Administration Tool: Groups

The Groups panel enables you to add and delete groups, and to add or remove users in a group, for a given realm. For a selected group, the Groups page displays the list of users who are members of that group, and the name of the security realm to which the group is assigned.

Creating groups enables you to assign access to web resources more efficiently. Once you've created a list of groups, you control their access to web pages and other server resources using the Add/Remove and Edit features on the Access Control Lists panel.

The Java Web Server^(TM) has the following security realms:

• certificateRealm - Used to protect resources for users who are authenticated using Secure Sockets Layer (SSL). This realm is only packaged in the versions of this product that include SSL.
• defaultRealm - This realm can also be used for general management of users and groups. Controls the example servlets.
• servletMgrRealm - Used exclusively for signed servlet support, which is used primarily by software publishers. Holds the X.509 certificates used to authenticate those publishers.
• UNIX - Applies only to users in a UNIX environment. It is the same database of users as listed by the UNIX getpwent() routines. This realm lets the server use HTTP basic authentication with users' UNIX passwords.
• NTRealm - Applies only to users in a Windows NT environment (only available in the Win 32 version of this product).

Note: To access NT realms, the server has to be run as Administrator and special rights ("Act as part of operating system") have to be granted to the Administrators group. To do this:

1. From the Start menu, choose Programs -> Administrative Tools -> UserManager.
2. Select Policies -> User Rights.
3. Select the Show Advanced User Rights check box.
4. Enable Act as part of operating system rights for the administrator.