4.2 How Security Works

The following figure illustrates how CORBA security works in a Oracle Tuxedo domain.

Figure 4-1 How CORBA Security Works on Oracle Tuxedo Domain

The steps are as follows:

1. The client application uses the Bootstrap object to return an object reference to the SecurityCurrent object for the Oracle Tuxedo domain.
2. The client application obtains the PrincipalAuthenticator.
3. The client application uses the Tobj::PrincipalAuthenticator::get_auth_type() method to get the authentication level for the Oracle Tuxedo domain.
4. The proper authentication level is returned to the client application.
5. The client application uses the Tobj::PrincipalAuthenticator::logon() method to log on to the Oracle Tuxedo domain with the proper authentication information.

Note:

Oracle Tuxedo CORBA also supports the use of the CORBA Interoperable Naming Service (INS) to obtain an initial object reference for the Security Service. For information on the INS bootstrapping mechanism, see the CORBA Programming Reference.