Return-Path: Delivered-To: apmail-jakarta-tomcat-user-archive@www.apache.org Received: (qmail 35973 invoked from network); 2 Apr 2004 19:48:10 -0000 Received: from daedalus.apache.org (HELO mail.apache.org) (208.185.179.12) by minotaur-2.apache.org with SMTP; 2 Apr 2004 19:48:10 -0000 Received: (qmail 15778 invoked by uid 500); 2 Apr 2004 19:47:39 -0000 Delivered-To: apmail-jakarta-tomcat-user-archive@jakarta.apache.org Received: (qmail 15749 invoked by uid 500); 2 Apr 2004 19:47:38 -0000 Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm Precedence: bulk List-Unsubscribe: List-Subscribe: List-Help: List-Post: List-Id: "Tomcat Users List" Reply-To: "Tomcat Users List" Delivered-To: mailing list tomcat-user@jakarta.apache.org Received: (qmail 15733 invoked from network); 2 Apr 2004 19:47:38 -0000 Received: from unknown (HELO dexter.tse.gov.br) (200.252.157.99) by daedalus.apache.org with SMTP; 2 Apr 2004 19:47:38 -0000 Received: from dexter.tse.gov.br (dexter [127.0.0.1]) by localhost.tse.gov.br (Postfix) with ESMTP id 054BA12C3F8 for ; Fri, 2 Apr 2004 16:47:42 -0300 (BRT) Received: from brava.tre-sc.gov.br (unknown [10.9.1.12]) by dexter.tse.gov.br (Postfix) with ESMTP id CAC3912C372 for ; Fri, 2 Apr 2004 16:47:41 -0300 (BRT) Received: from localhost (localhost [127.0.0.1]) by brava.tre-sc.gov.br (Postfix) with ESMTP id 5CDF12717 for ; Fri, 2 Apr 2004 16:46:28 -0300 (BRT) Received: from brava.tre-sc.gov.br ([127.0.0.1]) by localhost (brava [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 16337-09 for ; Fri, 2 Apr 2004 16:46:27 -0300 (BRT) Received: from tre-sc.gov.br (elbassan.tre-sc.gov.br [10.9.7.58]) by brava.tre-sc.gov.br (Postfix) with ESMTP id 0498326FA for ; Fri, 2 Apr 2004 16:46:27 -0300 (BRT) Message-ID: <406DC3E2.2080406@tre-sc.gov.br> Date: Fri, 02 Apr 2004 16:49:54 -0300 From: Emerson Cargnin Organization: TRE-SC User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040113 X-Accept-Language: pt-br, en-us, en MIME-Version: 1.0 To: Tomcat Users List Subject: Re: any standart way to keep passwords encripted??? References: <406D9661.7050709@tre-sc.gov.br> In-Reply-To: <406D9661.7050709@tre-sc.gov.br> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: by amavisd-new at tre-sc.gov.br X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N How can I mantain databases passwords without : - Being put in the code (arghhhh) - Being in plain text in server.xml (as configured for tomcat) I use another approache than the pool from tomcat, that consist in a separate servlet and a PoolManager, which is accessed in a static way. (so other apps can reference the same instance...). In the servlet I read the init properties from web-xml that follows a pattern (poolname1,dbuser1,dbpass1, and so on for all pools). In the application I just as for the pool by the name of it. It works and I can change the pool implementation without impacting in any code of the application. We are thinking in not let the password in plain text in the web.xml. I though of 2 approaches: - Read the web.xml by a standalone app and encript the password, in my connection servlet I read it and decritp it. - Have a separate file for each pool, this file,encripted, would contain info about each pool. BTW, is there any way to use the same pool for more than one app, using tomcat pool configuration ??? thanks in advance Emerson Emerson Cargnin wrote: > Is there any standart way to keep the passwords of databases encripted > when creating a pool through tomcat? > -- Emerson Cargnin Analista de Sistemas Setor de Desenvolvimento de Sistemas - TRE-SC tel : (048) - 251-3700 - Ramal 3181 --------------------------------------------------------------------- To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org For additional commands, e-mail: tomcat-user-help@jakarta.apache.org