[ http://issues.apache.org/jira/browse/JS2-336?page=comments#action_12319183 ]
Michael Lipp commented on JS2-336: ---------------------------------- I have spent quite some time now with the security services, not only for the JBoss security issue, but also because the application I want to integrate into Jetspeed needs its own access to Jetspeed's security as well. Believe me: the security apps *do* interact with the JDBC connection and JNDI. Using an Object Relational Bridge like OJB makes things look easy for the application programmer, but also hides a lot about what is going on. Of course, the security apps get the security services from the portal. But these services use OJB and not every database connection required by OJB is created *before* the security service is passed to the security app. So what happens is that the security apps get the (readily configured) security service. The configuration includes the information that OJB is to get a connection via a data source retrieved from "java:comp/env/jdbc/jetspeed" if it needs one. Now the security app calls some method of the security service and sometimes the need actually arises for OJB to get a connection. This happens in the context of the security app (security.war) and looking at the security app's java:comp/env namespace it finds: ... nothing configured there... > resource-ref entries missing in web.xml > --------------------------------------- > > Key: JS2-336 > URL: http://issues.apache.org/jira/browse/JS2-336 > Project: Jetspeed 2 > Type: Bug > Components: Admin Portlets > Versions: 2.0-dev/cvs > Environment: JBoss/HSQL > Reporter: Michael Lipp > > The resource-ref entry for the data source "jdbc/jetspeed" is missing in > security.war (at least; I havent't checked for all applications if they > declare/need it). > I assume that Tomcat makes the resources configured in its JNDI availabel to > all servlets and therefore the issue hasn't come up yet. But pack > security.war as a web module in my EAR, i.e. it has its own context, and > there the bug shows. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
