Re: how does blitz control clients access entries put in javaspace?

liang li wrote:
> hi, all,
>  
>     when i think about the safety of my info, i dont know how to control 
> jini
> clients to access entries strored in my javaspace(for example, blitz)?
> i hope the control action take place in server/service side, not clients 
> side.

There are multiple things that you need to do.  Primarily, you need to be able 
to send authentication information from the client to the server so that the 
client is identified (authenticated) to the server.  Conversely, because you are 
sending authentication information, you probably want the server to authenticate 
to the client as well.  The JERI stack provides mechanisms for this to work, 
already with X.500 and Kerberos based authentication.  You would use Constraints 
to specify that these things are needed/required, and then specify a policy file 
that says "users authenticated in this way have access".

The arch2_0.html file in the root of the jini 2.1 tree details everything. 
There are example configurations in the tree as well which provide security in 
this way.

I have also put together a password based example in the project 
http://pastion.dev.java.net.  You can see there that different ways can be 
devised depending on the type of authentication used/needed.

Gregg Wonderly

===========================================================================
To unsubscribe, send email to [email protected] and include in the body
of the message "signoff JAVASPACES-USERS".  For general help, send email to
[email protected] and include in the body of the message "help".

To view past JAVASPACES-USERS postings, please see:
http://archives.java.sun.com/archives/javaspaces-users.html