properties.put("kerberosServerPrincipal",
“sample/srvlsj.ibm.com@SRVLSJ.SJ.IBM.COM");
// Set the Kerberos server
properties.put("securityMechanism",
new String("" +
com.ibm.db2.jcc.DB2BaseDataSource.KERBEROS_SECURITY + ""));
// Set security mechanism to
// Kerberos
String url = "jdbc:db2://mvs1.sj.ibm.com:5021/san_jose";
// Set URL for the data source
Connection con = DriverManager.getConnection(url, properties);
// Create the connection
For the DataSource interface: If you create and deploy the DataSource object, set
the Kerberos server and security mechanism by invoking the
DataSource.setKerberosServerPrincipal and DataSource.setSecurityMechanism
methods after you create the DataSource object. For example:
import java.sql.*; // JDBC base
import com.ibm.db2.jcc.*; // IBM Data Server Driver for JDBC
// and SQLJ implementation of JDBC
...
DB2SimpleDataSource db2ds =
new com.ibm.db2.jcc.DB2SimpleDataSource();
// Create the DataSource object
db2ds.setDriverType(4); // Set the driver type
db2ds.setDatabaseName("san_jose"); // Set the location
db2ds.setServerName("mvs1.sj.ibm.com");
// Set the server name
db2ds.setPortNumber(5021); // Set the port number
db2ds.setKerberosServerPrincipal(
"sample/srvlsj.ibm.com@SRVLSJ.SJ.IBM.COM");
// Set the Kerberos server
db2ds.setSecurityMechanism(
com.ibm.db2.jcc.DB2BaseDataSource.KERBEROS_SECURITY);
// Set security mechanism to
// Kerberos
Kerberos security with a delegated credential from another
principal
For this case, you authenticate to the database server using a delegated credential
that another principal passes to you.
You need to set the kerberosServerPrincipal, gssCredential, and
securityMechanism properties. Set the securityMechanism property to
com.ibm.db2.jcc.DB2BaseDataSource.KERBEROS_SECURITY (11).
For the DriverManager interface: Set the Kerberos server, delegated credential, and
security mechanism by setting the kerberosServerPrincipal, and
securityMechanism properties in a Properties object. Then invoke the form of the
getConnection method that includes the Properties object as a parameter. For
example, use code like this to set the Kerberos security mechanism without a user
ID and password:
import java.sql.*; // JDBC base
import com.ibm.db2.jcc.*; // IBM Data Server Driver for JDBC
// and SQLJ implementation of JDBC
...
Properties properties = new Properties(); // Create a Properties object
properties.put("kerberosServerPrincipal",
“sample/srvlsj.ibm.com@SRVLSJ.SJ.IBM.COM");
// Set the Kerberos server
properties.put("gssCredential",delegatedCredential);
Chapter 10. Security under the IBM Data Server Driver for JDBC and SQLJ 455
To Next Page
Loading...
Need help?
General