IBM WebSphere V5.0 Security - CGISecurity

4. Server ORB calls the request interceptor to allow security to send information
back to the client along with the reply, send_reply().
5. Client ORB calls the request interceptor to allow the client to cleanup and set
the session status as validor invalid, receive_reply().
The SAS protocol supports the establishment of both stateless and stateful
security contexts. Stateless contexts exist only for the duration of the GIOP
request that was used to establish the context. Stateful contexts endure until they
are discarded and can be referenced for use with subsequent requests. The SAS
protocol includes a simple negotiation protocol that defines a
least-common-denominator form of interoperability between implementations
that support only stateless contexts and those that support both stateless and
stateful forms. While the J2EE Specification requires that only stateless mode is
implemented, the Application Server implements both in order to improve the
performance of a multiple message application. This is achieved by invoking the
server request interceptor when the EJB method has completed and sending a
new reply service context to client containing the outcome. This extra step is only
necessary for the first request in the session.
6.3 Configuring the Java client
It is necessary to configure the Java client so that it can access secured
applications. It must be made aware of certain properties, such as the security
settings for the client ORB. The properties are provided in a file called
sas.client.props. The JVM in which the application client will run should be set to
use this property file by adding the directive:
com.ibm.CORBA.ConfigURL=.
So, to start the JVM, enter:
java
-Dcom.ibm.CORBA.ConfigURL=file://properties/sas.client.prop
s com.abc.myJavaApp
where should be replaced with the directory in which the
Application Server, or the WebSphere Application Client, was installed, for
example C:\WebSphere\AppServer on a Windows machine.
Chapter 6. Securing Java clients 103