# Index for Programming WebLogic Security

# A

API methods

accept() 1

doAs() 1, 2

getAttribute() 1

getCallerPrincipal() 1

getSubject() 1

isCallerInRole() 1

isUserInRole() 1

login() 1, 2

runAs() 1, 2

setTrustManager() 1

AuthCookieEnabled 1

# C

CallbackHandler 1

classes

HttpsURLConnection 1

javax.security.PrivilegedAction 1

JNDI Environment 1

weblogic.security.Security 1

code examples

accept() method 1

CallbackHandler interface 1

ConnectionFilter interface 1

ConnectionFilterRulesListener interface 1

getSubject() method 1

Host Name Verifier custom version 1

Login() method 1

LoginContext 1

network connection filter 1, 2

PrivilegedAction 1

runAs() method 1

Sample_jaas.config 1

SimpleConnectionFilter 1

SimpleConnectionFilter2 1

SSLClient 1

SSLClientServlet 1

SSLServerSocketFactory 1

SSLSocketClient 1, 2

Trust Manager 1

URL Outbound SSL Connection 1

config.xml 1

configuration file 1

# D

DCOM 1, 2

declarative security

implementing in EJBs 1

implementing in Web applications 1

deployment descriptor files

ejb-jar.xml 1

web.xml 1

weblogic.xml 1, 2

deployment descriptors

using to implement security in EJBs 1

using to implement security in Web applications 1

digital certificates 1, 2

chain of 1

contents of 1

demonstration version 1

invalid 1

overriding validation errors 1

# E

e-commerce 1

EJBContext

getCallerPrincipal() 1

isCallerInRole() 1

ejb-jar.xml

using to implement security in EJBs 1

EJBs

implementing declarative security 1

encryption

services 1

exceptions

LoginException 1

externally-defined tag 1, 2, 3, 4

# F

FTP 1, 2

# G

GIOP 1

GIOPS 1

global-role tag 1, 2

# H

host name verification

impact of turning off 1

ways to turn off 1

Host Name Verifier

code example 1

custom version 1

how to use a custom version 1

requirements for using a custom version 1

HTTP 1, 2

HTTPS 1, 2

accessing resources securely 1, 2

protocol 1

HttpServletRequest.isUserInRole(String role) 1

HttpsURLConnection 1

# I

IIOP 1

IIOPS 1

implementing programmatic security

in EJBs 1

in Web applications 1

interface

ConnectionFilterRulesListener 1

interfaces

CallbackHandler 1

ConnectionFilter 1

ConnectionFilterRulesListener 1

HostnameVerifier 1

HostnameVerifierJSSE 1

java.security.Principal 1

TrustManager 1

TrustManagerJSSE 1, 2

IP address 1

# J

J2EE 1

J2SE 1, 2

JAAS 1

getSubject() method 1

LoginContext 1

LoginModule 1

Principal 1

Subject 1

version supported 1

Java 2 Platform, Standard Edition

See J2SE

java.security.Principal interface 1

javax.security.auth.Subject

doAs() method 1, 2

javax.servlet.request.cipher_suite 1

javax.servlet.request.key_size 1

javax.servlet.request.X509Certificate 1, 2

JNDI 1

JNDI parameters

setProviderURL 1

setSSLClientCertificate 1

setSSLRootCAFingerprint 1

setSSLServerName 1

# L

LDAP 1, 2

login() method 1, 2

LoginContext 1

login() method 1, 2

LoginException 1

# M

man-in-the-middle attacks 1

mutual authentication 1

# N

network connection filter

evaluation of rules 1

fast rules 1

flat file example 1

guidelines for writing 1

rules syntax 1

slow rules 1

# P

principal-name tag 1, 2

PrivilegedAction 1

PrivilegedExceptionAction 1

programmatic security

implementing in EJBs 1

implementing in Web applications 1

# R

response to invalid certificates

as specified by the SSL specification 1

by Web browsers 1

# S

sample_jaas.config 1

security

APIs 1

applying programmatically in servlet 1

packages

deprecation details 1

list of 1

security policies 1

security-permission tag 1

Service Pack 1

servlet container 1

SSL

handshake 1

SSL usage restrictions 1

SSLContext 1

setting up 1

Subject 1

subject's public key 1

SubjectDN 1

# T

T3 1, 2

T3S 1, 2

Trust Manager

associating with SSLContext 1

benefits of 1

creating 1

performing custom checks 1

trusted certificate authority 1

TrustManagerJSSE interface

uses of 1

# U

UsernamePasswordLoginModule 1

# V

validation errors

overriding 1

# W

Web application 1

Web browsers

response to invalid certificates 1

web.xml

using to implement security in Web applications 1

WebLogic security

deprecated packages and classes 1

WebLogic Server

container support for JAAS 1

SSL implementation 1

support for JAAS 1

WebLogic Server's JSSE implementation 1

weblogic.jar 1

weblogic.security.Security.runAs() method 1

weblogic.servlet.request.SSLSession 1

weblogic.xml 1

using to implement security in EJBs 1

using to implement security in Web applications 1

weblogic-ejb-jar.xml 1

# X

X.509 certificate 1