JavaTM Authentication and Authorization Service (JAAS) 1.0_01
README
Introduction
Thank you for downloading the JavaTM Authentication and
Authorization Service (JAAS) 1.0_01.
JAAS 1.0_01 supplements the JavaTM 2 Platform, Standard Edition, v 1.3,
and requires that you have it installed.
JAAS 1.0_01 is written entirely in the JavaTM programming language.
Installation
Please refer to the
install notes
page for installation directions.
Updates
The major updates made since the Beta release were:
- API Updates:
- javax.security.auth:
- SubjectDomainCombiner.getSubject has a new security check.
- Policy.getPermissions no longer throws java.io.IOException.
- Policy.getPermissions no longer has a security check.
- Policy.refresh no longer throws java.io.IOException.
- AuthPermission(getPrivateCredentials) removed.
- PrivateCredentialPermission has two new methods:
- getCredentialClass
- getPrincipals
- javax.security.auth.login:
- LoginContext constructors have new security checks.
- LoginContext binds the provided application CallbackHandler
with the caller's AccessControlContext.
- LoginContext invokes LoginModules inside a
AccessController.doPrivileged block
(LoginModules should not call doPrivileged themselves).
- LoginContext class no longer final.
- Configuration.getAppConfigurationEntry no longer throws
java.io.IOException.
- Configuration.refresh no longer throws java.io.IOException.
- com.sun.security.auth:
- created new public Resources class.
- created new public X500Principal class.
- PolicyFile supports grant statments with wildcard (*)
Principal entries.
- PolicyFile supports additional SELF behavior for
PrivateCredentialPermissions.
Minor bug fixes.
Where to Find Documentation
-
JAAS product page
-
JAAS API Developer's Guide
-
Authentication Module Developer's Guide
Note that the JAAS API Developer's Guide also contains directions for
running a sample JAAS program, located in the jaas1.0_01/doc/samples directory
of the JAAS Class Libraries download.
Send Us Feedback!
Submit comments or suggestions via the
java security feedback
page.
Bug reports with sample code are highly appreciated! Please
submit bugs
with sample code using the normal Java Developer Connection (JDC) process.
Last update: 1/10/00