Application to Application authentication models....

From: r s (richard.scott@bestbuy.com)
Date: 01/28/03

  • Next message: NESTING, DAVID M (SBCSI): "RE: Application to Application authentication models...." 
    Date: 28 Jan 2003 20:46:09 -0000
From: r s <richard.scott@bestbuy.com>
To: secprog@securityfocus.com
    ('binary' encoding is not supported, stored as-is)

    Greetings all,

    I am posting this here in teh hope to get some direction as to where next
    to look. This ismore of an architecture question and not specific to
    programming.

    Given an enterprise Java, LDAP and Small PKI infrastructure what would be
    a recommended solution to securing connection credentials to database
    systems, queues etc.

    Given that applications can be built in Java and the logical storage of
    credentials to be stored in LDAP. What authentication mechanism, model,
    architecture best allows applications legitimate access to LDAP schema to
    obtain sensitive data such as connection credentials to database systems?

    The idea is to have developed applications use a framework to securely
    obtain correct credentials for the applications based in environments in
    DEV, QA and PROD.

    Thus given some environment, the application executred within the
    framework and requests to connect to the HR database, for example. The
    application then must be authenticated and if successful, the framework
    obtains the connection credentials to build a connection to the database.
    By running the same code in QA, the credentials for the QA database is
    given, not the production one. A call for the production database from a
    QA server is prohibited.

    Any ideas of how this can be enforced?

    cheers
    r./

    Relevant Pages

    • App to App authentication model problem????
      ... This ismore of an architecture question and not ... database systems, queues etc. ... architecture best allows applications legitimate access to LDAP ... schema to obtain sensitive data such as connection credentials to ...
      (comp.security.misc)
    • Re: Bussines objects
      ... Starting with the database and working from the ... The frameworks I have written to support my applications contain around 300 ... There is the Object Persistence Framework that allows me to write OO code ... to change any of the code in either my business objects or the applications ...
      (microsoft.public.dotnet.languages.csharp)
    • Re: polymorphism (was: Poly Couples)
      ... but this is not really "business software"... ... Most of such applications are built as a combination of ... database with flat files or a different RDBMS vendor?" ... couldn't care less if I do it in using structured programming or OOP ...
      (comp.object)
    • Re: Unisys OS/2200 DMS / TIP / COBOL Migration
      ... support the legacy system api's that the application is using. ... differences in COBOL compiler dialects. ... What DBI does is to provide legacy database (DMS) ... the legacy database to the COBOL applications. ...
      (comp.sys.unisys)
    • Re: Database set up help
      ... let's see...I choose the y/n data type because I am using ... User opens up form and enters Employee Information in the fields ... 2 of the 38 options in my main menu are BPCS Applications ... I set up a database with this so far: ...
      (microsoft.public.access.gettingstarted)