Borland VisiBroker® 7.0 - Borland Technical Publications

Server and Client IdentificationNo additional properties are necessary for the Host LoginModule.Server and Client IdentificationSnoopy {com.borland.security.provider.authn.HostLoginModule required;};In addition to the many clients and users that need to be authenticated to the variousVisiBroker services, the Borland VisiBroker Server itself needs to be provided with itsown identity. This allows the server to identify itself when it communicates with othersecure servers or services. It also allows end-tier servers to trust assertions made bythis server in the case where this server acts on behalf of other clients. In general, anysystem that needs to engage in secure communication as a client, must be configuredto have an identity that represents the user/client on whose behalf it is acting. Whenusing SSL with mutual authentication, a server also needs a certificate to identify itselfto the client.Setting the config file for client authenticationEach process uses its own configuration file containing the configuration for the set ofauthentication realms that the system supports for client authentication.To set the location of the configuration file:■Set the vbroker.security.authentication.config property to the path of theconfiguration file.System IdentificationThe security configuration uses properties and a configuration file to define theidentities that represent the system. This configuration file is populated with all theLoginModules necessary for authentication to the various realms to which this processneeds to authenticate.For example:Set the property vbroker.security.login=trueSet the property vbroker.security.login.realms=payroll,hrSet the following realm information in a file reference byvbroker.security.authentication.config=Set the property vbroker.security.callbackhandler=In the setup the following:payroll {com.borland.security.provider.authn.HostLoginModule required;};hr {com.borland.security.provider.authn.BasicLoginModule requiredDRIVER=com.borland.datastore.jdbc.DataStoreDriverURL="jdbc:borland:dslocal:../userdb.jds"TYPE=BASICLOGINUSERID=adminLOGINPASSWORD=admin;};36 VisiBroker Security Guide