Class SecureAdminStartupCheck
- java.lang.Object
-
- com.sun.enterprise.security.admin.cli.SecureAdminUpgradeHelper
-
- com.sun.enterprise.security.admin.cli.SecureAdminStartupCheck
-
- All Implemented Interfaces:
org.glassfish.hk2.api.PostConstruct
@Service @RunLevel(10) public class SecureAdminStartupCheck extends SecureAdminUpgradeHelper implements org.glassfish.hk2.api.PostConstruct
Starting in GlassFish 3.1.2, the DAS uses SSL to send admin requests to instances regardless of whether the user has enabled secure admin. For this to work correctly when upgrading from earlier 3.x releases, there are some changes to the configuration that must be in place. This start-up service makes sure that the config is correct as quickly as possible to avoid degrading start-up performance. (Upgrades from 2.x are handled by the SecureAdminConfigUpgrade upgrade service.)For 3.1.2 and later the configuration needs to include:
<secure-admin special-admin-indicator="xxx"> at least one <secure-admin-principal> element; if none, supply these defaults: <secure-admin-principal dn="dn-for-DAS"/> <secure-admin-principal dn="dn-for-instances"/>
- Author:
- Tim Quinn
-
-
Field Summary
-
Fields inherited from class com.sun.enterprise.security.admin.cli.SecureAdminUpgradeHelper
DAS_CONFIG_NAME, domain, habitat, startupContext
-
-
Constructor Summary
Constructors Constructor Description SecureAdminStartupCheck()
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description void
postConstruct()
-
Methods inherited from class com.sun.enterprise.security.admin.cli.SecureAdminUpgradeHelper
commit, ensureDASConfigReady, ensureNonDASConfigsReady, ensureSecureAdminReady, rollback, secureAdmin, secureAdminHelper, specialAdminIndicator, sslUtils, startupArg, transaction, writableDomain, writableSecureAdmin
-
-