You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@servicemix.apache.org by ch...@apache.org on 2007/01/25 20:02:22 UTC

svn commit: r499912 - in /incubator/servicemix/site: security.html users-guide.html

Author: chirino
Date: Thu Jan 25 11:02:21 2007
New Revision: 499912

URL: http://svn.apache.org/viewvc?view=rev&rev=499912
Log:
Latest export from confluence

Added:
    incubator/servicemix/site/security.html
Modified:
    incubator/servicemix/site/users-guide.html

Added: incubator/servicemix/site/security.html
URL: http://svn.apache.org/viewvc/incubator/servicemix/site/security.html?view=auto&rev=499912
==============================================================================
--- incubator/servicemix/site/security.html (added)
+++ incubator/servicemix/site/security.html Thu Jan 25 11:02:21 2007
@@ -0,0 +1,294 @@
+
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
+<HTML>
+  <HEAD>
+<!--
+    Pier's plugin always overwrites the stylesheet so lets explicitly use another one
+    <link type="text/css" rel="stylesheet" href="autoexport:///SM/resources/space.css">
+-->
+    <LINK type="text/css" rel="stylesheet" href="resources/site.css">
+    <SCRIPT src="resources/space.js" type="text/javascript"></SCRIPT>
+    <SCRIPT src="http://www.google-analytics.com/urchin.js" type="text/javascript">
+    </SCRIPT>
+    <SCRIPT type="text/javascript">
+_uacct = "UA-398545-1";
+urchinTracker();
+    </SCRIPT>
+<META name="keywords" content="business integration, enterprise service bus, enterprise application integration, ESB, EAI, SOA, Service Oriented Architecture, web services, SOAP, JBI, JMS, WSDL, business-to-business, b2b, XML, EDI, Electronic Data Interchange, standards support, integration standards, application integration, java message service, middleware, message broker, software, solutions, services, ActiveMQ, ServiceMix, open source, MQ, message queue, message bus">
+<META name="description" content="">
+    <TITLE>
+Apache ServiceMix, the Agile Open Source ESB -- Security
+    </TITLE>
+  <META http-equiv="Content-Type" content="text/html;charset=UTF-8"></HEAD>
+  <BODY onload="init()">
+
+    <!-- Banner -->
+    <DIV id="site-banner">
+
+      <TABLE border="0" cellpadding="0" cellspacing="0" width="100%">
+        <TR>
+          <TD align="left" class="topbardiv" nowrap="">
+            <IMG border="0" src="http://incubator.apache.org/servicemix/images/logo.jpg">
+          </TD>
+          <TD align="right" nowrap="">
+            <IMG border="0" src="http://incubator.apache.org/images/apache-incubator-logo.png">
+          </TD>
+        </TR> 
+      </TABLE>
+
+    </DIV>
+
+    <!-- Bread crumbs and Quick Links -->
+    <DIV id="site-navbar">
+      <TABLE border="0" cellpadding="0" cellspacing="0" width="100%">
+        <TR>
+          <TD align="left" valign="middle" nowrap="">
+            <DIV id="site-breadcrumbs">
+<A href="home.html" title="ServiceMix">ServiceMix</A>&nbsp;&gt;&nbsp;<A href="home.html" title="Home">Home</A>&nbsp;&gt;&nbsp;<A href="users-guide.html" title="User's Guide">User&apos;s Guide</A>&nbsp;&gt;&nbsp;<A href="" title="Security">Security</A>
+            </DIV>
+          </TD>
+          <TD align="right" valign="middle" nowrap="">
+            <DIV id="site-quicklinks">
+<P><A href="download.html" title="Download">Download</A> &#124; <A href="documentation.html" title="Documentation">Documentation</A> &#124; <A href="javadocs.html" title="JavaDocs">JavaDocs</A> &#124; <A href="source.html" title="Source">Source</A> &#124; <SPAN class="nobr"><A href="home.html" title="Visit page outside Confluence" rel="nofollow">Wiki<SUP><IMG class="rendericon" src="http://goopen.org/confluence/images/icons/linkext7.gif" height="0" width="0" align="absmiddle" alt="" border="0"></SUP></A></SPAN> &#124; <A href="discussion-forums.html" title="Discussion Forums">Discussion Forums</A> &#124; <A href="support.html" title="Support">Support</A></P>
+            </DIV>
+          </TD>
+        </TR> 
+      </TABLE>
+    </DIV>
+
+<!-- Integrate google search later.
