Skip to Main Content

Oracle Database Discussions

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

OLS using Weblogic connection pool...

484613Jan 20 2006 — edited Jan 20 2006
We are using Weblogic as our app server and we have a connection pool setup to an oracle database.

What we want to do is proxy the connection from the pool to a specific user (so it's not using the generic weblogic user) - do you know if there is a way to do this with a Weblogic pool? I saw that if you use the Oracle OCI JDBC driver and create your own connection pool, you can do something like this below ("midtier" would be the generic account, "scott" would be the specific user):

String tnsAlias = "(DESCRIPTION = (ADDRESS_LIST = (ADDRESS = " +
" (PROTOCOL = TCP)(HOST = dknox)(PORT = 1521)) )" +
" (CONNECT_DATA = (SERVICE_NAME = knox10g) ) )";
OracleOCIConnectionPool ods = new OracleOCIConnectionPool();
ods.setURL("jdbc:oracle:oci:@" + tnsAlias);
ods.setUser("midtier");
ods.setPassword("strongPasswordforMidtier");

java.util.Properties userNameProp = new java.util.Properties();
userNameProp.setProperty(OracleOCIConnectionPool.PROXY_USER_NAME,
"scott");
Connection conn = ods.getProxyConnection(
OracleOCIConnectionPool.PROXYTYPE_USER_NAME,
userNameProp);


I want to see if there is a way we can do the same thing above, but using a Weblogic connection pool, if it's even possible.

Basically what we want to do is maybe implement the Oracle Label Security feature, but in order to do this from what I understand you have to be connected as a specific user on the DB for that to work.

Our app server would authenicate users using x509 certificates against an LDAP server and will have a DB connection pool setup using an generic account, say "user". So what we are thinking is somehow when we pull the connection from the pool, we would have to proxy as the user connected, say "johnsmith", which we would get from the certificate. Or is there a way to use OLS without having to proxy as a user? From what I found so far I can't see any way to proxy from an Weblogic connection pool, only an Oracle OCI connection Pool.

Thanks for the help!

- Dan
Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Feb 17 2006
Added on Jan 20 2006
1 comment
449 views