RE: can we pass OS username while connection Database from Tomcat
I believe what you are asking for is already available. See inline comments below. > -Original Message- > From: Vijay Kumar [mailto:vijy.gan...@gmail.com] > Sent: Monday, June 01, 2015 7:48 AM > To: Tomcat Users List > Subject: Re: can we pass OS username while connection Database from > Tomcat > > Hi, > > Client want to monitor whether the connection is established from my > application or their existing applications. Because all these are > connecting the database from APPS user. > > 1) My Tomcat is installed on a different Linux environment under a user, > so > if i could at least pass this user then Client can able to identify that > the connection is established from my Application. > > 2) By querying the v$session table in Oracle we can get all the > connection > information but we can't identify the connections that are created from > my > application because all the applications are connecting database through > APPS user. > V$SESSION already contains the columns MACHINE and OSUSER and these values should be populated by the Oracle driver. They are on all my systems. Should be everything you need to meet your requirement, unless you are running on the same box and same O/S user as your client's legacy programs. > We can achieve this by creating a new schema and providing all the > required > permissions to my schema and accessing the database from the created > schema > but is there any option where we can achieve my requirement. > I found that by providing a attribute called 'connectionProperties' in > Resource Tag of the context.xml is achieved this. But am not seeing any > information about the Program name after connecting to database. > Eg : > connectionProperties="v$session.program=dev-cs" This is the V$SESSION column PROGRAM, which the Oracle Thin Client does not set automatically. The Thick client (OCI drivers) will set it for you. I think you can modify your code to set it when creating the connection, but I'm not sure how. For this use case, Google is your friend. Or ask on an Oracle/Java forum. > > Thanks, > Vijay G > > On Fri, May 29, 2015 at 8:48 PM, Jeffrey Janner > > wrote: > > > Please see response below post: > > > > > -----Original Message- > > > From: Vijay Kumar [mailto:vijy.gan...@gmail.com] > > > Sent: Thursday, May 28, 2015 7:22 AM > > > To: Tomcat Users List > > > Subject: Re: can we pass OS username while connection Database from > > > Tomcat > > > > > > Hi , > > > > > > I am referring User_Id as Linux User_id where we installed Tomcat. > > > > > > My Oracle Database don't know about this user_id. > > > > > > > > > Thanks, > > > Vijay G > > > > > Vijay - > > As another tomcat->oracle integrator, I do have to ask, exactly what > is it > > your client is trying to monitor and what tool is he going to use? > > But first let's clarify the question: > > 1) Tomcat is running as the O/S user "apps" and your client > wants > > to see the connections from O/S user apps? And why? This may already > be > > available in the database structures. > > or > > 2) Tomcat is connecting to the database using the schema name > > "apps" and the client want to see these connections? That's already > > available on the Oracle side. This depends on what tool the client is > > using. > > Or > > 3) the client wants to see the user names of the application > users > > in the monitoring tool? Depending on this answer and the tool used, > you > > are really getting into Oracle programming territory, as there are > several > > ways to do this. > > > > As for answering the straight-forward question, a quick Google search > > found several replies, all requiring changes to the application code > that > > connects to the database. Actually from what I understand, the Oracle > > drivers already provide this, at least the latest versions. > > > > Jeff > > > > > > > On Thu, May 28, 2015 at 3:20 PM, André Warnier > wrote: > > > > > > > Vijay Kumar wrote: > > > > > > > >> Hi Mark, > > > >> > > > >> Please find below my exact requirement. > > > >> > > > >> I have Oracle Database where my objects are installed and I have > also > > > a > > > >> Linux instance where i installed Tomcat. > > > >> I am currently creating connection to the Oracle databa
Re: can we pass OS username while connection Database from Tomcat
