整理版mule安全认证.docx
- 文档编号:4386506
- 上传时间:2022-12-01
- 格式:DOCX
- 页数:12
- 大小:17.31KB
整理版mule安全认证.docx
《整理版mule安全认证.docx》由会员分享,可在线阅读,更多相关《整理版mule安全认证.docx(12页珍藏版)》请在冰豆网上搜索。
整理版mule安全认证
Mule安全证书的管理
概念
安全性围绕的主题有验证、授权、消息完整性等。
实现异常处理机制是实现安全机制的前提条件,因为你将遇到诸如验证或授权失败等异常。
MULE和SERVICEMIX中的输入消息验证和授权安全技术,比如轻量级目录访问协议(LDAP)和JAVA验证和授权服务(JAAS)。
ØMuleESB安全管理(MuleSercurityManager)
—端点利用传输的特定细节或普通的认证方法对请求信息进行验证。
—在MuleESB管理者处定义安全管理者。
—配置安全过滤器。
有四种策略配置:
∙JAASSecurity
∙PGPSecurity
∙AcegiSecurity
∙ComponentAuthorizationUsingAcegi
mule安全管理配置
1.在mule中的配置
className="org.mule.extras.acegi.AcegiProviderAdapter"> .... 2.mule配置 className="org.mule.extras.spring.SpringContainerContext"> ross=ross,ROLE_ADMIN anon=anon,ROLE_ANONYMOUS 3.加密策略 className="org.mule.impl.security.PasswordBasedEncryptionStrategy"> 上面的加密策略可以被引用 className="org.mule.transformers.encryption.DecryptionTransformer"> 4.端口策略文件 //localhost: 4567"> className="org.mule.extras.acegi.filters.http.HttpBasicAuthenticationFilter"> //localhost: 4567"> className="org.mule.extras.acegi.filters.http.HttpBasicAuthenticationFilter"/> 5.Spring安全策略配置 xmlversion="1.0"encoding="UTF-8"? > //www.mulesource.org/schema/mule/core/2.2" xmlns: xsi="http: //www.w3.org/2001/XMLSchema-instance" xmlns: spring="http: //www.springframework.org/schema/beans" xmlns: http="http: //www.mulesource.org/schema/mule/http/2.2" xmlns: mule-ss="http: //www.mulesource.org/schema/mule/spring-security/2.2" xmlns: ss="http: //www.springframework.org/schema/security" xsi: schemaLocation=" http: //www.springframework.org/schema/beanshttp: //www.springframework.org/schema/beans/spring-beans-2.5.xsd http: //www.mulesource.org/schema/mule/core/2.2http: //www.mulesource.org/schema/mule/core/2.2/mule.xsd http: //www.mulesource.org/schema/mule/http/2.2http: //www.mulesource.org/schema/mule/http/2.2/mule-http.xsd http: //www.mulesource.org/schema/mule/spring-security/2.2 http: //www.mulesource.org/schema/mule/spring-security/2.2/mule-spring-security.xsd http: //www.springframework.org/schema/security http: //www.springframework.org/schema/security/spring-security-2.0.xsd"> security-manager> delegate-security-providername="memory-provider"delegate-ref="authenticationManager"/> security-manager> beans> authentication-manageralias="authenticationManager"/> authentication-provider> user-serviceid="userService"> username="ross"password="ross"authorities="ROLE_ADMIN"/> username="anon"password="anon"authorities="ROLE_ANON"/> user-service> authentication-provider> beans> ...cut... xmlversion="1.0"encoding="UTF-8"? > //www.mulesoft.org/schema/mule/core" xmlns: xsi="http: //www.w3.org/2001/XMLSchema-instance" xmlns: spring="http: //www.springframework.org/schema/beans" xmlns: mule-ss="http: //www.mulesoft.org/schema/mule/spring-security" xmlns: ss="http: //www.springframework.org/schema/security" xmlns: http="http: //www.mulesoft.org/schema/mule/http" xsi: schemaLocation=" http: //www.springframework.org/schema/beanshttp: //www.springframework.org/schema/beans/spring-beans-2.5.xsd http: //www.mulesoft.org/schema/mule/corehttp: //www.mulesoft.org/schema/mule/core/3.0/mule.xsd http: //www.mulesoft.org/schema/mule/spring-security/3.0 http: //www.mulesoft.org/schema/mule/spring-security/3.0/mule-spring-security.xsd http: //www.springframework.org/schema/security http: //www.springframework.org/schema/security/spring-security-2.0.xsd http: //www.mulesoft.org/schema/mule/httphttp: //www.mulesoft.org/schema/mule/http/3.0/mule-http.xsd "> beans> authentication-manageralias="authenticationManager"/> authentication-provider> user-serviceid="userService"> username="john"password="password"authorities="ROLE_ADMIN"/> user-service> authentication-provider> beans> security-manager> delegate-security-providername="memory-dao"delegate-ref="authenticationManager"/> security-manager> inbound-endpointaddress="http: //localhost: 8081/secure"exchange-pattern="request-response"> http-security-filterrealm="mule"/> inbound-endpoint> security-manager> delegate-security-provider name="ldap-security-provider" delegate-ref="authenticationManager"/> security-manager> name="passwordEncryption" password="password"/> inbound-endpointaddress="http: //localhost: 8080/audit-trail-data" synchronous="true"> http-security-filterrealm="audit-trail"/> inbound-endpoint> outbound-endpointaddress="topic: //audit-data"> strategy-ref="passwordEncryption"/> outbound-endpoint> 6.LDAP--mule配置 beans> ldap-server root="dc=clood,dc=com" url="ldap: //: 389"/> ldap-authentication-provider user-dn-pattern="uid={0},ou=people" group-search-base="ou=groups"/> authentication-manageralias="authenticationManager"/> security-manager> delegate-security-provider name="memory-dao" delegate-ref="authenticationManager"/> security-manager> beans> 7.http策略配置 beans> authentication-provider> user-serviceid="userService"> username="john"password="password"authorities="ROLE_ADMIN"/> user-service> authentication-provider> authentication-manageralias="authenticationManager"> beans> security-manager> delegate-security-provider name="memory-dao" delegate-ref="authenticationManager"/> security-manager> inbound-endpoint address="http: //localhost: 8081/secure" synchronous="true"> http-security-filterrealm="mule"/> inbound-endpoint> 8.Mule加密策略 inbound-endpointqueue="messages.in"/> outbound-endpointqueue="services.decryption"> object-to-jmsmessage-transformer/> outbound-endpoint> inbound-endpointqueue="services.decryption"> jmsmessage-to-object-transformer/> inbound-endpoint> outbound-endpointqueue="messages.out"/> Spring配置 beanid="pgpKeyManager" class="org.mule.module.pgp.PGPKeyRingImpl" init-method="initialise"> property name="publicKeyRingFileName" value="conf/public.key.gpg"/> propertyname="secretKeyRingFileName" value="conf/secret.key.gpg"/> property name="secretAliasId" value="0x7927DE78"/> property name="secretPassphrase" value="mule"/> bean> beanid="credentialAccessor" class="org.mule.security.MuleHeaderCredentialsAccessor"/> security-manager> security-provider name="pgpSecurityProvider" keyManager-ref="pgpKeyManager"/> keybased-encryption-strategy name="keyBasedEncryptionStrategy" keyManager-ref="pgpKeyManager"/> security-manager> inbound-endpoint queue="messages.encrypted"/> outbound-endpoint path="services.decryption"/>
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- 整理 mule 安全 认证
![提示](https://static.bdocx.com/images/bang_tan.gif)