3.3.21. JBoss AS 7 and EAP 6 - Security Service

Overview

Table 3.612. Overview

Description: The configuration of the security subsystem.
Singleton: yes
Plugin: JBossAS7

Child Resource Types

Connection Properties

Table 3.613. 

Name Description Required Internal Name
Path yes path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.614. 

Name Description Required Internal Name
Deep Copy Subject Mode Sets the copy mode of subjects done by the security managers to be deep copies that makes copies of the subject principals and credentials if they are cloneable. It should be set to true if subject include mutable content that can be corrupted when multiple threads have the same identity and cache flushes/logout clearing the subject in one thread results in subject references affecting other threads. The default value is false. no deep-copy-subject-mode

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

3.3.21.1. JBoss AS 7 and EAP 6 - Security Domain Service

Overview

Table 3.615. Overview

Description:
Singleton: no
Plugin: JBossAS7
Child Resource Types
Connection Properties

Table 3.616. 

Name Description Required Internal Name
Path yes path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.
Metrics
none
Configuration Properties

Table 3.617. 

Name Description Required Internal Name
Cache Type Adds a cache to speed up authentication checks. Allowed values are 'default' to use simple map as the cache and 'infinispan' to use an Infinispan cache. no cache-type

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.
Operations

Table 3.618. Metrics

Name Description
Flush Cache Remove entries stored in the authentication cache for this security domain. A single entry can be flushed by using the principal argument with the username as the value. If no argument is passed to the operation, all entries are flushed.
List Cached Principals Lists the principals stored in the authentication cache for this security domain.
Package Types
none
3.3.21.1.1. JBoss AS 7 and EAP 6 - ACL Service
Overview

Table 3.619. Overview

Description:
Singleton: yes
Plugin: JBossAS7
Child Resource Types
none
Connection Properties

Table 3.620. 

Name Description Required Internal Name
Path yes path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.
Metrics
none
Configuration Properties

Table 3.621. 

Name Description Required Internal Name
Acl Modules List of acl modules no acl-modules

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.
Operations
none
Package Types
none
3.3.21.1.2. JBoss AS 7 and EAP 6 - Audit Service
Overview

Table 3.622. Overview

Description:
Singleton: yes
Plugin: JBossAS7
Child Resource Types
none
Connection Properties

Table 3.623. 

Name Description Required Internal Name
Path yes path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.
Metrics
none
Configuration Properties

Table 3.624. 

Name Description Required Internal Name
Provider Modules List of provider modules no provider-modules

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.
Operations
none
Package Types
none
3.3.21.1.3. JBoss AS 7 and EAP 6 - Authentication (Classic) Service
Overview

Table 3.625. Overview

Description:
Singleton: yes
Plugin: JBossAS7
Child Resource Types
none
Connection Properties

Table 3.626. 

Name Description Required Internal Name
Path yes path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.
Metrics
none
Configuration Properties

Table 3.627. 

Name Description Required Internal Name
Login Modules List of authentication modules no login-modules

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.
Operations
none
Package Types
none
3.3.21.1.4. JBoss AS 7 and EAP 6 - Authentication (Jaspi) Service
Overview

Table 3.628. Overview

Description:
Singleton: yes
Plugin: JBossAS7
Child Resource Types
Connection Properties

Table 3.629. 

Name Description Required Internal Name
Path yes path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.
Metrics
none
Configuration Properties

Table 3.630. 

Name Description Required Internal Name
Auth Modules List of authentication modules to be used. yes auth-modules

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.
Operations
none
Package Types
none
3.3.21.1.4.1. JBoss AS 7 and EAP 6 - Login Module Stack Service
Overview

Table 3.631. Overview

Description:
Singleton: no
Plugin: JBossAS7
Child Resource Types
none
Connection Properties

Table 3.632. 

Name Description Required Internal Name
Path yes path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.
Metrics
none
Configuration Properties

Table 3.633. 

Name Description Required Internal Name
Login Modules List of authentication modules yes login-modules

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.
Operations
none
Package Types
none
3.3.21.1.5. JBoss AS 7 and EAP 6 - Authorization Service
Overview

Table 3.634. Overview

Description:
Singleton: yes
Plugin: JBossAS7
Child Resource Types
none
Connection Properties

Table 3.635. 

Name Description Required Internal Name
Path yes path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.
Metrics
none
Configuration Properties

Table 3.636. 

Name Description Required Internal Name
Policy Modules List of authorization modules no policy-modules

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.
Operations
none
Package Types
none
3.3.21.1.6. JBoss AS 7 and EAP 6 - Identity Trust Service
Overview

Table 3.637. Overview

Description:
Singleton: yes
Plugin: JBossAS7
Child Resource Types
none
Connection Properties

Table 3.638. 

Name Description Required Internal Name
Path yes path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.
Metrics
none
Configuration Properties

Table 3.639. 

Name Description Required Internal Name
Trust Modules List of trust modules no trust-modules

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.
Operations
none
Package Types
none
3.3.21.1.7. JBoss AS 7 and EAP 6 - JSSE Service
Overview

Table 3.640. Overview

Description:
Singleton: no
Plugin: JBossAS7
Child Resource Types
none
Connection Properties

Table 3.641. 

Name Description Required Internal Name
Path yes path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.
Metrics
none
Configuration Properties

Table 3.642. 

Name Description Required Internal Name
Cipher Suites Comma separated list of cipher suites to enable on SSLSockets. no cipher-suites
Client Alias Preferred alias to use when the KeyManager chooses the client alias. no client-alias
Client Auth Boolean attribute to indicate if client's certificates should also be authenticated on the server side. no client-auth
Key Manager JSEE Key Manager factory no key-manager
Keystore Configures a JSSE key store no keystore
Protocols Comma separated list of protocols to enable on SSLSockets. no protocols
Server Alias Preferred alias to use when the KeyManager chooses the server alias. no server-alias
Service Auth Token Token to retrieve PrivateKeys from the KeyStore. no service-auth-token
Trust Manager JSEE Trust Manager factory no trust-manager
Truststore Configures a JSSE trust store no truststore

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.
Operations
none
Package Types
none
3.3.21.1.8. JBoss AS 7 and EAP 6 - Mapping Service
Overview

Table 3.643. Overview

Description:
Singleton: yes
Plugin: JBossAS7
Child Resource Types
none
Connection Properties

Table 3.644. 

Name Description Required Internal Name
Path yes path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.
Metrics
none
Configuration Properties

Table 3.645. 

Name Description Required Internal Name
Mapping Modules List of modules that map principal, role, and credential information no mapping-modules

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.
Operations
none
Package Types
none