We had a similar problem with management when we tried to implement our DMZ using websphere. The solution that we'd come up with is retrieving the username and password from a secure LDAP server. We continued to use the struts-config file to define our datasource and removed the username and password properties. Our users are authenticated based on WebSphere security (LDAP). We then retrieved some information about the users rights. Based on those rights we retrieved the appropriate username and password for our database. My post described how to get around the getConnection(user,pass) that is not supported in the GenericDataSource that struts implements. http://www.mail-archive.com/struts-user%40jakarta.apache.org/msg14731.html Dan Jimenez >>> [EMAIL PROTECTED] 9/5/01 11:08:49 AM >>> You would want to restrict what kind of access your generic Web user has to the database. If the permissions are set right on the database, then they can't do much they couldn't do from the Website anyway. You should also restrict from where the Web user login can be used. It should only be good from the Web server's IP, and anyone trying to log in with it from another machine should be rejected. In a firewall situation, this can be an internal IP that is not available through the Web site. The configuration folder should also be protected with file system security, so only the Web server user can read them. This should be a system-type user that can only be accessed by su, and not by public login. If you use a seperate connection pool, like poolman (www.codestudio.com), you will have more flexibility as to where the configuration file can be placed. It would need to be on the classpath, but it could be kept well outside the Web server file structure. -- Ted Husted, Husted dot Com, Fairport NY USA. -- Custom Software ~ Technical Services. -- Tel +1 716 737-3463 -- http://www.husted.com/about/struts/ Shamdasani Nimmi-ANS004 wrote: > > Hi, > > Here's my problem. My management feels that storing the database >account(userid/password)in the config file is a security risk. According to them a >hacker can get access to the whole database if they can get access to this info. > > Supposedly the security team wants to put the application server outside the >Firewall in Quarantine zone and the database behind the FW. > > Did any of you had to go thru this issue and how did you explain/resolve it. > > Can someone help me dispel their concern? > > TIA. > > -Nimmi