Red Hat Training

A Red Hat training course is available for Red Hat JBoss Operations Network

3.3.21. JBoss AS 7 and EAP 6 - Security Service

Overview

Table 3.616. Overview

Description:	The configuration of the security subsystem.
Singleton:	yes
Plugin:	JBossAS7

Child Resource Types

Connection Properties

Table 3.617.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.618.

Name	Description	Required	Internal Name
Deep Copy Subject Mode	Sets the copy mode of subjects done by the security managers to be deep copies that makes copies of the subject principals and credentials if they are cloneable. It should be set to true if subject include mutable content that can be corrupted when multiple threads have the same identity and cache flushes/logout clearing the subject in one thread results in subject references affecting other threads. The default value is false.	no	deep-copy-subject-mode

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

3.3.21.1. JBoss AS 7 and EAP 6 - Security Domain Service

Overview

Table 3.619. Overview

Description:
Singleton:	no
Plugin:	JBossAS7

Child Resource Types

Connection Properties

Table 3.620.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.621.

Name	Description	Required	Internal Name
Cache Type	Adds a cache to speed up authentication checks. Allowed values are 'default' to use simple map as the cache and 'infinispan' to use an Infinispan cache.	no	cache-type

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

Table 3.622. Metrics

Name	Description
Flush Cache	Remove entries stored in the authentication cache for this security domain. A single entry can be flushed by using the principal argument with the username as the value. If no argument is passed to the operation, all entries are flushed.
List Cached Principals	Lists the principals stored in the authentication cache for this security domain.

Package Types

none

3.3.21.1.1. JBoss AS 7 and EAP 6 - ACL Service

Overview

Table 3.623. Overview

Description:
Singleton:	yes
Plugin:	JBossAS7

Child Resource Types

Section 3.3.21.1.1.1, “JBoss AS 7 and EAP 6 - Acl Modules Service”

Connection Properties

Table 3.624.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.625.

Name	Description	Required	Internal Name
Code	Class name of the module to be instantiated.	yes	code
Flag	The flag controls how the module participates in the overall procedure. Allowed values are requisite, required, sufficient or optional.	yes	flag

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

3.3.21.1.1.1. JBoss AS 7 and EAP 6 - Acl Modules Service

Overview

Table 3.626. Overview

Description:
Singleton:	no
Plugin:	JBossAS7

Child Resource Types

Section 3.3.21.1.1.1.1, “JBoss AS 7 and EAP 6 - Module Options (Acl) Service”

Connection Properties

Table 3.627.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.628.

Name	Description	Required	Internal Name
Code	Class name of the module to be instantiated.	yes	code
Flag	The flag controls how the module participates in the overall procedure. Allowed values are requisite, required, sufficient or optional.	yes	flag

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

3.3.21.1.1.1.1. JBoss AS 7 and EAP 6 - Module Options (Acl) Service

Overview

Table 3.629. Overview

Description:
Singleton:	yes
Plugin:	JBossAS7

Child Resource Types

none

Connection Properties

Table 3.630.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.631.

Name	Description	Required	Internal Name
Module Options		no	Module Options

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

3.3.21.1.2. JBoss AS 7 and EAP 6 - Audit Service

Overview

Table 3.632. Overview

Description:
Singleton:	yes
Plugin:	JBossAS7

Child Resource Types

Section 3.3.21.1.2.1, “JBoss AS 7 and EAP 6 - Provider Modules Service”

Connection Properties

Table 3.633.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.634.

Name	Description	Required	Internal Name
Code	Class name of the module to be instantiated.	yes	code

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

3.3.21.1.2.1. JBoss AS 7 and EAP 6 - Provider Modules Service

Overview

Table 3.635. Overview

Description:
Singleton:	no
Plugin:	JBossAS7

Child Resource Types

Section 3.3.21.1.2.1.1, “JBoss AS 7 and EAP 6 - Module Options (Provider Modules) Service”

Connection Properties

Table 3.636.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.637.

