On Tue, 6 Mar 2001, Daniel Schaller wrote:

> Hello,
> 
> currently, I am using a standalon RMI-Server, which is able to export
> RemoteObjects. The underlying sockets of these objects are SSLSockets. It
> works very great and stable.
> 
> Well, now I want to change to EJB and I want to use JBoss as the
> EJB-Container. I read in the documentation, that all the communication takes
> place over RMI by default.
> 
> My question: Is it possible using SSLSockets here, too??
One way or another 8^})

I took a look in the code and found a few things:
There is already a custom RMI socket and factory (SecureSocketFactory - it
digs the Principal out of the datastream) in the JRMP package
(org.jboss.ejb.plugins.jrmp.interfaces) I don't see where that's
installed, and it seems like it's obsolete - at least I think i've seen
the extraction of security information somewhere else (it's tucked into
the RemoteMethodInvocation instance that's passed into the container
invoker)

Question for the Gurus: Would it be more appropriate to write a slightly
new InvocationHandler to call RMISocketFactory.setSocketFactory, or should
this be done once in an MBean? The first makes me a bit nervous, because
it seams to me that one bean's invocation handler could then change the
RMISocketFactory for the entire server.

Comments?


> 
> Thanks
> 
> Daniel Schaller
> 
> 
> 
> 
> --
> --------------------------------------------------------------
> To subscribe:        [EMAIL PROTECTED]
> To unsubscribe:      [EMAIL PROTECTED]
> 

-- 
Dan Christopherson (danch) 
nVisia Technical Architect (www.nvisia.com)

Opinions expressed are mine and do not neccessarily reflect any 
position or opinion of nVISIA.

---------------------------------------------------------------------------
If you're a capitalist and you have the best goods and they're 
free, you don't have to proselytize, you just have to wait.
-Eben Moglen



--
--------------------------------------------------------------
To subscribe:        [EMAIL PROTECTED]
To unsubscribe:      [EMAIL PROTECTED]

Reply via email to