[ 
https://issues.apache.org/jira/browse/CONNECTORS-486?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13403087#comment-13403087
 ] 

Karl Wright commented on CONNECTORS-486:
----------------------------------------

I have been thinking about this and I think we may do better by providing an 
(optional) encryption option for the exported configuration, using a passkey 
provided by the user.  That seems to meet all requirements and would avoid 
changes to the connector API to support this feature.

                
> Optionally export crawler configuration without passwords
> ---------------------------------------------------------
>
>                 Key: CONNECTORS-486
>                 URL: https://issues.apache.org/jira/browse/CONNECTORS-486
>             Project: ManifoldCF
>          Issue Type: Improvement
>          Components: Framework agents process
>            Reporter: Erlend GarĂ¥sen
>            Assignee: Erlend GarĂ¥sen
>            Priority: Minor
>             Fix For: ManifoldCF 0.7
>
>
> The "org.apache.manifoldcf.crawler.ExportConfiguration" command class is 
> exporting passwords, for instance to the configured Solr server (Solr Output 
> Connector). This may be a security problem if the export file is 
> version-controlled or placed on a public server.
> We should add an extra "no password" argument to the command class in order 
> to skip such passwords.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira


Reply via email to