User Login in Java - JAAS / JNDI / GSSAPI

Question

What is the best way to develop a user login mechanism using Java? What are the best methods for creating a safe and reliable login mechanism?

What is the difference between JAAS, JNDI and GSSAPI? How do you decide which one to choose?

Answer 1

Single Sign-On (SSO) is one of the best methods. Using one set of credentials for authentication (not necessarily authorization) for a group of applications. Java-based open source Java - An OpenSSO solution is available at https://opensso.dev.java.net/ . This includes OpenDS, an open source LDAP server.

, , - 1) ,
2) LDAP

: http://www.coresecuritypatterns.com/patterns.htm

Answer 2

.

java . LDAP, , OpenLDAP.

, , "": "", , , , Java ( , LDAP, , , , )

Answer 3

I really like Spring Security . This is pretty easy to set up if you have a Spring project, of course, but I saw parts of it integrated into other implementations.