RE: security of server.xml in tomcat

2003-06-10 Thread Sri Thuraisamy
Also depends on from whom you want to hide the credentials. If it's from web client, then based on servlet specifications The files inside the WEB-INF folder cannot be accessible by the web client. If you want to protect from console access users then you can protect by defining access rights to

RE: security of server.xml in tomcat

2003-06-09 Thread Chad Johnson
Just a thought, I can't see how having the username and password in code is any more secure. Prying eyes could have equal access to both. Chad Johnson Web Services Developer WS Packaging - Wisconsin Label Tel:(920)487-6271 -Original Message- From: Mohamed Tagari [mailto:[EMAIL

Re: security of server.xml in tomcat

2003-06-09 Thread kev
On Monday, June 9, 2003, at 03:31 PM, Mohamed Tagari wrote: Hi, Is there any way of instantiating the password and username parameters for connecting to a database in the application code rather than having it as plain text in the server.xml. As having the username and password as plain text is