previous next trail start tutorial home feedback openwings.org

Security Configuration Files

This lesson provides a quick overview of the configuration files related to security in the Openwings reference implementation.

${OW_HOME}/openwings-1.0/data/

This directory is where resolved component security policies are placed. Normally only components in the Openwings core should have access to this directory. Specifically, the Installer will need to write security policy files and the Container Manager/Container will read them.

${OW_HOME}/openwings-1.0/system/

This directory contains files that are used by the Security Service implementation to maintain the shared security state of the Openwings installation. Only the Security Service (openwings-1.0/lib/gd_security.jar) and its associated login module (openwings-1.0/lib/gd_security_login.jar) should ever be given access to this directory.

  • owcerts. This file is a Java keystore which contains public-key and code-signing certificates used by Openwings verify Jar file signatures. As an administrator, you can add code-signing certificates to this file using keytool, or you can replace it with your own certificate store (see the Install Security trail for more information). The default password is "openwings".
  • keystore. This file is a Java keystore which contains certificates for users and roles in the Openwings reference implementation. You should never need password access to this file. All interaction with this file occurs via the Security Service through the Security Service UI (see the Security Service/GUI lesson in this trail).
  • roles. This binary file contains the user-role mappings for the system. You cannot edit this file by hand, you must use the Security Service UI.
  • owlogin.conf. This file contains the settings defining which JAAS login modules are used by Openwings. This file is editable (See the Installing the secure Openwings Reference Implementation lesson in this trail).

${OW_HOME}/openwings-1.0/policies/

The file properties.txt contains several properties related to security in the Openwings reference implementation:

Next: Back to Tutorial Trails

back to top

Copyright 2003, General Dynamics Decision Systems. All rights reserved.

previous next trail start tutorial home feedback openwings.org