IDS Forum

Re: User Name from Connection Pool

Posted By: Informix DBA
Date: Wednesday, 21 September 2016, at 2:20 p.m.

In Response To: Re: User Name from Connection Pool (Fernando Nunes)

Thank you Fernando. I will read up on using the "trusted context"
functionality.

Thank You,

--Dave

On Wed, Sep 21, 2016 at 12:25 PM, Fernando Nunes <domusonline@gmail.com>
wrote:

> Short answer, you can't... at most the driver could capture the OS user
> running the process, but obviously that wouldn't solve your problem.
> For situations like that we implemented in Informix a similar functionality
> that DB2 and Oracle had for some times.
> In Informix (and DB2) it's called "trusted context". Basically it's the
> possibility of a session to change it's user within the database without
> having to reconnect or re-authenticate.
>
> I can't remember exactly what / how it needs to be implemented in the
> applciation server. I think the J2EE server has some features/class to do
> this, but I'd jhave to look.
> On the database server side you need to use SQL to create the trusted
> context and you can see the syntax in the SQL syntax guide.
>
> There are a few restrictions which I personally believe may inhibit many
> informix customers from using it. Specifically a session where the SET
> SESSION AITHORIZATION was run cannot do remote operations (by remote I mean
> on another database, even within the same instance).
>
> Please investigate and return if you have doubts. I should be able to find
> some info abut the app server side if you're interested.
>
> Note that what you want is not trivial, because there is no standard way to
> make the final user identity to "flow" to the database layer... specially
> because the concept of end user is not defined... it can be Mr. John Doe,
> or a userid validated inside an application, or a user identity from a
> single signon infra-structure etc...
>
> Auditing tools (like Guardium) try to find this through queries sent by the
> application.... "SELECT COUNT(*) FROM my_user_table WHERE username='john'
> and password ='$%/#($'
>
> (this would allow it to infer the user is "john"
>
> Regards.
>
> On Wed, Sep 21, 2016 at 4:50 PM, Informix DBA <in4mixdba@gmail.com> wrote:
>
> > Hi,
> >
> > We are running 11.70.FC7W2 on Solaris. We have a Java application that
> > uses a connection pool for Informix DB connections. However, we have many
> > triggers that log user activity on certain tables. We would like to log
> > the user that made the change, however from the DB side we only see the
> > application user from the connection pool and not the actual user id.
> > onstat -u only shows "java_app" in the user column and we want the actual
> > user name.
> >
> > How can we get the user name connecting to the connection pool so that
> the
> > trigger can log the real user name.
> >
> > Thank You,
> >
> > --Dave
> >
> > --001a1145b3ea698281053d0680d4
> >
> >
> > ************************************************************
> > *******************
> > Forum Note: Use "Reply" to post a response in the discussion forum.
> >
> >
>
> --
> Fernando Nunes
> Portugal
>
> http://informix-technology.blogspot.com
> My email works... but I don't check it frequently...
>
> --001a114ac5dc77bbee053d06ff7c
>
>
> ************************************************************
> *******************
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
>

--94eb2c072bb6e98d89053d089a88

Messages In This Thread

• User Name from Connection Pool
  Informix DBA -- Wednesday, 21 September 2016, at 11:50 a.m.
  • Re: User Name from Connection Pool
    Art Kagel -- Wednesday, 21 September 2016, at 12:16 p.m.
    • Re: User Name from Connection Pool
      Informix DBA -- Wednesday, 21 September 2016, at 1:26 p.m.
      • Re: User Name from Connection Pool
        Art Kagel -- Wednesday, 21 September 2016, at 1:54 p.m.
        • Re: User Name from Connection Pool
          Fernando Nunes -- Wednesday, 21 September 2016, at 2:12 p.m.
  • Re: User Name from Connection Pool
    Fernando Nunes -- Wednesday, 21 September 2016, at 12:25 p.m.
    • Re: User Name from Connection Pool
      Informix DBA -- Wednesday, 21 September 2016, at 2:20 p.m.
      • Re: User Name from Connection Pool
        Informix DBA -- Thursday, 22 September 2016, at 3:10 p.m.

IDS Forum is maintained by Administrator with WebBBS 5.12.