Is it best to use:

1. Data source configuration in xxx-ds.xml? or

2. Configure and external library like c3p0 as a service?

I am keen to know any advantages and disadvantages of both options.

Also, is it possible to configure a pooled 3rd party datasource defined as a service to use login modules for security.