI <literal>Naming</"
+"literal> サービス㫠RMI/HTTP アクセスをæä¾›ã™ã‚‹ã‚µãƒ¼ãƒ“スã«ãªã‚Šã¾ã™ã€‚ ã“ã‚Œã«ã¯ <literal>MBeanServer</literal> ã§åˆ†é›¢ã•ã‚Œã‚‹ã¹ã呼ã³å‡ºã—を表ã™ãƒžãƒ¼ã‚·ãƒ£ãƒ«ã•ã‚ŒãŸ <literal>org.jboss.invocation.Invocation</literal> オブジェクトã®ãƒã‚¹ãƒˆã‚’処ç†ã™ã‚‹ã‚µãƒ¼ãƒ–レットãŒå«ã¾ã‚Œã¾ã™ã€‚ é©åˆ‡ãª HTTP ãƒã‚¹ãƒˆã‚’フォーマット化ã™ã‚‹æ–¹æ³•ã‚’解明ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã§ã‚ã‚‹ãŸã‚〠効果的㫠HTTP 経由ã§åˆ†é›¢ã•ã‚Œã‚‹å‘¼ã³å‡ºã—å´ã®æ¼”算をサãƒãƒ¼ãƒˆã™ã‚‹ MBean ã«ã‚¢ã‚¯ã‚»ã‚¹ã‚’許å¯ã—ã¦ã—ã¾ã„ã¾ã™ã€‚ ã“ã®ã‚¢ã‚¯ã‚»ã‚¹ãƒã‚¤ãƒ³ãƒˆã®å®‰å…¨åŒ–を図るãŸã‚ã«ã¯ã€ <literal>http-invoker.sar/invoker.war/WEB-INF/web.xml</literal> 記述åã«ã‚ã‚‹ <literal>JMXInvokerServlet</literal> サーブレットã®å®‰å…¨åŒ–ã‚’è¡Œã†å¿…è¦ãŒã‚ã‚‹ã§ã—ょã†ã€‚ デフォルト㧠<literal>/restricted/JMXInvokerServlet</literal> パス用ã«å®šç¾©ã•ã‚Œã¦ã„る安全ãªãƒžãƒƒãƒ”ングãŒã‚ã‚‹ã!
®ã§ã€ å˜ç´”ã«ãã®ä»–ã®ãƒ‘スを削除ã—㦠<literal>http-invoker.sar/invoker.war/WEB-INF/jboss-web."
+"xml</literal> 記述å内㧠<literal>http-invoker</literal> ã‚»ã‚ュリティドメインã®è¨å®šã‚’è¡Œã†ã ã‘ã§ã™ã€‚"
#. Tag: title
#: J2EE_Security_On_JBOSS.xml:2241
#, no-c-format
msgid "The JMX Invoker"
-msgstr ""
+msgstr "JMX 呼ã³å‡ºã—å´"
#. Tag: para
#: J2EE_Security_On_JBOSS.xml:2242
@@ -7022,4 +8545,5 @@
"<literal>http-invoker.sar</literal> as described in the previous section. In "
"the future this service will be deployed as an XMBean with a security "
"interceptor that supports role based access checks."
-msgstr ""
+msgstr "<literal>jmx-invoker-adaptor-server.sar</literal> 㯠RMI/JRMP 分離呼ã³å‡ºã—å´ã‚µãƒ¼ãƒ“スを使ã£ã¦ RMI 互æ›ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã‚ˆã‚Š JMX MBeanServer インターフェースを公開ã™ã‚‹ã‚µãƒ¼ãƒ“スã«ãªã‚Šã¾ã™ã€‚ ã“ã®ã‚µãƒ¼ãƒ“スã®å®‰å…¨åŒ–を図る方法ã¯ã€ ç¾åœ¨ã€ プãƒãƒˆã‚³ãƒ«ã‚’ RMI/HTTP ã«åˆ‡ã‚Šæ›¿ãˆã¦å‰è¿°ã—ãŸã‚ˆã†ã« <literal>http-invoker.sar</literal> ã®å®‰å…¨åŒ–を図る方法ã®ã¿ã«ãªã‚Šã¾ã™ã€‚ å°†æ¥çš„ã«ã¯ã€ ã“ã®ã‚µãƒ¼ãƒ“スã¯ãƒãƒ¼ãƒ«ãƒ™ãƒ¼ã‚¹ã®ã‚¢ã‚¯ã‚»ã‚¹ãƒã‚§ãƒƒã‚¯ã«å¯¾å¿œã™ã‚‹ã‚»ã‚ュリティインターセプタ㧠XMBean ã¨ã—ã¦å°Žå…¥ã•ã‚Œã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚"
+
More information about the jboss-cvs-commits
mailing list