Connection failures after credential expiry for JNDI JDBC DataSource
Designing least-privilege authentication for a JNDI JDBC resource in Tomcat 9.x and 10.x raises questions about credential lifecycle and pool behavior. JNDI resources defined in server.xml are resolved at startup, and changes typically require a restart unless the JNDI environment is reloaded via JMX. Tomcat passes the configured username and password to the