+          <form name="search" action="http://www.google.com/search" method="get">
+            <input type="hidden" name="ie" value="UTF- 8" />
+            <input type="hidden" name="oe" value="UTF- 8" />
+            <input type="hidden" name="domains" value="" />
+            <input type="hidden" name="sitesearch" value="" />
+            <input type="text" name="q" maxlength="255" value="" />        
+            <input type="submit" name="btnG" value="Google Search" />
+          </form>
+-->
+
+      <DIV id="site-content">
+        <TABLE>
+        <TR>
+        <TD valign="top">
+          <DIV id="site-navigation">
+<H3><A name="Navigation-Overview"></A>Overview</H3>
+
+<UL class="alternate" type="square">
+	<LI><A href="home.html" title="Home">Home</A></LI>
+	<LI><SPAN class="nobr"><A href="http://www.apache.org/" title="Visit page outside Confluence" rel="nofollow">ASF<SUP><IMG class="rendericon" src="http://goopen.org/confluence/images/icons/linkext7.gif" height="0" width="0" align="absmiddle" alt="" border="0"></SUP></A></SPAN></LI>
+	<LI><A href="license.html" title="License">License</A></LI>
+	<LI><A href="faq.html" title="FAQ">FAQ</A></LI>
+	<LI><A href="download.html" title="Download">Download</A></LI>
+	<LI><A href="sitemap.html" title="SiteMap">SiteMap</A></LI>
+</UL>
+
+
+<H3><A name="Navigation-Community"></A>Community</H3>
+
+<UL class="alternate" type="square">
+	<LI><A href="users-guide.html" title="User's Guide">User&apos;s Guide</A></LI>
+	<LI><A href="documentation.html" title="Documentation">Documentation</A></LI>
+	<LI><A href="support.html" title="Support">Support</A></LI>
+	<LI><A href="discussion-forums.html" title="Discussion Forums">Discussion Forums</A></LI>
+	<LI><A href="mailing-lists.html" title="Mailing Lists">Mailing Lists</A></LI>
+	<LI><SPAN class="nobr"><A href="http://issues.apache.org/activemq/browse/SM" title="Visit page outside Confluence" rel="nofollow">Issues<SUP><IMG class="rendericon" src="http://goopen.org/confluence/images/icons/linkext7.gif" height="0" width="0" align="absmiddle" alt="" border="0"></SUP></A></SPAN></LI>
+	<LI><A href="contributing.html" title="Contributing">Contributing</A></LI>
+	<LI><SPAN class="nobr"><A href="http://goopen.org/confluence/pages/listpages-dirview.action?key=SM" title="Visit page outside Confluence" rel="nofollow">Wiki<SUP><IMG class="rendericon" src="http://goopen.org/confluence/images/icons/linkext7.gif" height="0" width="0" align="absmiddle" alt="" border="0"></SUP></A></SPAN></LI>
+	<LI><A href="team.html" title="Team">Team</A></LI>
+	<LI><A href="users.html" title="Users">Users</A></LI>
+</UL>
+
+
+<H3><A name="Navigation-Developers"></A>Developers</H3>
+
+<UL class="alternate" type="square">
+	<LI><A href="source.html" title="Source">Source</A></LI>
+	<LI><A href="building.html" title="Building">Building</A></LI>
+	<LI><A href="ideas.html" title="Ideas">Ideas</A></LI>
+	<LI><A href="becoming-a-committer.html" title="Becoming a committer">Becoming a committer</A></LI>
+	<LI><A href="release-guide.html" title="Release Guide">Release Guide</A></LI>
