i am reading head first Servlet & Jsp right now and have finished the chapter on security ...
now, it says that the users and roles are declared in the tomcat-users.xml which is somewhat cumbersome and awkward since in real development you would use a database to store user relevant information.
The thing that i need to know, how do you tell the container to retrieve the user and roles data from a database rather than from the xml file?
thanks for your help
JDBCSupport - An easy to use, light-weight JDBC framework -
now, it says that the users and roles are declared in the tomcat-users.xml which is somewhat cumbersome and awkward since in real development you would use a database to store user relevant information.
I too don't know much about tomcat-users.xml , but surely he is not talking about the DB user names and passwords. This XML file typically refers to the login information related to the server.
Google on to tomcat-users.xml
If you want something you never had do something which you had never done
Bauke Scholtz
Ranch Hand
Joined: Oct 08, 2006
Posts: 2458
posted
0
Yes, tomcat-users.xml only applies to the admin/management console of Tomcat server. It has nothing to do with authentication of the running webapplications.
0
