Re: passwords and user ids

From: Luke Webber (luke_at_webber.com.au)
Date: 04/08/04 

Date: Thu, 8 Apr 2004 13:46:04 +1000

"Roedy Green" <look-at-the-website@mindprod.com> wrote in message
news:kcc97012qhh965h56343hvknpuer0855a4@4ax.com...
> I wondered how the userid/password mechanism works.
>
> It seems to me the HTTP server and Servlet Womb (e.g. Resin/Tomcat)
> has its own authentication scheme, so they must each have their own
> list of user ids and passwords. Further the SQL database has user ids
> and passwords.
>
> 1. Is there some mechanism that keeps the three sets of passwords/user
> ids in sync?
>
> 2. Where does the sql userid/password come from. Is it burned into
> the source code, or does the app find it out from the womb and pass it
> through somehow?

The answer, as usual, is "it depends". Dealer's choice really. I tend to
keep the database username and password in the database URL, stored in a
properties file, with no attempt to utilise the web users' own privileges
and permissions. Too much bloody trouble trying to keep Web users up to date
with the database admin.

Luke

Relevant Pages

  • passwords and user ids
    ... I wondered how the userid/password mechanism works. ... It seems to me the HTTP server and Servlet Womb ... list of user ids and passwords. ... Further the SQL database has user ids ...
    (comp.lang.java.databases)
  • Re: Logging in to Access
    ... User IDs and Passwords are part of the Workgroup, ... NOT be able to open up your 'secured' database. ...
    (microsoft.public.access.security)
  • Re: Pathname to access and usernames in shortcut
    ... >> network drive (for maintenance reasons initially, ... >> using usernames but no passwords. ... change their passwords within the access database (they won't know how ... >> gets the current username from the system and then calls access (via the ...
    (microsoft.public.access.security)
  • Re: security issues
    ... It was obviously never meant to be; multiple defences against it being ... The Ubuntu installer uses a framework called debconf to do ... when you're asking for passwords ... you take a lot of care to clean them out of the database ...
    (Ubuntu)
  • Re: Basic security questions
    ... > question be able to open the database in the appropriate view. ... > Isn't there any way to just set up users with passwords that are saved ... How would I specify a relative path for the ... The path to the workgroup file is defined in a shortcut in the format: ...
    (microsoft.public.access.security)