Let us take a look at some important CORBA concepts.
The CORBA specification requires that there should be an Object Request Broker (ORB) through which the local objects interact with the remote ORB.
The Naming Service is used to register the local CORBA services so that they are made available to the remote CORBA clients.
Both sides of a CORBA communication are associated with the Security Services. The Security Service on the client side is known as Client Security Service (CSS), and the Security Service on the server side is known as Target Security Service (TSS). For EJBs, an EJB exposed through CORBA must be associated with a Target Security Service, and a remote EJB reference to a CORBA EJB must be associated with a Client Security Service. The CORBA security features in Geronimo conform to the Common Security Interoperability (CSI), version 2, specification.
TSS and CSS can be shared by more than one EJB or remote EJB reference...