Re: How have others handled management concerns over storingdatabaseuserid and password in struts-c

2001-09-05 Thread Daniel Jimenez
We had a similar problem with management when we tried to implement our DMZ using websphere. The solution that we'd come up with is retrieving the username and password from a secure LDAP server. We continued to use the struts-config file to define our datasource and removed the username and

RE: How have others handled management concerns over storingdatabaseuserid and password in struts-c

2001-09-05 Thread Daniel Jimenez
The approach that I've implemented can be as complicated or uncomplicated as you want to make it. The more complicated you make it, the more security you implement. To simply store a username and password on ldap and retrieve it is fairly easy. However, because of your setup (app server on

Re: How have others handled management concerns over storingdatabaseuserid and password in struts-c

2001-09-05 Thread Ted Husted
Here's some more about implementing SSL. http://husted.com/about/struts/FAQ/controller-ssl.htm -- Ted Husted, Husted dot Com, Fairport NY USA. -- Custom Software ~ Technical Services. -- Tel +1 716 737-3463 -- http://www.husted.com/about/struts/ Daniel Jimenez wrote: I wouldn't know where to