Chapter 6. Securing Java clients

This chapter discusses how a variety of Java clients may be configured to access a secured server-based application. A Java client, in this context, is one which acts as an EJB client. The Java client may be operating on the same machine or a different machine from the EJB container and CORBA is used as the marshalling mechanism between client and server.

Relevant aspects of the OMG Common Secure Interoperability (CSIv2) specification are documented with regard to the Security Attribute Service (SAS) protocol that allows for interoperable authentication, delegation and privileges.

A description of how a Java client should be configured to make use of the security features follows with a look at the options available.

Programmatic login is discussed next with examples.