Hello Anjaan! I think this is actually a general Java question, rather than having to do with magnolia or jackrabbit.
In J2EE applications it is necessary to configure JDBC connections, these include a password. In every installation I have ever seen, these passwords have been provided in plain text, either in some configuration file within the application, in some configuration file in the J2EE environment, or entered in the J2EE server's console. There's really only one common solution to your problem: make sure you sufficiently secure the environment (both physically and digitally), so that access to the password is difficult. This means: keep your server in a locked room, keep installed software to a minimum, configure it securely and keep it updated. Regards from Vienna, Richard Unger -----Ursprüngliche Nachricht----- Von: [email protected] [mailto:[email protected]] Im Auftrag von Anjaan84 Gesendet: Dienstag, 16. November 2010 21:15 An: [email protected] Betreff: [magnolia-user] Database Encryption method Hello, This might not be a question to post here, but I'm looking for suggestions from Magnolia Users who might have done something similar. I am running Magnolia as it is in the tomcat bundle but instead of Derby, I am using MySQL as my database. I have made all the necessary config changes and it all works great. The only issue is, right now I have hard coded my username and password to MySQL DB in plain text in jackrabbit-bundle-mysql-search.xml file. What are some of the ways to avoid storing my credentials in such a way? What encryption methods I can use to secure my password? Is this the change I need to make within the jackrabbit-bundle-mysql-search.xml file or this would be something I need to apply to my Apache Tomcat server? Thank you and appreciate your efforts in helping out. -- View this message in context: http://old.nabble.com/Database-Encryption-method-tp30232536p30232536.html Sent from the Magnolia - User mailing list archive at Nabble.com. ---------------------------------------------------------------- For list details see http://www.magnolia-cms.com/home/community/mailing-lists.html To unsubscribe, E-mail to: <[email protected]> ---------------------------------------------------------------- ---------------------------------------------------------------- For list details see http://www.magnolia-cms.com/home/community/mailing-lists.html To unsubscribe, E-mail to: <[email protected]> ----------------------------------------------------------------
