Re: derby security

[Hong Ji <ho...@gmail.com>]

Thanks. I did more reading on derby doc and find the encryption may serve
the purpose since the derby db is used as embed db.

Hong

On 9/23/06, Rajesh Kartha <ka...@gmail.com> wrote:
>
> Hello,
>
> The 'derby.connection.requireAuthentication' need to set as system
> property (using -D)  while running your application
> or as a database property (within the database).
>
> More info at:
> http://db.apache.org/derby/docs/dev/tuning/rtunproper27467.html
>
> Also, there is some discussion on this in one of the JIRA issues at:
> http://issues.apache.org/jira/browse/DERBY-1711
>
> From you example you seem to pass the property as Connection properties
> which has a limited scope.
>
> Hope the above helps. Do post to the list should you have further
> questions.
>
> -Rajesh
>
>
> Hong Ji wrote:
>
> > The ij is still able to access the database without user name and
> > password.
> >
> > I set properties and create new database in java as following:
> >
> >         m_dbProperties = new Properties();
> >         m_dbProperties.put("user", "admin");
> >         m_dbProperties.put("password", "adminadmin");
> >         m_dbProperties.put(" derby.driver",
> > "org.apache.derby.jdbc.EmbeddedDriver");
> >         m_dbProperties.put("derby.url", "jdbc:derby:");
> >         m_dbProperties.put("derby.connection.requireAuthentication ",
> > "true");
> >
> >         m_dbProperties.put("create", "true");
> >
> >         dbConnection = DriverManager.getConnection(dbUrl,
> m_dbProperties);
> >
> > Is something still not set up properly?
> >
> > Thanks.
> >
> > Hong
> >
> >
> >
> > On 8/29/06, *Francois Orsini* <francois.orsini@gmail.com
> > <ma...@gmail.com>> wrote:
> >
> >     and make sure to re-boot the database or derby instance for the
> >     'derby.connection.requireAuthentication' property to be taken into
> >     account...It is a static property.
> >
> >
> >     On 8/29/06, *Fernanda Pizzorno* <Fernanda.Pizzorno@sun.com
> >     <ma...@sun.com>> wrote:
> >
> >         To enable user authentication in Derby you must set the
> >         /derby.connection.requireAuthentication/ property to true.
> >
> >         You can find more information about derby security on "Derby and
> >         Security" in "/Derby Developer's Guide"
> >         ( http://db.apache.org/derby/docs/dev/devguide/
> >         <http://db.apache.org/derby/docs/dev/devguide/>).
> >
> >         Fernanda
> >         /
> >         Hong Ji wrote:
> >> Hello,
> >>
> >> I created a derby database in Java with user name and password.
> >> However, the
> >> ij tool can open and view the database without input of the
> >         user name or
> >> password.
> >>
> >> So how could a derby database be protected? Anyone can use ij
> >         to view the
> >> database?
> >>
> >> Thanks.
> >>
> >> Hong Ji
> >>
> >
> >
> >
>
>