Exam 7: Authentication and Authorization With Java

The ____ PAM module retrieves and makes available Unix UID/GID/groups information for the current user.

Regarding JAAS, the term ____ is used to represent a name associated with a subject.

The ____ class retrieves realm information for SaslClient and SaslServer.

What are some of the levels that can be set to specify the impact of the success or failure of a given log-in procedure on the overall JAAS authentication procedure?

In Java, the ____ class does this comparison. It programmatically checks permissions and obtains the current Subject associated with the active access control context as well.

To log all user roles and trace who, when, and what actions an entity performs, ____ is usually implemented with authentication and authorization.

The ____ class is used by SaslServer to determine whether or not one entity can act on behalf of another entity in the SASL environment.

The Java security architecture itself has the ability to enforce authentication, or determining who runs the code, and authorization or determining what actions can be performed.

The Java platform implements the concept of ____ to support thread execution across multiple modules with different context characteristics.

With ____, authorization is implemented when you control permissions for new objects created in a container object by setting inheritable permissions on the container.

____________________ is the assurance that an entity is who it claims to be.

The ____ class represents a Java implementation of the PAM framework.

____ enables authorization to be self-managed as an object owner can set permissions on all objects she or he created.

A Subject can also own security-related attributes. These attributes are called ____________________ in JAAS.

PAM modules cannot be stacked together to support "stacked authentication" where an application can use one or more PAM modules for authentication.

Briefly describe the Destroyable interface.

In Java, a(n) ____ is used to make system resource access decisions based on the context it encapsulates.

Briefly describe the java.security.policy class.

The idea of ____ is that all security contexts are linked to a user instead of an application.

To support stacked authentication, each PAM module, using the LoginModule interface, supports the notion of two-phase authentication using the login() and ____ method.