[jboss-user] [Datasource Configuration] - Passwords are getting logged in log file through datasource configuration when jboss logging is in debug level

[Rahul Singh]

Rahul Singh [https://community.jboss.org/people/rahul.pani] created the discussion

"Passwords are getting logged in log file through datasource configuration when jboss logging is in debug level"

To view the discussion, visit: https://community.jboss.org/message/727912#727912

--------------------------------------------------------------
The passwords are getting logged in debug level For example we can see the below entries in logs
 2012-03-08 12:21:28,108 DEBUG [org.jboss.resource.connectionmanager.ManagedConnectionFactoryDeployment] [ main] setting property: XADataSourceProperties to value URL=jdbc:sqlserver://xxxxx:1433;databaseName=TestDatabase;responseBuffering=full;SelectMethod=cursor; 
 User=sa 
 Password=root
After using datasource fragment in *.ds.xml
         <xa-datasource-property name="User">${username}</xa-datasource-property>
 <xa-datasource-property name="Password">${password}</xa-datasource-property>
 
 Also tried using 
 
 <user-name>${username}</user-name>
 <password>${password}</password>
Password is coming in plain text through debug logging.
--------------------------------------------------------------

Reply to this message by going to Community
[https://community.jboss.org/message/727912#727912]

Start a new discussion in Datasource Configuration at Community
[https://community.jboss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2077]

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/jboss-user/attachments/20120403/447c5d50/attachment.html