Security Manager Configuration Reference
This page provides details on the elements you configure for the security manager. For more information, see Configuring Security.
Security manager
The default security manager.
Name | Type | Required | Default | Description |
---|---|---|---|---|
id |
no |
|||
name |
no |
Name | Cardinality | Description |
---|---|---|
custom-security-provider |
0..1 |
A custom implementation of SecurityProvider. |
custom-encryption-strategy |
0..1 |
A custom implementation of EncryptionStrategy. |
secret-key-encryption-strategy |
0..1 |
Provides secret key-based encryption using JCE. |
password-encryption-strategy |
0..1 |
Provides password-based encryption using JCE. Users must specify a password and optionally a salt and iteration count as well. The default algorithm is PBEWithMD5AndDES, but users can specify any valid algorithm supported by JCE. |
Custom security provider
A custom implementation of SecurityProvider.
Name | Type | Required | Default | Description |
---|---|---|---|---|
name |
name (no spaces) |
yes |
||
provider-ref |
string |
yes |
The name of the security provider to use. |
Name | Cardinality | Description |
---|---|---|
spring:property |
0..* |
Spring-style property element for custom configuration. |
Custom encryption strategy
A custom implementation of EncryptionStrategy.
Name | Type | Required | Default | Description |
---|---|---|---|---|
name |
name (no spaces) |
yes |
||
strategy-ref |
string |
yes |
A reference to the encryption strategy (which may be a Spring bean that implements the EncryptionStrategy interface). |
Name | Cardinality | Description |
---|---|---|
spring:property |
0..* |
Secret key encryption strategy
Provides secret key-based encryption using JCE.
Name | Type | Required | Default | Description |
---|---|---|---|---|
name |
name (no spaces) |
yes |
||
key |
string |
no |
The key to use. This and the 'keyFactory-ref' attribute are mutually exclusive. |
|
keyFactory-ref |
string |
no |
The name of the key factory to use. This should implement the ObjectFactory interface and return a byte array. This and the 'key' attribute are mutually exclusive. |
Name | Cardinality | Description |
---|
Password encryption strategy
Provides password-based encryption using JCE. Users must specify a password and optionally a salt and iteration count as well. The default algorithm is PBEWithMD5AndDES, but users can specify any valid algorithm supported by JCE.
Name | Type | Required | Default | Description |
---|---|---|---|---|
name |
name (no spaces) |
yes |
||
password |
string |
yes |
The password to use. |
|
salt |
string |
no |
The salt to use (this helps prevent dictionary attacks). |
|
iterationCount |
integer |
no |
The number of iterations to use. |
Name | Cardinality | Description |
---|