how does blitz control clients access entries put in javaspace?

Gregg Wonderly

2008-05-08 13:24:03 UTC

Post by liang li
hi, all,
when i think about the safety of my info, i dont know how to control
jini
clients to access entries strored in my javaspace(for example, blitz)?
i hope the control action take place in server/service side, not clients
side.

There are multiple things that you need to do. Primarily, you need to be able
to send authentication information from the client to the server so that the
client is identified (authenticated) to the server. Conversely, because you are
sending authentication information, you probably want the server to authenticate
to the client as well. The JERI stack provides mechanisms for this to work,
already with X.500 and Kerberos based authentication. You would use Constraints
to specify that these things are needed/required, and then specify a policy file
that says "users authenticated in this way have access".

The arch2_0.html file in the root of the jini 2.1 tree details everything.
There are example configurations in the tree as well which provide security in
this way.

I have also put together a password based example in the project
http://pastion.dev.java.net. You can see there that different ways can be
devised depending on the type of authentication used/needed.

Gregg Wonderly

===========================================================================
To unsubscribe, send email to ***@java.sun.com and include in the body
of the message "signoff JAVASPACES-USERS". For general help, send email to
***@java.sun.com and include in the body of the message "help".

To view past JAVASPACES-USERS postings, please see:
http://archives.java.sun.com/archives/javaspaces-users.html