Laird Nelson wrote:
>
> Assaf Arkin wrote:
> > InitialContext doesn't have that much of an overhead. It's pretty much a
> > factory into the naming context, which for ENC shouldn't be doing much
> > to begin with.
>
> Good. What does "ENC" mean?
Environment naming context, that's the java:comp/env...
>
> > It might, however, attempt to authenticate each time, which is not
> > smart.
>
> Sigh; it looks, however, like I have no choice.
>
> > That's why the Servlet do the authentication for you. Apparently that is
> > not clear in the specs, but will be addressed in a future revision.
>
> OK, so what about when one servlet is hit by two different users, one
> after the other? Surely the servlet can't just authenticate once for
> both of them? And what about when I'm calling the EJB container from
> something other than a servlet?
The authentication is per user across all Servlets, not per specific
Servlet.
If you are not running inside a Servlet, you use JNDI to authenticate,
or if you're using IIOP there's SECIOP (don't ask me, I just learned of
that).
arkin
>
> Cheers,
> Laird
--
----------------------------------------------------------------------
Assaf Arkin www.exoffice.com
CTO, Exoffice Technologies, Inc. www.exolab.org
===========================================================================
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff EJB-INTEREST". For general help, send email to
[EMAIL PROTECTED] and include in the body of the message "help".