+	<LI><A href="related-projects.html" title="Related Projects">Related Projects</A></LI>
+	<LI><A href="tools.html" title="Tools">Tools</A></LI>
+	<LI><A href="resources.html" title="Resources">Resources</A></LI>
+</UL>
+
+
+<H3><A name="Navigation-Components"></A>Components</H3>
+
+<UL class="alternate" type="square">
+	<LI><A href="servicemix-bean.html" title="servicemix-bean">servicemix&#45;bean</A></LI>
+	<LI><A href="servicemix-bpe.html" title="servicemix-bpe">servicemix&#45;bpe</A></LI>
+	<LI><A href="servicemix-drools.html" title="servicemix-drools">servicemix&#45;drools</A></LI>
+	<LI><A href="servicemix-eip.html" title="servicemix-eip">servicemix&#45;eip</A></LI>
+	<LI><A href="servicemix-file.html" title="servicemix-file">servicemix&#45;file</A></LI>
+	<LI><A href="servicemix-ftp.html" title="servicemix-ftp">servicemix&#45;ftp</A></LI>
+	<LI><A href="servicemix-http.html" title="servicemix-http">servicemix&#45;http</A></LI>
+	<LI><A href="servicemix-jms.html" title="servicemix-jms">servicemix&#45;jms</A></LI>
+	<LI><A href="servicemix-jsr181.html" title="servicemix-jsr181">servicemix&#45;jsr181</A></LI>
+	<LI><A href="servicemix-lwcontainer.html" title="servicemix-lwcontainer">servicemix&#45;lwcontainer</A></LI>
+	<LI><A href="servicemix-saxon.html" title="servicemix-saxon">servicemix&#45;saxon</A></LI>
+	<LI><A href="servicemix-script.html" title="servicemix-script">servicemix&#45;script</A></LI>
+	<LI><A href="servicemix-wsn2005.html" title="servicemix-wsn2005">servicemix&#45;wsn2005</A></LI>
+	<LI><A href="servicemix-xmpp.html" title="servicemix-xmpp">servicemix&#45;xmpp</A></LI>
+</UL>
+
+
+          </DIV>
+        </TD>
+        <TD valign="top">
+          <DIV id="site-page">
+
+<!--          
+            <div class="pagetitle">Security</div>
+-->
+            <DIV class="wiki-content"><H1><A name="Security-ServiceMixSecurityFeatures"></A>ServiceMix Security Features</H1>
+
+<P>Essentially, security in ServiceMix is provided on two levels:</P>
+<OL>
+	<LI>Authentication and authorization via <SPAN class="nobr"><A href="http://java.sun.com/products/jaas/" title="Visit page outside Confluence" rel="nofollow">JAAS<SUP><IMG class="rendericon" src="http://goopen.org/confluence/images/icons/linkext7.gif" height="0" width="0" align="absmiddle" alt="" border="0"></SUP></A></SPAN> or <SPAN class="nobr"><A href="http://incubator.apache.org/servicemix/dist/servicemix-3.0-incubating/site/servicemix-core/apidocs/org/apache/servicemix/jbi/security/auth/AuthenticationService.html" title="Visit page outside Confluence" rel="nofollow">custom procedures<SUP><IMG class="rendericon" src="http://goopen.org/confluence/images/icons/linkext7.gif" height="0" width="0" align="absmiddle" alt="" border="0"></SUP></A></SPAN>.</LI>
+	<LI>Securing the transport of messages, e.g. via <A href="servicemix-http.html" title="servicemix-http">SSL or WS-Security</A>.</LI>
+</OL>
+
+
+<H2><A name="Security-Authentication"></A>Authentication</H2>
+
+<P><SPAN class="nobr"><A href="http://java.sun.com/products/jaas/" title="Visit page outside Confluence" rel="nofollow">JAAS<SUP><IMG class="rendericon" src="http://goopen.org/confluence/images/icons/linkext7.gif" height="0" width="0" align="absmiddle" alt="" border="0"></SUP></A></SPAN> authentication has to be done at the Endpoint where the message<BR>
+in question entered the ESB. It is the responsibility of the Endpoint<BR>
+where the message entered to set the <SPAN class="nobr"><A href="http://java.sun.com/j2se/1.5.0/docs/api/javax/security/auth/Subject.html" title="Visit page outside Confluence" rel="nofollow">Subject<SUP><IMG class="rendericon" src="http://goopen.org/confluence/images/icons/linkext7.gif" height="0" width="0" align="absmiddle" alt="" border="0"></SUP></A></SPAN>, as this will later be utilized for authorization.</P>
+
+<P>In the <A href="servicemix-http.html" title="servicemix-http">servicemix&#45;http</A> component, this can be done via the<BR>
+configured<BR>
+<SPAN class="nobr"><A href="http://incubator.apache.org/servicemix/dist/servicemix-3.0-incubating/site/servicemix-core/apidocs/org/apache/servicemix/jbi/security/auth/AuthenticationService.html" title="Visit page outside Confluence" rel="nofollow">AuthenticationService<SUP><IMG class="rendericon" src="http://goopen.org/confluence/images/icons/linkext7.gif" height="0" width="0" align="absmiddle" alt="" border="0"></SUP></A></SPAN>.<BR>
+There is also a way for utilizing <A href="servicemix-http.html" title="servicemix-http">basic authentication</A> via the <SPAN class="nobr"><A href="http://jakarta.apache.org/commons/httpclient/" title="Visit page outside Confluence" rel="nofollow">Jakarta Commons HttpClient<SUP><IMG class="rendericon" src="http://goopen.org/confluence/images/icons/linkext7.gif" height="0" width="0" align="absmiddle" alt="" border="0"></SUP></A></SPAN> API.</P>
+
+<H2><A name="Security-Authorization"></A>Authorization</H2>
+
+<P>In order to allow for authorization, the <SPAN class="nobr"><A href="http://incubator.apache.org/servicemix/maven/servicemix-core/apidocs/org/apache/servicemix/jbi/security/SecuredBroker.html" title="Visit page outside Confluence" rel="nofollow">SecuredBroker<SUP><IMG class="rendericon" src="http://goopen.org/confluence/images/icons/linkext7.gif" height="0" width="0" align="absmiddle" alt="" border="0"></SUP></A></SPAN> has to be configured as the Container&apos;s broker:</P>
+<DIV class="code"><DIV class="codeContent">
+<PRE class="code-java">&lt;sm:container id=<SPAN class="code-quote">&quot;jbi&quot;</SPAN> rootDir=<SPAN class="code-quote">&quot;./target/data/smx&quot;</SPAN>&gt;
+
+&lt;!-- Use a secured broker which will check the authenticated
+         user <SPAN class="code-keyword">for</SPAN> the needed ACLs before granting access to a given
+         endpoint --&gt;
+    &lt;sm:broker&gt;
+      &lt;sm:securedBroker&gt;
+&lt;!-- Can be referenced from security.xml, too --&gt;
+        &lt;sm:authorizationMap&gt;
+  	     ...
+        &lt;/sm:authorizationMap&gt;
+      &lt;/sm:securedBroker&gt;
+    &lt;/sm:broker&gt;
+
+    &lt;sm:activationSpecs&gt;
+    ...
