Red Hat NETSCAPE DIRECTORY SERVER 6.01 - DEPLOYMENT Installation Guide download pdf (Page 116)

106

Pramati Server 3.5 Security Guide

Configuring RMI Server

A client outside the domain of server host attempting to invoke methods on remote objects requires

to first locate Server. The remote references that Server exports must contain the fully qualified

name of Server host. Some firewall proxies do not forward the host name if the host name is

specified as the IP address of the host.

On some platforms and network environments, the fully qualified name of the host may or may not

be available with Server VM. If so, the fully qualified name of the host must be specified with the

property

java.rmi.server.hostname while starting Server.

For example, to start the Server class com.pramati.Server on the machine docs.pramati.com, run

java -Djava.rmi.server.hostname=docs.pramati.com com.pramati.Server

If Server does not support RMI clients that are behind firewalls preventing them from forwarding to

arbitrary ports, then use this configuration:

• HTTP server on Port 80

• A CGI script located at the aliased URL path: /cgi-bin/java-rmi.cgi

• A servlet mapped to the URL path: /cgi-bin/java-rmi.cgi, which redirects the call to the

RMI Server.

This CGI script:

• invokes the local Java interpreter to execute a class internal to the transport layer that forwards

the request to the appropriate RMI Server port, and

• defines properties in the VM using the names and values of the CGI 1.0-defined environment

variables.

A sample script is supplied in the RMI distribution for Unix, Solaris and Windows Operating

Systems. The script must specify the complete path to the Java interpreter on Server.

Working with NAT firewalls

Network Address Translation (NAT) or IP masquerading implies that the IP of Server host is

mapped to a global IP outside the firewall, so that any request arriving at the global IP is

transparently directed to the local IP.

For Server to receive calls from the global IP across the firewall, point

java.rmi.server.hostname to the global IP while starting Server.

For example, if the user's global IP is 192.12.1.143, start Server using:

java -Djava.rmi.server.hostname=192.12.1.143 com.pramati.Server

1 2 ... 111 112 113 114 115 116 117 118 119 120 121 ... 142 143

No comments

Red Hat NETSCAPE DIRECTORY SERVER 6.01 - DEPLOYMENT Installation Guide Page 116