SRP protocol verification
org.jboss.security.srp.SRPVerifierStoreService is an example MBean service that binds an implementation of the SRPVerifierStore interface that uses a file of serialized objects as the persistent store. Although not realistic for a production environment, it does allow for testing of the SRP protocol and provides an example of the requirements for an SRPVerifierStore service. The configurable SRPVerifierStoreService MBean attributes include the following: JndiName JNDI name from which the SRPVerifierStore implementation should be available. If not specified it defaults to srp/DefaultVerifierSource . StoreFile Location of the user password verifier serialized object store file. This can be either a URL or a resource name to be found in the classpath. If not specified it defaults to SRPVerifierStore.ser . The SRPVerifierStoreService MBean also supports addUser and delUser operations for addition and deletion of users. The signatures are: public void addUser(String username, String password) throws IOException; public void delUser(String username) throws IOException; An example configuration of these services is presented in Example 13.2, “The SRPVerifierStore interface” .