Difference betwwen jaas and realm

hi
i would like to add jaas to my web application
i have a confusion between jaas and realm
can anyone tell me what difference between this two technologies

This is less or more Servlet related. In the future, please use the [Servlet forum|http://forums.sun.com/forum.jspa?forumID=33] for this kind of question to get better response.
To the point: JAAS (Java Authentication & Authorization Service) is authentication framework at Java SE level. Realm is an abstract layer between the webapplication and several ways of authentication so that you can easily switch between the authentication types/frameworks for the case that. JAAS is one of them.

Similar Messages

  • What's differences between jaas and jacc?

    lately i saw a new java scurity released on http://java.sun.com/j2ee/javaacc/; it seems like similar to JAAS (http://java.sun.com/products/jaas/); though, reportedly, jacc concerned more detail in authrization, however, there's autherization api been included as i know. is there anyone be able to tell me what's differences between jaas and jacc? or where there's resource or article exaplained detail about this issue?
    i appreciate any suggestions.
    thank you very much,

    From what I saw, the JACC specifically deals with what is currently called Container Managed Security. JAAS is something that would be used on top of JACC.
    See also:
    http://java.sun.com/j2ee/1.4/docs/tutorial/doc/Security11.html
    JACC contracts provide the following benefits:
    - JACC moves security administration and decision-making responsibility from the container to the security providers.
    - JACC enables the use of a common policy across different security systems.
    - J2EE system integrators can integrate containers with existing authorization policy infrastructure
    re Jaap

  • Difference betwwen sandbox and IDES

    HI all,
    Can Anybody please tell me whait s the difference betwwen sandbox and IDES.
    Please use the subject effectively
    Edited by: Lakshmipathi on Sep 1, 2009 6:46 PM

    Hi Radheshyam,
    Landscape is like a server system or like a layout of the servers or some may even call it the architecture of the servers viz. SAP is divided into three different lanscape DEV, QAS and PROD.
    -  DEV would have multiple clients for ex: 190- Sandbox, 100- Golden, 180- Unit Test.
    -  QAS may again have mutiple clients for ex: 300- Integration Test, 700 to 710 Training.
    -  PROD may have something like a 200 Production.
    These names and numbers are the implementer's discreet on how they want it or they have been using in their previous implementations or how is the client's business scenario. 
    Now whatever you do in the Sandbox doesn't affect the other servers or clients. Whenever you think you are satisfied with your configuration and you think you can use it moving forward, you RE-DO it in the golden client (remember, this is a very neat and clean client and you cannot use it for rough usage). As you re-do everything that you had thought was important and usable, you get a transport request pop up upon saving everytime. You save it under a transport request and give your description to it. Thus the configuration is transported to the Unit Test client (180 in this example). 
    You don't run any transaction or even use the SAP Easy Access screen on the 100 (golden) client. This is a configuration only client. Now upon a successful tranport by the Basis guy, you have all the configuration in the Testing client, just as it is in the Golden client. The configuration remains in sync between these two clients. 
    But in the Testing client you can not even access SPRO  (Display IMG) screen. It's a transaction only client where you perform the unit test. Upon a satisfactory unit test, you move the good configuration to the next SERVER (DEV). The incorrect or unsatisfactory configuration is corrected in Golden (may again as well be practised in the sandbox prior to Golden) and accordingly transported back to 180 (Unit Test) until the unit test affected by that particular config is satisfactory. 
    The Golden client remains the 'database' (if you wanna call it that) or you may rather call it the 'ultimate' reference client for all the good, complete and final configuration that is being used in the implementation.
    In summary:
    Landscape : is the arrangement for the servers
    IDES : is purely for education purpose and is NOT INCLUDED in the landscape.
    DEVELOPMENT ---> QUALITY -
    > PRODUCTION
    DEVELOPMENT : is where the the consultants do the customization as per the company's requirement.
    QUALITY : is where the core team members and other members test the customization.
    PRODUCTION : is where the live data of the company is recorded.
    A request will flow from Dev->Qual->Prod and not backwards.
    1. Sandbox server: In the initial stages of any implementation project, You are given a sandbox server where you do all the configuration/customization as per the companies business process.
    2. Development Server: - Once the BBP gets signed off, the configuration is done is development server and saved in workbench requests, to be transported to Production server.
    3. Production Server: This is the last/ most refined client where the user will work after project GO LIVE. Any changes/ new develpoment is done is development client and the request is transported to production.
    These three are landscape of any Company. They organised their office in these three way. Developer develop their program in Development server and then transport it to test server. In testing server tester check/test the program and then transport it to Production Server. Later it will deploy to client from production server.
    Presentaion Server- Where SAP GUI have.
    Application Server - Where SAP Installed.
    Database Server - Where Database installed.
    What is the meaning of "R" in R/3 systems?
    R/3 stands for realtime three tier architecture. This is the kind of architrecture SAP R/3 system has.
    R/3 means three layers are installed in Different system/server and they are connected with each other.
    1) Presentation
    2) Application
    3) Database
    Why do we call client 000 as golden client?
    Golden client contains all the configuration data and master data so some extent. All the configuration settings are done in golden clients and then moved to other clients. Hence this client acts as a master record for all transaction settings, hence the name "Golden Client".
    Thanks,
    Swamy H P

