NonStop Servlets for JavaServer Pages (5.0) System Administrator's Guide

Overview and Architecture
NonStop Servlets for JavaServer Pages (NSJSP) System Administrator’s Guide—525644-002
1-15
JAASRealm Support
Jasper engine. In addition to general code improvements, the following changes have
been made:
•
JSP custom tag pooling. The Java objects instantiated for JSP custom tags can
be pooled and reused. This arrangement significantly boosts the performance of
JSP pages which use custom tags.
•
Background JSP compilation. If you make a change to a previously compiled
JSP page, Jasper 2 can recompile that page in the background. The previously
compiled JSP page is still available to serve requests until the new page has been
compiled successfully. This arrangement improves availablity of your JSP pages in
a production environment.
•
Recompile JSP when included page changes. Jasper 2 detects when a page
included at compile time from a JSP has changed and then recompiles the parent
JSP.
For more information about these functions, see the documentation at
http://jakarta.apache.org/tomcat/tomcat-5.0-doc/jasper-howto.html.
JAASRealm Support
A Realm is a user database which stores user names and associated passwords for
validating users. JAASRealm is an implementation of the NSJSP Realm interface that
authenticates users through the Java Authentication & Authorization Service (JAAS)
framework. The JAAS package is fully integrated in J2SE version 1.4 and is available
in NSJ 4.0 and later versions.
NSJSP supports the JAASRealm interface, in addition to the already supported
DataSourceRealm, JDBCRealm, JNDIRealm, MemoryRealm, and UserDatabase
Realm.
The JAASRealm interface also supports an NSJSP provided NonStop specific
LoginModule (NonStopLoginModule). For more information about JAASRealm and
using the NonStopLoginModule, see JAASRealm on page 3-40.
Enhanced Security Manager Support
NSJSP 5.0 supports enhanced security by allowing you to configure which NSJSP
internal packages are protected against package definition and access. This
arrangement prevents a non-trusted application from accessing sensitive NSJSP
internal packages. For more information about JAASRealm and using the
NonStopLoginModule.
For more information about the security manager, see the documentation at
http://jakarta.apache.org/tomcat/tomcat-5.0-doc/security-manager-howto.html.