Name	Description	Required	Internal Name
Code	Class name of the module to be instantiated.	yes	code

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

3.3.21.1.2.1.1. JBoss AS 7 and EAP 6 - Module Options (Provider Modules) Service

Overview

Table 3.638. Overview

Description:
Singleton:	yes
Plugin:	JBossAS7

Child Resource Types

none

Connection Properties

Table 3.639.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.640.

Name	Description	Required	Internal Name
Module Options		no	Module Options

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

3.3.21.1.3. JBoss AS 7 and EAP 6 - Authentication (Classic) Service

Overview

Table 3.641. Overview

Description:
Singleton:	yes
Plugin:	JBossAS7

Child Resource Types

Section 3.3.21.1.3.1, “JBoss AS 7 and EAP 6 - Login Modules (Classic) Service”

Connection Properties

Table 3.642.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.643.

Name	Description	Required	Internal Name
Code	Class name of the module to be instantiated.	yes	code
Flag	The flag controls how the module participates in the overall procedure. Allowed values are requisite, required, sufficient or optional.	yes	flag

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

3.3.21.1.3.1. JBoss AS 7 and EAP 6 - Login Modules (Classic) Service

Overview

Table 3.644. Overview

Description:
Singleton:	no
Plugin:	JBossAS7

Child Resource Types

Section 3.3.21.1.3.1.1, “JBoss AS 7 and EAP 6 - Module Options (Classic) Service”

Connection Properties

Table 3.645.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.646.

Name	Description	Required	Internal Name
Code	Class name of the module to be instantiated.	yes	code
Flag	The flag controls how the module participates in the overall procedure. Allowed values are requisite, required, sufficient or optional.	yes	flag

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

3.3.21.1.3.1.1. JBoss AS 7 and EAP 6 - Module Options (Classic) Service

Overview

Table 3.647. Overview

Description:
Singleton:	yes
Plugin:	JBossAS7

Child Resource Types

none

Connection Properties

Table 3.648.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.649.

Name	Description	Required	Internal Name
Module Options		no	Module Options

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

3.3.21.1.4. JBoss AS 7 and EAP 6 - Authentication (Jaspi) Service

Overview

Table 3.650. Overview

Description:
Singleton:	yes
Plugin:	JBossAS7

Child Resource Types

Section 3.3.21.1.4.1, “JBoss AS 7 and EAP 6 - Login Module Stack Service”

Connection Properties

Table 3.651.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.652.

Name	Description	Required	Internal Name
Code	Class name of the module to be instantiated.	yes	code
Flag	The flag controls how the module participates in the overall procedure. Allowed values are requisite, required, sufficient or optional.	yes	flag

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

3.3.21.1.4.1. JBoss AS 7 and EAP 6 - Login Module Stack Service

Overview

Table 3.653. Overview

Description:
Singleton:	no
Plugin:	JBossAS7

Child Resource Types

Section 3.3.21.1.4.1.1, “JBoss AS 7 and EAP 6 - Module Options (Login Module Stack) Service”

Connection Properties

Table 3.654.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.655.

Name	Description	Required	Internal Name
Code	Class name of the module to be instantiated.	yes	code
Flag	The flag controls how the module participates in the overall procedure. Allowed values are requisite, required, sufficient or optional.	yes	flag

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

3.3.21.1.4.1.1. JBoss AS 7 and EAP 6 - Module Options (Login Module Stack) Service

Overview

Table 3.656. Overview

Description:
Singleton:	yes
Plugin:	JBossAS7

Child Resource Types

none

Connection Properties

Table 3.657.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.658.

Name	Description	Required	Internal Name
Module Options		no	Module Options

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

3.3.21.1.5. JBoss AS 7 and EAP 6 - Authorization Service

Overview

Table 3.659. Overview

Description:
Singleton:	yes
Plugin:	JBossAS7

Child Resource Types

Section 3.3.21.1.5.1, “JBoss AS 7 and EAP 6 - Authorization Modules Service”

Connection Properties

Table 3.660.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.661.

