ADVANCED SECURITY in Font

Print DataMatrix in Font ADVANCED SECURITY

private static void init(final String[] args) { try { LoginContext loginContext = new LoginContext("security.TestFileClassifierAuth"); if (loginContext == null) { System.out.println("No login context"); new TestFileClassifierAuth(args); } else { loginContext.login(); System.out.println("Login succeeded as " + loginContext.getSubject().toString()); Subject.doAsPrivileged( loginContext.getSubject(), new PrivilegedExceptionAction() { public Object run() throws Exception { new TestFileClassifierAuth(args); return null; } }, null); } } catch(LoginException e) { e.printStackTrace(); System.exit(3); } catch(PrivilegedActionException e) { e.printStackTrace(); System.exit(3); } catch(ConfigurationException e) { e.printStackTrace(); System.exit(3); } } public TestFileClassifierAuth(String[] argv) throws ConfigurationException { config = ConfigurationProvider.getInstance(argv); System.setSecurityManager(new RMISecurityManager()); LookupDiscovery discover = null; try { discover = new LookupDiscovery(LookupDiscovery.ALL_GROUPS); } catch(Exception e) { System.err.println(e.toString()); System.exit(1); } discover.addDiscoveryListener(this); } private static void installLoggers() { try {

// this handler will save ALL log messages in the file trustFh = new FileHandler("log.client.trust.txt"); integrityFh = new FileHandler("log.client.integrity.txt"); policyFh = new FileHandler("log.client.policy.txt"); // the format is simple rather than XML trustFh.setFormatter(new SimpleFormatter()); integrityFh.setFormatter(new SimpleFormatter()); policyFh.setFormatter(new SimpleFormatter()); trustLogger.addHandler(trustFh); integrityLogger.addHandler(integrityFh); policyLogger.addHandler(policyFh); trustLogger.setLevel(java.util.logging.Level.ALL); integrityLogger.setLevel(java.util.logging.Level.ALL); policyLogger.setLevel(java.util.logging.Level.ALL); } catch(Exception e) { e.printStackTrace(); } } public void discovered(DiscoveryEvent evt) { ServiceRegistrar[] registrars = evt.getRegistrars(); Class [] classes = new Class[] {FileClassifier.class}; FileClassifier classifier = null; ServiceTemplate template = new ServiceTemplate(null, classes, null); for (int n = 0; n < registrars.length; n++) { System.out.println("Lookup service found"); ServiceRegistrar registrar = registrars[n]; try { classifier = (FileClassifier) registrar.lookup(template); } catch(java.rmi.RemoteException e) { e.printStackTrace(); System.exit(4); continue; } if (classifier == null) { System.out.println("Classifier null"); continue; } System.out.println("Getting the proxy"); // Get the proxy preparer ProxyPreparer preparer = null; try { preparer = (ProxyPreparer) config.getEntry( "client.TestFileClassifierProxyPreparer", "preparer", ProxyPreparer.class,

new BasicProxyPreparer()); } catch(ConfigurationException e) { e.printStackTrace(); preparer = new BasicProxyPreparer(); } // Prepare the new proxy System.out.println("Preparing the proxy"); try { classifier = (FileClassifier) preparer.prepareProxy(classifier); } catch(RemoteException e) { e.printStackTrace(); System.exit(3); } catch(java.lang.SecurityException e) { e.printStackTrace(); System.exit(6); } // Use the service to classify a few file types System.out.println("Calling the proxy"); MIMEType type; try { String fileName; fileName = "file1.txt"; type = classifier.getMIMEType(fileName); printType(fileName, type); fileName = "file2.rtf"; type = classifier.getMIMEType(fileName); printType(fileName, type); fileName = "file3.abc"; type = classifier.getMIMEType(fileName); printType(fileName, type); } catch(java.rmi.RemoteException e) { System.out.println("Failed to call method"); System.err.println(e.toString()); System.exit(5); continue; } // success System.exit(0); } } private void printType(String fileName, MIMEType type) { System.out.print("Type of " + fileName + " is "); if (type == null) { System.out.println("null"); } else { System.out.println(type.toString());

} } public void discarded(DiscoveryEvent evt) { // empty } } // TestFileClassifierAuth As with the server, other pieces need to be in place for this client to authenticate itself: The client needs to be run with an additional runtime property. The property java.security.auth.login.config needs to be set to the login configuration file, as follows: java ... -Djava.security.auth.login.config=ssl-client.login ... The JAAS login file specifies how JAAS is to get its credentials. For example, for SSL it will need a certificate, which it can get from a keystore. So for an SSL authenticating server, the ssl-client.login could contain the following: security.TestFileClassifierAuth { com.sun.security.auth.module.KeyStoreLoginModule required keyStoreAlias="mykey" keyStoreURL="file:resources/security/keystore.client" keyStorePasswordURL="file:resources/security/password.client"; }; The configuration name security.TestFileClassifierAuth is the same as the parameter to the LoginContext constructor. The file also specifies the alias to be used in looking up entries (the default is mykey if an alias is not specified during creation of the keystore), the keystore, and a file that contains the password to access this keystore. The password file password.client just contains the password set earlier: client .

If the server requires the client to authenticate as a particular user, then it can be the config.FileClassifierServer. It does not need to have the authentication code itself. It can specify client authentication with the jeri-ssl-auth-client.config configuration file: import java.security.Permission; import net.jini.constraint.BasicMethodConstraints; import net.jini.core.constraint.InvocationConstraint; import net.jini.core.constraint.InvocationConstraints; import net.jini.core.constraint.ClientAuthentication; import net.jini.core.constraint.ClientMinPrincipal; import net.jini.jeri.*; import net.jini.jeri.ssl.*; import com.sun.jini.config.KeyStores; security.FileClassifierServer { /* class name for the service */