...
The instruction below describes how to switch to a Windows account after the DualShield server has been successfully installed.
| Table of Contents |
|---|
Change the JDBC Connection String
You might also know that DualShield uses JDBC to connect to SQL server. We need to change the JDBC connection settings first. In a Windows Explorer window navigate to:
...
Open the "server.xml" file in a text editor such as Notepad++. Locate the text similar to the following:
| <Resource driverClassName="com.microsoft.sqlserver.jdbc.SQLServerDriver" factory="com.deepnet.dualshield.encryption.EncryptedDataSourceFactory" maxActive="1000" maxIdle="2" maxWait="5000" name="jdbc/DasDS" username="xxxx" password=" |
...
| yyyy" type="javax.sql.DataSource" url="jdbc:sqlserver://192.168.208.2:1433;DatabaseName=dualshield2;SelectMethod=cursor;" |
...
| validationQuery="Select 1" /> |
...
Make the following changes:
- Remove the attribute: factory="com.deepnet.dualshield.encryption.EncryptedDataSourceFactory"
- Remove the attribute: username="xxxx"
- Remove the attribute: password="yyyy"
- Add "integratedSecurity=true;" in the value of the "url" attribute
...
| <Resource driverClassName="com.microsoft.sqlserver.jdbc.SQLServerDriver" maxActive="1000" maxIdle="2" maxWait="5000" name="jdbc/DasDS" type="javax.sql.DataSource" url="jdbc:sqlserver://192.168.208.2:1433;DatabaseName=dualshield2;SelectMethod=cursor; integratedSecurity=true;" validationQuery="Select 1"/> |
As you might have noticed, there is no the username/password in the new string. Instead there is are removed, and a new attribute: integratedSecurity=true is added.
Once you have made the above change, save the "server.xml" file and exit the text editor.
Update JDBC Driver
Depending on the version of your MS-SQL server, you might need to download the latest Microsoft JDBC driver
https://docs.microsoft.com/en-us/sql/connect/jdbc/release-notes-for-the-jdbc-driver
Unzip Next, download Microsoft JDBC Driver 4.0 for SQL Server, unzip it to a temp folder on your local hard drive, then then carry out the following operations:
1) In the temp folder find the file sqljdbc4"mssql-jdbc-x.x.x.jre8.jar" and copy it to the folder "C:\Program Files\Deepnet DualShield\tomcat\lib". Replace the old file when prompted.
|
|
2) In the temp folder find the file sqljdbc"mssql-jdbc_auth.dll-x.x.x.x64.dll" (make sure you select the correct version x64/x86 according to your DualShield/OS version)
, copy it to the folder "C:\Program Files\Deepnet DualShield\tomcat\lib"
|
|
Update JAVA Settings
Now, you need to add a Java option. In order to do that, you need to launch the JAVA Configure Console:
...
Navigate to the tab Java add -Djava.library.path=C:\Program Files\Deepnet DualShield\tomcat\lib in Java Options , click Apply or OK button,It is close to finish. At this time, you may still wonder why there is no username /password in the new JDBC connection string and which particular user will be used to connect to the SQL server? Here is the answer..
Change DualShield Service Logon Account
Check the property of the DaulShield service
By default, it logs on as "Local System account", you need to change to a windows account which is assigned some with appropriate SQL permissions
Change DualShied Folder Access Permissions
If Note: if DualShiled is installed on the same machine where the SQL server is installed, you may still be able to use "Local System account". ConsequentlyOtherwise, you may need to add that must give the Windows account (in the example, spadmin@ds08.local) onto the full control to the folder "Deepnet DualShield" folder, allow allowing it to have write privilege on this folder, otherwise it may cause problem.
read, write & modify the folder and all of its sub folders. See below: