[Datasource Configuration] - Passwords are getting logged in log file through datasource configuration when jboss logging is in debug level
2:34 a.m.
Rahul Singh [https://community.jboss.org/people/rahul.pani] created the discussion
"Passwords are getting logged in log file through datasource configuration when jboss
logging is in debug level"
To view the discussion, visit: https://community.jboss.org/message/727912#727912
--------------------------------------------------------------
The passwords are getting logged in debug level For example we can see the below entries
in logs
2012-03-08 12:21:28,108 DEBUG
[org.jboss.resource.connectionmanager.ManagedConnectionFactoryDeployment] [ main] setting
property: XADataSourceProperties to value
URL=jdbc:sqlserver://xxxxx:1433;databaseName=TestDatabase;responseBuffering=full;SelectMethod=cursor;
User=sa
Password=root
After using datasource fragment in *.ds.xml
<xa-datasource-property
name="User">${username}</xa-datasource-property>
<xa-datasource-property
name="Password">${password}</xa-datasource-property>
Also tried using
<user-name>${username}</user-name>
<password>${password}</password>
Password is coming in plain text through debug logging.
--------------------------------------------------------------
Reply to this message by going to Community
[https://community.jboss.org/message/727912#727912]
Start a new discussion in Datasource Configuration at Community
[https://community.jboss.org/choose-container!input.jspa?contentType=1&...]
3:49 a.m.
New subject: [Datasource Configuration] - Re: Passwords are getting logged in log file through datasource configuration when jboss logging is in debug level
jaikiran pai [https://community.jboss.org/people/jaikiran] created the discussion
"Re: Passwords are getting logged in log file through datasource configuration when
jboss logging is in debug level"
To view the discussion, visit: https://community.jboss.org/message/727925#727925
--------------------------------------------------------------
Which version of JBoss AS?
--------------------------------------------------------------
Reply to this message by going to Community
[https://community.jboss.org/message/727925#727925]
Start a new discussion in Datasource Configuration at Community
[https://community.jboss.org/choose-container!input.jspa?contentType=1&...]
4:02 a.m.
New subject: [Datasource Configuration] - Re: Passwords are getting logged in log file through datasource configuration when jboss logging is in debug level
Rahul Singh [https://community.jboss.org/people/rahul.pani] created the discussion
"Re: Passwords are getting logged in log file through datasource configuration when
jboss logging is in debug level"
To view the discussion, visit: https://community.jboss.org/message/727928#727928
--------------------------------------------------------------
Version is JBoss 5.1.0.GA
--------------------------------------------------------------
Reply to this message by going to Community
[https://community.jboss.org/message/727928#727928]
Start a new discussion in Datasource Configuration at Community
[https://community.jboss.org/choose-container!input.jspa?contentType=1&...]
4:07 a.m.
New subject: [Datasource Configuration] - Re: Passwords are getting logged in log file through datasource configuration when jboss logging is in debug level
jaikiran pai [https://community.jboss.org/people/jaikiran] created the discussion
"Re: Passwords are getting logged in log file through datasource configuration when
jboss logging is in debug level"
To view the discussion, visit: https://community.jboss.org/message/727931#727931
--------------------------------------------------------------
One possible workaround would be to use encrypted datasource passwords
https://community.jboss.org/docs/DOC-9703
https://community.jboss.org/wiki/EncryptingDataSourcePasswords
--------------------------------------------------------------
Reply to this message by going to Community
[https://community.jboss.org/message/727931#727931]
Start a new discussion in Datasource Configuration at Community
[https://community.jboss.org/choose-container!input.jspa?contentType=1&...]
4:51 a.m.
New subject: [Datasource Configuration] - Re: Passwords are getting logged in log file through datasource configuration when jboss logging is in debug level
Rahul Singh [https://community.jboss.org/people/rahul.pani] created the discussion
"Re: Passwords are getting logged in log file through datasource configuration when
jboss logging is in debug level"
To view the discussion, visit: https://community.jboss.org/message/727945#727945
--------------------------------------------------------------
Yes the workaround might work to put encrypted password in the file. But i think
ultimately it will get decypted in the
org.jboss.resource.connectionmanager.ManagedConnectionFactoryDeployment class and gets
logged.
| 2012-04-03 15:11:50,341 DEBUG
[org.jboss.resource.connectionmanager.ManagedConnectionFactoryDeployment] [ | main]
setting property: XADataSourceProperties to value URL=jdbc:mysql://xxxxx.ca.com:3306/DB |
User=root
Password=root
--------------------------------------------------------------
Reply to this message by going to Community
[https://community.jboss.org/message/727945#727945]
Start a new discussion in Datasource Configuration at Community
[https://community.jboss.org/choose-container!input.jspa?contentType=1&...]
4:56 a.m.
New subject: [Datasource Configuration] - Re: Passwords are getting logged in log file through datasource configuration when jboss logging is in debug level
Rahul Singh [https://community.jboss.org/people/rahul.pani] created the discussion
"Re: Passwords are getting logged in log file through datasource configuration when
jboss logging is in debug level"
To view the discussion, visit: https://community.jboss.org/message/727946#727946
--------------------------------------------------------------
It will be helpful in adding the encypted password. But internally it will be getting
decrypted and is getting logged in debug. I saw snipped of the code
value = StringPropertyReplacer.replaceProperties(value);
log.debug("setting property: " + name + " to value " + value);
And this value only its using. So i guess this must be the decrypted value.
--------------------------------------------------------------
Reply to this message by going to Community
[https://community.jboss.org/message/727946#727946]
Start a new discussion in Datasource Configuration at Community
[https://community.jboss.org/choose-container!input.jspa?contentType=1&...]
