John,
Point taken, but corporations such as ours do not allow password storage in clear text.
Auditors will be happier to see the 'key' stored in clear text...
I knew it will be  along shot, but thanks for the reply anyway!
Kirula
-----------------------------------------------
Kirula Leelasena
Global Markets Technology
Institutional Client Group

Tel:  +44  (0) 20 7545 9580
Fax : +44  (0) 20 7545 1559
Email: [EMAIL PROTECTED]


                                                                                       
                                
                      "Morrison, John"                                                 
                                
                      <[EMAIL PROTECTED]        To:       
"'[EMAIL PROTECTED]'"                            
                      perian.com>                  <[EMAIL PROTECTED]>       
                                
                                                  cc:                                  
                                
                      14/02/2003 10:23            Subject:  RE: Can cocoon handle 
password encryption in cocoon.xconf  
                      Please respond to            ?                                   
                                
                      cocoon-users                                                     
                                
                                                                                       
                                
                                                                                       
                                




> From: Kirula Leelasena [mailto:[EMAIL PROTECTED]]
>
> Hi,
> Is there anyway to enable password encryption in cocoon's
> database connections in cocoon.xconf?
>
> <datasources>
>     <jdbc name="my_db">
>           <pool-controller min="5" max="10" oradb="true"/>
>           <dburl>jdbc:oracle:thin:@my_server:my_port:my_SID</dburl>
>           <user>username</user>
>           <password>my_encrypted_password</password>
>     </jdbc>
> </datasources>
>
> Please advise if a password encryption tool can be used to
> encrypt database passwords and getting cocoon to use this
> tool to do the reverse when connecting to a database. I know
> this is a long shot, but I thought I will ask anyway!
>
> Reason for this query is that our internal security policy do
> not to allow storing of passwords without them being encrypted first.
>
> Thanks and Regards
> Kirula

It would be of little use to encrypt this in a method that can be
decrypted as you'd still need the key stored in the clear to do
the decryption!

Sorry.

J.


=======================================================================
Information in this email and any attachments are confidential, and may
not be copied or used by anyone other than the addressee, nor disclosed
to any third party without our permission.  There is no intention to
create any legally binding contract or other commitment through the use
of this email.

Experian Limited (registration number 653331).
Registered office: Talbot House, Talbot Street, Nottingham NG1 5HF

---------------------------------------------------------------------
Please check that your question  has not already been answered in the
FAQ before posting.     <http://xml.apache.org/cocoon/faq/index.html>

To unsubscribe, e-mail:     <[EMAIL PROTECTED]>
For additional commands, e-mail:   <[EMAIL PROTECTED]>






--

This e-mail may contain confidential and/or privileged information. If you are not the 
intended recipient (or have received this e-mail in error) please notify the sender 
immediately and destroy this e-mail. Any unauthorized copying, disclosure or 
distribution of the material in this e-mail is strictly forbidden.



---------------------------------------------------------------------
Please check that your question  has not already been answered in the
FAQ before posting.     <http://xml.apache.org/cocoon/faq/index.html>

To unsubscribe, e-mail:     <[EMAIL PROTECTED]>
For additional commands, e-mail:   <[EMAIL PROTECTED]>

Reply via email to