When an application principal initiates a request to an EIS, the application server first checks for an exact principal using the security map defined for the connector connection pool to determine the mapped backend EIS principal. If there is no exact match, then the application server uses the wild card character specification, if any, to determine the mapped backend EIS principal.
For example, to map app_principal1
and app_principal2
in the application to dbuser1
in the EIS, use the following asadmin
command:
asadmin> create-connector-security-map --user uname
--poolname connector-pool1 --principals principal1, principal2
--mappedusername backend-username securityMap1