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Vijay, On 6/1/15 8:47 AM, Vijay Kumar wrote: > Hi, > > Client want to monitor whether the connection is established from > my application or their existing applications. Because all these > are connecting the database from APPS user. > > 1) My Tomcat is installed on a different Linux environment under a > user, so if i could at least pass this user then Client can able to > identify that the connection is established from my Application. What about the most obvious solution to this: simply change the username you use to connect to Oracle from *this particular* application? You don't have to detect the OS user and forward it over to Oracle; just change the element to mention whatever username you want to use. ??! > 2) By querying the v$session table in Oracle we can get all the > connection information but we can't identify the connections that > are created from my application because all the applications are > connecting database through APPS user. > > We can achieve this by creating a new schema and providing all the > required permissions to my schema and accessing the database from > the created schema but is there any option where we can achieve my > requirement. I found that by providing a attribute called > 'connectionProperties' in Resource Tag of the context.xml is > achieved this. But am not seeing any information about the Program > name after connecting to database. Eg : > connectionProperties="v$session.program=dev-cs" - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v2 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJVbF2sAAoJEBzwKT+lPKRYAzEP/2v//Ky1N4+vzadsqNej9dt/ KvQv+ZnIN2VYmQKJRmGlG/iW/F3sXnn58qwt4VhRBr5OMOBzfM6bPA7+VxksgSG2 PqLeLvqknET1M87LUb2c6cpaGEZUjereM0S+s68e7mwoneYqrBfIJOJMVbJOmsk+ zd73TZ2+fVw6uKLMQSJ2w+9736YKjtFlzE8kV1sQeqfulioJ+rG7v/msZTGJ9Dp4 t1HW6fOvpZHQVU0pHSzmAG3pIIXCunEmfoBL3PTZYkj9uicli3tFdw/iI3JkqA1L A1hxJ05bEDYimjbI0pA/kbz1Pdtj0aWrEP3Y1/SnTMgP6TOaYSY9Lms+lA5Hza9z V7HtEzjEkWe0PM3qSI31Ib09e2qn4deeJdEtMCSVoZn7MePmmVZ1KmAhvsgAWQ3D HuLuZ2rixyPx0MduNjOUJzjCQQ/8D5igwrscuMAUP7FQcDKWumpVoRBAO6OMKeNF 6OZrzqB+RcLl/xNJh0cWXBmFhA0fnLfdkNpKgOcFcjZiJe7IoFZ/llf2lqzlWEyn tepws4lnbX3qiMlE/oVLHfRZc9KdBnmcO12BmWiPrfFsEIcEjfbL8xGvsOd2tSv3 Cdza7Zg4LTW2/Sh0KKCu7cA6TS/VC/yPr3rHkvGdtmza0PoNXYMHVaSA3R+20TAc tUSotGCdPP/ZkfXKzX7B =AffH -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: can we pass OS username while connection Database from Tomcat
Hi, Client want to monitor whether the connection is established from my application or their existing applications. Because all these are connecting the database from APPS user. 1) My Tomcat is installed on a different Linux environment under a user, so if i could at least pass this user then Client can able to identify that the connection is established from my Application. 2) By querying the v$session table in Oracle we can get all the connection information but we can't identify the connections that are created from my application because all the applications are connecting database through APPS user. We can achieve this by creating a new schema and providing all the required permissions to my schema and accessing the database from the created schema but is there any option where we can achieve my requirement. I found that by providing a attribute called 'connectionProperties' in Resource Tag of the context.xml is achieved this. But am not seeing any information about the Program name after connecting to database. Eg : connectionProperties="v$session.program=dev-cs" Thanks, Vijay G On Fri, May 29, 2015 at 8:48 PM, Jeffrey Janner wrote: > Please see response below post: > > > -Original Message- > > From: Vijay Kumar [mailto:vijy.gan...@gmail.com] > > Sent: Thursday, May 28, 2015 7:22 AM > > To: Tomcat Users List > > Subject: Re: can we pass OS username while connection Database from > > Tomcat > > > > Hi , > > > > I am referring User_Id as Linux User_id where we installed Tomcat. > > > > My Oracle Database don't know about this user_id. > > > > > > Thanks, > > Vijay G > > > Vijay - > As another tomcat->oracle integrator, I do have to ask, exactly what is it > your client is trying to monitor and what tool is he going to use? > But first let's clarify the question: > 1) Tomcat is running as the O/S user "apps" and your client wants > to see the connections from O/S user apps? And why? This may already be > available in the database structures. > or > 2) Tomcat is connecting to the database using the schema name > "apps" and the client want to see these connections? That's already > available on the Oracle side. This depends on what tool the client is > using. > Or > 3) the client wants to see the user names of the application users > in the monitoring tool? Depending on this answer and the tool used, you > are really getting into Oracle programming territory, as there are several > ways to do this. > > As for answering the straight-forward question, a quick Google search > found several replies, all requiring changes to the application code that > connects to the database. Actually from what I understand, the Oracle > drivers already provide this, at least the latest versions. > > Jeff > > > > On Thu, May 28, 2015 at 3:20 PM, André Warnier wrote: > > > > > Vijay Kumar wrote: > > > > > >> Hi Mark, > > >> > > >> Please find below my exact requirement. > > >> > > >> I have Oracle Database where my objects are installed and I have also > > a > > >> Linux instance where i installed Tomcat. > > >> I am currently creating connection to the Oracle database from Tomcat > > >> using > > >> 'apps' user as this schema is having all permissions. > > >> > > >> One of my client want to monitor the connections that are created > > from my > > >> application. For this i want to pass my Linux user information > > (userid) > > >> while creating the connection from my application or in context.xml > > file. > > >> > > >> Please suggest the approaches? If SPENGO can you redirect me any > > doc/post > > >> how to achieve this? > > >> > > >> Vijay, > > > you are repeating yourself (and still top-posting), but you are not > > > providing the crucial information which would enable someone to really > > help > > > you. > > > For example, what "Linux user information (userid)" are you talking > > about ? > > > > > > Is it the Linux user-id under which Tomcat is running ? > > > That would probably be "tomcat", so that is probably not going to help > > you > > > fulfill your customer's wishes. > > > > > > Is it the user-id of the /user/ of your Tomcat application ? > > > In that case, how does Tomcat know this user-id ? Do the users login > > into > > > your applic
RE: can we pass OS username while connection Database from Tomcat
Please see response below post: > -Original Message- > From: Vijay Kumar [mailto:vijy.gan...@gmail.com] > Sent: Thursday, May 28, 2015 7:22 AM > To: Tomcat Users List > Subject: Re: can we pass OS username while connection Database from > Tomcat > > Hi , > > I am referring User_Id as Linux User_id where we installed Tomcat. > > My Oracle Database don't know about this user_id. > > > Thanks, > Vijay G > Vijay - As another tomcat->oracle integrator, I do have to ask, exactly what is it your client is trying to monitor and what tool is he going to use? But first let's clarify the question: 1) Tomcat is running as the O/S user "apps" and your client wants to see the connections from O/S user apps? And why? This may already be available in the database structures. or 2) Tomcat is connecting to the database using the schema name "apps" and the client want to see these connections? That's already available on the Oracle side. This depends on what tool the client is using. Or 3) the client wants to see the user names of the application users in the monitoring tool? Depending on this answer and the tool used, you are really getting into Oracle programming territory, as there are several ways to do this. As for answering the straight-forward question, a quick Google search found several replies, all requiring changes to the application code that connects to the database. Actually from what I understand, the Oracle drivers already provide this, at least the latest versions. Jeff > On Thu, May 28, 2015 at 3:20 PM, André Warnier wrote: > > > Vijay Kumar wrote: > > > >> Hi Mark, > >> > >> Please find below my exact requirement. > >> > >> I have Oracle Database where my objects are installed and I have also > a > >> Linux instance where i installed Tomcat. > >> I am currently creating connection to the Oracle database from Tomcat > >> using > >> 'apps' user as this schema is having all permissions. > >> > >> One of my client want to monitor the connections that are created > from my > >> application. For this i want to pass my Linux user information > (userid) > >> while creating the connection from my application or in context.xml > file. > >> > >> Please suggest the approaches? If SPENGO can you redirect me any > doc/post > >> how to achieve this? > >> > >> Vijay, > > you are repeating yourself (and still top-posting), but you are not > > providing the crucial information which would enable someone to really > help > > you. > > For example, what "Linux user information (userid)" are you talking > about ? > > > > Is it the Linux user-id under which Tomcat is running ? > > That would probably be "tomcat", so that is probably not going to help > you > > fulfill your customer's wishes. > > > > Is it the user-id of the /user/ of your Tomcat application ? > > In that case, how does Tomcat know this user-id ? Do the users login > into > > your application ? How ? What is the user authentication mechanism > being > > used, now, at the Tomcat level ? > > > > Does the Oracle database also know this user-id ? How ? > > > > What does "One of my client want to monitor the connections" mean, > exactly > > ? what does the customer want to know, and when ? Is this customer the > only > > user/manager of the Oracle database, or are there multiple > users/managers > > of the Oracle database ? > > > > > > > > - > > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > > For additional commands, e-mail: users-h...@tomcat.apache.org > > > > - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: can we pass OS username while connection Database from Tomcat
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Vijay, On 5/28/15 8:21 AM, Vijay Kumar wrote: > I am referring User_Id as Linux User_id where we installed Tomcat. > > My Oracle Database don't know about this user_id. Have you tried this? I know that catalina.properties will do system-property expansion, I think that server.xml will do it, but I'm not sure if context.xml will do it, too. Give it a try to see if it works. - -chris > On Thu, May 28, 2015 at 3:20 PM, André Warnier > wrote: > >> Vijay Kumar wrote: >> >>> Hi Mark, >>> >>> Please find below my exact requirement. >>> >>> I have Oracle Database where my objects are installed and I >>> have also a Linux instance where i installed Tomcat. I am >>> currently creating connection to the Oracle database from >>> Tomcat using 'apps' user as this schema is having all >>> permissions. >>> >>> One of my client want to monitor the connections that are >>> created from my application. For this i want to pass my Linux >>> user information (userid) while creating the connection from my >>> application or in context.xml file. >>> >>> Please suggest the approaches? If SPENGO can you redirect me >>> any doc/post how to achieve this? >>> >>> Vijay, >> you are repeating yourself (and still top-posting), but you are >> not providing the crucial information which would enable someone >> to really help you. For example, what "Linux user information >> (userid)" are you talking about ? >> >> Is it the Linux user-id under which Tomcat is running ? That >> would probably be "tomcat", so that is probably not going to help >> you fulfill your customer's wishes. >> >> Is it the user-id of the /user/ of your Tomcat application ? In >> that case, how does Tomcat know this user-id ? Do the users login >> into your application ? How ? What is the user authentication >> mechanism being used, now, at the Tomcat level ? >> >> Does the Oracle database also know this user-id ? How ? >> >> What does "One of my client want to monitor the connections" >> mean, exactly ? what does the customer want to know, and when ? >> Is this customer the only user/manager of the Oracle database, or >> are there multiple users/managers of the Oracle database ? >> >> >> >> - >> >> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >> For additional commands, e-mail: users-h...@tomcat.apache.org >> >> > -BEGIN PGP SIGNATURE- Version: GnuPG v2 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJVZzpqAAoJEBzwKT+lPKRY7NQP/0G6LCGWqKvNrjDFCeYzbYZE gBiBe/VCgzCbEJAGr8ZS8qImAYobkiz+FcN5EXGXI7+XTZ0aXWG5QnQ6JtRBYScX BZLKLhxnIaXqGXlXYenwgsQSrDtA2zPm5WqeQbrtkqJ/5jn3U44erZHncTOKGp5E oBztT2lLCZr6Y2ORKZXISJgsvPSMFJlxMvKRf2mbsk1kui2ReNlhfjSdh4dyaTru Tz7G5CkvGshaEL+qo3HQRvdhjr6ha3s6SW8VASXEP0Y46xAKjBwvXg0MkqN6fVOw BP/tUvTiQPSq7chgyLyu+heUAT+FFm3Wro1XEwOLbaiAHqdilccmcSSNnaxKdeLb JHrcpjVvOQX2pqHYyeOPaAT7uC2z1r/f3kzxwBXSGoIdy3jN23E1ef263PlwCTqr EdhSritM6Sj3BzOJJqWRkxdkxvwhZFCxElDPO9HgfcPnTEgGX5J9Bj29tIZHyUzB mZKh7/hI9Q3nezZQtEWreh5urCIYkWWBSf7v6wp4TFx2J6yzmdkgSB87oq8Mh5Aw CNckVVbQcPiABUiAPnYPDmBna+pZtbZ+CfmLHEioTlxNbrg7lEpdaPK0tiALjQMz Dy0e68AaiLpdJTLE5YNKDpN+OKdE2NbPTJYKUp/+9fDIdMV/UeGKfUJl6mLbKSaq 3VFn03Usu6pw1N1d1+qV =Hwdf -END PGP SIGNATURE- - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: can we pass OS username while connection Database from Tomcat
Vijay Kumar wrote: Hi , I am referring User_Id as Linux User_id where we installed Tomcat. My Oracle Database don't know about this user_id. We seem to have some communication issue. But I have sinned a lot in my life, so this will probably count as redemption points. Another try : 1) read this : http://tomcat.apache.org/lists.html Paragraph "tomcat-users" --> important --> 6. 2) in Oracle, create the user "tomcat" 3) in your database configuration in server.xml or context.xml, replace "apps" by "tomcat". And then tell us if this is the answer to your question, or why it is not. Thanks, Vijay G On Thu, May 28, 2015 at 3:20 PM, André Warnier wrote: Vijay Kumar wrote: Hi Mark, Please find below my exact requirement. I have Oracle Database where my objects are installed and I have also a Linux instance where i installed Tomcat. I am currently creating connection to the Oracle database from Tomcat using 'apps' user as this schema is having all permissions. One of my client want to monitor the connections that are created from my application. For this i want to pass my Linux user information (userid) while creating the connection from my application or in context.xml file.. Please suggest the approaches? If