No, not sure. That is what I was confused about.
JDBC Realm, vs JNDI DataSourceRealm, vs JDBC DataSource
I think what was throwing me off was seeing examples of the tomcat-users in
both the realm-howto and in the jndi-resources-howto
I'm attempting container managed security using SQL Server. It looks like I
need both a DataSourceRealm and a JDBC DataSource?
Assuming I have the correct tables in the database named "authstore", does this
look right?
** in server.xml **
<Realm className="com.microsoft.sqlserver.jdbc.SQLServerDriver"
dataSourceName="jdbc/authority"
userTable="users" userNameCol="user_name" userCredCol="user_pass"
userRoleTable="user_roles" roleNameCol="role_name"/>
** in META-INF/context.xml of specific webapp **
<resource-ref>
<description>DB Connection</description>
<res-ref-name>jdbc/authority</res-ref-name>
<res-type>javax.sql.DataSource</res-type>
<res-auth>Container</res-auth>
</resource-ref>
** also in META-INF/context.xml file? **
<Resource name="jdbc/authority" auth="Container" type="javax.sql.DataSource"
username="javauser" password="javadude"
driverClassName="com.microsoft.sqlserver.jdbc.SQLServerDriver"
url="jdbc:sqlserver://localhost;database=authstore"/>
-----Original Message-----
From: Caldarale, Charles R [mailto:[email protected]]
Sent: Tuesday, March 23, 2010 3:22 PM
To: Tomcat Users List
Subject: RE: Connecting to a Database
> From: Leo Donahue - PLANDEVX [mailto:[email protected]]
> Subject: Connecting to a Database
>
> Tomcat 6.0.24
> Windows Server 2003 R2 SP2
> SQL Server 2005 Express
> Microsoft SQL Server 2005 JDBC Driver 1.2 - October 2007
>
> I know I need to configure a Realm
Are you sure? A <Realm> is used for authentication only, not for a webapp that
accesses a database. Do you perhaps mean <Resource>?
> JDBCRealm or JNDI DataSourceRealm?
If you are in fact storing credentials in SQL Server, use DataSourceRealm -
it's much more robust.
- Chuck
THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you received
this in error, please contact the sender and delete the e-mail and its
attachments from all computers.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