+    &lt;/sm:activationSpecs&gt;
+  &lt;/sm:container&gt;</PRE>
+</DIV></DIV>
+<P>Before routing <A href="5-jbi.html" title="5. JBI">Message Exchange</A>s, the<BR>
+<SPAN class="nobr"><A href="http://incubator.apache.org/servicemix/maven/servicemix-core/apidocs/org/apache/servicemix/jbi/security/SecuredBroker.html" title="Visit page outside Confluence" rel="nofollow">SecuredBroker<SUP><IMG class="rendericon" src="http://goopen.org/confluence/images/icons/linkext7.gif" height="0" width="0" align="absmiddle" alt="" border="0"></SUP></A></SPAN><BR>
+checks them against access control lists generated from the <SPAN class="nobr"><A href="http://incubator.apache.org/servicemix/dist/servicemix-3.0-incubating/site/servicemix-core/apidocs/org/apache/servicemix/jbi/security/acl/AuthorizationMap.html" title="Visit page outside Confluence" rel="nofollow">AuthorizationMap<SUP><IMG class="rendericon" src="http://goopen.org/confluence/images/icons/linkext7.gif" height="0" width="0" align="absmiddle" alt="" border="0"></SUP></A></SPAN>s. A precondition is that the <A href="5-jbi.html" title="5. JBI">Message Exchange</A> objects have previously been authenticated.</P>
+
+<H2><A name="Security-Securingtransport"></A>Securing transport</H2>
+
+<P>This mostly relates to securing SOAP over HTTP transports on the <A href="servicemix-http.html" title="servicemix-http">servicemix&#45;http</A> binding component. It provides both for <A href="servicemix-http.html" title="servicemix-http">SSL</A> and <A href="servicemix-http.html" title="servicemix-http">WS-Security</A>. At the time of writing, <SPAN class="nobr"><A href="http://www.nabble.com/WS-Security-tf2870896s12049.html" title="Visit page outside Confluence" rel="nofollow">not all of the WS-Security features are yet supported<SUP><IMG class="rendericon" src="http://goopen.org/confluence/images/icons/linkext7.gif" height="0" width="0" align="absmiddle" alt="" border="0"></SUP></A></SPAN>.</P>
+
+<H2><A name="Security-SecurityConfiguration"></A>Security Configuration</H2>
+
+<P>Below the ServiceMix root directory, one can find a directory containing configuration files:</P>
+<DIV class="code"><DIV class="codeContent">
+<PRE class="code-java">$SERVICEMIX_HOME/conf/</PRE>
+</DIV></DIV>
+<P>This directory contains the following security-relevant files:</P>
+<UL class="alternate" type="square">
+	<LI><TT>security.xml</TT>: This file manages<BR>
+<SPAN class="nobr"><A href="http://incubator.apache.org/servicemix/dist/servicemix-3.0-incubating/site/servicemix-core/apidocs/org/apache/servicemix/jbi/security/auth/AuthenticationService.html" title="Visit page outside Confluence" rel="nofollow">AuthenticationService<SUP><IMG class="rendericon" src="http://goopen.org/confluence/images/icons/linkext7.gif" height="0" width="0" align="absmiddle" alt="" border="0"></SUP></A></SPAN>s,<BR>
+keystores, and<BR>
+<SPAN class="nobr"><A href="http://incubator.apache.org/servicemix/dist/servicemix-3.0-incubating/site/servicemix-core/apidocs/org/apache/servicemix/jbi/security/acl/AuthorizationMap.html" title="Visit page outside Confluence" rel="nofollow">AuthorizationMap<SUP><IMG class="rendericon" src="http://goopen.org/confluence/images/icons/linkext7.gif" height="0" width="0" align="absmiddle" alt="" border="0"></SUP></A></SPAN>s,<BR>
+from which the<BR>
+<SPAN class="nobr"><A href="http://incubator.apache.org/servicemix/maven/servicemix-core/apidocs/org/apache/servicemix/jbi/security/SecuredBroker.html" title="Visit page outside Confluence" rel="nofollow">SecuredBroker<SUP><IMG class="rendericon" src="http://goopen.org/confluence/images/icons/linkext7.gif" height="0" width="0" align="absmiddle" alt="" border="0"></SUP></A></SPAN> derives acess control lists.
