Deploy and Security about WS on Tomcat

最新推荐文章于 2022-03-06 14:23:56 发布

JEDLI

最新推荐文章于 2022-03-06 14:23:56 发布

阅读量115

点赞数

CC 4.0 BY-SA版权

分类专栏： web service 文章标签： Security Tomcat Servlet XML SUN

本文链接：https://blog.youkuaiyun.com/enlbi/article/details/83949639

web service 专栏收录该内容

7 篇文章

订阅专栏

本文深入探讨了在web.xml中配置JAX-WS Web服务的两种方式：使用WSServlet和WSServletContainerListener，并解释了如何通过sun-jaxws.xml文件连接服务实现类与Web服务实例之间的联系。同时，文章还介绍了应用管理和容器管理认证的概念，以及Tomcat提供的五种认证插件。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

1. in web.xml, there are two classes of JAX-WS: WSServlet and WSServletContainerListener

<listener-class>

com.sun.xml.ws.transport.http.servlet.WSServletContextListener</listener-class>

</listener>

<servlet-name>ladss</servlet-name>

<servlet-class>com.sun.xml.ws.transport.http.servlet.WSServlet</servlet-class>

</servlet>

<servlet-mapping>

<servlet-name>ladss</servlet-name>

<url-pattern>/test</url-pattern>

</servlet-mapping>

Please be advised that one WSServlet could be mapped more than one WS instances.

A WSServletContainerListener instance will parse a second (次要的，附加的), sun-specific configuration file named sun-jaxws.xml which provides the web service's endpoint by connecting the WSServlet instance to the service's implementation class.Here is the sun-jaxws.xml file:

<?xml version="1.0" encoding="UTF-8"?>

<endpoint

name="test"

implementation="hello.CircleFunctions"

url-pattern="/test">

</endpoint>

</endpoints>

Security: Application-managed authentication & Container -managed authentication

a. Application-managed authentication

b. Container-managed authentication

Because Tomcat provides the concept 'Realm' [relm] that plays a central role. A realm is a collection of resources, including web pages and web services, with a designed authentication and authorization facility. Tomcat provides five plugins:

1. JDBC

2.DataSource

3. JNDI (the authentication information is stored in an LDAP-based lightweight directory access protocol) directory service, which is available through a JNDI provider.

4.Memory Realm, the authentication info is read into the container at startup from the file conf/tomcat-user/xml. this is the simplest choice and the default.

5.JAAS the authentication information is available (Java authentication & authorization service) provider, which in turn is available in a Java applicaiton server such as BEA, weblogic, glassfish, Jboss.