Re: Sql Map file

2009-04-22 Thread Stephen Boyd
WebSphere encodes the password using XOR in an xml file which is not the same an encrypting.

Re: Sql Map file

2009-04-21 Thread Chris O'Connell
I would suggest the appserver route. In at least the version of weblogic that I am using, the password is saved to the file system, but it is encrypted in the config file. If that isn't possible, just encrypt the password yourself and put some decryption code in an extension of the datasource. On

Re: Sql Map file

2009-04-21 Thread Brandon Goodin
You could use JNDI, or can extends the simple datasource and add your own hashing. I'm not sure why you are that concerned about the password being in there. If someone gets access to your WEB-INF folder and you don't want them in there... you have bigger issues my friend. :) Brandon On Tue, Apr

Re: Sql Map file

2009-04-21 Thread Alex Sherwin
Not sure about doing it programatically, but it's going to end up being cleartext (or close to it) somewhere... For example when you use a connection pool in an app server, the user/password ends up being plain text in your domains configuration file... I believe most people focus on securing

Sql Map file

2009-04-21 Thread Jhaver, Rishi
Hi I'm new to Ibatis and was wondering if anyone's faced this issue before. Couldn't find a solution on the website FAQs. I have the following in my sqlmapconfig file. I dont want the user name and password to be exposed as clear text in a config f