  • What is difference betwwen aggregates and compression in bi 7.0.

    hi All,
    will you please tell me difference between compression and aggregates in bi.

    Dear Ganesh,
            Aggregates allow you to improve the performance of BI queries when data is read from an InfoCube. The data of a BI InfoCube is saved in relational aggregates in an aggregated form. Relational aggregates are useful if you want to improve the performance of one or more specific BI queries, or specifically improve the performance of reporting on characteristic hierarchies
           Compression is phenomenon where all the contents of ur info cube moves from F to E table,,This is called compression and data will be aggregated when this compression happens..
    Why do we do compression..??
    When you load data into the InfoCube, entire requests can be added at the same time. Each of these requests has its own request ID, which is included in the fact table in the package dimension. This makes it possible to pay particular attention to individual requests. One advantage of the request ID concept is that you can subsequently delete complete requests from the InfoCube.
    However, the request ID concept can also cause the same data record (where all characteristics are the same except the request ID) to appear more than once in the fact table. This unnecessarily increases the volume of data and affects system performance when you analyze data, since each time you execute a query, the system has to perform aggregation using the request ID.
    You can eliminate these disadvantages by compressing data and bringing data from different requests together into one single request (request ID 0).
    For more info on aggregates
    http://help.sap.com/search/highlightContent.jsp
    and info on Compression
    http://help.sap.com/search/highlightContent.jsp
    Hope this helps u...
    Best Regards,
    VVenkat..

  • Difference betwwen script and smartforms

    plzzzzzzzzzz  difference between script and smartforms

    SAPscript technology is based on a mainframe product from the 1980s, while Smart Forms have only been around since (roughly) 2001. With that sort of time gap, there are bound to be significant differences between the two tools. Client dependence is a fundamental one. Although SAPscript has had some incremental improvements over time, its forms have always been -- under the hood -- relatively ...
    1. script is client dependent one while smartform is client independent.
    2. In scripts we have to write print program while in smart forms it is not necessary.
    3. In scripts we can print background logo while in smartforms we cant print background logo
    4. In scripts we have 99 main windows while in smartforms we have only 1 main window.
    5. In scripts we should write paragraph format otherwise we cant execute program while in smartforms no need to create paragraph formats .
    6. In scripts we can print the text in only two character formats.
    while in smartforms we can do with more.
    7. In scripts we dont have line types while in smartforms we have linetypes.
    also refer
    difference between smartforms and scripts
    Diff betwen Scripts & smartforms
    advantages of smartforms over scripts
    the main diffarences between smart form and script form are:
    1) smart forms are clinent independent where as scripts are client dependent.
    2) smart form require half the time to create and maintain forms compare with
    script.
    3) smart forms provide multiple page formats where as in script not possible
    4) smart forms exisist without main window also where as in script not possible.
    5) smart form is entairely graphical user interface comapre with script.
    6) labeling is not possible in smart form where as it is possible in script.
    7) smart form genarate function module whenver it activate where as script
    doesn't genarate.
    8) smart form can easily web publishing using the genarated XML output compare
    with script.
    9) using smart forms we can design web forms but bot possible with script.
    10) we can maintain background graphics in smartform wher as in script not
    possible.
    11) in smart form we use transaction codes SMARTFORM for designing FORM
    and SMARTSTYLES to create differnt styles of text, where as in script we
    use SE71 for form painter and SE72 for different styles of text and font.
    12) we can migrate script to smart form vice-versa is not possible.
    Thanks
    reward if useful
    Richa

