0 Replies Latest reply on Jan 12, 2007 10:07 AM by Geoffrey Bays

    DB password at rest in login-config.xml: how to avoid this?

    Geoffrey Bays Newbie

      Our use of JBoss 4.03 has the DB password in login-config.xml openly visible. The database pool connection we implement requires this password in login-config and its runtime copy in tmp/deploy. Is there a way to set up the DB pool connection without having the DB password in login-config? Obviously we can encrypt the DB password, but is there a way to avoid putting the DB password in the clear in login-config.xml the first place?