Dave,

On 10/26/15 7:22 AM, Dave Cronin wrote:
> In the JNDI DataSource HowTo page, it describes how to configure the
> DataSource in the application Context. I see that the password is not
> encrypted. Is there any way to configure this with an encrypted password?
> 
> A JDBC resource is configured like this in the documentation:
> 
> <Resource name="jdbc/TestDB" auth="Container" type="javax.sql.DataSource"
>                maxTotal="100" maxIdle="30" maxWaitMillis="10000"
>                username="javauser" password="javadude" 
> driverClassName="com.mysql.jdbc.Driver"
>                url="jdbc:mysql://localhost:3306/javatest"/>
> 
>>From 
>>https://tomcat.apache.org/tomcat-8.0-doc/jndi-datasource-examples-howto.html#MySQL_DBCP_Example
> 
> Other people facing the same problem have written their own 
> extension of a DataSourceFactory, adding their own encryption
> feature. See this pages below.
> 
> How to Secure Tomcat Database Passwords for Java
> "In production environments there are features of Tomcat that don't pass 
> security audit reviews"
> http://websphere.sys-con.com/node/393364
> 
> Encrypting database passwords (in Tomcat)
> http://www.jdev.it/encrypting-passwords-in-tomcat/

http://wiki.apache.org/tomcat/FAQ/Password

-chris

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to