Using a custom authentication service

You can install your own component to authenticate clients for any EAServer. For example, if you require the client user name to match a remote database user name, you can code the component to retrieve the client user name and password and attempt to log in to the remote database.

The component must implement the CtsSecurity::AuthService IDL interface, and you must set the com.sybase.jaguar.server.authservice server property to specify the name of your component (this property must be set using the Advanced tab in the Server Properties dialog).

This interface contains the method, checkSession. Your code for this method can check the client’s user name and password and the status of other authentication checks, that is, whether the client’s credentials have passed OS authentication or SSL authentication checks. Your code can perform additional authentication checks and auditing. For more information, see the documentation for the CtsSecurity::AuthService IDL interface.

A sample Java implementation is provided in the EAServer html/classes/Sample/AuthServiceDemo directory in your EAServer installation. A sample C++ implementation is available in the sample/AuthServiceDemo subdirectory.