Eric- Pooling Resources: you might want to try other AppServers such as GF and Weblogic for either pooling and/or persistence provider support (as specified by J2EE Connector Architecture)
https://glassfish.dev.java.net/javaee5/integration-tech/glassfish_connpooling.html Identity and Security: Identity and security (authentication and authorization) would be handled by Sun Java System Directory Server to authenticate and authorize users, as well as enforce access control policies across all communities, applications, and services on a global basis. http://forums.sun.com/forum.jspa?forumID=761&start=0 here is a tutorial on creating,modifying and viewing acls for your Directory Server http://docs.sun.com/app/docs/doc/820-2763/bcalc GF Mailing List: GF has an active userlist at us...@glassfish.dev.java.net i will look for your post there Martin Gainty ______________________________________________ Verzicht und Vertraulichkeitanmerkung/Note de déni et de confidentialité Diese Nachricht ist vertraulich. Sollten Sie nicht der vorgesehene Empfaenger sein, so bitten wir hoeflich um eine Mitteilung. Jede unbefugte Weiterleitung oder Fertigung einer Kopie ist unzulaessig. Diese Nachricht dient lediglich dem Austausch von Informationen und entfaltet keine rechtliche Bindungswirkung. Aufgrund der leichten Manipulierbarkeit von E-Mails koennen wir keine Haftung fuer den Inhalt uebernehmen. Ce message est confidentiel et peut être privilégié. Si vous n'êtes pas le destinataire prévu, nous te demandons avec bonté que pour satisfaire informez l'expéditeur. N'importe quelle diffusion non autorisée ou la copie de ceci est interdite. Ce message sert à l'information seulement et n'aura pas n'importe quel effet légalement obligatoire. Étant donné que les email peuvent facilement être sujets à la manipulation, nous ne pouvons accepter aucune responsabilité pour le contenu fourni. > To: users@tomcat.apache.org > From: ebe...@hotmail.com > Subject: Re: How to define a Realm as a global resource and use it as a > ResourceLink? > Date: Fri, 7 Aug 2009 22:47:47 -0400 > > > "Caldarale, Charles R" <chuck.caldar...@unisys.com> wrote in message > > > > In order to secure and clean things up a little, I would like to > > > move my JNDIRealm definition to a global resource and use it within > > > my context > > > > Sounds like you're confusing two separate and distinct facilities of > > Tomcat. > > Any <Realm> is for Tomcat's use only, not for use by the webapp. Any > > <Resource> is for the webapp's use, although Tomcat may manage > > appropriately > > configured ones on behalf of the webapp. > > > > If this particular <Realm> controls access only to this one webapp, then > > its proper location is within the <Context> element of that webapp. Any > > wider scope (such as <Host>) will cause the <Realm> to be used for all > > webapps of that <Host>. > > > > What do you actually want to achieve? > > Well, it was more a question of security, to a certain degree. If I want to > make a JNDI resource available only on a per-context basis, but do not want > the webapp developer to have access to the parameters of the resource, I can > define a global resource and just link to it in the context.xml file. > However, I can't do that for the realm. So either I need to declare the > realm at a host or engine level which would then apply to all contexts that > don't override it, or declare it in the webapp context.xml file itself, > which is accessible (and hence potentially modifiable) by the developers of > the webapp. > > It isn't really a big deal/failure. It just would have been nice to be able > to segregate the admin portion of the definition to the declaration. > > For instance, with JNDI dbcp resource pools, you can declare the resource > globally, link to it in the context, and have Tomcat do all the resource > pooling for you. I somewhat expected the realms to follow the same > logic/behaviour. > > Thanks, > > Eric > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > _________________________________________________________________ Get back to school stuff for them and cashback for you. http://www.bing.com/cashback?form=MSHYCB&publ=WLHMTAG&crea=TEXT_MSHYCB_BackToSchool_Cashback_BTSCashback_1x1
