WebSphere Application Server & Liberty

WebSphere Application Server & Liberty

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Difference between Java2 securitry and J2EE Securiy in Websphere

    Posted 07/06/15 09:19 AM
    Hi,

    I am wondering whether J2C authentication in Websphere corresponds to Java2 Security or J2EE security.

    What is the difference between these two?
    While configuring J2C Authentication alias in WAS Console, are we  configuring Java2 Security or J2EE Securiy?

    I am prety much confused in these. Please help me in this regard.
    Thanks.


  • 2.  Difference between Java2 securitry and J2EE Securiy in Websphere

    Posted 07/07/15 04:57 PM
    Hi rlrt

      Basically:
     
      "Java 2 security guards access to system resources such as file I/O, sockets, and properties." -> f.e you need to specify which files (jars) can be read if you don't do WAS not be able to read
     
     
      "Java 2 Platform, Enterprise Edition (J2EE) security guards access to web resources such as servlets, JavaServer Pages (JSP) files and Enterprise JavaBeans (EJB) methods."-> f.e You protect access to servlets or JSP and only user in rol can access
     
      J2C authentication alias is part JAAS and is more related to J2EE Security not Java 2 security.
     
      Java 2 security 
      www-01.ibm.com/support/knowledgecenter/S...
     
      Java Authentication and Authorization Service
      en.wikipedia.org/wiki/Java_Authenticatio...
     
      Select a J2C authentication alias
      www-01.ibm.com/support/knowledgecenter/S...
     
      Hope this helps. Tell us if you need more support
       
    Regards


  • 3.  Difference between Java2 securitry and J2EE Securiy in Websphere

    Posted 07/08/15 02:39 AM
    Gabriel,

    Thanks for your valueble information.