java.security command

We can update specific Java Security related properties, such as the networkaddress.cache.ttl property.

We can specify the caching policy for successful name lookups from the name service. The value is specified as an integer to indicate the number of seconds to cache the successful lookup.

A value of -1 specifies to "cache forever". The default behavior is to cache forever when a security manager is installed, and to cache for an implementation-specific period, when a security manager is not installed. Setting this parameter to any value other than the default value can have serious security implications. Do not set this parameter unless we are sure that we are not exposed to DNS spoofing attacks.

Usage

isimvasvr > isim
isimvasvr: isim > java.security
isimvasvr: java.security >

reset

Reset an existing Java Security property.

update

Update an existing Java Security property.

Examples

• Reset an existing Java Security property.

  At the isimvasvr: java.security prompt, enter reset.

  Existing Java Security Property :
  1: networkaddress.cache.ttl=3
  Enter index: 1
  
  Are you sure to reset the java.security property? Enter YES to confirm that to continue: YES
  Java Security property set to default successfully.
• Update an existing Java Security property.

  At the isimvasvr: java.security prompt, enter update.

  Existing Java Security Property :
  1: networkaddress.cache.ttl=-1
  Enter index: 1
  
  Are you sure to update the java.security property? Enter YES to confirm that to continue: YES
  Property value : 3
  Java Security Property updated successfully.

Parent topic: IBM Security Identity Manager (ISIM) commands