Preface

This manual discusses how to make effective use of the Oracle Application Server Containers for J2EE (OC4J) security features.

This preface contains these topics:

• Audience

• Documentation Accessibility

• Related Documentation

• Conventions

Audience

This manual is intended for experienced Java developers, deployers, and application managers who want to understand the security features of OC4J. It discusses the Oracle Application Server Java Authentication and Authorization Service (JAAS) Provider in detail, as well as discussing security implications of individual J2EE features, including EJBs, the J2EE Connector Architecture, SSL, and CSIv2.

Documentation Accessibility

Our goal is to make Oracle products, services, and supporting documentation accessible, with good usability, to the disabled community. To that end, our documentation includes features that make information available to users of assistive technology. This documentation is available in HTML format, and contains markup to facilitate access by the disabled community. Accessibility standards will continue to evolve over time, and Oracle is actively engaged with other market-leading technology vendors to address technical obstacles so that our documentation can be accessible to all of our customers. For more information, visit the Oracle Accessibility Program Web site at

http://www.oracle.com/accessibility/

Accessibility of Code Examples in Documentation

Screen readers may not always correctly read the code examples in this document. The conventions for writing code require that closing braces should appear on an otherwise empty line; however, some screen readers may not always read a line of text that consists solely of a bracket or brace.

Accessibility of Links to External Web Sites in Documentation

This documentation may contain links to Web sites of other companies or organizations that Oracle does not own or control. Oracle neither evaluates nor makes any representations regarding the accessibility of these Web sites.

TTY Access to Oracle Support Services

Oracle provides dedicated Text Telephone (TTY) access to Oracle Support Services within the United States of America 24 hours a day, seven days a week. For TTY support, call 800.446.2398.

Related Documentation

For more information, see these Oracle resources available from the Oracle Java Platform Group:

• Oracle Application Server Containers for J2EE User's Guide

  This book provides some overview and general information for OC4J; primer chapters for servlets, JSP pages, and EJBs; and general configuration and deployment instructions.

• Oracle Application Server Containers for J2EE Stand Alone User's Guide

  This version of the user's guide is specifically for the standalone version of OC4J, and is available when you download the standalone version from OTN. OC4J standalone is used in development environments, but not typically in production environments.

• Oracle Application Server Containers for J2EE Servlet Developer's Guide

  This book provides information for servlet developers regarding use of servlets and the servlet container in OC4J, including basic servlet development, use of JDBC and EJBs, building and deploying applications, and servlet and Web site configuration. Consideration is given to both OC4J in a standalone environment for development and OC4J in Oracle Application Server for production.

• Oracle Application Server Containers for J2EE Support for JavaServer Pages Developer's Guide

  This book provides information for JSP developers who want to run their pages in OC4J. It includes a general overview of JSP standards and programming considerations, as well as discussion of Oracle value-added features and steps for getting started in the OC4J environment.

• Oracle Application Server Containers for J2EE JSP Tag Libraries and Utilities Reference

  This book provides conceptual information and detailed syntax and usage information for tag libraries, JavaBeans, and other Java utilities provided with OC4J. There is also a summary of tag libraries from other Oracle product groups.

• Oracle Application Server Containers for J2EE Services Guide

  This book provides information about standards-based Java services supplied with OC4J, such as JTA, JNDI, JMS, JAAS, and the Oracle Application Server Java Object Cache.

Also available from the Oracle Java Platform group:

• Oracle Database Java Developer's Guide

• Oracle Database JDBC Developer's Guide and Reference

• Oracle Database JPublisher User's Guide

Available from the Oracle Application Server group:

• Oracle Identity Management Concepts and Deployment Planning Guide

• Oracle Application Server Certificate Authority Administrator's Guide

• Oracle Application Server Single Sign-On Administrator's Guide

• Oracle Internet Directory Administrator's Guide

• Oracle Application Server Administrator's Guide

• Oracle Application Server Security Guide

• Oracle Application Server Performance Guide

• Oracle Enterprise Manager Concepts

• Oracle HTTP Server Administrator's Guide

• Oracle Application Server Globalization Guide

• Oracle Application Server Web Cache Administrator's Guide

• Oracle Application Server Web Services Developer's Guide

• Oracle Application Server Upgrade and Compatibility Guide

Available from the Oracle JDeveloper group:

• Oracle JDeveloper online help

• Oracle JDeveloper documentation on the Oracle Technology Network:

  http://www.oracle.com/technology/products/jdev/index.html
  
  

Available from the Oracle Server Technologies group:

• Oracle XML Developer's Kit Programmer's Guide

• Oracle XML API Reference

• Oracle Database Application Developer's Guide - Fundamentals

• PL/SQL Packages and Types Reference

• PL/SQL User's Guide and Reference

• Oracle Database SQL Reference

• Oracle Database Net Services Administrator's Guide

• Oracle Advanced Security Administrator's Guide

• Oracle Database Reference

For additional information, see:

• The Sun Java and J2EE Web pages, especially the Java Authentication and Authorization Service (JAAS) Web site at :

  http://java.sun.com/products/jaas/overview.html

Conventions

The following text conventions are used in this document: