WebSphere encodes the password using XOR in an xml file which is not the
same an encrypting.
I would suggest the appserver route. In at least the version of weblogic
that I am using, the password is saved to the file system, but it is
encrypted in the config file. If that isn't possible, just encrypt the
password yourself and put some decryption code in an extension of the
datasource.
On
You could use JNDI, or can extends the simple datasource and add your own
hashing. I'm not sure why you are that concerned about the password being in
there. If someone gets access to your WEB-INF folder and you don't want them
in there... you have bigger issues my friend. :)
Brandon
On Tue, Apr
Not sure about doing it programatically, but it's going to end up being
cleartext (or close to it) somewhere...
For example when you use a connection pool in an app server, the
user/password ends up being plain text in your domains configuration
file... I believe most people focus on securing
Hi
I'm new to Ibatis and was wondering if anyone's faced this issue before.
Couldn't find a solution on the website FAQs.
I have the following in my sqlmapconfig file.
I dont want the user name and password to be exposed as clear text in a
config f