com.sun.enterprise.security.admin.cli

Class EnableSecureAdminCommand

java.lang.Object

com.sun.enterprise.security.admin.cli.SecureAdminCommand

com.sun.enterprise.security.admin.cli.EnableSecureAdminCommand

All Implemented Interfaces:

AdminCommand

@Service(name="enable-secure-admin")
 @PerLookup
 @ExecuteOn(value={DAS,INSTANCE})
public class EnableSecureAdminCommand
extends SecureAdminCommand

Records that secure admin is to be used and adjusts each admin listener configuration in the domain to use secure admin. The command changes the admin-listener set-up within each separate configuration as if by running these commands:

 
        ###
	### create new protocol for secure admin
	###
	asadmin create-protocol --securityenabled=true sec-admin-listener
	asadmin create-http --default-virtual-server=__asadmin sec-admin-listener
	#asadmin create-network-listener --listenerport 4849 --protocol sec-admin-listener sec-admin-listener
	asadmin create-ssl --type network-listener --certname s1as --ssl2enabled=false --ssl3enabled=false --clientauthenabled=false sec-admin-listener
        asadmin set configs.config.server-config.network-config.protocols.protocol.sec-admin-listener.ssl.client-auth=want
	asadmin set configs.config.server-config.network-config.protocols.protocol.sec-admin-listener.ssl.classname=com.sun.enterprise.security.ssl.GlassfishSSLImpl


	###
	### create the port redirect config
	###
	asadmin create-protocol --securityenabled=false admin-http-redirect
	asadmin create-http-redirect --secure-redirect true admin-http-redirect
	#asadmin create-http-redirect --secure-redirect true --redirect-port 4849 admin-http-redirect
	asadmin create-protocol --securityenabled=false pu-protocol
	asadmin create-protocol-finder --protocol pu-protocol --targetprotocol sec-admin-listener --classname org.glassfish.grizzly.config.portunif.HttpProtocolFinder http-finder
	asadmin create-protocol-finder --protocol pu-protocol --targetprotocol admin-http-redirect --classname org.glassfish.grizzly.config.portunif.HttpProtocolFinder admin-http-redirect

	###
	### update the admin listener
	###
	asadmin set configs.config.server-config.network-config.network-listeners.network-listener.admin-listener.protocol=pu-protocol
 

Author:

Tim Quinn

Field Summary

Fields

Modifier and Type	Field and Description
String	adminalias
String	instancealias

Fields inherited from class com.sun.enterprise.security.admin.cli.SecureAdminCommand

ADMIN_LISTENER_NAME, domain

Constructor Summary

Constructors

Constructor and Description
EnableSecureAdminCommand()

Method Summary

Modifier and Type	Method and Description
void	run() Performs the enable/disable logic for secure admin.
protected String	transactionErrorMessageKey() Returns the error key for finding a message describing an error during the operation - either enable or disable.
protected boolean	updateSecureAdminSettings(SecureAdmin secureAdmin_w) Applies changes other than whether secure admin is enabled or disabled to the secure-admin element.

Methods inherited from class com.sun.enterprise.security.admin.cli.SecureAdminCommand

execute

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

adminalias

public String adminalias

instancealias

public String instancealias

Constructor Detail

EnableSecureAdminCommand

public EnableSecureAdminCommand()

Method Detail

run

public void run()
         throws TransactionFailure,
                SecureAdminHelper.SecureAdminCommandException

Description copied from class: SecureAdminCommand

Performs the enable/disable logic for secure admin.

This is separate from the execute method so it can be invoked during upgrade.

Overrides:

run in class SecureAdminCommand

Throws:

TransactionFailure

SecureAdminHelper.SecureAdminCommandException

updateSecureAdminSettings

protected boolean updateSecureAdminSettings(SecureAdmin secureAdmin_w)

Description copied from class: SecureAdminCommand

Applies changes other than whether secure admin is enabled or disabled to the secure-admin element.

This method is primarily for the enable processing to apply the admin and/or instance alias values, if specified on the enable-secure-admin command, to the secure-admin element.

Returns:

transactionErrorMessageKey

protected String transactionErrorMessageKey()

Description copied from class: SecureAdminCommand

Returns the error key for finding a message describing an error during the operation - either enable or disable.

Each concrete subclass overrides this to supply the relevant message key.

Specified by:

transactionErrorMessageKey in class SecureAdminCommand

Returns:

the message key corresponding to the error message to display