What is the difference between JDBCRealm and DataSourceRealm? [closed] - security

Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 6 years ago.
Improve this question
I read this comment: "don't use JDBCRealm at all: it does not scale at all since there is a single JDBC Connection object used for all database communication. You are better off using DataSourceRealm"
What does it mean in a greater detail?

Incase you don't know about why and what realms are- for JAVA web applications, authentication and authorization can be handled either by the application or by the container(Tomcat etc.). If one chooses to use the container, you need to specify a user-store(a place where usernames,hopefully encrypted passwords, roles etc are stored). This could even be your tomcat-users xml incase of Tomcat. Or you could use a database(MYSQL etc.) or a directory(Active Directory etc.) . Tomcat connects to the database using JDBC(your JDBC realm) and to the directory using JNDI(your DataSourceRealm).
Coming to your question JDBC connections are expensive, have pooling limitations, and suffer from high synchronization which means in a high load application, authentication may fail for some requests due to unavailability JDBC. JNDI has better pooling being read optimized, and as such gives better performance.

Related

Searching a best practice to register users in CouchDB [closed]

Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 4 years ago.
Improve this question
Coming from a more traditional web frameworks like Django and a little bit Rails, I am a bit confused about what is the best to register new user in your couchdb backed web app. The registration process should include sending an e-mail with an activation link.
Can this be handled in couchdb completely? Or do I just write a little bit of code in my web app layer as I did before?
Any link or short explanation is highly appreciated.
CouchDB has a basic authentication system that allows you to create users, manager their roles and permissions.
Although, you'll probably need to add a certain logic in your application layer to support some of the basic feature of an authentication system.
For example, you would have to add some code to support password recovery.
Also, it supports Cookie authentication but you can't revoke cookies from a user(If that's an issue for you, don't use CouchDB's auth system)

Spark,Akka,Storm Or RxJava [closed]

Closed. This question is opinion-based. It is not currently accepting answers.
Want to improve this question? Update the question so it can be answered with facts and citations by editing this post.
Closed 7 years ago.
Improve this question
I have a use case where I get 10K to 15 K Messages/sec and it might be less than 5K also sometime and I push those into RabbitMQ now those messages I should parse,run some RE on that and do some sort aggregation and run some statistics. My product(the data pipeline) would be deployed in single machine as there are some business constrain. Have explored Spark Akka Storm and RxJava, Could you suggest me what to be used. But I don't want to do in plain Java, as by this way I have to handle all the threading etc.
Based on my experience I would go for Akka. You can create different pools of actors to perform some tasks concurrently on different messages. Also you can leverage the power of akka-camel to have a RabbitMQ consumer using the RabbitMQ Camel Component.
You might be able to do the same with Storm but I don't have that much experience with it to recommend it personally.
I wouldn't go for Apache Spark since you would need to user Apache Spark Streaming and you will need to learn about how to configure the buffering window correctly for your use case.

How data can be synchronized among multiple linux servers [closed]

Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 7 years ago.
Improve this question
I have basically 4 servers for running the same project. I want make changes in database from UI.
What should I do so that all changes are reflected on all server so that all servers contain the same data.
You can use replication in database for your purpose.
You can use data replication. replicate all the data from all four servers at one single location.
Database replication is the frequent electronic copying data from a database in one computer or server to a database in another so that all users share the same level of information. The result is a distributed database in which users can access data relevant to their tasks without interfering with the work of others. The implementation of database replication for the purpose of eliminating data ambiguity or inconsistency among users is known as normalization.

What security feature do i use to make my CF application secured? [closed]

Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 8 years ago.
Improve this question
I have an application built in CF 9. As this was developed way long time back, I am trying to implement some security features now. I only have the knowledge of using cfqueryparam to protect the sql injection which i have already implemented in the application code.
But what else do I use to make my application more secure?
I am using ColdFusion 9 and Oracle database.
Can anyone offer any suggestions?
It's a very broad question. But i will give you links that will get you started:
First you need check Administering Security
Then check securing application
Then you need to learn how to lockdown server
As you mentioned, you need to use cfqueryparam in cfquery
Also you need to use best practices while developing application.
I guess this will make your application very secure.
here is the developer security guide to make your CF applications secured. you can download this ColdFusion Developer Security Guide.
This contains all the basics of security enhancement.

dedicated servers for socket.io? [closed]

Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 8 years ago.
Improve this question
One of the main features in my website is a simple One-to-One chat.
I'm debating whether or not I shall dedicate a server (or a cluster) for the sole purpose of this chat feature. The simpler option would be combining this feature as part of the web-servers and just scale out when necessary.
It is worth mentioning I'd like in the future to enable images transfer within the chat.
So what is the better option and why?
Well yes, Whether to use another dedicated server is not depending on how much traffic your site will have to handle. If you're dealing with images It will be a good idea to store them in another server and keep the root server clean.

Resources