[ 
https://issues.apache.org/jira/browse/CONNECTORS-486?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13449692#comment-13449692
 ] 

Erlend Garåsen commented on CONNECTORS-486:
-------------------------------------------

{code}
if (saltValue == null || saltValue.length() == 0)
  throw new IllegalStateException("Missing required SALT value");
{code}

Incorrect passcodes are detected as well.
                
> Optionally encrypt the file which the crawler configuration is exported to
> --------------------------------------------------------------------------
>
>                 Key: CONNECTORS-486
>                 URL: https://issues.apache.org/jira/browse/CONNECTORS-486
>             Project: ManifoldCF
>          Issue Type: Improvement
>          Components: Framework agents process
>            Reporter: Erlend Garåsen
>            Assignee: Erlend Garåsen
>            Priority: Minor
>             Fix For: ManifoldCF 0.7
>
>
> The "org.apache.manifoldcf.crawler.ExportConfiguration" command class is 
> exporting passwords, for instance to the configured Solr server (Solr Output 
> Connector). This may be a security problem if the export file is 
> version-controlled or placed on a public server.
> We should add an extra "no password" argument to the command class in order 
> to skip such passwords.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to