Derby
  1. Derby
  2. DERBY-5769

Notes deprecating BUILTIN authentication need fixing

    Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: 10.9.1.0
    • Fix Version/s: 10.9.1.0
    • Component/s: Documentation
    • Labels:
      None

      Description

      In reviewing a DERBY-5767 patch, Rick Hillegas noticed that in the derby.authentication.provider topic, "In the second, longer paragraph of the BUILTIN bullet, we recommend LDAP and user-supplied schemes as alternatives to BUILTIN, but we don't recommend NATIVE. Did we decide to not recommend NATIVE here or should this be adjusted to include it beside the other safe schemes? Thanks."

      In several topics, the notes were not modified to recommend NATIVE authentication the same way they were elsewhere: "It is strongly recommended that production systems rely on NATIVE authentication, an external directory service such as LDAP, or a user-defined class for authentication." These notes need to be tidied up.

      1. DERBY-5769.diff
        4 kB
        Kim Haase
      2. DERBY-5769.stat
        0.1 kB
        Kim Haase
      3. DERBY-5769.zip
        11 kB
        Kim Haase
      4. DERBY-5769-2.diff
        4 kB
        Kim Haase
      5. DERBY-5769-2.zip
        11 kB
        Kim Haase

        Activity

        Hide
        Kim Haase added a comment -

        Attaching DERBY-5769.diff, DERBY-5769.stat, and DERBY-5769.zip, with changes to three topics:

        M src/ref/rrefproper27355.dita
        M src/ref/rrefproper13766.dita
        M src/devguide/tdevdvlp40464.dita

        I noticed that in the Developer's Guide topic, the paragraph introducing the note also needed some fixes. I'm not sure if I got them right, though, so Rick, I'd be very grateful for your review.

        Show
        Kim Haase added a comment - Attaching DERBY-5769 .diff, DERBY-5769 .stat, and DERBY-5769 .zip, with changes to three topics: M src/ref/rrefproper27355.dita M src/ref/rrefproper13766.dita M src/devguide/tdevdvlp40464.dita I noticed that in the Developer's Guide topic, the paragraph introducing the note also needed some fixes. I'm not sure if I got them right, though, so Rick, I'd be very grateful for your review.
        Hide
        Rick Hillegas added a comment -

        Thanks for the patch, Kim. Looks good. One comment:

        tdevdvlp40464:

        If authentication is turned on, then credentials are required in order to shut down the engine. This is true for LDAP and application-supplied authentication as well as for NATIVE and BUILTIN. Also, database-specific credentials cannot be used to shut down the engine. Only system-wide credentials can be used for this purpose. So I would change the third paragraph to say this:

        "If you have enabled user authentication at the system level, you will need to specify credentials (that is, username and password) in order to shut down a Derby system, and the supplied username and password must also be defined at the system level."

        Thanks,
        -Rick

        Show
        Rick Hillegas added a comment - Thanks for the patch, Kim. Looks good. One comment: tdevdvlp40464: If authentication is turned on, then credentials are required in order to shut down the engine. This is true for LDAP and application-supplied authentication as well as for NATIVE and BUILTIN. Also, database-specific credentials cannot be used to shut down the engine. Only system-wide credentials can be used for this purpose. So I would change the third paragraph to say this: "If you have enabled user authentication at the system level, you will need to specify credentials (that is, username and password) in order to shut down a Derby system, and the supplied username and password must also be defined at the system level." Thanks, -Rick
        Hide
        Kim Haase added a comment -

        Thanks, Rick – that's exactly what I was unsure about. I'm attaching a second patch, DERBY-5769-2.diff and DERBY-5769-2.zip, with that correction. Hope it's okay now.

        Show
        Kim Haase added a comment - Thanks, Rick – that's exactly what I was unsure about. I'm attaching a second patch, DERBY-5769 -2.diff and DERBY-5769 -2.zip, with that correction. Hope it's okay now.
        Hide
        Rick Hillegas added a comment -

        Thanks, Kim. The second patch looks good. +1

        Show
        Rick Hillegas added a comment - Thanks, Kim. The second patch looks good. +1
        Hide
        Kim Haase added a comment -

        Thanks again, Rick.

        Committed patch DERBY-5769-2.diff to documentation trunk at revision 1340150.

        Show
        Kim Haase added a comment - Thanks again, Rick. Committed patch DERBY-5769 -2.diff to documentation trunk at revision 1340150.
        Hide
        Kim Haase added a comment -

        Changes have appeared in Latest Alpha Manuals.

        Show
        Kim Haase added a comment - Changes have appeared in Latest Alpha Manuals.

          People

          • Assignee:
            Kim Haase
            Reporter:
            Kim Haase
          • Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development