jboss 虚拟机主机备忘

最新推荐文章于 2024-08-14 21:00:23 发布

cuanchuan4660

最新推荐文章于 2024-08-14 21:00:23 发布

阅读量132

点赞数

文章标签：运维 php 数据库

$JBOSS_HOME/server/default/deploy/jboss-web.deployer

[@more@]

<!--APR library loader. Documentation at /docs/apr.html --&gt

<!--Initialize Jasper prior to webapps are loaded. Documentation at /docs/jasper-howto.html --&gt

<!-- Use a custom version of StandardService that allows the

connectors to be started independent of the normal lifecycle

start to allow web apps to be deployed before starting the

connectors.

--&gt

<!-- A "Connector" represents an endpoint by which requests are received

and responses are returned. Documentation at :

Java HTTP Connector: /docs/config/http.html (blocking & non-blocking)

Java AJP Connector: /docs/config/ajp.html

APR (HTTP/AJP) Connector: /docs/apr.html

Define a non-SSL HTTP/1.1 Connector on port 8080

--&gt

maxThreads="2000" maxHttpHeaderSize="8192"

emptySessionPath="true" protocol="org.apache.coyote.http11.Http11Protocol"

enableLookups="false" redirectPort="8443" acceptCount="100"

connectionTimeout="10000" disableUploadTimeout="true" URIEncoding="UTF-8"

maxSparseThreads="55" minSparseThreads="25" maxKeepAliveRequests="1" compression="on" compressionMinSize="2048" compressableMimeType=

"text/html,text/xml,text/plain,text/css,text/javascript,application/x-javascript" />

<!-- Define a SSL HTTP/1.1 Connector on port 8443

This connector uses the JSSE configuration, when using APR, the

connector should be using the OpenSSL style configuration

described in the APR documentation --&gt

<!--

maxThreads="150" scheme="https" secure="true"

clientAuth="false" sslProtocol="TLS" />

--&gt

<!-- Define an AJP 1.3 Connector on port 8009 --&gt

emptySessionPath="true" enableLookups="false" redirectPort="8443" />

<!-- The JAAS based authentication and authorization realm implementation

that is compatible with the jboss 3.2.x realm implementation.

- certificatePrincipal : the class name of the

org.jboss.security.auth.certs.CertificatePrincipal impl

used for mapping X509[] cert chains to a Princpal.

- allRolesMode : how to handle an auth-constraint with a role-name=*,

one of strict, authOnly, strictAuthOnly

+ strict = Use the strict servlet spec interpretation which requires

that the user have one of the web-app/security-role/role-name

+ authOnly = Allow any authenticated user

+ strictAuthOnly = Allow any authenticated user only if there are no

web-app/security-roles

--&gt

certificatePrincipal="org.jboss.security.auth.certs.SubjectDNMapping"

allRolesMode="authOnly"

<!-- A subclass of JBossSecurityMgrRealm that uses the authentication

behavior of JBossSecurityMgrRealm, but overrides the authorization

checks to use JACC permissions with the current java.security.Policy

to determine authorized access.

- allRolesMode : how to handle an auth-constraint with a role-name=*,

one of strict, authOnly, strictAuthOnly

+ strict = Use the strict servlet spec interpretation which requires

that the user have one of the web-app/security-role/role-name

+ authOnly = Allow any authenticated user

+ strictAuthOnly = Allow any authenticated user only if there are no

web-app/security-roles

certificatePrincipal="org.jboss.security.auth.certs.SubjectDNMapping"

allRolesMode="authOnly"

--&gt

autoDeploy="false" deployOnStartup="false" deployXML="false"

configClass="org.jboss.web.tomcat.security.config.JBossContextConfig"

psswaptest.sony.com.cn

<!-- Uncomment to enable request dumper. This Valve "logs interesting

contents from the specified Request (before processing) and the

corresponding Response (after processing). It is especially useful

in debugging problems related to headers and cookies."

--&gt

<!--

--&gt

<!-- Access logger --&gt

<!--

prefix="localhost_access_log." suffix=".log"

pattern="common" directory="${jboss.server.log.dir}"

resolveHosts="false" />

--&gt

<!-- Uncomment to enable single sign-on across web apps

deployed to this host. Does not provide SSO across a cluster.

If this valve is used, do not use the JBoss ClusteredSingleSignOn

valve shown below.

A new configuration attribute is available beginning with

release 4.0.4:

cookieDomain configures the domain to which the SSO cookie

will be scoped (i.e. the set of hosts to

which the cookie will be presented). By default

the cookie is scoped to "/", meaning the host

that presented it. Set cookieDomain to a

wider domain (e.g. "xyz.com") to allow an SSO

to span more than one hostname.

--&gt

<!--

--&gt

<!-- Uncomment to enable single sign-on across web apps

deployed to this host AND to all other hosts in the cluster.

If this valve is used, do not use the standard Tomcat SingleSignOn

valve shown above.

Valve uses a JBossCache instance to support SSO credential

caching and replication across the cluster. The JBossCache

instance must be configured separately. By default, the valve

shares a JBossCache with the service that supports HttpSession

replication. See the "jboss-web-cluster-service.xml" file in the

server/all/deploy directory for cache configuration details.

Besides the attributes supported by the standard Tomcat

SingleSignOn valve (see the Tomcat docs), this version also

supports the following attributes:

cookieDomain see above

treeCacheName JMX ObjectName of the JBossCache MBean used to

support credential caching and replication across

the cluster. If not set, the default value is

"jboss.cache:service=TomcatClusteringCache", the

standard ObjectName of the JBossCache MBean used

to support session replication.

--&gt

<!--

--&gt

<!-- Check for unclosed connections and transaction terminated checks

in servlets/jsps.

Important: The dependency on the CachedConnectionManager

in META-INF/jboss-service.xml must be uncommented, too

--&gt

cachedConnectionManagerObjectName="jboss.jca:service=CachedConnectionManager"

transactionManagerObjectName="jboss:service=TransactionManager" />

psstest.sony.com.cn

来自 “ ITPUB博客 ” ，链接：http://blog.itpub.net/7845854/viewspace-1056862/，如需转载，请注明出处，否则将追究法律责任。

上一篇： Jboss 几个安全设置问题

下一篇： CSS 备忘，摘自网络

请登录后发表评论登录

全部评论

<%=items[i].createtime%>

<%=items[i].content%>

<%if(items[i].items.items.length) { %>

<%for(var j=0;j

<%=items[i].items.items[j].createtime%> 回复

<%=items[i].items.items[j].username%> 回复 <%=items[i].items.items[j].tousername%>： <%=items[i].items.items[j].content%>

<%}%> <%if(items[i].items.total > 5) { %>

还有<%=items[i].items.total-5%>条评论 ) data-count=1 data-flag=true>点击查看

<%}%>

gehuiwin

博文量
34
访问量

352503

jboss 虚拟机主机备忘

最新文章