Grouper Developers Forum

[Kathryn Huxtable <>]

I have tagged the new Subject API release 0.3.0 as SUBJECT_0_3_0 in the CVS
repository.

This release adds tests for the JNDISourceAdapter and JDBCSourceAdapter
classes, using an HSQLDB database (supplied) for the JDBC tests, and an
external LDAP provisioned with the KITN test data. The LDAP configuration
for testing ldappc will work for this.

The JNDISourceAdapter now escapes the search strings to prevent LDAP filter
injection.

The JDBCSourceAdapter now uses prepared statements, which automatically
prevents SQL injection, in addition to generally speeding up the queries.

There is a syntax change required in the sources.xml file for the new
JDBCSourceAdapter.

    1. You must specify the number of substitution parameters, and

    2. You must use the question mark ("?") instead of '%TERM%' for the
       search string. This is not to be in quotes, so you'll need to use
       database-dependant mechanisms to concatenate the question mark with
       other string data.
       The example tagged is for Oracle and uses the Oracle || concatenation
       operator.

-K