cocoon-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Christopher Painter-Wakefield <paint...@mc.duke.edu>
Subject Re: avoid setting the password in jdbc settings in cocoon.xconf
Date Mon, 22 Mar 2004 15:15:10 GMT




I think the answer to both questions is, don't use database pooling :)

If you are using ESQL, all of these can be set dynamically by using java
and <xsp:expr> inside the appropriate elements.  I imagine it is even
easier in SQL transformer.  You'll have to pass in everything every time,
though, so you'll probably want some way to cache your user's password in
the session or some such, unless you have incredibly patient users...

-Christopher



|---------+---------------------------->
|         |           "Alex Kovacs"    |
|         |           <alexk@fast.fujit|
|         |           su.com.au>       |
|         |                            |
|         |           03/21/2004 07:06 |
|         |           PM               |
|         |           Please respond to|
|         |           users            |
|         |                            |
|---------+---------------------------->
  >--------------------------------------------------------------------------------------------------------------|
  |                                                                                      
                       |
  |       To:       <users@cocoon.apache.org>                                      
                             |
  |       cc:                                                                            
                       |
  |       Subject:  avoid setting the password in jdbc settings in cocoon.xconf          
                       |
  >--------------------------------------------------------------------------------------------------------------|




Hi,

How is it possible to avoid setting the user/password for the jdbc
connection in cocoon.xconf? This could be a security issue if the server
sits in a DMZ.

In addition, how is it possible to set a different <dburl> programmatically
if, say I want to change the database host, port or sid?

Thanks,
Alex



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@cocoon.apache.org
For additional commands, e-mail: users-help@cocoon.apache.org


Mime
View raw message