users@glassfish.java.net

RE: Securing communication between tiers

From: Martin Gainty <mgainty_at_hotmail.com>
Date: Fri, 29 Oct 2010 22:59:52 -0400

what does 192.168.4.112 map to in hosts file
what is mapped to localhost in hosts
?
Martin
______________________________________________
Verzicht und Vertraulichkeitanmerkung/Note de déni et de confidentialité
 Diese Nachricht ist vertraulich. Sollten Sie nicht der vorgesehene Empfaenger sein, so bitten wir hoeflich um eine Mitteilung. Jede unbefugte Weiterleitung oder Fertigung einer Kopie ist unzulaessig. Diese Nachricht dient lediglich dem Austausch von Informationen und entfaltet keine rechtliche Bindungswirkung. Aufgrund der leichten Manipulierbarkeit von E-Mails koennen wir keine Haftung fuer den Inhalt uebernehmen.
Ce message est confidentiel et peut être privilégié. Si vous n'êtes pas le destinataire prévu, nous te demandons avec bonté que pour satisfaire informez l'expéditeur. N'importe quelle diffusion non autorisée ou la copie de ceci est interdite. Ce message sert à l'information seulement et n'aura pas n'importe quel effet légalement obligatoire. Étant donné que les email peuvent facilement être sujets à la manipulation, nous ne pouvons accepter aucune responsabilité pour le contenu fourni.




> Date: Fri, 29 Oct 2010 14:35:17 -0700
> From: glassfish_at_javadesktop.org
> To: users_at_glassfish.dev.java.net
> Subject: Securing communication between tiers
>
> Hi,
>
> I'm using Glassfish 2.1.1 and am wanting to communicate between nodes over an un trusted network. I am happy to use ssl tunnels and/or a ESB like mule to get secure communications between the web and the app tiers.
>
> On the web tier I have changed GF's ports and set the app server to point to a local ssh tunnel that directs to port 3700 on the app tier, the app tier still want's to use it's external address:
>
> I have also noticed that this causes other problems because application deployment tried to use the local server on the default ports rather than the ones I have configured in domain.xml
>
> java.naming.factory.initial=com.sun.enterprise.naming.SerialInitContextFactory
> java.naming.factory.url.pkgs=com.sun.enterprise.naming
> java.naming.factory.state=com.sun.corba.ee.impl.presentation.rmi.JNDIStateFactoryImpl
> org.omg.CORBA.ORBInitialHost=localhost
> org.omg.CORBA.ORBInitialPort=93700
>
> It still tries to connect to other ports using the actual ip address of the app tier.
>
> [#|2010-10-28T08:02:52.398+0000|WARNING|sun-appserver2.1|javax.enterprise.resource.corba.ee.S1AS-ORB.rpc.transport|_ThreadID=10;_ThreadNa
> me=main;IIOP_CLEAR_TEXT;192.168.4.112;3920;;_RequestID=6ff79731-f6ff-4602-8d89-df65867078c8;|"IOP00410201:
> (COMM_FAILURE) Connection fail
> ure: socketType: IIOP_CLEAR_TEXT; hostname: 192.168.4.112; port: 3920"
> org.omg.CORBA.COMM_FAILURE: vmcid: SUN minor code: 201 completed: No
>
> [#|2010-10-28T08:03:13.648+0000|WARNING|sun-appserver2.1|javax.enterprise.resource.corba.ee.S1AS-ORB.rpc.transport|_ThreadID=10;_ThreadNa
> me=main;IIOP_CLEAR_TEXT;192.168.4.112;3700;;_RequestID=6ff79731-f6ff-4602-8d89-df65867078c8;|"IOP00410201:
> (COMM_FAILURE) Connection fail
> ure: socketType: IIOP_CLEAR_TEXT; hostname: 192.168.4.112; port: 3700"
> org.omg.CORBA.COMM_FAILURE: vmcid: SUN minor code: 201 completed: No
>
> [#|2010-10-28T08:03:34.648+0000|WARNING|sun-appserver2.1|javax.enterprise.resource.corba.ee.S1AS-ORB.rpc.transport|_ThreadID=10;_ThreadNa
> me=main;IIOP_CLEAR_TEXT;192.168.4.112;3820;;_RequestID=6ff79731-f6ff-4602-8d89-df65867078c8;|"IOP00410201:
> (COMM_FAILURE) Connection fail
> ure: socketType: IIOP_CLEAR_TEXT; hostname: 192.168.4.112; port: 3820"
> org.omg.CORBA.COMM_FAILURE: vmcid: SUN minor code: 201 completed: No
>
> I really need to encrypt the traffic between nodes and use iptables to strictly restrict traffic to/from all nodes.
> Can I do this using glassfish 2.1.1?
>
> Regards,
> Ian.
> [Message sent by forum member 'nocadminguv']
>
> http://forums.java.net/jive/thread.jspa?messageID=486506
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>