How to configure JDBCRealm to obtain its DataSource from JNDI

jndi shiro jdbcrealm
Recurse picture Recurse · Jul 3, 2013 · Viewed 10.1k times · Source

How do you use a JDBCRealm to handle authenticating and authorizing users in servlets? The only example I can find is to create the DataSource in web.xml (such as Authentication against database using shiro 1.2.1).

I do not want to include database credentials in my source tree (for obvious reasons) and would prefer to use a Context defined DataSource via JNDI as I have for every other RDBMS I have used for any other purpose in every other servlet project I have developed.

How do you configure a Shiro JDBCRealm to obtain its DataSource from JNDI?

Answer

Les Hazlewood picture Les Hazlewood · Jul 3, 2013

Vrushank's answer was really close: you don't need to subclass the JdbcRealm here - you can use Shiro's JndiObjectFactory to acquire the DataSource and then reference that DataSource when you configure the JdbcRealm:

[main]
dataSource = org.apache.shiro.jndi.JndiObjectFactory
dataSource.resourceName = java://app/jdbc/myDataSource

jdbcRealm = org.apache.shiro.realm.jdbc.JdbcRealm
jdbcRealm.dataSource = $dataSource
#addt'l config

For a web application, save the file under WEB-INF/shiro.ini.

See Also

Related questions

How to use JNDI DataSource provided by Tomcat in Spring?

It is said that in the Spring javadoc article about DriverManagerDataSource class, that this class is very simple and that it is recommended to use a JNDI DataSource provided by the container. Such a DataSource can be exposed as a …

Read More
What is JNDI? What is its basic use? When is it used?

What is JNDI? What is its basic use? When is it used?

Read More
The meaning of NoInitialContextException error

I am writing a client for my EJB and when trying to execute it, I get the following exception : javax.naming.NoInitialContextException: Need to specify class name in environment or system property, or as an applet parameter, or in an …

Read More