Hi --

Here's some info on upcoming developments on the security context in
IIOP from the chair of the Security RTF at OMG. I'm forwarding them
because he's not a subscriber to this list:

==============================================
Evan Ireland wrote:

> Is anyone, anywhere, working on defining security context for EJBs? I
> can't find any evidence of this happening, but perhaps something is
> going on behind closed doors or there is some draft spec floating
> about that I haven't seen.

Yes, there is a current RFP in the works called CSIv2 (Common Secure
Interoperbility) and Sun has someone from J2EE on the team trying to make
sure the things we do work for EJB.

On the other hand, others are concerned with much more than J2EE, as CORBA
addresses more than just a silly bean in a container. So, the team is
forced to look at security as a whole as it applies to other language
mappings and legacy systems.

> And let's all hope that when such a beast exists, it will not require
> the use of valuetypes or serialized Java objects in the service
> context list!!!

You can stop yelling. :-) The service context for security will most likely
use some combination of CDR and ASN.1 encoded things, such as IETF
Privilege Attribute Certificate, etc. And it will not contain anything
like serialized Java objects (gak) in the service context list.  That's
not CORBA.  CORBA is not J2EE. J2EE wants to be CORBA compatible.


Cheers
-Polar Humenn
Chair of the Security Revision Task Force, OMG.


-------------------------------------------------------------------
Polar Humenn                  Adiron, LLC
mailto:[EMAIL PROTECTED]       2-212 CST
Phone: 315-443-3171           Syracuse, NY 13244-4100
Fax:   315-443-4745           http://www.adiron.com

===================================================================

===========================================================================
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff EJB-INTEREST".  For general help, send email to
[EMAIL PROTECTED] and include in the body of the message "help".

Reply via email to