Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: neutral (athena.apache.org: local policy)
Message-ID: <4C065BC2.8010002@christopherschultz.net>
Date: Wed, 02 Jun 2010 09:25:22 -0400
From: Christopher Schultz <chris@christopherschultz.net>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US;
 rv:1.9.1.9) Gecko/20100317 Thunderbird/3.0.4
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: [OT] Re: problems at thejarbar.org
References: <170009.72609.qm@web56603.mail.re3.yahoo.com>
 <SNT124-DS12D2172A4A5B857F941E9EF1D00@phx.gbl>
In-Reply-To: <SNT124-DS12D2172A4A5B857F941E9EF1D00@phx.gbl>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Yucca Nel,

On 6/2/2010 8:27 PM, yuccanel@live.co.za wrote:
> There was  a question as to why I am using a realm and application 
> based realm and I have no idea howcome people think I am not using only
> tomcat realm?

It's not that we think you're using a non-Tomcat Realm: it's that we
think you're using the /wrong/ Tomcat Realm.

See... JDBCRealm uses its own set of credentials to connect to the
database and uses a single Connection object, requiring lots of
synchronization to protect that shared resource. Basically, it's not
appropriate for production because of those two facts. Instead, we're
suggesting that you set up a DataSource and then use a DataSourceRealm
which will use a connection-per-authentication-attempt and is much more
high-performance.

> hibernate is not doing any security related stuff other than persisiting
> new users and thier credentials to mysql. Tomcat is only managing
> security and hibernate everything else... Hope this clears up
> discussion. :)

Is hibernate using a Tomcat-created DataSource? If not, you're making
your life harder by placing database connection configuration in several
places instead of just one.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkwGW8IACgkQ9CaO5/Lv0PALlwCgwejhODA7bB92UMEbgpIPGb8R
3RoAn3BXDzQWZ5497EKzaSP1W84Mtqu2
=zCtF
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org