Return-Path: 
 <java-user-return-87274-apmail-axis-java-user-archive=axis.apache.org@axis.apache.org>
X-Original-To: apmail-axis-java-user-archive@www.apache.org
Delivered-To: apmail-axis-java-user-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id 2B3C99293
	for <apmail-axis-java-user-archive@www.apache.org>;
 Sun, 10 Mar 2013 11:33:28 +0000 (UTC)
Received: (qmail 37429 invoked by uid 500); 10 Mar 2013 11:33:26 -0000
Delivered-To: apmail-axis-java-user-archive@axis.apache.org
Received: (qmail 37264 invoked by uid 500); 10 Mar 2013 11:33:25 -0000
Mailing-List: contact java-user-help@axis.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:java-user-help@axis.apache.org>
List-Unsubscribe: <mailto:java-user-unsubscribe@axis.apache.org>
List-Post: <mailto:java-user@axis.apache.org>
List-Id: <java-user.axis.apache.org>
Reply-To: java-user@axis.apache.org
Delivered-To: mailing list java-user@axis.apache.org
Received: (qmail 37217 invoked by uid 99); 10 Mar 2013 11:33:24 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 10 Mar 2013 11:33:24 +0000
X-ASF-Spam-Status: No, hits=1.7 required=5.0
	tests=FREEMAIL_ENVFROM_END_DIGIT,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (nike.apache.org: domain of rajat.aggarwal03@gmail.com
 designates 209.85.216.54 as permitted sender)
Received: from [209.85.216.54] (HELO mail-qa0-f54.google.com) (209.85.216.54)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 10 Mar 2013 11:33:17 +0000
Received: by mail-qa0-f54.google.com with SMTP id hg5so525182qab.20
        for <java-user@axis.apache.org>; Sun, 10 Mar 2013 04:32:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=x-received:mime-version:from:date:message-id:subject:to
         :content-type;
        bh=Jndw7GICBrQl2C2yPiHkR+ISdjjdUH3bn3B6C0XRHyY=;
        b=p0ApAW7lQhh5uBQ5g36c6xH8PNb+oGWOgBo3HF+uhFy1JxtBK+kxbYyd8GFpnPLUgV
         unmQZWfgpL+72GXDxFFMsLBwg1lX91HGjAASQv4ZvpFBzMrkQt46wIH6O7Lnbz8WEDhN
         duOZq6PEYuFuqm3C/5yprFwdyYMB7IcEIF9+6nv5zKI+yHTF3OeVU5o0nCFTl3f8s3Ur
         Xf3J0+UryHX2+lZ7I9tWSCdXltdAXbIDBsU3nLYX2YEj8COS55euwo8IMRlAhpA6kTLA
         AixOGqLCzbn7Sim4pLPdLtG9z508PS6Tkg8Oc7nnTV3Xxipa8Z2ORvSVX2IPFeJPXjx/
         t3NQ==
X-Received: by 10.49.2.7 with SMTP id 7mr13527059qeq.45.1362915176418; Sun, 10
 Mar 2013 04:32:56 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.49.36.6 with HTTP; Sun, 10 Mar 2013 04:32:36 -0700 (PDT)
From: Rajat Aggarwal <rajat.aggarwal03@gmail.com>
Date: Sun, 10 Mar 2013 17:02:36 +0530
Message-ID: 
 <CALrk8XwJO_sTu-ZkGn6pxu+1jj44_crV_82Metuq5Npzyabwpw@mail.gmail.com>
Subject: Encrypting The Admin Passwords used by the Axis Admin Servlet
To: java-user@axis.apache.org
Content-Type: multipart/alternative; boundary=047d7b6785fcf3142e04d7906a20
X-Virus-Checked: Checked by ClamAV on apache.org

--047d7b6785fcf3142e04d7906a20
Content-Type: text/plain; charset=ISO-8859-1

Hi,



We have some web services in our project, where our wsdd files contain the
following lines:



