] Encryption of configuration files
In all jboss 3 and later versions, you can supply the db login credentials
from a jaas login module. This can obtain the credentials from anywhere
you can think of.
I'm not a security expert, but I've always wondered how to make such a
scheme actually secure
]
To: [EMAIL PROTECTED]
Sent: Friday, November 22, 2002 6:10 AM
Subject: Re: [JBoss-user] Encryption of configuration files
In all jboss 3 and later versions, you can supply the db login credentials
from a jaas login module. This can obtain the credentials from anywhere
you can think of.
I'm
Hi,
I have an issue regarding the configuration files (specially jboss.jcml) used
with JBoss 2.4.6. The problem is configuration of the pools to the databases,
where the usernames and passwords are written in human readable text. Our
customers are not particularly happy about this.
Do any of
In all jboss 3 and later versions, you can supply the db login credentials
from a jaas login module. This can obtain the credentials from anywhere
you can think of.
I'm not a security expert, but I've always wondered how to make such a
scheme actually secure, since the ways I've thought up
getConnection(username, password).
- Original Message -
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, November 22, 2002 3:47 AM
Subject: [JBoss-user] Encryption of configuration files
Hi,
I have an issue regarding the configuration files (specially jboss.jcml)
used
with JBoss
).
- Original Message -
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, November 22, 2002 3:47 AM
Subject: [JBoss-user] Encryption of configuration files
Hi,
I have an issue regarding the configuration files (specially
jboss.jcml)
used
with JBoss 2.4.6
10:13 PM
Subject: Re: [JBoss-user] Encryption of configuration files
This won't work with cmp, and violates the principle of separating
security
into a separate parallel layer from business logic. The login module
approach works with cmp and preserves separation.
david jencks
On 2002.11.22
getConnection(username, password).
- Original Message -
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, November 22, 2002 3:47 AM
Subject: [JBoss-user] Encryption of configuration files
Hi,
I have an issue regarding the configuration files