+<DIV class="code"><DIV class="codeContent">
+<PRE class="code-java">&lt;beans xmlns:sm=<SPAN class="code-quote">&quot;http:<SPAN class="code-comment">//servicemix.apache.org/config/1.0&quot;</SPAN>&gt;
+</SPAN>&lt;!-- Authentication service --&gt;
+  &lt;sm:authenticationService id=<SPAN class="code-quote">&quot;authenticationService&quot;</SPAN>/&gt;
+&lt;!-- KeyStore manager --&gt;
+  &lt;sm:keystoreManager id=<SPAN class="code-quote">&quot;keystoreManager&quot;</SPAN>&gt;
+    &lt;sm:keystores&gt;
+      &lt;sm:keystore name=<SPAN class="code-quote">&quot;<SPAN class="code-keyword">default</SPAN>&quot;</SPAN> path=<SPAN class="code-quote">&quot;classpath:keystore.jks&quot;</SPAN> keystorePassword=<SPAN class="code-quote">&quot;servicemix&quot;</SPAN> keyPasswords=<SPAN class="code-quote">&quot;smx=smx&quot;</SPAN>/&gt;
+    &lt;/sm:keystores&gt;
+  &lt;/sm:keystoreManager&gt;
+&lt;!-- ServiceMix authorization map --&gt;
+  &lt;sm:authorizationMap id=<SPAN class="code-quote">&quot;authorizationMap&quot;</SPAN>&gt;
+    &lt;sm:authorizationEntries&gt;
+&lt;!-- Roles correspond to user groups --&gt;
+      &lt;sm:authorizationEntry service=<SPAN class="code-quote">&quot;*:*&quot;</SPAN> roles=<SPAN class="code-quote">&quot;*&quot;</SPAN>/&gt;
+    &lt;/sm:authorizationEntries&gt;
+  &lt;/sm:authorizationMap&gt;
+&lt;/beans&gt;</PRE>
+</DIV></DIV>
+<P>If this file is being imported into <TT>servicemix.xml</TT>:</P>
+<DIV class="code"><DIV class="codeContent">
+<PRE class="code-java">...
+&lt;<SPAN class="code-keyword">import</SPAN> resource=<SPAN class="code-quote">&quot;classpath:security.xml&quot;</SPAN> /&gt;
+...</PRE>
+</DIV></DIV>
+<P>... it can be referenced when defining the <SPAN class="nobr"><A href="http://incubator.apache.org/servicemix/maven/servicemix-core/apidocs/org/apache/servicemix/jbi/security/SecuredBroker.html" title="Visit page outside Confluence" rel="nofollow">SecuredBroker<SUP><IMG class="rendericon" src="http://goopen.org/confluence/images/icons/linkext7.gif" height="0" width="0" align="absmiddle" alt="" border="0"></SUP></A></SPAN>.</P></LI>
+</UL>
+
+
+<UL class="alternate" type="square">
+	<LI><TT>users-passwords.properties</TT>: A file specifying passwords for users.
+<DIV class="code"><DIV class="codeContent">
+<PRE class="code-java">#syntax: username=password
+#users
+manager=system
+userh1.=userh1.pw
+user2=user2pw</PRE>
+</DIV></DIV></LI>
+</UL>
+
+
+<UL class="alternate" type="square">
+	<LI><TT>groups.properties</TT>: A file relating users to groups.
+<DIV class="code"><DIV class="codeContent">
+<PRE class="code-java">#syntax: groupname=membername
+admin=manager
+secure=userh1.</PRE>
+</DIV></DIV></LI>
+</UL>
+
+
+<UL class="alternate" type="square">
+	<LI><TT>login.properties</TT>: A <SPAN class="nobr"><A href="http://java.sun.com/products/jaas/" title="Visit page outside Confluence" rel="nofollow">JAAS<SUP><IMG class="rendericon" src="http://goopen.org/confluence/images/icons/linkext7.gif" height="0" width="0" align="absmiddle" alt="" border="0"></SUP></A></SPAN> configuration file.</LI>
+</UL>
+
+
+<UL class="alternate" type="square">
+	<LI><TT>keystore.jks</TT>: A keystore.</LI>
+</UL>
+
+
+<H2><A name="Security-Example"></A>Example</H2>
+
+<P>The ServiceMix source distribution (3.1) comes with the <TT>WS-Sec</TT> example, which illustrates both <A href="servicemix-http.html" title="servicemix-http">basic authentication and WS-Security</A>. It can be found in:</P>
+<DIV class="code"><DIV class="codeContent">
+<PRE class="code-java">$SERVICEMIX_HOME/samples/ws-sec</PRE>
+</DIV></DIV></DIV>
+          
+                  </DIV>
+        </TD>
+      </TR>
+      </TABLE>     
+      </DIV>
+    </DIV>
+    <DIV id="site-footer">
+          Added by     <A href="http://goopen.org/confluence/users/viewuserprofile.action?username=prossma">Philipp Rossmanith</A>,
