Talk:Java Authentication and Authorization Service
Page contents not supported in other languages.
From Wikipedia, the free encyclopedia
This article is rated Start-class on Wikipedia's content assessment scale.
It is of interest to the following WikiProjects:
It is of interest to the following WikiProjects:
WikiProject icon This article is within the scope of WikiProject Java , a collaborative effort to improve the coverage of Java on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.JavaWikipedia:WikiProject JavaTemplate:WikiProject JavaJava
Low This article has been rated as Low-importance on the project's importance scale.
WikiProject icon This article is within the scope of WikiProject Computing , a collaborative effort to improve the coverage of computers, computing, and information technology on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.ComputingWikipedia:WikiProject ComputingTemplate:WikiProject ComputingComputing
Low This article has been rated as Low-importance on the project's importance scale.
My first impression of JAAS is that it is rather complex. Wouldn't it suffice to have 3 components:
- a client,
- a server session and
- a server authorisation
The client communicates with the server authorisation module, which updates the client's role in the server session. The client's role is checked before any method is called. Could anyone explain why JAAS needs 7 modules and 15 communication messages instead of only 3 modules and 3 communication messages in my approach? —Preceding unsigned comment added by 81.246.190.66 (talk • contribs)
- JAAS's callback handling is complicated, but that's the price of flexibility. Also, the components of JAAS are similar to your list:
- the client application
- the common library that reads config files and routes to authentication modules
- the authentication modules
- And the messages could be characterized as:
- login-start
- callback-query
- callback-response
- login-commit
- logout
- So I don't see how you can say it's complex. It has about the same complexity of PAM, but JAAS looks a lot better specified. I don't understand the negativity that many people hold against JAAS. DLeonard (talk) 16:24, 21 January 2010 (UTC) [reply ]
Java code-based security?
[edit ]- [JAAS] is a Java security framework for user-centric security to augment the Java code-based security.
What is Java code-based security? Thanks, --Abdull (talk) 13:47, 17 February 2012 (UTC) [reply ]