But of course any of those configs is vulnerable to the password being
stolen. Its an interesting problem for production boxes and one I
hope to see a whitepaper from Foundstone on soon... ;-)
There are some products out there that allow credentials to be
"checked out" when needed (think like source control), but I have not
yet looked into them.
-dhs
Dean H. Saxe, CISSP, CEH
[EMAIL PROTECTED]
"What is objectionable, what is dangerous about extremists is not that
they are extreme, but that they are intolerant."
-- Robert F. Kennedy, 1964
On Apr 2, 2008, at 9:41 AM, [EMAIL PROTECTED] wrote:
Hello,
We have some java application using its own datasource to
connect to the database. This requires either hardcoding username
and password or put it in a config file. Is there a way for this
jav app to use datasources defined in Coldfusion so that java app
can share the same db connection pool?
Jay Jayaraman
Central Billing Services
Financial Management and Planning
(404) 498-8453 (W)
(404) 273-7131 (C)
-------------------------------------------------------------
Annual Sponsor - Figleaf Software
To unsubscribe from this list, manage your profile @
http://www.acfug.org?fa=login.edituserform
For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by FusionLink
-------------------------------------------------------------
