Warning | ||
---|---|---|
| ||
A copy of the content of this page has been moved to JAAS security setup page in the main Magnolia documentation and will be maintained there. |
Excerpt |
---|
Tutorial that provides a brief introduction to JAVA setup, Java Authentication and Authorization Service (JAAS) based on a dual module approach. |
...
Magnolia CMS uses Java Authentication and Authorization Service (JAAS). JAAS creates two distinct processes for:
- username Username and password request, and
- authentication Authentication and authorization.
Although it is possible to use other servlets, the default engine is Tomcat. Configuration is done in WEB-INF/config/jaas.config
file:
Code Block |
---|
magnolia {info.magnolia.jaas.sp.jcr.JCRAuthenticationModule requisite; info.magnolia.jaas.sp.jcr.JCRAuthorizationModule required;}; |
The default configuration uses two classes:
- one for user login and password authentication, and
- one for authorization of user and password.
...