  • Whats the difference betwwen Pop and Imap?

    What is the difference between a POP and an IMAP email account, are there benefits of using one rather than the other?

    Hi
    POP means mail is downloaded from the Mail Server to your mac and is stored locally. Downside to this is if your hard drive was to fail and you have not kept up-to-date backups or have not bothered to back up at all you lose all your mail. If this does not bother you then there is no down side.
    IMAP means mail is not downloaded from the Mail Server and everything is stored on the Mail Server itself. Generally speaking most mail servers have redundancy built in are administered by a dedicated IT team and if you were to lose any mail odds are it would be recoverable. Other benefits are you should be able to access your mail (send & receive) from pretty much anywhere you like. All you need is 3 bits of information and access to a computer (any platform) that has access to the internet and a web browser.
    I've kept this as simple as possible but that's about it in a nutshell.
    Tony

  • Difference betwwen system and system alais

    Hi All,
    What is the System Object and System alias ?
    Why can'y we access the system object with out system alias what is the reason for creating system alias for system object ?
    In ESS configuration he is asking to create 3 to 4 system objects with different system aliases. Why can't we create single system object and assign all three system aliases to that object?
    Thanks and Regards,
    Phanikumar.

    > Hi All,
    >
    > What is the System Object and System alias ?
       A system object is a Portal Object that represents the backed system by means of sprecifying the system ID, client number, WebAs URL etc. The runtime uses this to call the call backend transactions/RFC's using JCo.
    >
    > Why can'y we access the system object with out system
    > alias what is the reason for creating system alias
    > for system object ?
    The system is known to the outside world viz. iViews etc through its alias. Its like a Name for your system. You can have more than one alias for your system just like many people may call u by different names.
    >
    > In ESS configuration he is asking to create 3 to 4
    > system objects with different system aliases. Why
    > can't we create single system object and assign all
    > three system aliases to that object?
    The reason behind this is that the ESS objects e.g. ITS iviews, Transactions WD iviews etc have in their System refernce different aliases. SO to allow these applications to execute we need to have that many aliases iplying creating that many systems.
    >
    Hope this helps.
    If so consider rewarding points.
    Regards,
    Prem.
    SAP

  • What is their difference betwwen  Sun ONE Application Server  and J2EE serv

    Sun ONE Application Server is Sun implementation of J2EE server.
    But it seems even no Sun ONE Application Server, use J2EE SDK command
    j2ee -verbose
    we still can launch an Application Server that support EJB, JSP....
    what is their difference betwwen Sun ONE Application Server and J2EE server provided by J2EE SDK ?
    Thanks,

    Sun ONE generally refers to the Sun ONE Application Server version 7.x. This is a J2EE 1.3 compliant application server from Sun. Sun also released a Reference Implementation version (RI) as a requirement of the J2ee 1.3 spec. This is the J2EE server you are refering too. The Sun ONE Application Server 7 is a more robust production ready App Server.
    Going forward, Sun combined the 2 seperate groups to include just 1 release. The J2EE 1.4 Reference Implementation is the Sun Java System Application Server Platform Edition version 8. SJS AS 8 PE is both free and production ready. Other version will include High Availability, Managing and Monitoring features.
    -Jeff