+    last edited by     <A href="http://goopen.org/confluence/users/viewuserprofile.action?username=prossma">Philipp Rossmanith</A> on Jan 25, 2007
+                  &nbsp;(<A href="http://goopen.org/confluence/pages/diffpages.action?pageId=15346&originalId=15347">view change</A>)
+              
+      (<A href="http://goopen.org/confluence/pages/editpage.action?pageId=15346">edit page</A>)
+    </DIV>
+
+  </BODY>
+
+</HTML>
\ No newline at end of file

Modified: incubator/servicemix/site/users-guide.html
URL: http://svn.apache.org/viewvc/incubator/servicemix/site/users-guide.html?view=diff&rev=499912&r1=499911&r2=499912
==============================================================================
--- incubator/servicemix/site/users-guide.html (original)
+++ incubator/servicemix/site/users-guide.html Thu Jan 25 11:02:21 2007
@@ -14,8 +14,10 @@
 _uacct = "UA-398545-1";
 urchinTracker();
     </SCRIPT>
+<META name="keywords" content="business integration, enterprise service bus, enterprise application integration, ESB, EAI, SOA, Service Oriented Architecture, web services, SOAP, JBI, JMS, WSDL, business-to-business, b2b, XML, EDI, Electronic Data Interchange, standards support, integration standards, application integration, java message service, middleware, message broker, software, solutions, services, ActiveMQ, ServiceMix, open source, MQ, message queue, message bus">
+<META name="description" content="">
     <TITLE>
-User&apos;s Guide
+Apache ServiceMix, the Agile Open Source ESB -- User&apos;s Guide
     </TITLE>
   <META http-equiv="Content-Type" content="text/html;charset=UTF-8"></HEAD>
   <BODY onload="init()">
@@ -267,7 +269,7 @@
 		<LI><A href="pojo-support.html" title="POJO support">POJO support</A></LI>
 		<LI><SPAN class="nobr"><A href="http://goopen.org/confluence/pages/createpage.action?spaceKey=SM&title=Flows&linkCreation=true&fromPageId=13484" title="Create Page: Flows" class="createlink">Flows<SUP><IMG class="rendericon" src="http://goopen.org/confluence/images/icons/plus.gif" height="7" width="7" align="absmiddle" alt="" border="0"></SUP></A></SPAN></LI>
 		<LI><SPAN class="nobr"><A href="http://goopen.org/confluence/pages/createpage.action?spaceKey=SM&title=Quality%20of%20Service&linkCreation=true&fromPageId=13484" title="Create Page: Quality of Service" class="createlink">Quality of Service<SUP><IMG class="rendericon" src="http://goopen.org/confluence/images/icons/plus.gif" height="7" width="7" align="absmiddle" alt="" border="0"></SUP></A></SPAN></LI>
-		<LI><SPAN class="nobr"><A href="http://goopen.org/confluence/pages/createpage.action?spaceKey=SM&title=Security&linkCreation=true&fromPageId=13484" title="Create Page: Security" class="createlink">Security<SUP><IMG class="rendericon" src="http://goopen.org/confluence/images/icons/plus.gif" height="7" width="7" align="absmiddle" alt="" border="0"></SUP></A></SPAN></LI>
+		<LI><A href="security.html" title="Security">Security</A></LI>
 	</UL>
 	</LI>
 </UL>
@@ -337,7 +339,10 @@
               <a href="javascript:hideChildren()">Hide Children</a></span>
           </div>
           <div class="greybox" id="children" style="display: none;">
-                                      <a href="http://goopen.org/confluence/display/SM/5.+JBI" title="5. JBI">5. JBI</a>
+                                      <a href="http://goopen.org/confluence/display/SM/Security" title="Security">Security</a>
+              <span class="smalltext">(ServiceMix)</span>
+              <br>
+                          <a href="http://goopen.org/confluence/display/SM/5.+JBI" title="5. JBI">5. JBI</a>
               <span class="smalltext">(ServiceMix)</span>
               <br>
                           <a href="http://goopen.org/confluence/display/SM/6.+Configuring+ServiceMix" title="6. Configuring ServiceMix">6. Configuring ServiceMix</a>