Hi,
I'm not sure if this is specifically a servlet question or a more
general java question (I'm quite new to both).
I need to securely retrieve a database user/password to pass the
servlets accessing a database. In a strictly cgi environment, I
typically set up a file containing SetEnv statements for user/passwd
readable only by root (the contents of the file can't be compromised
unless the system has been compromised first) and include an Include
statement in the httpd.conf so that apache reads the on initialization.
The environment variables then become available to cgi programs as part
of the standard environment (the %ENV hash in Perl).
What I am stumped on is how to accomplish the same in servlets running
under apache/tomcat. I know you can set properties files for servlets
(though I havn't tried it yet), but other than running the servlet
under root I don't see how to read up root protected data.
Thanks,
Rob
_ _ _ _ _ _ _ _ _ _
/\_\_\_\_\ /\_\ /\_\_\_\_\_\
/\/_/_/_/_/ /\/_/ \/_/_/_/_/_/ QUIDQUID LATINE DICTUM SIT,
/\/_/__\/_/ __ /\/_/ /\/_/ PROFUNDUM VIDITUR
/\/_/_/_/_/ /\_\ /\/_/ /\/_/
/\/_/ \/_/ /\/_/_/\/_/ /\/_/ (Whatever is said in Latin
\/_/ \/_/ \/_/_/_/_/ \/_/ appears profound)
Rob Tanner
McMinnville, Oregon
[EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, email: [EMAIL PROTECTED]
