OLS using Weblogic connection pool...
484613Jan 20 2006 — edited Jan 20 2006We are using Weblogic as our app server and we have a connection pool setup to an oracle database.
What we want to do is proxy the connection from the pool to a specific user (so it's not using the generic weblogic user) - do you know if there is a way to do this with a Weblogic pool? I saw that if you use the Oracle OCI JDBC driver and create your own connection pool, you can do something like this below ("midtier" would be the generic account, "scott" would be the specific user):
String tnsAlias = "(DESCRIPTION = (ADDRESS_LIST = (ADDRESS = " +
" (PROTOCOL = TCP)(HOST = dknox)(PORT = 1521)) )" +
" (CONNECT_DATA = (SERVICE_NAME = knox10g) ) )";
OracleOCIConnectionPool ods = new OracleOCIConnectionPool();
ods.setURL("jdbc:oracle:oci:@" + tnsAlias);
ods.setUser("midtier");
ods.setPassword("strongPasswordforMidtier");
java.util.Properties userNameProp = new java.util.Properties();
userNameProp.setProperty(OracleOCIConnectionPool.PROXY_USER_NAME,
"scott");
Connection conn = ods.getProxyConnection(
OracleOCIConnectionPool.PROXYTYPE_USER_NAME,
userNameProp);
I want to see if there is a way we can do the same thing above, but using a Weblogic connection pool, if it's even possible.
Basically what we want to do is maybe implement the Oracle Label Security feature, but in order to do this from what I understand you have to be connected as a specific user on the DB for that to work.
Our app server would authenicate users using x509 certificates against an LDAP server and will have a DB connection pool setup using an generic account, say "user". So what we are thinking is somehow when we pull the connection from the pool, we would have to proxy as the user connected, say "johnsmith", which we would get from the certificate. Or is there a way to use OLS without having to proxy as a user? From what I found so far I can't see any way to proxy from an Weblogic connection pool, only an Oracle OCI connection Pool.
Thanks for the help!
- Dan