Users can implement an extra layer of security in the OERealm Server class. To implement this level of security, each request from an OERealm Client should contain a valid and sealed Client-Principal (C-P).
1. Use the genpassword utility to generate a Client Principal ( C-P) token file and distribute it to the intended OERealm clients.
2. Configure this C-P token as the Realm token file in the OERealm Client configuration to ensure that it is passed along with each appserver request that is sent to the OERealm Client. Refer to Configuring OERealm Clients for details on how different OERealm clients can be configured.
3. In the OERealm Server class methods, allow the request to proceed only if the AppServer request contains a valid and sealed C-P.