Sun Microsystems 820433510 Further Information

<log-service file="" level="WARNING"/>
<message-security-config auth-layer="SOAP"
default-client-provider="ClientProvider">
<provider-config
class-name="com.sun.enterprise.security.jauth.ClientAuthModule"
provider-id="ClientProvider"provider-type="client">
<request-policy auth-source="sender |content"
auth-recipient="after-content |before-content"/>
<response-policy auth-source="sender |content"
auth-recipient="after-content |before-content"/>
<property name="security.config"
value="as-install/lib/appclient/wss-client-config.xml"/>
</provider-config>
</message-security-config>
</client-container>
Validvalues for auth-source includesender andcontent. Valid values for auth-recipient
includebefore-content andafter-content. A table describing the results of various
combinationsof these values can be found in “Actions of Request and Response Policy
Congurations”on page 134.
Tonot specify a request or response policy, leave the element blank, for example:
<response-policy/>
Further Information
■TheJava 2 Standard Edition discussion of security can be viewed from
http://java.sun.com/j2se/1.4.2/docs/guide/security/index.html.
■TheJava EE 5.0 Tutorial chapter titled Security can be viewed from
http://java.sun.com/javaee/5/docs/tutorial/doc/index.html.
■TheAdministration Guide chapter titled .
■TheDeveloper’s Guide chapter titled Securing Applications.
■TheXML-Signature Syntax and Processing document can be viewed at
http://www.w3.org/TR/xmldsig-core/.
■TheXML Encryption Syntax and Processing document can be viewed at
http://www.w3.org/TR/xmlenc-core/.
MessageSecurity Setup
SunGlassFishEnterprise Ser ver2.1 Administration Guide • December 2008140