p u noeerhpGTO etutitsnI hcraeseR stce jXoer v PaidvtnacaJA G.N.Madhusudan PrincipalR esearchS cientist TheO penGroupR esearchI nstitute [email protected] The Open Group Research Institute WWeebb aanndd SSeeccuurriittyy -- OOuuttlliinnee ooff PPrroojjeeccttss n Secure Enterprise Web Projects • DCE-Web foundation • Current Groupware extensions - Sweden Post • Prism extensions • WIRE extensions • ACL Plug-ins n JADE n ActiveX Core PST n ADAGE and Rules-based Authorization n SHAWS and Distributed Clients The Open Group Research Institute EDAJ JADE - Java and DCE The Open Group Research Institute GGooaallss n Allow DCE clients to be written in Java n Java access to DCE runtime through native method classes n Compatibility with existing DCE servers n A minimal object model n Portions of the DCE runtime in pure Java n Java based DCE servers as a follow-on The Open Group Research Institute JJAADDEE BBeenneeffiittss • Make it possible to access DCE services from Java applications obtained through Secure Web • access DCE internal services (e.g. name service) • access DCE application services (e.g. banking service) • Extend Java security by using DCE security • enhance applet authentication • a DCE aware Security Manager could grant the applet extra rights The Open Group Research Institute JJAADDEE -- OOvveerrvviieeww noitacilppa avaJ Client Proxy JIDL generated Java DCE Marshalling API and rpc DCE Runtime The Open Group Research Institute OObbjjeeccttss aanndd rreeffeerreenncceess • Object = DCE server, or server resource • Remote method invocation layered on RPC • Object Reference = Binding Handle – revres rep stcejbo elpitlum :DIUU llun-non – tcejbo eht si revres :DIUU llun rev1res uuid1 rev2res uuid2 uuid3 The Open Group Research Institute CClliieenntt--ssiiddee pprrooxxyy • Allows location-transparent access to server • Methodsa res tubsc ompiledf romI DL • Proxy per binding handle (not per object) • Additional methods: bind from NS or string tneilc server 1yxorp obj1 2yxorp obj2 CPR 3yxorp obj3 The Open Group Research Institute IIDDLL ttoo JJaavvaa • ecafretn iLDI (cid:222) Java interface + stub class • noitarep oLDI (cid:222) Java method yxorPretnir pssal ccilbup [uuid (…)] esaByxorP sdnetxe interface printer retnirp stnemelpmi { { boolean print([in]file, [user]u); )cpr eldnaHcpR(yxorPretnirp etavirp void status([out]queue q); } … { noitpecxEecD sworht { )u resu ,f elif(tnirp cilbup } ;)cpr(lahsram.f retnir pecafretni } .… ;)cpr(lahsram.u { { )cpr eldnaHcpR(dnib retnirp cilbup } ;)cpr(yxorPretnirp nruter … ;) ures u, felif(tnir pnaeloo B } ;) qeueuq(sutat sdio v } The Open Group Research Institute TTiimmeettaabbllee n Feb 97 • Project started n April 97 • DCE IDL to Java Mapping; Demo application n July 97 • IDL-to-Java compiler; marshalling classes n Oct 97 • Initial pure Java runtime components n Jan 98 • Project Ends The Open Group Research Institute
Description: