Using Security in CORBA Applications

Building and Running the CORBA Sample Applications

The topic includes the following sections:

Notes:

The BEA Tuxedo CORBA Java client and BEA Tuxedo CORBA Java client ORB were deprecated in Tuxedo 8.1 and are no longer supported. All BEA Tuxedo CORBA Java client and BEA Tuxedo CORBA Java client ORB text references, associated code samples, should only be used to help implement/run third party Java ORB libraries, and for programmer reference only.

Note:

Technical support for third party CORBA Java ORBs should be provided by their respective vendors. BEA Tuxedo does not provide any technical support or documentation for third party CORBA Java ORBs.

Building and Running the Security Sample Application

The Security sample application demonstrates using password authentication. For instructions for building and running the Security sample application, see the Guide to the CORBA University Sample Applications.

Building and Running the Secure Simpapp Sample Application

The Secure Simpapp sample application demonstrates using the SSL protocol and certificate authentication to protect communications between client applications and the BEA Tuxedo domain.

To build and run the Secure Simpapp sample application, complete the following steps:

Copy the files for the Secure Simpapp sample application into a work directory.
Change the protection attribute on the files for the Secure Simpapp sample application.
Verify the environment variables.
Execute the runme command.

Before you can use the Secure Simpapp sample application, obtain a certificate and private key (IIOPListener.pem) for the IIOP Listener/Handler from the certificate authority in your enterprise and load the certificate in a Lightweight Directory Access Protocol (LDAP)-enabled directory service. The runme command prompts you for the pass phrase for the private key for the IIOP Listener/Handler.

Step 1: Copy the Files for the Secure Simpapp Sample Application into a Work Directory

You need to copy the files for the Secure Simpapp sample application into a work directory on your local machine.

The files for the Secure Simpapp sample application are located in the following directories:

Windows 2003

drive:\TUXdir\samples\corba\simpappSSL

UNIX

/usr/local/TUXdir/samples/corba/simpappSSL

You will use the files listed in Table 10-1 to build and run the Secure Simpapp sample application.

Table 10-1 Files Included in the Secure Simpapp Sample Application
File	Description
`Simple.idl`	The OMG IDL code that declares the `Simple` and `SimpleFactory` interfaces.
`Simples.cpp`	The C++ source code that overrides the default `Server::initialize` and `Server::release` methods.
`Simplec.cpp`	The source code for the CORBA C++ client application in the Secure Simpapp sample application.
`Simple_i.cpp`	The C++ source code that implements the `Simple` and `SimpleFactory` methods.
`Simple_i.h`	The C++ header file that defines the implementation of the `Simple` and `SimpleFactory` methods.
`Readme.html`	This file provides the latest information about building and running the Secure Simpapp sample application.
`runme.cmd`	The Windows 2003 batch file that builds and runs the Secure Simpapp sample application.
`runme.ksh`	The UNIX Korn shell script that builds and executes the Secure Simpapp sample application.
`makefile.mk`	The makefile for the Secure Simpapp sample application on the UNIX operating system. This file is used to manually build the Secure Simpapp sample application. Refer to the `Readme.html` file for information about manually building the Secure Simpapp sample application. The UNIX `make` command needs to be in the path of your machine.
`makefiles.nt`	The makefile for the Secure Simpapp sample application on the Windows 2003 operating system. This makefile can be used directly by the Visual C++ `nmake` command. This file is used to manually build the Secure Simpapp sample application. Refer to the `Readme.html` file for information about manually building the Secure Simpapp sample application. The Windows 2003 `nmake` command needs to be in the path of your machine.

Step 2: Change the Protection Attribute on the Files for the Secure Simpapp Sample Application

During the installation of the BEA Tuxedo software, the sample application files are marked read-only. Before you can edit or build the files in the Secure Simpapp sample application, you need to change the protection attribute of the files you copied into your work directory, as follows:

Windows 2003

prompt>attrib -r drive:\workdirectory\*.*

UNIX

prompt>/bin/ksh

ksh prompt>chmod u+w /workdirectory/*.*

On the UNIX operating system platform, you also need to change the permission of runme.ksh to give execute permission to the file, as follows:

ksh prompt>chmod +x runme.ksh

Step 3: Verify the Settings of the Environment Variables

Before building and running the Secure Simpapp sample application, you need to ensure that certain environment variables are set on your system. In most cases, these environment variables are set as part of the installation procedure. However, you need to check the environment variables to ensure they reflect correct information.

Table 10-2 lists the environment variables required to run the Secure Simpapp sample application.

Table 10-2 Required Environment Variables for the Secure Simpapp Sample Application
Environment Variable	Description
`APPDIR`	The directory path where you copied the sample application files. For example: Windows 2003 `APPDIR=c:\work\simpappSSL` UNIX `APPDIR=/usr/work/simpappSSL`
`TUXCONFIG`	The directory path and name of the configuration file. For example: Windows 2003 `TUXCONFIG=c:\work\simpappSSL\tuxconfig` UNIX `TUXCONFIG=/usr/work/simpappSSL/tuxconfig`
`TOBJADDR`	The host name and port number of the IIOP Listener/Handler. The port number must be defined as a port for SSL communications. For example: Windows 2003 `TOBJADDR=trixie::1111` UNIX `TOBJADDR=trixie::1111`
`RESULTSDIR`	A subdirectory of `APPDIR` where files that are created as a result of executing the `runme` command are stored. For example: Windows 2003 `RESULTSDIR=c:\workdirectory\` UNIX `RESULTSDIR=/usr/local/workdirectory/`

To verify that the information for the environment variables defined during installation is correct, perform the following steps:

Windows 2003

From the Start menu, select Settings.
From the Settings menu, select the Control Panel.

The Control Panel appears.

Click the System icon.

The System Properties window appears.

Click the Environment tab.

The Environment page appears.

Check the settings of the environment variables.

UNIX

ksh prompt>printenv TUXDIR

To change the settings, perform the following steps:

Windows 2003

On the Environment page in the System Properties window, click the environment variable you want to change or enter the name of the environment variable in the Variable field.
Enter the correct information for the environment variable in the Value field.
Click OK to save the changes.

UNIX

ksh prompt>export TUXDIR=directorypath

Step 4: Execute the runme Command

The runme command automates the following steps:

Setting the system environment variables.
Loading the UBBCONFIG file.
Compiling the code for the client application.
Compiling the code for the server application.
Starting the server application using the tmboot command.
Starting the client application.
Stopping the server application using the tmshutdown command.

Note: You can also run the Secure Simpapp sample application manually. The steps for manually running the Secure Simpapp sample application are described in the Readme.html file.

To build and run the Secure Simpapp sample application, enter the runme command, as follows:

Windows 2003

prompt>cd workdirectory

prompt>runme

UNIX

ksh prompt>cd workdirectory

ksh prompt>./runme.ksh

The Secure Simpapp sample application runs and prints the following messages:

Testing simpapp
    cleaned up
    prepared
    built
    loaded ubb
    booted
    ran
    shutdown
    saved results
  PASSED

During execution of the runme command, you are prompted for a password. Enter the pass phrase of the private key of the IIOP Listener/Handler.

Table 10-3 lists the C++ files in the work directory generated by the runme command.

Table 10-3 C++ Files Generated by the runme Command
File	Description
`Simple_c.cpp`	Generated by the `idl` command, this file contains the client stubs for the `SimpleFactory` and `Simple` interfaces.
`Simple_c.h`	Generated by the `idl` command, this file contains the client definitions of the `SimpleFactory` and `Simple` interfaces.
`Simple_s.cpp`	Generated by the `idl` command, this file contains the server skeletons for the `SimpleFactory` and `Simple` interfaces.
`Simple_s.h`	Generated by the `idl` command, this file contains the server definition for the `SimpleFactory` and `Simple` interfaces.

Table 10-4 lists files in the RESULTS directory generated by the runme command.

Table 10-4 Files in the results Directory Generated by the runme Command
File	Description
`input`	Contains the input that the `runme` command provides to the CORBA client application.
`output`	Contains the output produced when the `runme` command executes the CORBA client application.
`expected_output`	Contains the output that is expected when the CORBA client application is executed by the `runme` command. The data in the `output` file is compared to the data in the `expected_output` file to determine whether or not the test passed or failed.
`log`	Contains the output generated by the `runme` command. If the `runme` command fails, check this file for errors.
`setenv.cmd`	Contains the commands to set the environment variables needed to build and run the Secure Simpapp sample application on the Windows 2003 operating system platform.
`stderr`	Generated by the `tmboot` command, which is executed by the `runme` command.
`stdout`	Generated by the `tmboot` command, which is executed by the `runme` command.
`tmsysevt.dat`	Contains filtering and notification rules used by the TMSYSEVT (system event reporting) process. This file is generated by the `tmboot` command in the `runme` command.
`tuxconfig`	A binary version of the `UBBCONFIG` file.
`ULOG.<date>`	A log file that contains messages generated by the `tmboot` command.

Using the Secure Simpapp Sample Application

Run the server application in the Secure Simpapp sample application, as follows:

Windows 2003

prompt>tmboot -y

UNIX

ksh prompt>tmboot -y

Run the CORBA C++ client application in the Secure Simpapp sample application as follows:

Windows 2003

prompt> set TOBJADDR=corbalocs://host:port
prompt> simple_client -ORBid BEA_IIOP -ORBpeerValidate none
String?
Hello World
HELLO WORLD
hello world

UNIX

ksh prompt>export TOBJADDR=corbalocs://host:port
ksh prompt>simple_client -ORBid BEA_IIOP -ORBpeerValidate none
String?
Hello World
HELLO WORLD
hello world

Windows 2003

prompt>tmshutdown -y

prompt>nmake -f makefile.nt clean

UNIX

ksh prompt>tmshutdown -y

ksh prompt>make -f makefile.mk clean