Borland VisiBroker® 7.0 - Borland Technical Publications

Creating Custom PluginsAuthorization service providers are tightly connected with Authorization Domains. Eachdomain has exactly one authorization service provider implementation. During theinitialization of the ORB, the authorization domains defined byvbroker.security.authDomains is constructed, while the Authorization Service Providerimplementation is instantiated during the construction of domain itself.To plugin authorization service, you need to set properties:vbroker.security.auth.domains=MyDomainvbroker.security.domain.MyDomain.provider=MyProvidervbroker.security.domain.MyDomain.property1=xxxvbroker.security.domain.MyDomain.property2=xxxvbroker.security.identity.attributeCodecs=MyCodecvbroker.security.adapter.MyCodec.property1=xxxvbroker.security.adapter.MyCodec.property2=xxxThe properties specified will be passed to the user plugin following the samemechanism as above.Trust ProvidersYou can also plugin the assertion trust mechanism. Assertion can happen in a multihopscenario, or explicitly called through the assertion API. Server can have rules todetermine whether the peer is trusted to make the assertion or not. The defaultimplementation uses property setting to configure trusted peers on the server side.During runtime, peers must pass authentication and authorization in order to be trustedfor making assertions. There can be only one Trust Provider for the entire securityservice.To plugin the assertion trust mechanism, you will need to set the following properties:vbroker.security.trust.trustProvider=MyProvidervbroker.security.trust.trustProvider.MyProvider.property1=xxxvbroker.security.trust.trustProvider.MyProvider.property2=xxxThe properties specified will be passed to the user plugin following the samemechanism as above.70 VisiBroker Security Guide