📄 ch13s78.html
字号:
SessionHome home = (SessionHome) iniContext.lookup(example+"/StatefulSession");
System.out.println("Found StatefulSessionHome");
Session bean = home.create();
System.out.println("Created StatefulSession");
bean.noop();
System.out.println("Bean.noop() called");
System.out.println("Bean.echo('Hello') -> "+bean.echo("Hello"));
bean.remove();
}
catch(Exception e)
{
e.printStackTrace();
}
}
}
</pre></div><div class="figure"><p><a name="SecureEJBServlet.java"></a><b>Figure 13.19. The Secure Servlet</b></p><pre class="programlisting">
import java.io.IOException;
import java.io.PrintWriter;
import java.security.Principal;
import javax.naming.Context;
import javax.naming.InitialContext;
import javax.naming.NamingException;
import javax.servlet.ServletConfig;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import Session;
import SessionHome;
/** A simple servlet that accesses the stateless session bean.
@author Scott_Stark@displayscape.com
*/
public class SecureEJBServlet extends HttpServlet
{
protected void processRequest(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException
{
String echoMsg = null;
try
{
InitialContext ctx = new InitialContext();
SessionHome home = (SessionHome) ctx.lookup("java:comp/env/ejb/SecuredEJB");
Session bean = home.create();
echoMsg = bean.echo("Hello");
}
catch(Exception e)
{
throw new ServletException("Failed to call SecuredEJB.echo", e);
}
Principal user = request.getUserPrincipal();
response.setContentType("text/html");
PrintWriter out = response.getWriter();
out.println("<html>");
out.println("<head><title>SecureEJBServlet</title></head>");
out.println("<h1>SecureServlet Accessed</h1>");
out.println("<body><pre>You have accessed this servlet as user: "+user);
out.println("The SecuredEJB.echo('Hello') returned: "+echoMsg);
out.println("</pre></body></html>");
out.close();
}
protected void doGet(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException
{
processRequest(request, response);
}
protected void doPost(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException
{
processRequest(request, response);
}
}
</pre></div><div class="figure"><p><a name="web-app.xml"></a><b>Figure 13.20. The web-app Deployment Descriptor</b></p><pre class="programlisting">
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE web-app
PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.2//EN"
"http://java.sun.com/j2ee/dtds/web-app_2_2.dtd">
<web-app>
<!-- ### Servlets -->
<servlet>
<servlet-name>SecureServlet</servlet-name>
<servlet-class>SecureEJBServlet</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>SecureServlet</servlet-name>
<url-pattern>/restricted/SecureServlet</url-pattern>
</servlet-mapping>
<!-- ### Security -->
<security-constraint>
<web-resource-collection>
<web-resource-name>Restricted</web-resource-name>
<description>Declarative security tests</description>
<url-pattern>/restricted/*</url-pattern>
<http-method>HEAD</http-method>
<http-method>GET</http-method>
<http-method>POST</http-method>
<http-method>PUT</http-method>
<http-method>DELETE</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>Echo</role-name>
</auth-constraint>
<user-data-constraint>
<description>no description</description>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
</security-constraint>
<login-config>
<auth-method>BASIC</auth-method>
<realm-name>JAAS Tutorial Servlets</realm-name>
</login-config>
<security-role>
<description>A user allowed to invoke echo methods</description>
<role-name>Echo</role-name>
</security-role>
<!-- ### EJB References (java:comp/env/ejb) -->
<ejb-ref>
<ejb-ref-name>ejb/SecuredEJB</ejb-ref-name>
<ejb-ref-type>Session</ejb-ref-type>
<home>SessionHome</home>
<remote>Session</remote>
</ejb-ref>
</web-app>
</pre></div><div class="figure"><p><a name="jboss-web.xml"></a><b>Figure 13.21. The jboss-web.xml Deployment Descriptor</b></p><pre class="programlisting">
<?xml version="1.0" encoding="UTF-8"?>
<jboss-web>
<security-domain>java:/jaas/example1</security-domain>
<ejb-ref>
<ejb-ref-name>ejb/SecuredEJB</ejb-ref-name>
<jndi-name>example1/StatelessSession</jndi-name>
</ejb-ref>
</jboss-web>
</pre></div><p>The session beans are trivial and both the stateless and stateful bean use the
same home and remote interfaces. The client is also trivial except for the use
of a JAAS LoginContext and CallbackHandler implementation. This is how a client
establishes the username and password that is sent to JBoss. The servlet looks up
the home interface of the StatelessSession bean and creates a Session instance.
It then invokes echo on this and displays the user principal that accessed the
servlet and the output of the Session.echo method.
Now, finally let's put everything together and deploy the session beans
and servlet as a J2EE ear.</p></div><div class="section"><a name="jaas5"></a><div class="titlepage"><div><h3 class="title"><a name="jaas5"></a>Deploying a Secured J2EE Ear</h3></div></div><p>This section details the procedure for building, deploying and testing
a secured J2EE ear made up of the EJBs and servlet shown in the preceeding figures.
I'll walk you through the build of two different versions of the ears using Ant
and the build.xml file contained in the tutorial files bundle.
