NonStop Servlets for JSP System Administrator's Guide

Configuring NSJSP
NonStop Servlets for JavaServer Pages (NSJSP) System Administrator’s Guide—525644-001
3-20
MemoryRealm
JNDIRealm
Obtains authentication information stored in an Lightweight Directory Access
Protocol (LDAP) based directory server, accessed via a Java Naming and
Directory Interface (JNDI) provider.
To configure a realm, add an XML element to your iTPWS_INSTALL_DIR
/servlet_jsp/conf/iTP_server.xml configuration file that looks something like
Example 3-18:
The <Realm> element can be nested inside one of three different elements, which has
a direct impact on the scope of that realm (that is, which web applications will share the
same authentication information):
•
Inside an <Engine> element – This realm will be shared across all web
applications on all virtual hosts, unless it is overridden by a <Realm> element
nested inside a subordinate <Host> or <Context> element.
•
Inside a <Host> element – This realm will be shared across all web applications
for this virtual host, unless it is overridden by a <Realm> element nested inside a
subordinate <Context> element.
•
Inside a <Context> element – This realm will be used only for this web
application.
MemoryRealm
MemoryRealm is a simple implementation of the NSJSP realm interface. It is not
designed for production use. At startup time, MemoryRealm loads information about all
users, and their corresponding roles, from an XML document (by default, this
document is loaded from the iTPWS_INSTALL_DIR/servlet_jsp/conf/tomcat-
users.xml file). Changes to the data in this file are not recognized until NSJSP is
restarted.
Realm Element Attributes
To configure MemoryRealm, create a <Realm> element and nest it in your
iTPWS_INSTALL_DIR/servlet_jsp/conf/iTP_server.xml file, as described in
Example 3-18. The following attributes are supported for MemoryRealm:
className
Specify the value org.apache.catalina.realm.MemoryRealm here.
Example 3-18. Adding an XML Element to Configure a Realm
<Realm className="... class name for this implementation"
... other attributes for this implementation .../>