[
https://issues.apache.org/jira/browse/CONNECTORS-313?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13169480#comment-13169480
]
Karl Wright commented on CONNECTORS-313:
----------------------------------------
I also have noticed that RegisterAll reads database superuser credentials from
the properties file. This is OK for the single-process example because the
database is usually embedded anyhow, but for the multiprocess version embedding
the credentials seems more risky, so we will need to address this, I think.
There are two possible solutions I can think of here. The first possibility is
to store the password in an obfuscated form. We already have some
obfuscation/deobfuscation code that can take care of this. The second
possibility is to accept the superuser name and password as command-line
arguments to the RegisterAll command (or InitializeAndRegister, if we change
it).
If we adopt the first approach, then I think we would definitely want to share
the code with the single-process example. In order to maintain backwards
compatibility, I'd introduce a new parameter:
org.apache.manifoldcf.dbsuperuserpasswordobfuscated. Use the unobfuscated
password only if the obfuscated one is not found. We'll also need a script to
do the obfuscation, but I'm happy to write that.
The second approach puts the onus on the user for maintaining the security of
their passwords, but it only applies to the multiprocess example at the moment.
But we could modify the single-process example to optionally take these
credentials from the command line also.
Thoughts?
> An example multi-process properties.xml delivered to the "dist" folder would
> be very helpful
> --------------------------------------------------------------------------------------------
>
> Key: CONNECTORS-313
> URL: https://issues.apache.org/jira/browse/CONNECTORS-313
> Project: ManifoldCF
> Issue Type: Improvement
> Components: Build
> Affects Versions: ManifoldCF 0.4
> Reporter: Shinichiro Abe
> Assignee: Shinichiro Abe
> Priority: Minor
> Fix For: ManifoldCF next
>
> Attachments: CONNECTOR-313.patch, CONNECTOR-313.patch,
> register-draft.sh
>
>
> The multiprocess setup does not have an example properties.xml file. We
> should deliver one, in the right place so that all the scripts find it (the
> "dist" directory). It would also be helpful to deliver into this directory
> scripts for:
> - Registering all the connectors that were built
> - Starting the agents process
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
