client-authentication client-cert-authentication confidentiality weblogic-ejb-jar.xml Deployment Descriptors

6-10 Programming Security for Oracle WebLogic Server

6.3.2 weblogic-ejb-jar.xml Deployment Descriptors

The following weblogic-ejb-jar.xml deployment descriptor elements are used to define security requirements in WebLogic Server: ■ Section 6.3.2.1, client-authentication ■ Section 6.3.2.2, client-cert-authentication ■ Section 6.3.2.3, confidentiality ■ Section 6.3.2.4, externally-defined ■ Section 6.3.2.5, identity-assertion ■ Section 6.3.2.6, iiop-security-descriptor ■ Section 6.3.2.7, integrity ■ Section 6.3.2.8, principal-name ■ Section 6.3.2.9, role-name ■ Section 6.3.2.10, run-as-identity-principal ■ Section 6.3.2.11, run-as-principal-name ■ Section 6.3.2.12, run-as-role-assignment ■ Section 6.3.2.13, security-permission ■ Section 6.3.2.14, security-permission-spec ■ Section 6.3.2.15, security-role-assignment ■ Section 6.3.2.16, transport-requirements

6.3.2.1 client-authentication

The client-authentication element specifies whether the EJB supports or requires client authentication. The following table defines the possible settings.

6.3.2.1.1 Example For an example of how to use the client-authentication

element, see Example 6–6 .

6.3.2.2 client-cert-authentication

The client-cert-authentication element specifies whether the EJB supports or requires client certificate authentication at the transport level. The following table defines the possible settings. Table 6–4 client-authentication Element Setting Definition none Client authentication is not supported. supported Client authentication is supported, but not required. required Client authentication is required. Table 6–5 client-cert-authentication Element Setting Definition none Client certificate authentication is not supported. Securing Enterprise JavaBeans EJBs 6-11

6.3.2.2.1 Example For an example of how to use the

client-cert-authentication element, see Example 6–10 .

6.3.2.3 confidentiality

The confidentiality element specifies the transport confidentiality requirements for the EJB. Using the confidentiality element ensures that the data is sent between the client and server in such a way as to prevent other entities from observing the contents. The following table defines the possible settings.

6.3.2.3.1 Example For an example of how to use the confidentiality element, see

Example 6–10 .

6.3.2.4 externally-defined