Name	Description	Required	Internal Name
Code	Class name of the module to be instantiated.	yes	code
Flag	The flag controls how the module participates in the overall procedure. Allowed values are requisite, required, sufficient or optional.	yes	flag

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

3.3.21.1.5.1. JBoss AS 7 and EAP 6 - Authorization Modules Service

Overview

Table 3.662. Overview

Description:
Singleton:	no
Plugin:	JBossAS7

Child Resource Types

Section 3.3.21.1.5.1.1, “JBoss AS 7 and EAP 6 - Module Options (Authorization) Service”

Connection Properties

Table 3.663.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.664.

Name	Description	Required	Internal Name
Code	Class name of the module to be instantiated.	yes	code
Flag	The flag controls how the module participates in the overall procedure. Allowed values are requisite, required, sufficient or optional.	yes	flag

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

3.3.21.1.5.1.1. JBoss AS 7 and EAP 6 - Module Options (Authorization) Service

Overview

Table 3.665. Overview

Description:
Singleton:	yes
Plugin:	JBossAS7

Child Resource Types

none

Connection Properties

Table 3.666.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.667.

Name	Description	Required	Internal Name
Module Options		no	Module Options

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

3.3.21.1.6. JBoss AS 7 and EAP 6 - Identity Trust Service

Overview

Table 3.668. Overview

Description:
Singleton:	yes
Plugin:	JBossAS7

Child Resource Types

Section 3.3.21.1.6.1, “JBoss AS 7 and EAP 6 - Identity Trust Modules Service”

Connection Properties

Table 3.669.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.670.

Name	Description	Required	Internal Name
Code	Class name of the module to be instantiated.	yes	code
Flag	The flag controls how the module participates in the overall procedure. Allowed values are requisite, required, sufficient or optional.	yes	flag

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

3.3.21.1.6.1. JBoss AS 7 and EAP 6 - Identity Trust Modules Service

Overview

Table 3.671. Overview

Description:
Singleton:	no
Plugin:	JBossAS7

Child Resource Types

Section 3.3.21.1.6.1.1, “JBoss AS 7 and EAP 6 - Module Options (Identity Trust) Service”

Connection Properties

Table 3.672.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.673.

Name	Description	Required	Internal Name
Code	Class name of the module to be instantiated.	yes	code
Flag	The flag controls how the module participates in the overall procedure. Allowed values are requisite, required, sufficient or optional.	yes	flag

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

3.3.21.1.6.1.1. JBoss AS 7 and EAP 6 - Module Options (Identity Trust) Service

Overview

Table 3.674. Overview

Description:
Singleton:	yes
Plugin:	JBossAS7

Child Resource Types

none

Connection Properties

Table 3.675.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.676.

Name	Description	Required	Internal Name
Module Options		no	Module Options

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

3.3.21.1.7. JBoss AS 7 and EAP 6 - JSSE Service

Overview

Table 3.677. Overview

Description:
Singleton:	no
Plugin:	JBossAS7

Child Resource Types

none

Connection Properties

Table 3.678.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.679.

Name	Description	Required	Internal Name
Cipher Suites	Comma separated list of cipher suites to enable on SSLSockets.	no	cipher-suites
Client Alias	Preferred alias to use when the KeyManager chooses the client alias.	no	client-alias
Client Auth	Boolean attribute to indicate if client's certificates should also be authenticated on the server side.	no	client-auth
Key Manager	JSEE Key Manager factory	no	key-manager
Keystore	Configures a JSSE key store	no	keystore
Protocols	Comma separated list of protocols to enable on SSLSockets.	no	protocols
Server Alias	Preferred alias to use when the KeyManager chooses the server alias.	no	server-alias
Service Auth Token	Token to retrieve PrivateKeys from the KeyStore.	no	service-auth-token
Trust Manager	JSEE Trust Manager factory	no	trust-manager
Truststore	Configures a JSSE trust store	no	truststore

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

3.3.21.1.8. JBoss AS 7 and EAP 6 - Mapping Service

Overview

Table 3.680. Overview

Description:
Singleton:	yes
Plugin:	JBossAS7

Child Resource Types

Section 3.3.21.1.8.1, “JBoss AS 7 and EAP 6 - Mapping Modules Service”

Connection Properties

Table 3.681.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.682.

