Rahul Singh [
https://community.jboss.org/people/rahul.pani] created the discussion
"Passwords are getting logged in log file through datasource configuration when jboss
logging is in debug level"
To view the discussion, visit:
https://community.jboss.org/message/727912#727912
--------------------------------------------------------------
The passwords are getting logged in debug level For example we can see the below entries
in logs
2012-03-08 12:21:28,108 DEBUG
[org.jboss.resource.connectionmanager.ManagedConnectionFactoryDeployment] [ main] setting
property: XADataSourceProperties to value
URL=jdbc:sqlserver://xxxxx:1433;databaseName=TestDatabase;responseBuffering=full;SelectMethod=cursor;
User=sa
Password=root
After using datasource fragment in *.ds.xml
<xa-datasource-property
name="User">${username}</xa-datasource-property>
<xa-datasource-property
name="Password">${password}</xa-datasource-property>
Also tried using
<user-name>${username}</user-name>
<password>${password}</password>
Password is coming in plain text through debug logging.
--------------------------------------------------------------
Reply to this message by going to Community
[
https://community.jboss.org/message/727912#727912]
Start a new discussion in Datasource Configuration at Community
[
https://community.jboss.org/choose-container!input.jspa?contentType=1&...]