IBM WebSphere V5.0 Security - CGISecurity

Running the client-side login sample
To test the client-side login scenario, launch the ITSOBank J2EE client
application from the command line. The client is packaged with all the application
modules in the enterprise archive. Normally, you will only need the client
application, the utility JARs, and some of the EJB classes for client access.
launchclient itsobank_secured.ear [ stdin | gui | username password realm ]
The following example launches the client using the character-based console to
collect login information:
launchclient itsobank_secured.ear stdin
The following example launches the client passing the login information as
parameters:
launchclient itsobank_secured.ear manager01 password dirsrv:389
If you are running the client from a remote terminal, you have to specify the
server hostname and eventually the server port for the connection:
launchclient -CCBootstrapHost=appsrv01 -CCBootstrapPort=2809
itsobank_secured.ear
Thin Java application
The thin Java application also has to use a login mechanism to log in to the
application server. WebSphere Application Server V5 supports JAAS as the
authentication mechanism for programmatic login. In order to perform a login to
access a remote EJB, you must do the following:
1. Initialize the ORB for the CORBA connection. The following code snippet
shows the ORB initialization.
Example 8-8 ORB initialization
...
Properties props = new Properties();
props.put("org.omg.CORBA.ORBClass", "com.ibm.CORBA.iiop.ORB");
props.put("com.ibm.CORBA.ORBInitRef.NameService","corbaloc:iiop:" + serverName
+ ":" + serverPort + "/NameService");
props.put("com.ibm.CORBA.ORBInitRef.NameServiceServerRoot","corbaloc:iiop:"+
serverName + ":" + serverPort + "/NameServiceServerRoot");
ORB _orb = ORB.init((String[]) null, props);
...
2. Perform the programmatic login using JAAS; this part is very similar to the
login process introduced before.
3. Initialize the Context for the EJB lookup, then look up the EJB.
4. Acquire the remote object through the EJB’s home interface.
Chapter 8. Programmatic security 211