Name	Description	Required	Internal Name
Code	Class name of the module to be instantiated.	yes	code
Type	Type of mapping this module performs. Allowed values are principal, role, attribute or credential..	yes	type

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

3.3.21.1.8.1. JBoss AS 7 and EAP 6 - Mapping Modules Service

Overview

Table 3.683. Overview

Description:
Singleton:	no
Plugin:	JBossAS7

Child Resource Types

Section 3.3.21.1.8.1.1, “JBoss AS 7 and EAP 6 - Module Options (Mapping) Service”

Connection Properties

Table 3.684.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.685.

Name	Description	Required	Internal Name
Code	Class name of the module to be instantiated.	yes	code
Type	Type of mapping this module performs. Allowed values are principal, role, attribute or credential..	yes	type

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

3.3.21.1.8.1.1. JBoss AS 7 and EAP 6 - Module Options (Mapping) Service

Overview

Table 3.686. Overview

Description:
Singleton:	yes
Plugin:	JBossAS7

Child Resource Types

none

Connection Properties

Table 3.687.

Name	Description	Required	Internal Name
Path		yes	path

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Metrics

none

Configuration Properties

Table 3.688.

Name	Description	Required	Internal Name
Module Options		no	Module Options

Note

You must use the internal name to reference Configuration Properties in Dynamic Group Definition expressions.

Operations

none

Package Types

none

Language:

Language and Page Formatting Options

Language:

Red Hat Training

3.3.21. JBoss AS 7 and EAP 6 - Security Service

Overview

Child Resource Types

Connection Properties

Metrics

Configuration Properties

Operations

Package Types

3.3.21.1. JBoss AS 7 and EAP 6 - Security Domain Service

Overview

Child Resource Types

Connection Properties

Metrics

Configuration Properties

Operations

Package Types

3.3.21.1.1. JBoss AS 7 and EAP 6 - ACL Service

Overview

Child Resource Types

Connection Properties

Metrics

Configuration Properties

Operations

Package Types

3.3.21.1.1.1. JBoss AS 7 and EAP 6 - Acl Modules Service

3.3.21.1.1.1.1. JBoss AS 7 and EAP 6 - Module Options (Acl) Service

3.3.21.1.2. JBoss AS 7 and EAP 6 - Audit Service

Overview

Child Resource Types

Connection Properties

Metrics

Configuration Properties

Operations

Package Types

3.3.21.1.2.1. JBoss AS 7 and EAP 6 - Provider Modules Service

3.3.21.1.2.1.1. JBoss AS 7 and EAP 6 - Module Options (Provider Modules) Service

3.3.21.1.3. JBoss AS 7 and EAP 6 - Authentication (Classic) Service

Overview

Child Resource Types

Connection Properties

Metrics

Configuration Properties

Operations

Package Types

3.3.21.1.3.1. JBoss AS 7 and EAP 6 - Login Modules (Classic) Service

3.3.21.1.3.1.1. JBoss AS 7 and EAP 6 - Module Options (Classic) Service

3.3.21.1.4. JBoss AS 7 and EAP 6 - Authentication (Jaspi) Service

Overview

Child Resource Types

Connection Properties

Metrics

Configuration Properties

Operations

Package Types

3.3.21.1.4.1. JBoss AS 7 and EAP 6 - Login Module Stack Service

3.3.21.1.4.1.1. JBoss AS 7 and EAP 6 - Module Options (Login Module Stack) Service

3.3.21.1.5. JBoss AS 7 and EAP 6 - Authorization Service

Overview

Child Resource Types

Connection Properties

Metrics

Configuration Properties

Operations

Package Types

3.3.21.1.5.1. JBoss AS 7 and EAP 6 - Authorization Modules Service

3.3.21.1.5.1.1. JBoss AS 7 and EAP 6 - Module Options (Authorization) Service

3.3.21.1.6. JBoss AS 7 and EAP 6 - Identity Trust Service

Overview

Child Resource Types

Connection Properties

Metrics

Configuration Properties

Operations

Package Types

3.3.21.1.6.1. JBoss AS 7 and EAP 6 - Identity Trust Modules Service

3.3.21.1.6.1.1. JBoss AS 7 and EAP 6 - Module Options (Identity Trust) Service