SPENGO can you redirect me any doc/post how to achieve this? Vijay, you are repeating yourself (and still top-posting), but you are not providing the crucial information which would enable someone to really help you. For example, what "Linux user information (userid)" are you talking about ? Is it the Linux user-id under which Tomcat is running ? That would probably be "tomcat", so that is probably not going to help you fulfill your customer's wishes. Is it the user-id of the /user/ of your Tomcat application ? In that case, how does Tomcat know this user-id ? Do the users login into your application ? How ? What is the user authentication mechanism being used, now, at the Tomcat level ? Does the Oracle database also know this user-id ? How ? What does "One of my client want to monitor the connections" mean, exactly ? what does the customer want to know, and when ? Is this customer the only user/manager of the Oracle database, or are there multiple users/managers of the Oracle database ? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: can we pass OS username while connection Database from Tomcat
Hi , I am referring User_Id as Linux User_id where we installed Tomcat. My Oracle Database don't know about this user_id. Thanks, Vijay G On Thu, May 28, 2015 at 3:20 PM, André Warnier wrote: > Vijay Kumar wrote: > >> Hi Mark, >> >> Please find below my exact requirement. >> >> I have Oracle Database where my objects are installed and I have also a >> Linux instance where i installed Tomcat. >> I am currently creating connection to the Oracle database from Tomcat >> using >> 'apps' user as this schema is having all permissions. >> >> One of my client want to monitor the connections that are created from my >> application. For this i want to pass my Linux user information (userid) >> while creating the connection from my application or in context.xml file. >> >> Please suggest the approaches? If SPENGO can you redirect me any doc/post >> how to achieve this? >> >> Vijay, > you are repeating yourself (and still top-posting), but you are not > providing the crucial information which would enable someone to really help > you. > For example, what "Linux user information (userid)" are you talking about ? > > Is it the Linux user-id under which Tomcat is running ? > That would probably be "tomcat", so that is probably not going to help you > fulfill your customer's wishes. > > Is it the user-id of the /user/ of your Tomcat application ? > In that case, how does Tomcat know this user-id ? Do the users login into > your application ? How ? What is the user authentication mechanism being > used, now, at the Tomcat level ? > > Does the Oracle database also know this user-id ? How ? > > What does "One of my client want to monitor the connections" mean, exactly > ? what does the customer want to know, and when ? Is this customer the only > user/manager of the Oracle database, or are there multiple users/managers > of the Oracle database ? > > > > - > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > >
Re: can we pass OS username while connection Database from Tomcat
Vijay Kumar wrote: Hi Mark, Please find below my exact requirement. I have Oracle Database where my objects are installed and I have also a Linux instance where i installed Tomcat. I am currently creating connection to the Oracle database from Tomcat using 'apps' user as this schema is having all permissions. One of my client want to monitor the connections that are created from my application. For this i want to pass my Linux user information (userid) while creating the connection from my application or in context.xml file. Please suggest the approaches? If SPENGO can you redirect me any doc/post how to achieve this? Vijay, you are repeating yourself (and still top-posting), but you are not providing the crucial information which would enable someone to really help you. For example, what "Linux user information (userid)" are you talking about ? Is it the Linux user-id under which Tomcat is running ? That would probably be "tomcat", so that is probably not going to help you fulfill your customer's wishes. Is it the user-id of the /user/ of your Tomcat application ? In that case, how does Tomcat know this user-id ? Do the users login into your application ? How ? What is the user authentication mechanism being used, now, at the Tomcat level ? Does the Oracle database also know this user-id ? How ? What does "One of my client want to monitor the connections" mean, exactly ? what does the customer want to know, and when ? Is this customer the only user/manager of the Oracle database, or are there multiple users/managers of the Oracle database ? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: can we pass OS username while connection Database from Tomcat
Hi Mark, Please find below my exact requirement. I have Oracle Database where my objects are installed and I have also a Linux instance where i installed Tomcat. I am currently creating connection to the Oracle database from Tomcat using 'apps' user as this schema is having all permissions. One of my client want to monitor the connections that are created from my application. For this i want to pass my Linux user information (userid) while creating the connection from my application or in context.xml file. Please suggest the approaches? If SPENGO can you redirect me any doc/post how to achieve this? Regards, Vijay G On Thu, May 28, 2015 at 2:47 PM, Mark Thomas wrote: > On 28/05/2015 09:59, André Warnier wrote: > > Mark Thomas wrote: > >> On 28/05/2015 08:26, Vijay Kumar wrote: > >>> Hi, > >>> > >>> Is it possible to pass OS username when making connection to any > >>> Database > >>> from Tomcat context.xml? > >> > >> In theory this should be possible if you are using SPNEGO > authentication. > >> > >> Testing this to figure out what is required to make it work is on the > >> TODO list. It is likely that some combination of configuration, Tomcat > >> code changes and application changes will be required. > >> > > > > I think that the term "OS username" should be carefully defined here, > > along with the precise circumstances in which this would apply. > > Agreed. My definition is "user authenticated via SPNEGO" > > > Also, connecting to a database using the user-id kind of defeats any > > kind of db connection persistence/pooling/sharing at the container level. > > You can have per user pools. Depending on the app and the usage pattern > of the DB there can still be some benefits. > > > If this kind of thing is desired anyway, should it then not be done at > > the application level, where you can retrieve the UserPrincipal anyway ? > > There are certainly different approaches available to solve this > problem. The best approach depends on the actual requirement. I've used > a range of approaches to this type of problem in the past. > > Mark > > - > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > >
Re: can we pass OS username while connection Database from Tomcat
Vijay Kumar wrote: Hi Mark, Thanks for your update. I should have specify my requirement little more clear to you to understand what you are saying. I have Oracle Database where my objects are installed and I have also a Linux instance where i installed Tomcat. I am currently creating connection to the Oracle database from Tomcat using 'apps' user as this schema is having all permissions. One of my client want to monitor the connections that are created from my application. For this i want to pass my Linux user information (userid) while creating the connection from my application or in context.xml file. Please suggest is it possible or not? Possible, it certainly is. But is it the best solution to fulfill your customer's wishes, that is another question. I believe that you have to think carefully about all the implications, in your application as well as on the performance of the system, before rushing to any kind of "solution". For example, would it not be easier for your application to just write a line to some logfile, whenever it accesses the database on behalf of the logged-in user (and read and analyse that file later, and provide that information to your customer) ? If your customer just wants to know who is really using the database and/or how much, that would be enough. If you really want to open the connection to the database under each individual user-id, then it means for example that the database has to know each of those user-id's (and keep them up-to-date). It also means that different user-id's could have different access rights (or none), and that your application would have to take this into account. And so on.. It is not just the fact of opening the connection. It may be the whole design of your application that would need to change. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: can we pass OS username while connection Database from Tomcat
