JBoss Application Server

Configuration Steps for Your JBoss Application Server

SAS automatically configures your JBoss Application Server. However, depending on your site, you might need to complete these additional steps.

Set File Security in UNIX Environments

The login.config file contains login module definitions for connecting to SAS Remote Services by using the SAS Metadata Server. Because this file contains connection information, you want to restrict access to this file. To restrict access to the owner of this file, type the following commands at the UNX prompt:
cd SAS-configuration-directory/Lev1/Web
chmod go=Common/login.config

Restore Restrictive Policy Settings

If you configured your environment to use restrictive policy settings, then you had to disable these policy settings before installing your SAS software. How you restore these settings depends on whether SAS automatically reconfigured JBoss and whether you specified to use restricted permissions in your initial deployment. Use the following table to determine the post-configuration steps for your site.
When Post-Configuration Steps Are Required
Type of Configuration
Post-Configuration Steps
SAS automatically reconfigures the JBoss server and re-creates the restrictive policy file.
If you selected to use restrictive permissions the first time you configured your SAS 9.3 deployment, then SAS specified the following options in the start-up script:
  • -Djava.security.manager
  • -Djava.security.policy=full-path-to-restrictive-policy-file
Therefore, you do not need to specify these options again. When SAS automatically restarts the JBoss server, the restricted permissions file should be created and copied to the server.
You manually configured the JBoss server, or you manually created the restrictive policy file.
If you manually configured JBoss, or if you created the restrictive policy file the first time you configured your SAS 9.3 deployment, then the restrictive policy file is stored in SAS-configuration-directory/Lev1/Web/Common/jboss. After you update your SAS software, you must specify the following options in the start-up script:
  • -Djava.security.manager
  • -Djava.security.policy=full-path-to-restrictive-policy-file

Restore Customizations to Web Authentication

Here are the high-level steps that you must complete to restore any customizations for Web authentication.
  1. Update the login.config configuration file.
  2. Modify the server login-config.xml file.
  3. Modify Logon Manager.
  4. Set the CLASSPATH for Remote Services JVM.
  5. Set the WebApp.AuthDomain property.
  6. Log on to verify the Web authentication configuration.
For more information about each task, see the corresponding topics in Configuring JBoss Application Server 4.3 for Web Authentication with SAS 9.3 Web Applications. This document is available from http://support.sas.com/resources/thirdpartysupport/v93/appservers/ConfiguringJBossWebAuth.pdf.