Our use of JBoss 4.03 has the DB password in login-config.xml openly visible. The database pool connection we implement requires this password in login-config and its runtime copy in tmp/deploy. Is there a way to set up the DB pool connection without having the DB password in login-config? Obviously we can encrypt the DB password, but is there a way to avoid putting the DB password in the clear in login-config.xml the first place?
