jGuard Documentation

General section

• Overview
• jGuard compared to other libraries?
• License
• How does it work?
• Configuration files
• Useful links
• Quick start guide
• FAQ

APIs

• jGuard-core api(1.0.0)
• jGuard-ext api(1.0.0)
• jGuard-ext-java-5 api(1.0.0)
• jGuard-jee api(1.0.0)
• jGuard-jee-extras api(1.0.0)
• jGuard-struts-example api(1.0.0)
• jGuard-swing-example api(1.0.0)
• jGuard api (1.0.0) source xRef
• Glossary
• Old APIs
  • api (0.64)
  • api (0.65)
  • api (0.70)
  • api (0.80)

jGuard integration on JEE applications

• Required librairies
• web.xml
• Taglibs : integrate jGuard in your jsp
• Integrate jGuard in your servlets
• jGuard and application servers
• Smooth integration with jee security methods

jGuard integration with webapps using JMX technology

• Securing JMX remote access in webapps with jGuard

jGuard integration on Struts webapps.

• screenshots

jGuard integration with DWR

• Securing DWR with jGuard

jGuard integration on standalone applications

• Running a Swing application with jGuard
• Secure JMX connections with JGuard in standalone application

Audit

• Audit configuration and use

Security Architecture

• Which jGuard authentication configuration?
• jGuard can manage multiple webapps
• Which Access Control model is the best solution to manage security
• jGuard and j2ee security?
• jGuard and AOP?
• jGuard and ORM (Hibernate)
• Multiple authentication scheme support
• Security scopes
• Import/Export authentication and authorization data

Authentication

Authentication mechanism

• Authentication types/schemes
• Authentication and loginModules
• Password encryption

Subject/User

• Subject Template for user registration
• Subject details
• Special Subject :'Guest' user with 'guest' role

Principals/Roles

• JGuardPrincipal
• Role Inheritance
• Role activation/passivation by the user
• Dynamic role definition

AuthenticationManagers

AuthenticationManager based on XML

• XmlAuthenticationManager

AuthenticationManager based on Database

• JdbcAuthenticationManager
• JdbcAuthenticationManager (Data Model)

LoginModules

You should have noticed that the LoginModule configuration for loginModules involved in validating user identity is now very small: configuration already defined in AuthenticationManager are reused to establish connections in loginmodules. so, JdbcLoginmodule uses JdbcAuthenticationManager configuration to establish database connections and so on...

LoginModules based on XML

• XmlLoginModule

LoginModules based on Database

Since the 0.80 release, all dedicated database-related loginModules have been removed and regrouped into the JdbcLoginModule.

• JdbcLoginModule

LoginModules based on LDAP

• JNDILoginModule

LoginModules based on Certificate Authority

• Certificate authentication setup?
• X509 certificate and the populated subject
• CRLLoginModule
• OCSPLoginModule

LoginModules based on Captcha

• JCaptchaLoginModule

Authorization

• Authorization Mechanism
• My user cannot access to a page. How can i solve it??

Authorization Managers

Authorization Managers based on XML

• XmlAuthorizationManager

Authorization Managers based on Database

Since 0.70 release, all database-based AuthorizationManager have been removed and replaced by JdbcAuthorizationManager.

• JdbcAuthorizationManager
• JdbcAuthorizationManager (Data Model)

Permissions

• Contextual permissions
• URLPermission
• How to create its own permission
• Negative permissions

Advanced jGuard(jGuard install on jvm)

• java.home
• Libraries and bootclasspath
• java.security
• jGuard.loginScheme
• jGuard.policy
• jGuard and the SecurityManager