Managing Login Modules 

...

Use

You can use this section to manage the login modules from the J2EE Engine user store.

The user store configuration for login modules enables you to configure login module options to apply for all policy configurations, which use the login module.

Inheriting login module options

If you change the options of a login module in the user store, the changes will be inherited by all policy configurations that use this login module.

If you change the options of a login module in a single policy configuration, the change applies only to that policy configuration. In this case the login module no longer inherits its options from the user store. To restore the inheritance, change the options in the policy configuration or in the user store so that they are identical.

If you are deploying a Web application, you can set it to automatically inherit the options of a login module in the user store. To do this, enter the login module’s display name in the Web deployment descriptor’s tag <login-module-name>, for example: BasicPasswordLoginModule. In this case the system ignores the options you configure in the Web deployment descriptor. If you want to configure specific login module options for a Web application, enter the class name of the login module, for example: com.sap.engine.services.userstore.jaas.BasicPasswordLoginModule. In this case the system ignores the options in the user store and uses the options you specify in the deployment descriptor.

More information about the Web deployment descriptor: web-j2ee-engine.dtd.

Procedure

       1.      In the Security Provider service of the J2EE Engine Visual Administrator, choose User Management.

       2.      Choose the Switch to edit mode button from the upper left-hand part of the screen.

       3.      Choose the Manage Security Stores button in the bottom right part of the screen.

 

Action	Procedure
Register a new login module	...        1.      Choose Add Login Module.        2.      Choose Ok to use the default editor.for login module options.        3.      Enter the Class Name and Display Name for the new login module.        4.      Add or remove suitable and unsuitable authentication mechanisms to apply for the login module.        5.      Choose Ok. The new login module appears in the list of registered login modules.
Modify the login module options	...        1.      Select the login module from the list of login modules and choose View/Change Properties.        2.      In the dialog that appears you can:                             a.      Specify the options for the login module in Options.                             b.      Add or remove suitable and unsuitable authentication mechanisms to apply for the login module.        3.      To apply the new settings, choose OK.
Remove a registered login module	... ...        1.      Select the login module from the list of available login modules.        2.      Choose Remove Login Module. The login module is removed from the list of registered login modules.

 

All login module configurations are applied only to the current user store.