When an application can't get a database connection through jca layer due to database password error, it's better to add an extension point in IronJacamar's datasource implementation to allow user'program to "implements". user can get the correct password from another server(our own server which stores the correct password), and then get and return a normal database connection to IronJacamar. This solution's advantage is that we don't need to restart jboss application server when database password is changed (may be due to security reasons)