Security Management API does not automatically support certificate authentication

[CR #277742] The Security Management application programming interface (SMAPI) does not support setting the PKIName field for a subject. Specifically, the SMAPI does not allow you to create a subject who logs in to the environment with a certificate.

Creating a subject who logs in to the environment with a certificate

1. Create a subject using the SubjectManagement home interface in the SMAPI:

   SubjectManagementHome home = ctx.lookup(.....);
   SubjectManagement subject = home.create(......);
   

2. Find the subject using SubjectIntf in OMAPI:

   SubjectIntfHome shome = ctx.lookup(...);
   SubjectIntf s = home.create();
   

3. Get the primaryKey of the newly created subject. This is the SubjectDN to be passed into Objmgmt:

   String subjectDN = (String) subject.getPrimaryKey();
   Subject subject = s.findSubject(subjectDN);
   

4. Set the PKIName field of the subject and update the subject:

   subject.pkiName = CertificateDN;
   s.updateSubject(subject);
   

See “Subject account management” for more information.

Copyright © 2005. Sybase Inc. All rights reserved.

View this release bulletin as PDF