Administrator Guide

9.9.1
- 9.9.4
- 9.9.3
- 9.9.2
- 9.9
- 9.8.4
- 9.8.3
- 9.8.2
- 9.8.1
- 9.8.0

Back Next

JAAS Configuration Options in the ddm.security File

When you configure the

cfg/ddm.security

for Kerberos authentication, SSL authentication, or for use with a custom security provider, you use Java Authentication and Authorization Service configuration options.

The following table describes the JAAS parameters supported in the

cfg/ddm.security

file:

Option	Description
KDC	The path to the configuration file that provides details of the Kerberos key distribution center.
jaasConfig	The start of JAAS configuration.
JaasDescriptor	The JAAS descriptor that provides JAAS processor and configuration entries for the processor.
fqcn	The full-qualified class name of the JAAS processor implementation. Dynamic Data Masking provides one implementation: com.activebase.security.jaas.JaasProcessorImpl
jaasEntries	The map of JAAS configuration entries.
entry	The JAAS configuration entry.
key	The name of the configuration entry. Dynamic Data Masking supports one mandatory entry called "default."
value	The list that contains the map of login modules and their configuration parameters.
entry	The configuration entry of the login module.
moduleClass	The login module class tag.
value (moduleClass)	The fully-qualified class name of the login module implementation. Dynamic Data Masking supports two implementations: com.sun.security.auth.module.Krb5LoginModule com.ibm.security.auth.module.Krb5LoginModule
moduleFlag	The login module flag tag.
value (moduleFlag)	Java supports the following standard options: REQUIRED, REQUISITE, SUFFICIENT, and OPTIONAL.
options	The configuration options of the login module as a map of the option name and the corresponding value . Dynamic Data Masking supports the following configuration options of the com.sun.security.auth.module.Krb5LoginModule login module: principal keyTab useKeyTab storeKey doNotPrompt isInitiator useTicketCache refreshKrb5Config renewTGT storePass clearPass useFirstPass debug For more information on these options, refer to the following Oracle documentation: https://docs.oracle.com/javase/8/docs/jre/api/security/jaas/spec/com/sun/security/auth/module/Krb5LoginModule.html Dynamic Data Masking supports the following configuration options of the com.ibm.security.auth.module.Krb5LoginModule login module: KRB5CCNAME principal UseDefaultCcache ticketcache credsType both For more information on these options, refer to the following IBM documentation: https://www.ibm.com/docs/en/sdk-java-technology/7.1?topic=guide-jaas-login https://www.ibm.com/docs/en/sdk-java-technology/7.1?topic=guide-credential-caches

Sample ddm.security File

The following image is an example of the

cfg/ddm.security

file configured with the JAAS entries listed in the table above:

Rename Saved Search

Table of Contents

Administrator Guide

Administrator Guide

JAAS Configuration Options in the ddm.security File

JAAS Configuration Options in the ddm.security File

Sample ddm.security File