com.sun.enterprise.config.serverbeans.enable-secure-admin-principal.1 Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of config-api Show documentation
The newest version!
enable-secure-admin-principal(1)  asadmin Utility Subcommands  enable-secure-admin-principal(1)

NAME
       enable-secure-admin-principal - Instructs GlassFish Server, when secure
       admin is enabled, to accept admin requests from clients identified by
       the specified SSL certificate.

SYNOPSIS
           enable-secure-admin-principal
           [--help]
           --alias aliasname | DN

DESCRIPTION
       The enable-secure-admin-principal subcommand instructs GlassFish Server
       to accept admin requests when accompanied by an SSL certificate with
       the specified distinguished name (DN). If you use the "--alias
       aliasname" form, then GlassFish Server looks in its truststore for a
       certificate with the specified alias and uses the DN associated with
       that certificate. Otherwise, GlassFish Server records the value you
       specify as the DN.

       You must specify either the --alias option, or the DN.

       You can run enable-secure-admin-principal multiple times so that
       GlassFish Server accepts admin requests from a client sending a
       certificate with any of the DNs you specify.

       When you run enable-secure-admin, GlassFish Server automatically
       records the DNs for the admin alias and the instance alias, whether you
       specify those values or use the defaults. You do not need to run
       enable-secure-admin-principal yourself for those certificates. Other
       than these certificates, you must run enable-secure-admin-principal for
       any other DN that GlassFish Server should authorize to send admin
       requests. This includes DNs corresponding to trusted certificates
       (those with a certificate chain to a trusted authority.)

OPTIONS
       --help, -?
           Displays the help text for the subcommand.

       --alias
           The alias name of the certificate in the trust store. GlassFish
           Server looks up certificate in the trust store using that alias
           and, if found, stores the corresponding DN as being valid for
           secure administration. Because alias-name must be an alias
           associated with a certificate currently in the trust store, you may
           find it most useful for self-signed certificates.

OPERANDS
       DN
           The distinguished name of the certificate, specified as a
           comma-separated list in quotes. For example,
           "CN=system.amer.oracle.com,OU=GlassFish,O=Oracle
           Corporation,L=Santa Clara,ST=California,C=US".

EXAMPLES
       Example 1, Trusting a DN for secure administration
           The following example shows how to specify a DN for authorizing
           access in secure administration.

               asadmin> enable-secure-admin-principal
               "CN=system.amer.oracle.com,OU=GlassFish,
               O=Oracle Corporation,L=Santa Clara,ST=California,C=US"

               Command enable-secure-admin-principal executed successfully.

EXIT STATUS
       0
           subcommand executed successfully

       1
           error in executing the subcommand

SEE ALSO
       enable-secure-admin(1)

       disable-secure-admin-principal(1)

       asadmin(1M)

Jakarta EE 10                09 Aug 2017         enable-secure-admin-principal(1)