how to encrypt the database connection info in *-ds.xml file

[hammer]

Hi all,

I dont want let others find the database connection information(such as username,password etc...) of the *-ds.xml file in the jboss folder,so I want to encrypt such informations. Or is there another way to avoid this.

any advice is appreciated!

[jaikiran]

Have a look at:

http://wiki.jboss.org/wiki/Wiki.jsp?page=EncryptingDataSourcePasswords

[drosenstark]

I followed the instructions there and it is not working. I assume that i am missing some definition somehwere like in my jboss-web.xml. When my servlet starts up and tries to access the datasource, i am receiving:
Invalid authentication attempt, principal=null

The entry in the login-config.xml file is as below and i see the entry in the jndi view. I also added in the entry to my jboss-web.xml:
<security-domain>java:/jaas/EncryptTitanAppPassword</security-domain>

Any ideas would be appreciated.



<application-policy name="EncryptTitanAppPassword">

<login-module code="org.jboss.resource.security.SecureIdentityLoginModule"
flag = "required">
<module-option name="username">db_app</module-option>
<module-option name="password">-608c5c4947ba8657d2897448e1d8761d</module-option>
<module-option name="managedConnectionFactoryName">jboss.jca:service=LocalTxCM,name=db_tomcatdv</module-option>
</login-module>

</application-policy>