en.help.ref-editcertrealm.html Maven / Gradle / Ivy
Properties Specific to the CertificateRealm Class
The certificate realm supports SSL authentication. This realm sets up the user identity
in the GlassFish Server’s security context, and populates it with user data obtained
from cryptographically verified client certificates in the truststore and keystore files. Add users
to these files using keytool or certutil. For more information, see the The Java EE 6 Tutorial, Volume I section
on security.
With the certificate realm, Java containers handle authorization processing based on each user’s
Distinguished Name (DN) from his or her certificate. The DN is the name
of the entity whose public key the certificate identifies. This name uses the
X.500 standard, so it is intended to be unique across the Internet. For
more information on key stores and trust stores, refer to the keytool documentation.
The following optional property is available for the certificate realm.
- Assign Groups
A comma-separated list of group names. All clients who present valid certificates are assigned to these groups, for example, employee,manager, where these are the names of user groups.