[jetty-dev] Password obfuscation in 8.1.2

[Mike Harrelson <mharrelson@xxxxxxxxxxxxxx>]

Hi all,

 

I’ve read the secure password obfuscation document from: http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html

 

And I’m trying to use the OBF version of my password in a jetty-env.xml data source configuration but it’s not converting back to the original password.  I’ve looked at what’s being passed into the data source’s setPassword and it’s the full OBF sting.  Everything works fine if I use the raw password.

 

Any insight would be appreciated.   

Thanks

Mike

 

Here’s my jetty-env.xml ( removing the specifics of my machine/domain):

 

<?xml version="1.0"?>

<!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "http://www.eclipse.org/jetty/configure.dtd">

 

<Configure class="org.eclipse.jetty.webapp.WebAppContext">

  <New id="limsDS" class="org.eclipse.jetty.plus.jndi.Resource">

    <Arg></Arg>

    <Arg>jdbc/limsDS</Arg>

    <Arg>

      <New class="com.mchange.v2.c3p0.ComboPooledDataSource">

        <Set name="driverClass">oracle.jdbc.OracleDriver</Set>

        <Set name="jdbcUrl">jdbc:oracle:thin:@xxx.xxx.com:1521:lims1</Set> 

        <Set name="User">limsweb_dev</Set>

        <Set name="Password">OBF:1lmb1k8k1kmy1lts20001t331sal1sap1t331zzy1lq61kjo1k5m1ljf</Set>     

        <Set name="initialPoolSize">1</Set>

        <Set name="minPoolSize">1</Set>

        <Set name="maxPoolSize">32</Set>

      </New>

      

    </Arg>

  </New>

</Configure>