The files bundle is available from <a href="javascript:if(confirm('http://www.jboss.org/doco_files/jaas-howto.zip \n\nThis file was not retrieved by Teleport Pro, because it did not meet the project\'s file type specifications. \n\nDo you want to open it from the server?'))window.location='http://www.jboss.org/doco_files/jaas-howto.zip'" tppabs="http://www.jboss.org/doco_files/jaas-howto.zip" target="_top">JAAS-Howto Files</a>.</p><div class="procedure"><p><a name="d0e11043"></a><b>Procedure 13.3. Deployment Steps</b></p><ol type="1"><li><a name="d0e11046"></a><p>Download the JBoss/Tomcat bundle. Go to<a href="javascript:if(confirm('http://sourceforge.net/projects/jboss/ \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address. \n\nDo you want to open it from the server?'))window.location='http://sourceforge.net/projects/jboss/'" tppabs="http://sourceforge.net/projects/jboss/" target="_top">JBoss @ SourceForge</a>and download the JBoss-2.2.2/Tomcat-3.2.2 bundle or later version. The 2.2.2 version of
JBoss is the first to ship with the integrated ejb/web security that is required for this
tutorial example. Unpack the archive to create a JBoss-2.2.2_Tomcat-3.2.2 directory
that contains jboss and tomcat subdirectories. I have downloaded and unpacked the
archive into /tmp on my machine so the directory structure looks like that shown
in <a href="ch13s78.html#jaas.bundle.structure" tppabs="http://www.huihoo.org/jboss/online_manual/3.0/ch13s78.html#jaas.bundle.structure" title="Figure 13.22. JBoss-2.2.2 Tomcat-3.2.2 Bundle Structure">Figure 13.22</a>. The jboss.dist and servlet.jar labels
in red will be used below to configure the Ant build script.</p><div class="figure"><p><a name="jaas.bundle.structure"></a><b>Figure 13.22. JBoss-2.2.2 Tomcat-3.2.2 Bundle Structure</b></p><div class="mediaobject"><img src="jaas_bundle_structure.jpg" tppabs="http://www.huihoo.org/jboss/online_manual/3.0/jaas_bundle_structure.jpg"></div></div></li><li><a name="d0e11060"></a><p>Download the tutorial files bundle. If you have not already, download
the tutorial files from here: <a href="javascript:if(confirm('http://www.jboss.org/doco_files/jaas-howto.zip \n\nThis file was not retrieved by Teleport Pro, because it did not meet the project\'s file type specifications. \n\nDo you want to open it from the server?'))window.location='http://www.jboss.org/doco_files/jaas-howto.zip'" tppabs="http://www.jboss.org/doco_files/jaas-howto.zip" target="_top">JAAS-Howto Files</a>.
Unpack the archive to create a jaas directory with the contents shown in <a href="ch13s78.html#jaas.files" tppabs="http://www.huihoo.org/jboss/online_manual/3.0/ch13s78.html#jaas.files" title="Figure 13.23. JAAS Tutorial Files">Figure 13.23</a>.<div class="figure"><p><a name="jaas.files"></a><b>Figure 13.23. JAAS Tutorial Files</b></p><div class="mediaobject"><img src="jaas_files.jpg" tppabs="http://www.huihoo.org/jboss/online_manual/3.0/jaas_files.jpg"></div></div>
</p></li><li><a name="d0e11075"></a><p>Build and deploy the tutorial ears.</p><ol type="a"><li><a name="d0e11079"></a><p>Edit the build.xml to set the correct location of
the jboss.dist and servlet.jar variables to the corresponding paths of your
JBoss/Tomcat bundle distribution installation. See <a href="ch13s78.html#jaas.bundle.structure" tppabs="http://www.huihoo.org/jboss/online_manual/3.0/ch13s78.html#jaas.bundle.structure" title="Figure 13.22. JBoss-2.2.2 Tomcat-3.2.2 Bundle Structure">Figure 13.22</a>for the items in the distribution to which jboss.dist and servlet.jar refer. For
my installation of the distribution under /tmp as shown above, the correct settings
are given in <a href="ch13s78.html#build.xml.paths" tppabs="http://www.huihoo.org/jboss/online_manual/3.0/ch13s78.html#build.xml.paths" title="Figure 13.24. JAAS Tutorial Files">Figure 13.24</a>.<div class="figure"><p><a name="build.xml.paths"></a><b>Figure 13.24. JAAS Tutorial Files</b></p><pre class="programlisting">
<project name="JAAS Howto Build Script" default="ears" basedir=".">
...
<!-- Override with your JBoss server dist location -->
<property name="jboss.dist" value="/tmp/JBoss-2.2.2_Tomcat-3.2.2/jboss"/>
<!-- Override with your web server servlet jar location -->
<property name="servlet.jar" value="/tmp/JBoss-2.2.2_Tomcat-3.2.2/tomcat/lib/servlet.jar"/>
</pre></div>
</p></li><li><a name="d0e11092"></a><p>Download and install Ant1.3 or later. If you don't
have a copy of Ant on your system download version 1.3 or later from the Apache
site <a href="javascript:if(confirm('http://jakarta.apache.org/ant/index.html \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address. \n\nDo you want to open it from the server?'))window.location='http://jakarta.apache.org/ant/index.html'" tppabs="http://jakarta.apache.org/ant/index.html" target="_top">here</a>.</p></li><li><a name="d0e11098"></a><p>Build and install the tutorial ears. From within
the jaas directory that contains the Ant build.xml file, execute the following
command:<div class="literallayout"> <br>
<b>bash-2.04$ ant ears<br>
Searching for build.xml ...<br>
Buildfile: /tmp/jaas/build.xml<br>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -