Gary Murphy – Hilbert Computing Inc.

Java Security

In this session, Gary will discuss the implementation of Java 2 code-based security and the role-based security that was introduced as Java Authentication and Authorization Service (JAAS) and is now part of the J2SE 1.4 code base. Specifically, he will cover the installation of a security manager and the implementation of the Policy objects for code and subject-based security with the goal of implementing security information in an LDAP backing store.

Gary will begin with a discussion of the ClassLoader objects and their role in Java security. He will discuss the technique for bootstrapping the classes that implement security in such a way to avoid a problem with the security code having the authority to implement the security policy.

The authentication mechanism used in subject-based security will be covered. The architectural roots in the Unix Pluggable Authentication Modules (PAM) will be discussed and how this can be used as a basis for single sign-on strategies.

Finally, Gary will discuss the ramifications to your Java code after implementing a security policy.

LDAP Access using JNDI

In this session, Gary will discuss accessing LDAP directories using the JNDI programming interface. As an introduction to LDAP, this session will cover schemas and the inheritance of object classes. The naming of objects in the directory information tree will be covered and how that compares to other naming schemes that we are more familiar with. We will also look at the creation of additional schema entries and the registration with IANA to ensure a unique enterprise number for custom schemas.

Gary will then cover the access of attribute information using the directory contexts. He will cover the different techniques for using JNDI object and state factories so that LDAP can be used as an object store for Java objects.

Gary Murphy is the founder of Hilbert Computing, Inc., a contracting company specializing in object-oriented programming in Java. Hilbert Computing specializes in operationally-centered programming, and network programming. Gary has over 20 years of programming experience on a variety of systems from mainframes to desktops. Since founding Hilbert Computing in 1995, Gary has provided architectural consulting and core frameworks development for various companies in the midwestern United States. Email: glm@hilbertinc.com

Back to ...

David Moskwitz

On to ...

Hermod Opstvedt