[Opensource] Protect DB Password? (was Websphere...)

[Malcolm Wise]

Hi,

I'm using Sybase EAServer which provides it's own connection pool accessible
via JNDI.  Up to now I've been using Expresso's connection pool, but thought
I'd try and use the new JNDI facility to access EAServer's.  Having gone
through the code in ConfigManager, DBConnectionPool (and several other
classes) and checking the expresso-config DTD, I've managed to get it
working.  I did have to add a method to
com.jcorporate.expresso.misc.ConfigJdbc though:

	public void addJndi(ConfigJndi myJndi) {
		this.myJndi = myJndi;
	}

as without this ConfigManager couldn't load the expresso-config.xml once I'd
done the required changes.  Here's a section from my expresso-config.xml:

    <jdbc
	driverType="datasource"
    	driver="com.sybase.jdbc2.jdbc.SybDriver"
	url="java:comp/env/jdbc/ExcaliburJDBC"
            connectFormat="1"
	login="mylogin"
	password="mypassword"
	cache="y"
	useNullOnCreate="y"
	escapeHandler="com.jcorporate.expresso.core.db.DoubleQuoteEscapeHandler">
	  <jndi/>
   </jdbc>

So, apart from modifying ConfigJdbc, I've switched over to using JNDI simply
by modifying expresso-config.xml!
Even though this works I'm a bit suspicious that I've gone down the wrong
road since I had to do the change to ConfigJdbc.java (unless of course this
has been done but not made the latest release....)

Cheers,
Malc

-----Original Message-----
From: opensource-admin at jcorporate.com
[mailto:opensource-admin at jcorporate.com]On Behalf Of Michael Rimov
Sent: 11 January 2003 06:57
To: opensource at jcorporate.com
Subject: Re: [Opensource] Protect DB Password? (was Websphere...)


At 07:57 PM 1/9/2003 -0500, you wrote:
>Gang:
>
>I have a project taking shape that will deploy to Websphere.  They wanted
>us to use their DB connection pool (using JNDI) but Expresso is not
>capable of doing that.  I asked for permission to run our own connection
>pool and got it, but they want us to pick up the DB ID/password (or key
>maybe) from a specified file (to protect the password).  Has anyone done
>this before?

Haven't done that, but a developer HAS checked in some JNDI code and uses
it with Websphere that way. [You'll need Expresso 5.0.1+]

Check the DTD, but the key is something along the lines of <jndi/> and that
will give you what you need.

HTH!
                                                 -Mike


_______________________________________________
Opensource mailing list
Opensource at jcorporate.com
http://mail.jcorporate.com/mailman/listinfo/opensource
Archives: http://mail.jcorporate.com/pipermail/opensource/



*************************************************************************
The information contained in this message or any of its
attachments may be privileged and confidential and intended 
for the exclusive use of the addressee. If you are not the
addressee any disclosure, reproduction, distribution or other
dissemination or use of this communication is strictly prohibited
*************************************************************************