NonStop Servlets for JavaServer Pages (NSJSP) 6.1 System Administrator's Guide

Configuring NSJSP
NonStop Servlets for JavaServer Pages (NSJSP) 6.1 System Administrator’s Guide—596210-006
3-13
The Installation-Specific servlet.config File
Example 3-6 shows the default value of the JVM_POLICY_FILE variable.
NSJSP_SECMGR_POLICY
The value of this variable is the Java command-line argument that is used to
indicate a security policy file. The value reads
-Djava.security.policy==$env(JVM_POLICY_FILE). The == sign is
intentional and indicates to the JVM that it must only use the mentioned policy file.
Example 3-7 shows the default value of the NSJSP_SECMGR_POLICY variable.
NSJSP_SECMGR
The value of NSJSP_SECMGR variable is the Java command-line argument that is
used to enable the Java Security Manager. The default value of this variable is
-Dnsjsp.security.manager=none and by default the Java Security Manager
is not enabled. If this variable is set to -Djava.security.manager, the security
manager is enabled.
Example 3-8 shows the default value of the NSJSP_SECMGR variable.
JAAS_CONFIG_FILE
The JAAS_CONFIG_FILE variable specifies the location of Java Authentication
and Authorization Service (JAAS) configuration file. The default JAAS configuration
file in NSJSP is <NSJSP_HOME>/conf/iTP_jaas.config. The
JAAS_CONFIG_FILE variable is used by the NSJSP_JAAS_CONFIG variable to
Example 3-6. The Default Value of the JVM_POLICY_FILE Variable
set env(JVM_POLICY_FILE) $env(NSJSP_HOME)/conf/iTP_catalina.policy
Example 3-7. The Default Value of the NSJSP_SECMGR_POLICY Variable
set NSJSP_SECMGR_POLICY
-Djava.security.policy==$env(JVM_POLICY_FILE)
Note. Based on the Java Security Specification, a security policy file must be used
only if Java is configured to run with the security manager enabled. The
NSJSP_SECMGR_POLICY variable is effective only if the Java Security Manager
has been enabled using the NSJSP_SECMGR variable.
Example 3-8. The Default Value of the NSJSP_SECMGR Variable
#
# If you wish to run with a security Manager, uncomment the next
# statement ("set NSJSP_SECMGR ...").
#
# set NSJSP_SECMGR -Djava.security.manager