[Opensource] Protect DB Password? (was Websphere...)

[Michael Rimov]

At 03:45 PM 1/13/2003 +0000, you wrote:
>Hi,
>
>I'm using Sybase EAServer which provides it's own connection pool accessible
>via JNDI.  Up to now I've been using Expresso's connection pool, but thought
>I'd try and use the new JNDI facility to access EAServer's.  Having gone
>through the code in ConfigManager, DBConnectionPool (and several other
>classes) and checking the expresso-config DTD, I've managed to get it
>working.  I did have to add a method to
>com.jcorporate.expresso.misc.ConfigJdbc though:
>
>         public void addJndi(ConfigJndi myJndi) {
>                 this.myJndi = myJndi;
>         }
>
>as without this ConfigManager couldn't load the expresso-config.xml once I'd
>done the required changes.  Here's a section from my expresso-config.xml:
>
>     <jdbc
>         driverType="datasource"
>         driver="com.sybase.jdbc2.jdbc.SybDriver"
>         url="java:comp/env/jdbc/ExcaliburJDBC"
>             connectFormat="1"
>         login="mylogin"
>         password="mypassword"
>         cache="y"
>         useNullOnCreate="y"
> 
>escapeHandler="com.jcorporate.expresso.core.db.DoubleQuoteEscapeHandler">
>           <jndi/>
>    </jdbc>
>
>So, apart from modifying ConfigJdbc, I've switched over to using JNDI simply
>by modifying expresso-config.xml!
>Even though this works I'm a bit suspicious that I've gone down the wrong
>road since I had to do the change to ConfigJdbc.java (unless of course this
>has been done but not made the latest release....)

Hi Malc,

It was definitely marked 'experimental'.. and I was having troubles 
synchronizing with the contributor... so its quite possible that something 
like that got missed :)

I'll make sure I add the appropriate code to ConfigJdbc.  Thanks for the 
report and glad its working!!
                                                 -Mike