  • Jaas and jdeveloper 11

    I cannt make jaas in jdeveloper 11
    I do this in jdeveloper 10 but how I do that in jdeveloper 11 ????
    Tools > Embedded OC4J Server Preferences.
    In JDeveloper 10.1.3, the embedded OC4J server uses the jazn-data.xml file that is contained in the current project, ifany.
    If there is no jazn-data.xml file in the current project, the jazn-data.xml file for theapplication is used.
    This enables you to deploy the user and group settings to a production systemor stand-alone OC4J for testing.
    In the Embedded OC4J Server Preferences dialog box,
    expand Current Workspace,
    Authentication,
    and Realms from the tree at the left.
    If there is no jazn.com realm under the Realms node, select the Realms node and click New.
    Inthe Create Realm dialog box, enter the name jazn.com and click OK,
    The default realm in jazn-data.xml is jazn.com, but you can create your owndefault realm if desired.
    Under the jazn.com node, select the Users node in the tree and click Add
    Add each users you need, entering Passowrd for the Credentials of each Select the Roles node in the tree (under the jazn.com node) and click Add.
    In the Create Role dialog box, for example enter manager and click OK.
    Create two additional roles: technician and user.
    Select user in the Roles list and click the Member Users tab.
    Select the following users in the Available list and click Add to move them to the Selected
    list to grant the user role to them:
    Click OK to dismiss the Embedded OC4J Server Preferences dialog box.

    Hi,
    most importantly - an i think that I asked you that the first time you posted this question (if it wasn't another tread) - you should give us an idea if what you want to do with JAAS. Do you want to use JAAS in the way that JAAS is designed, to manually call checkPermission on a functionality, do you want to use it for custo authentication (a feature of OC4J that in WLS exist too) or do you want to use ADF Security. Note that the length of a question is not as important as the information it provides. Usecases are the best questions you can ask.
    Frank

  • Difference between Null and null?

    What is the difference between null and NULL?
    When is each used?
    Thanks,

    veryConfused wrote:
    There is a null in java, but no NULL. null means no value. However, when assigning value, the following is different:Although the empty String has no special role. Null means, the referential type is not assigned (doesn't refer) to a specific object. The empty String is just another object though, so seeing it or pointing it out as something special when it actually isn't at all (no more special than new Integer(0) or new Object[0]) just adds to the confusion.

  • Difference in Null and Empty String

    Hi,
    I have been wondering about the difference between Null and Empty String in Java. So I wrote a small program like this:
    public class CompareEmptyAndNullString {
         public static void main(String args[]) {
              String sNull = null;
              String sEmpty = "";
              try {
                   if (sNull.equalsIgnoreCase(sEmpty)) {
                        System.out.println("Null and Empty Strings are Equal");
                   } else {
                        System.out.println("Null and Empty Strings are Equal");
              } catch (Exception e) {
                   e.printStackTrace();
    This program throws Exception: java.lang.NullPointerException
         at practice.programs.CompareEmptyAndNullString.main(CompareEmptyAndNullString.java:10)
    Now if I change the IF Clause to if (sEmpty.equalsIgnoreCase(sNull)) then the Program outputs this: Null and Empty Strings are Equal
    Can anyone explain why this would happen ?
    Thanks in Advance !!

    JavaProwler wrote:
    Saish,
    Whether you do any of the following code, the JUnit Test always passes: I mean he NOT Sign doesnt make a difference ...
    assert (! "".equals(null));
    assert ("".equals(null));
    You probably have assertions turned off. Note the the assert keyword has nothing to do with JUnit tests.
    I think that older versions of JUnit, before assert was a language keyword (which started in 1.4 or 1.5), had a method called assert. Thus, if you have old-style JUnit tests, they might still compile, but the behavior is completely different from what it was in JUnit, and has nothing to do with JUnit at all.
    If you turn assertions on (-ea flag in the JVM command line, I think), the second one will throw AssertionError.

