Borland VisiBroker® 7.0 - Borland Technical Publications

Server and Client IdentificationVaultGen exampleLet's look at an example of VaultGen. Let's say we want to create a vault called MyVaultfor use with a domain called base. First, we need to know which security profile thedomain is using so that we can reference its config.jaas file. We check the value of thedomain's vbroker.security.profile property in the domain's orb.properties file:## Security for the user domain## Disable user domain security by defaultvbroker.security.profile=defaultvbroker.security.vault=${properties.file.path}/../security/scu_vaultThe name of the security profile is default. This tells us that the path to the profile'sconfig.jaas file is:c:/BDP/var/security/profiles/default/config.jaasNow we can check which realms are contained in the profile for which we want tocreate identities. We navigate to the installation's bin directory, and use the realmscommand:c:\BDP\bin> vaultgen -config ../var/security/profiles/default/config.jaas -vault myVault realmsvaultgen tells us the following realms are available:The following realms are available:- UserRealm- MikeRealm- BenRealmNext we execute vaultgen using the login command:c:\BDP\bin> vaultgen -config ../var/security/profiles/default/config.jaas -vault myVault login UserRealmvaultgen prompts us for the username and password for the UserRealm, which we enter.We then repeat the process for each additional realm. At the end of each command,vaultgen informs us that it has logged-in the new identity and saved changes toMyRealm.Logged into realm BenRealmGenerating Vault to MyVaultThe vault is created in the directory you specify in the command, in this case the bindirectory. A good place to put the actual vault files are in the domain's securitydirectory, located in:/var/domains//adm/security/40 VisiBroker Security Guide