Mapping-configuration alias

This panel allows you to select a mapping configuration alias for the resource that you are configuring. This panel is only available when security domains are defined. Security domains allow you to isolate mapping configuration aliases between servers. The tree view is useful in determining the security domain to which an alias belongs, and the tree view can help you determine the servers that will be able to access each authentication alias. The tree view is tailored for each resource, so domains and aliases are hidden when you cannot use them. For example, a cell-scoped security domain will be hidden from the tree if all servers and clusters in the tree have defined their own security domain. If you are looking for an alias that is not visible in the tree, it is because the alias cannot be used by any servers that have visibility to this resource. In this case, you must define the alias at the global scope or in a different security domain that is visible to this resource.

To view this administrative console panel:

1. You must have a security domain defined in the application server.
2. Click one of the following paths in the administrative console:
   • Resources > JDBC > Data sources > data_source. Click Browse... in the security section for Component-managed authentication alias or Container-managed authentication alias.
   • Resources > JDBC > JDBC Providers > jdbc_provider > Data sources > data_source. Click Browse... in the security section for Component-managed authentication alias or Container-managed authentication alias.
   • Resources > Resource Adapters > J2C connection factories > j2c_connection_factory. Click Browse... in the security section for Component-managed authentication alias or Container-managed authentication alias.

Avoid trouble: Be careful when selecting an alias, because it is possible to select an alias that is only accessible by a subset of the servers that will use the resource. If you select a global alias, you are guaranteed that an alias by that name will be accessible to all users of the resource. If the alias has been overridden in a security domain, however, that alias will be used instead of the global one. The tree view includes icons to help you select the proper alias:

• The alias is accessible by all servers that can access this resource.
• There is at least one server that cannot access the alias. Check the tree view to see if this is OK for the application that will be using this resource.
• The alias is defined in multiple places.

gotcha