On 28/05/2015 09:59, André Warnier wrote: > Mark Thomas wrote: >> On 28/05/2015 08:26, Vijay Kumar wrote: >>> Hi, >>> >>> Is it possible to pass OS username when making connection to any >>> Database >>> from Tomcat context.xml? >> >> In theory this should be possible if you are using SPNEGO authentication. >> >> Testing this to figure out what is required to make it work is on the >> TODO list. It is likely that some combination of configuration, Tomcat >> code changes and application changes will be required. >> > > I think that the term "OS username" should be carefully defined here, > along with the precise circumstances in which this would apply. Agreed. My definition is "user authenticated via SPNEGO" > Also, connecting to a database using the user-id kind of defeats any > kind of db connection persistence/pooling/sharing at the container level. You can have per user pools. Depending on the app and the usage pattern of the DB there can still be some benefits. > If this kind of thing is desired anyway, should it then not be done at > the application level, where you can retrieve the UserPrincipal anyway ? There are certainly different approaches available to solve this problem. The best approach depends on the actual requirement. I've used a range of approaches to this type of problem in the past. Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: can we pass OS username while connection Database from Tomcat
Vijay, do not "top post". As you can see below, it makes it difficult to follow the conversation. Vijay Kumar wrote: Hi Mark, Thanks for your update. I should have specify my requirement little more clear to you to understand what you are saying. I have Oracle Database where my objects are installed and I have also a Linux instance where i installed Tomcat. I am currently creating connection to the Oracle database from Tomcat using 'apps' user as this schema is having all permissions. One of my client want to monitor the connections that are created from my application. For this i want to pass my Linux user information (userid) while creating the connection from my application or in context.xml file. Please suggest is it possible or not? Regards, Vijay G On Thu, May 28, 2015 at 1:14 PM, Mark Thomas wrote: On 28/05/2015 08:26, Vijay Kumar wrote: Hi, Is it possible to pass OS username when making connection to any Database from Tomcat context.xml? In theory this should be possible if you are using SPNEGO authentication. Testing this to figure out what is required to make it work is on the TODO list. It is likely that some combination of configuration, Tomcat code changes and application changes will be required. Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: can we pass OS username while connection Database from Tomcat
Mark Thomas wrote: On 28/05/2015 08:26, Vijay Kumar wrote: Hi, Is it possible to pass OS username when making connection to any Database from Tomcat context.xml? In theory this should be possible if you are using SPNEGO authentication. Testing this to figure out what is required to make it work is on the TODO list. It is likely that some combination of configuration, Tomcat code changes and application changes will be required. I think that the term "OS username" should be carefully defined here, along with the precise circumstances in which this would apply. Also, connecting to a database using the user-id kind of defeats any kind of db connection persistence/pooling/sharing at the container level. If this kind of thing is desired anyway, should it then not be done at the application level, where you can retrieve the UserPrincipal anyway ? - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: can we pass OS username while connection Database from Tomcat
Hi Mark, Thanks for your update. I should have specify my requirement little more clear to you to understand what you are saying. I have Oracle Database where my objects are installed and I have also a Linux instance where i installed Tomcat. I am currently creating connection to the Oracle database from Tomcat using 'apps' user as this schema is having all permissions. One of my client want to monitor the connections that are created from my application. For this i want to pass my Linux user information (userid) while creating the connection from my application or in context.xml file. Please suggest is it possible or not? Regards, Vijay G On Thu, May 28, 2015 at 1:14 PM, Mark Thomas wrote: > On 28/05/2015 08:26, Vijay Kumar wrote: > > Hi, > > > > Is it possible to pass OS username when making connection to any Database > > from Tomcat context.xml? > > In theory this should be possible if you are using SPNEGO authentication. > > Testing this to figure out what is required to make it work is on the > TODO list. It is likely that some combination of configuration, Tomcat > code changes and application changes will be required. > > Mark > > > - > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > >
Re: can we pass OS username while connection Database from Tomcat
On 28/05/2015 08:26, Vijay Kumar wrote: > Hi, > > Is it possible to pass OS username when making connection to any Database > from Tomcat context.xml? In theory this should be possible if you are using SPNEGO authentication. Testing this to figure out what is required to make it work is on the TODO list. It is likely that some combination of configuration, Tomcat code changes and application changes will be required. Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org