DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUGĀ·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=44085>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED ANDĀ·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=44085

           Summary: Encryption of password in server.xml JNDI datasource
           Product: Tomcat 4
           Version: 4.1.27
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: minor
          Priority: P2
         Component: Unknown
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]


Hello,

I have set up a JNDI datasource in accordance with the instructions given in 
the JNDI Datasource HOWTO, and it works. However, the passwords in all the 
sample "ResourceParams" blocks are in plaintext (i.e. unencrypted) which could 
create a security issue. I can't seem to find anything in the Tomcat 4 docs 
that explains how to encrypt the password field.

Are there any plans to add encryption to the server.xml file to protect 
password information? Or is there an undocumented way of doing this?

Thank you,
Vikram Ravindran
Infor, Inc.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to