  • Difference between GUI_UPLOAD and WS_UPLOAD

    Hi,
    Please make me clear about the difference between GUI_UPLOAD and WS_UPLOAD. In which cases we need to use these modules...??
    Thanks,
    Satish

    I would suggest to always use the GUI_UPLOAD.  I say this because this is the function module which is used in the GUI_UPLOAD method of the class CL_GUI_FRONTEND_SERVICES.   Really, you should probably use the class/method instead of the function module.
      data: filename type string.
      filename = p_file.
      call method cl_gui_frontend_services=>gui_upload
             exporting
                  filename                = filename
                  filetype                = 'ASC'
             changing
                  data_tab                = iflatf
             exceptions
                  file_open_error         = 1
                  file_read_error         = 2
                  no_batch                = 3
                  gui_refuse_filetransfer = 4
                  no_authority            = 6
                  unknown_error           = 7
                  bad_data_format         = 8
                  unknown_dp_error        = 12
                  access_denied           = 13
                  others                  = 17.
    Regards,
    Rich Heilman

  • Difference between char and varchar, also the difference between varchar2

    Hi,
    Can anyone explain me the difference between char and varchar, and also the difference between varchar and varchar2...

    Varchar2 is variable width character data type, so if you define column with width 20 and insert only one character to tis column only, one character will be stored in database. Char is not variable width so when you define column with width 20 and insert one character to this column it will be right padded with 19 spaces to desired length, so you will store 20 characters in the dattabase (follow the example 1). Varchar data type from Oracle 9i is automaticlly promoted to varchar2 (follow example 2)
    Example 1:
    SQL> create table tchar(text1 char(10), text2 varchar2(10))
    2 /
    Table created.
    SQL> insert into tchar values('krystian','krystian')
    2 /
    1 row created.
    SQL> select text1, length(text1), text2, length(text2)
    2 from tchar
    3 /
    TEXT1 LENGTH(TEXT1) TEXT2 LENGTH(TEXT2)
    krystian 10 krystian 8
    Example 2:
    create table tvarchar(text varchar(10))
    SQL> select table_name,column_name,data_type
    2 from user_tab_columns
    3 where table_name = 'TVARCHAR'
    4 /
    TABLE_NAME COLUMN_NAME DATA_TYPE
    TVARCHAR TEXT VARCHAR2
    Best Regards
    Krystian Zieja / mob

  • The difference between Lion and Mountain Lion

    Can some one explain to me the difference between Lion and Mtn Lion? I'm currently 10.6.8 Is it beneficiall for me to upgrade?

    Mountain Lion is an enhanced version of previous OS X and so that is Mavericks.
    About upgrading it all depends on what your needs are and if your hardware supports it.
    System requirements for OS X Lion
    System requirements for OS X Mountain Lion
    OS X Mavericks: System Requirements
    Please check also applications compatibility. From Lion onward, you cannot run PPC application.

  • The difference between N80 and N80IE ?

    What is the difference between M80 and N80ie?

    02-Jan-2007
    07:45 PM
    korngear wrote:
    The Nokia N80 Internet Edition is a new version of this handset with the same hardware as the normal N80. It is due for release in Q4 of 2006 and will be available in Patina Bronze or Pearl Black, and has the following additional software included.
    Yahoo Go! for Mobile
    Flickr
    Some Amazon Branded Software
    'Download!' App management
    Internet Telephone - SIP VOIP Frontend
    WLAN Wizard
    Gizmo VOIP - Gizmo Project VOIP Frontend.
    \\en.wikipedia.org//
    @Korngear
    Thanks.
    Could N80 be upgraded to N80IE?

Maybe you are looking for