5:06 a.m.
New subject: [Datasource Configuration] - Re: Passwords are getting logged in log file through datasource configuration when jboss logging is in debug level
jaikiran pai [https://community.jboss.org/people/jaikiran] created the discussion
"Re: Passwords are getting logged in log file through datasource configuration when
jboss logging is in debug level"
To view the discussion, visit: https://community.jboss.org/message/727948#727948
--------------------------------------------------------------
Rahul Singh wrote:
It will be helpful in adding the encypted password. But internally it will be getting
decrypted and is getting logged in debug.
No it won't get decrypted - it's a
one way hash. Did you try the approach mentioned in that article?
--------------------------------------------------------------
Reply to this message by going to Community
[https://community.jboss.org/message/727948#727948]
Start a new discussion in Datasource Configuration at Community
[https://community.jboss.org/choose-container!input.jspa?contentType=1&...]
5:19 a.m.
New subject: [Datasource Configuration] - Re: Passwords are getting logged in log file through datasource configuration when jboss logging is in debug level
Rahul Singh [https://community.jboss.org/people/rahul.pani] created the discussion
"Re: Passwords are getting logged in log file through datasource configuration when
jboss logging is in debug level"
To view the discussion, visit: https://community.jboss.org/message/727954#727954
--------------------------------------------------------------
I added
<depends>jboss.jca:name=PostgresDS,service=XATxCM</depends>
<security-domain>EncryptXADBPassword</security-domain>
instead of
<xa-datasource-property
name="User">$username}</xa-datasource-property>
<xa-datasource-property
name="Password">${password}</xa-datasource-property>
and added in login-config.xml
<application-policy name="EncryptXADBPassword">
<authentication>
<login-module
code="org.jboss.resource.security.SecureIdentityLoginModule"
flag="required">
<module-option
name="username">${username}</module-option>
<module-option
name="password">6f8e652f571678f2</module-option>
<module-option
name="managedConnectionFactoryName">jboss.jca:name=PostgresDS,service=XATxCM</module-option>
</login-module>
</authentication>
</application-policy>
But it did not start properly logged deployment failures. It might be related to my
settings but if you say so that it should i will try again. Thanks
--------------------------------------------------------------
Reply to this message by going to Community
[https://community.jboss.org/message/727954#727954]
Start a new discussion in Datasource Configuration at Community
[https://community.jboss.org/choose-container!input.jspa?contentType=1&...]
5:21 a.m.
New subject: [Datasource Configuration] - Re: Passwords are getting logged in log file through datasource configuration when jboss logging is in debug level
jaikiran pai [https://community.jboss.org/people/jaikiran] created the discussion
"Re: Passwords are getting logged in log file through datasource configuration when
jboss logging is in debug level"
To view the discussion, visit: https://community.jboss.org/message/727955#727955
--------------------------------------------------------------
Rahul Singh wrote:
But it did not start properly logged deployment failures.
You'll have to check
why the deployment fails.
--------------------------------------------------------------
Reply to this message by going to Community
[https://community.jboss.org/message/727955#727955]
Start a new discussion in Datasource Configuration at Community
[https://community.jboss.org/choose-container!input.jspa?contentType=1&...]
5:55 a.m.
New subject: [Datasource Configuration] - Re: Passwords are getting logged in log file through datasource configuration when jboss logging is in debug level
Rahul Singh [https://community.jboss.org/people/rahul.pani] created the discussion
"Re: Passwords are getting logged in log file through datasource configuration when
jboss logging is in debug level"
To view the discussion, visit: https://community.jboss.org/message/727965#727965
--------------------------------------------------------------
I am getting following exception
|
|
2012-04-03 16:18:22,289 ERROR
[org.jboss.resource.security.AbstractPasswordCredentialLoginModule] [main] The
ConnectionManager mbean: jboss.jca:name=RuntimeLibDS,service=XATxCM specified in a
ConfiguredIdentityLoginModule could not be found. ConnectionFactory will be unusable!
javax.management.InstanceNotFoundException: jboss.jca:name=RuntimeLibDS,service=XATxCM is
not registered.
at org.jboss.mx.server.registry.BasicMBeanRegistry.get(BasicMBeanRegistry.java:526)
at org.jboss.mx.server.MBeanServerImpl.getAttribute(MBeanServerImpl.java:559)
at
org.jboss.resource.security.AbstractPasswordCredentialLoginModule.getMcf(AbstractPasswordCredentialLoginModule.java:118)
--------------------------------------------------------------
Reply to this message by going to Community
[https://community.jboss.org/message/727965#727965]
Start a new discussion in Datasource Configuration at Community
[https://community.jboss.org/choose-container!input.jspa?contentType=1&...]
6:05 a.m.
New subject: [Datasource Configuration] - Re: Passwords are getting logged in log file through datasource configuration when jboss logging is in debug level
Rahul Singh [https://community.jboss.org/people/rahul.pani] created the discussion
"Re: Passwords are getting logged in log file through datasource configuration when
jboss logging is in debug level"
To view the discussion, visit: https://community.jboss.org/message/727973#727973
--------------------------------------------------------------
Thanks a lot the problem is resolved the exception came because of configuration problem
--------------------------------------------------------------
Reply to this message by going to Community
[https://community.jboss.org/message/727973#727973]
Start a new discussion in Datasource Configuration at Community
[https://community.jboss.org/choose-container!input.jspa?contentType=1&...]
4415
days inactive
4415
days old
10 comments
2 participants
participants (2)
-
jaikiran pai -
Rahul Singh