<globalConfiguration>

  <parameter name="sendMultiRefs" value="true"/>

  <parameter name="disablePrettyXML" value="true"/>

  <parameter name="adminPassword" value="admin"/>

  <parameter name="dotNetSoapEncFix" value="true"/>

  <parameter name="enableNamespacePrefixOptimization" value="false"/>

  <parameter name="sendXMLDeclaration" value="true"/>

  <parameter name="sendXsiTypes" value="true"/>

  <parameter name="axis.disableServiceList" value="true"/>

  <parameter name="attachments.implementation"
value="org.apache.axis.attachments.AttachmentsImpl"/>

  <requestFlow>

   <handler type="java:org.apache.axis.handlers.JWSHandler">

    <parameter name="scope" value="session"/>

   </handler>

   <handler type="java:org.apache.axis.handlers.JWSHandler">

    <parameter name="scope" value="request"/>

    <parameter name="extension" value=".jwr"/>

   </handler>

  </requestFlow>

 </globalConfiguration>





I wanted to know the use of the above highlighted element (adminPassword),
and also, is there any way we can introduce our own encryption mechanism to
encrypt this password so that it is not visible in plain text to anyone?


Thanks and Regards,

Rajat Aggarwal

--047d7b6785fcf3142e04d7906a20
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_quote"><div dir=3D"ltr"><p>Hi,</p>

<p>=A0</p>

<p>We have some web services in our project, where our wsdd
files contain the following lines:</p>

<p>=A0</p>

<p>&lt;globalConfiguration&gt;</p>

<p>=A0 &lt;parameter name=3D&quot;sendMultiRefs&quot;
value=3D&quot;true&quot;/&gt;</p>

<p>=A0 &lt;parameter name=3D&quot;disablePrettyXML&quot;
value=3D&quot;true&quot;/&gt;</p>

<p>=A0 <span style=3D"background-color:yellow">&lt;parameter
name=3D&quot;adminPassword&quot; value=3D&quot;admin&quot;/&gt;</span></p>

<p>=A0 &lt;parameter name=3D&quot;dotNetSoapEncFix&quot;
value=3D&quot;true&quot;/&gt;</p>

<p>=A0 &lt;parameter
name=3D&quot;enableNamespacePrefixOptimization&quot; value=3D&quot;false&qu=
ot;/&gt;</p>

<p>=A0 &lt;parameter name=3D&quot;sendXMLDeclaration&quot;
value=3D&quot;true&quot;/&gt;</p>

<p>=A0 &lt;parameter name=3D&quot;sendXsiTypes&quot;
value=3D&quot;true&quot;/&gt;</p>

<p>=A0 &lt;parameter name=3D&quot;axis.disableServiceList&quot;
value=3D&quot;true&quot;/&gt;</p>

<p>=A0 &lt;parameter
name=3D&quot;attachments.implementation&quot;
value=3D&quot;org.apache.axis.attachments.AttachmentsImpl&quot;/&gt;</p>

<p>=A0 &lt;requestFlow&gt;</p>

<p>=A0=A0 &lt;handler
type=3D&quot;java:org.apache.axis.handlers.JWSHandler&quot;&gt;</p>

<p>=A0=A0=A0 &lt;parameter name=3D&quot;scope&quot;
value=3D&quot;session&quot;/&gt;</p>

<p>=A0=A0 &lt;/handler&gt;</p>

<p>=A0=A0 &lt;handler
type=3D&quot;java:org.apache.axis.handlers.JWSHandler&quot;&gt;</p>

<p>=A0=A0=A0 &lt;parameter name=3D&quot;scope&quot;
value=3D&quot;request&quot;/&gt;</p>

<p>=A0=A0=A0 &lt;parameter name=3D&quot;extension&quot;
value=3D&quot;.jwr&quot;/&gt;</p>

<p>=A0=A0 &lt;/handler&gt;</p>

<p>=A0 &lt;/requestFlow&gt;=A0 </p>

<p>=A0&lt;/globalConfiguration&gt;</p>

<p>=A0</p>

<p>=A0</p>

<p>I wanted to know the use of the above highlighted element
(adminPassword), and also, is there any way we can introduce our own encryp=
tion
mechanism to encrypt this password so that it is not visible in plain text =
to
anyone?</p><p><br></p><div>Thanks and Regards,<br><br>Rajat Aggarwal<br></d=
iv>
</div>
</div><br></div>

--047d7b6785fcf3142e04d7906a20--