Security Aspects for the Database Connection 

Use

When connecting to the database, the J2EE Engine as well as the applications deployed on it authenticate themselves by means of a user name and a password. They are specified only once, when the DataSource that is used to provide the database connection is created. The DataSource is initialized with the supplied credentials and uses them for the authentication of all physical connections that it provides.

Features

You may use one of the following options for database connectivity:

·        Using the default DataSource, you can connect to the system database in which the J2EE Engine stores its information

·        You can register a new DataSource to connect to another database that your application uses

Using the Default DataSource

The default DataSource is created at installation and is used by all J2EE Engine services that need to connect to the system database. The applications that you later deploy on the server may also use this DataSource. For more information, see Using the Default DataSource.

The default DataSource uses the standard database schema user SAP<SID>DB, where <SID> is the system identifier – for example, J2E. The password for this user is defined at installation.

The user name and password for the default DataSource, are stored encrypted in a secure storage. The parameters for this secure storage are the following properties of the Configuration Manager:

·        secstorefs.keyfile

·        secstorefs.lib

·        secstorefs.secfile

For more information about these properties, see Configuration Manager in the Reference Manual.

You cannot establish a database connection and respectively run the J2EE Engine without using a secure storage. It is highly recommended that you do not change the default properties.

To change the password of the default user, you must:

·        Change the user password in the database. For more information, see Database Access Protection.

·        Maintain the relevant entry in the secure storage:

...

                            a.      Start the Config Tool. (Execute the configtool script file in <SAPj2eeEngine_install_dir>\configtool.)

                            b.      Select secure store. The configuration for the secure storage in the file system appears.

                            c.      Select the jdbc/pool/<SID>/Password entry.

                            d.      Enter the database user’s new password in the Value field and choose Add.

                            e.      Choose File → Apply to save the data. The new password is used to connect the J2EE Engine to the database the next time it is restarted.

See also:

Managing Secure Storage in the File System

Connecting with a User-Defined DataSource

If you need to connect to another database, you have to register a new DataSource using the JDBC Connector Service. For more information, see Creating a DataSource with JDBC 1.x Driver and Creating a DataSource with JDBC 2.0 Driver.

To create the DataSource, you must supply a valid user name and password for the database schema. The J2EE Engine stores this data encrypted.