Realm Descriptor Attributes

A realm descriptor defines a specific Java realm. Use Security Center to create a realm descriptor and specify its attribute values.

Realm Descriptor Attributes for USERDATA describes the realm descriptor attributes for a USERDATA Java realm type.

Table 38. Realm Descriptor Attributes for USERDATA

Attribute

Description

Realm Name

Identifies the name of the realm descriptor. The name is unique among all realm types.

Realm Type

Identifies the realm type as 1 for USERDATA.

Realm Descriptor State

Describes the realm descriptor state. Valid realm states are

1 = INACTIVE_REALM_STATE

2 = TEST_REALM_STATE

3 = ACTIVE_REALM_STATE

4 = DISABLED_REALM_STATE

Allowable state transitions are

  • Inactive to Test

  • Inactive to Active

  • Test to Active

  • Active to Disabled

Description

Describes the purpose and usage of the realm descriptor.

Security Admin

Indicates that only MCP users with the SECADMIN user attribute are considered members of the Java realm.

Used to protect the Populate interface of a Java realm of type USERDATA.

J2EE Admin

Indicates that only MCP users with the J2EEADMIN user attribute are considered members of the Java realm.

A Java realm with the J2EEADMIN attribute set is called a J2EEAdmins realm.

Role File

Reserved for future use.

Security Admin Role

Indicates the role returned when the MCP user has the SECADMIN user attribute set. The SecurityAdminRole attribute is returned in addition to any other roles that were assigned to the MCP user with the SECADMIN user attribute set.

J2EE Admin Role

Indicates the role returned when the MCP user has the J2EEADMIN user attribute set. The J2EEAdminRole attribute is returned in addition to any other roles that were assigned to the MCP user with the J2EEADMIN user attribute set.

PopulateProtectedByRealm

Specifies the Java realm that protects the Populate interface for the Java realm represented by this realm descriptor.

PopulateProtectedByRole

Specifies the role that protects the Populate interface for the Java realm represented by this realm descriptor.

EnumerateProtectedByRealm

Specifies the Java realm that protects the Enumerate interface for the Java realm represented by this realm descriptor.

EnumerateProtectedByRole

Specifies the role that protects the Enumerate interface for the Java realm represented by this realm descriptor.


Prev  Up  Next
Java Realms  Home  Application Role-Based Access Control