Wednesday, September 24, 2008

What is Oracle JAAS?

What is JAAS?
Java Authentication & Authorization Service is a Java Package that enables applications to authenticate & enforce access controls upon users.

What is Oracle AS JAAS Provider?
The Oracle AS JAAS Provider is an implementation of JAAS interface. The OC4J JAAS implementation supports two types of provider types,
  • XML-based provider
  • LDAP-based provider
The XML-based provider stores user,realm & policy information in an XML file, normally jazn-data.xml.
The LDAP-based provider stores user, realm & policy information in the LDAP-based Oracle Internet Directory (OID).

JAAS Framework Features
Role-Based Access Control (RBAC) enables you to assign permissions to roles. 
Instead of directly assigning permissions to users, the permissions are assigned to role & the users are granted their permissions by being made members of that role. Multiple roles can be granted to a user. A role can also be granted another role, thus forming a role hierarchy. 

No comments:

Post a Comment