Download FAQ History |  | API Search Feedback

> ## EIS-Tier Security

> In the EIS tier, an application component requests a connection to an EIS resource. As part of this connection, the EIS may require a sign-on to the resource. The application component provider has two choices for the design of the EIS sign-on:

> - With the container-managed sign-on approach, the application component lets the container take the responsibility of configuring and managing the EIS sign-on. The container determines the user name and password for establishing a connection to an EIS instance.
> - With the component-managed sign-on approach, the application component code manages EIS sign-on by including code that performs the sign-on process to an EIS.

> ### Container-Managed Sign-On

> With container-managed sign-on, an application component does not have to pass any security information for signing on to the resource to the `getConnection()` method. The security information is supplied by the container, as shown in the following example.

>     // Business method in an application component
>     Context initctx = new InitialContext();
>     // Perform JNDI lookup to obtain a connection factory
>     javax.resource.cci.ConnectionFactory cxf =
>          (javax.resource.cci.ConnectionFactory)initctx.lookup(
>           "java:comp/env/eis/MainframeCxFactory");
>     // Invoke factory to obtain a connection. The security
>     // information is not passed in the getConnection method
>     javax.resource.cci.Connection cx = cxf.getConnection();
>     ...

> ### Component-Managed Sign-On

> With component-managed sign-on, an application component is responsible for passing the security information that is needed for signing on to the resource to the `getConnection()` method. Security information could be a user name and password, for example, as shown here:

>     // Method in an application component
>     Context initctx = new InitialContext();
>     // Perform JNDI lookup to obtain a connection factory
>     javax.resource.cci.ConnectionFactory cxf =
>          (javax.resource.cci.ConnectionFactory)initctx.lookup(
>            "java:comp/env/eis/MainframeCxFactory");
>     // Get a new ConnectionSpec
>     com.myeis.ConnectionSpecImpl properties = //..
>     // Invoke factory to obtain a connection
>     properties.setUserName("...");
>     properties.setPassword("...");
>     javax.resource.cci.Connection cx =
>       cxf.getConnection(properties);
>     ...

> ### Configuring Resource Adapter Security

> 1. In addition to configuring the sign-on, you can also configure security settings for the resource adapter.

Download FAQ History |  | API Search Feedback

All of the material in The Java Web Services Tutorial is copyright-protected and may not be published in other works without express written permission from Sun Microsystems.