Using RMI over IIOPS for remote EJB's?
Geert Pante
We have two seperate WAS-servers running here (4.0.4), with a firewall between them. One is running the web
tier (servlets/JSP's), the other is a dedicated EJB container. We have the deployed EJB jar installed as a
utility jar in the web tier application, so we can use JNDI lookups to communicate between them:
Properties props = new Properties();
props.put(Context.INITIAL_CONTEXT_FACTORY, "com.ibm.websphere.naming.WsnInitialContextFactory");
props.put(Context.PROVIDER_URL, "iiop://10.100.1.13");
InitialContext context = new InitialContext(props);
MyEJBHome myEJBHome = (MyEJBHome)PortableRemoteObject.narrow(context.lookup("ejb/MyEJB"),
MyEJBHome.class);
This works perfectly fine, assuming that the firewall allows iiop.
However, since the Web/servlet tier is inside the DMZ, we would like to use a more secure approach. We
allready enabled global security in WAS for user authentication, and enables SSL for the ORB services at both
Servers, using the global SSL configuration (DummyServerKeyFile.jks etc.).
However, just setting props.put(Context.PROVIDER_URL, "iiops://10.100.1.13"); gives me the
javax.naming.ConfigurationException below.
Question is: how should I configure the InitialContext to use SSL for RMI, and what else need I configure in
WAS?
javax.naming.ConfigurationException: URLToObjectFacility.badProtocol iiops://10.100.1.13
at com.ibm.ws.naming.util.WsnInitCtxFactory.parseBootstrapURL(WsnInitCtxFactory.java:733)
at com.ibm.ws.naming.util.WsnInitCtxFactory.getInitialContextInternal(WsnInitCtxFactory.java:171)
at com.ibm.ws.naming.util.WsnInitCtx.getContext(WsnInitCtx.java:98)
at com.ibm.ws.naming.util.WsnInitCtx.<init>(WsnInitCtx.java:79)
at com.ibm.ws.naming.util.WsnInitCtxFactory.getInitialContext(WsnInitCtxFactory.java:137)
at com.ibm.websphere.naming.WsnInitialContextFactory.getInitialContext(WsnInitialContextFactory.java:80)
at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:674)
at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:255)
at javax.naming.InitialContext.init(InitialContext.java:231)
at javax.naming.InitialContext.<init>(InitialContext.java:207)
--
+++++++++++++++++++++++++++++++++++++++++
| ir. Geert Pante, Software Development, Fit IT nv.
+++++++++++++++++++++++++++++++++++++++++
| There are 3 types of people in the world:
| Those who understand ternary logic, and those who don't.
+++++++++++++++++++++++++++++++++++++++++