* Title Securing Java EE 5.0 Applications with Apache Geronimo * Speaker name(s) Vamsavardhana Reddy Chillakuru
* Abstract (Short overview of the talk contents) Security is always a high priority in application development, and with complex applications the task becomes even more daunting. While the Java EE specification, JAAS and JACC provide a step in the right direction, every application server is free to implement container security differently. Apache Geronimo, a JEE 5.0 certified container, enables storing user credentials in a variety of data stores viz., simple text files, a database, an LDAP server and digital certificates. In this session we see how these data stores can be used to configure application security and how the necessary infrastructure can be run in Apache Geronimo itself. The session presents: a) Prerequisites for PropertiesFile, Database, LDAP and CertificatePropertiesFile realms and shows how to create these realms. b) Advanced features like auditing, lockout after repeated failures, prinicipal wrapping, single-sign-on, etc. c) Configuring Web/EJB/EAR application security. After completing this session, the audience will gain knowledge on their choice of data stores for user credentials, create various security realms and deployment plans necessary to secure their applications with Geronimo. * Bio: Vamsavardhana Reddy Chillakuru a.k.a. Vamsi is an Advisory Software Engineer working with IBM India Private Limited since 1996 and has over 12 years experience in the IT industry. He is a committer on Apache Geronimo and Apache Tuscany projects and member of the Apache Geronimo PMC. He received his B.Stat.(Hons.) and M.Stat. degrees from Indian Statistical Institute, Kolkata, India in the years 1994 and 1996 respectively. On Mon, Jul 20, 2009 at 10:42 PM, Kevan Miller <kevan.mil...@gmail.com>wrote: > > On Jul 20, 2009, at 9:33 AM, jean-frederic clere wrote: > > On 07/20/2009 09:18 AM, Vamsavardhana Reddy wrote: >> >>> Just wondering what happens to the proposals submitted through >>> conference web site. >>> >> >> They can be used too if Geronimo decides to do so. >> > > Vamsi, > You should post your proposal(s) here, for consideration in the Geronimo > track... Will give this some more time... > > --kevan > -- Vamsi
