Home TOC Index

EIS-Tier Security

In the EIS tier, an application component requests a connection to an EIS resource. As part of this connection, the EIS may require a sign-on to the resource. The application component provider has two choices for the design of the EIS sign-on. The two sign-on approaches are:

• With the container-managed sign-on approach, the application component lets the container take the responsibility of configuring and managing the EIS sign-on. The container determines the username and password for establishing a connection to an EIS instance.
• With the component-managed sign-on approach, the application component code manages EIS sign-on by including code that performs the sign-on process to an EIS.

The component provider can use deploytool to choose the type of sign-on.

Configuring Sign-On

Use the following procedure in deploytool to configure the type of sign-on.

1. Select the component.
2. Select the Resource Refs tab.
3. Click Add.
4. In the Authentication combo box, select one of the following:
   1. Container--for container-managed sign-on
   2. Application--for component-managed sign-on

Container-Managed Sign-On

With container-managed sign-on, an application component does not have to pass any security information for signing on to the resource to the getConnection() method. The security information is supplied by the container. You can use a javax.sql.DataSource, which offers two ways to get an actual java.sql.Connection, depending on whether you are using container-managed sign-on or not. Use getConnection() if you are using container-manager sign-on. Use getConnection(String username, String password) if using component-managed sign-on.

Component-Managed Sign-On

With component-managed sign-on, an application component is responsible for passing the security information that is needed for signing on to the resource to the getConnection() method. Security information could be username and password. You can use a javax.sql.DataSource to get a java.sql.Connection with getConnection(String username, String password).

Home TOC Index

This tutorial contains information on the 1.0 version of the Java Web Services Developer Pack.

All of the material in The Java Web Services Tutorial is copyright-protected and may not be published in other works without express written permission from Sun Microsystems.