Doug,

Another responded to a solution on doing this ... by creating the xml file at run time. That is ok, but not what I was suggesting. Certainly, using Java's encryption libraries, a file can be encrypted with the uid/pwd and decrypted on demand.

The database.xml is one such file, so, whether you create the entire file at runtime, or simply un-encrypt it, same result, using JAVA as the tool, not JDO.

Linux encrypts it's password for just such a reason ... so it is a common approach .

Hope this helps,

Peter



From: "Ferguson, Doug" <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: [castor-dev] JDO - database password
Date: Tue, 3 Dec 2002 14:19:03 -0600

I don't believe there would be anyway to protect it with JAVA.
If Castor expects the password to be in plain text how is JAVA code going to
help?

d./

-----Original Message-----
From: Peter Kasson [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, December 03, 2002 2:05 PM
To: [EMAIL PROTECTED]
Subject: Re: [castor-dev] JDO - database password


Doug,

There are several postings about this a few weeks ago. I believe that you
are correct. Short of changing Castor's source, you can choose alternatives

for protecting this information (Java solutions, not Castor).

Peter







>From: "Ferguson, Doug" <[EMAIL PROTECTED]>
>Reply-To: [EMAIL PROTECTED]
>To: [EMAIL PROTECTED]
>Subject: [castor-dev] JDO - database password
>Date: Tue, 3 Dec 2002 13:45:57 -0600
>
>There doesn't appear to be anyway to avoid having your database password in
>clear text in the jdo configuration file.
>
>Is this correct?
>
>d./


_________________________________________________________________
The new MSN 8: smart spam protection and 2 months FREE*
http://join.msn.com/?page=features/junkmail

-----------------------------------------------------------
If you wish to unsubscribe from this mailing, send mail to
[EMAIL PROTECTED] with a subject of:
unsubscribe castor-dev

-----------------------------------------------------------
If you wish to unsubscribe from this mailing, send mail to
[EMAIL PROTECTED] with a subject of:
unsubscribe castor-dev

_________________________________________________________________
MSN 8 with e-mail virus protection service: 2 months FREE* http://join.msn.com/?page=features/virus

----------------------------------------------------------- If you wish to unsubscribe from this mailing, send mail to
[EMAIL PROTECTED] with a subject of:
unsubscribe castor-dev

Reply via email to