Re: avoid setting the password in jdbc settings in cocoon.xconf

[Christopher Painter-Wakefield]

I think the answer to both questions is, don't use database pooling :)

If you are using ESQL, all of these can be set dynamically by using java
and <xsp:expr> inside the appropriate elements.  I imagine it is even
easier in SQL transformer.  You'll have to pass in everything every time,
though, so you'll probably want some way to cache your user's password in
the session or some such, unless you have incredibly patient users...

-Christopher



|---------+---------------------------->
|         |           "Alex Kovacs"    |
|         |           <[EMAIL PROTECTED]|
|         |           su.com.au>       |
|         |                            |
|         |           03/21/2004 07:06 |
|         |           PM               |
|         |           Please respond to|
|         |           users            |
|         |                            |
|---------+---------------------------->
  
>--------------------------------------------------------------------------------------------------------------|
  |                                                                                    
                          |
  |       To:       <[EMAIL PROTECTED]>                                                
                    |
  |       cc:                                                                          
                          |
  |       Subject:  avoid setting the password in jdbc settings in cocoon.xconf        
                          |
  
>--------------------------------------------------------------------------------------------------------------|




Hi,

How is it possible to avoid setting the user/password for the jdbc
connection in cocoon.xconf? This could be a security issue if the server
sits in a DMZ.

In addition, how is it possible to set a different <dburl> programmatically
if, say I want to change the database host, port or sid?

Thanks,
Alex



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]