3

I am currently standing up a Liferay portal instance. Liferay uses Jackrabbit as its document repository management system. To configure Jackrabbit, I had to put in my database access URL, user name, and password into the repository.xml file. However, one certification check I have to pass is that there cannot be passwords stored in plain text files. So my question is how do I encrypt the password field in my Jackrabbit repository.xml file. Thanks.

Shayan
  • 568
  • 1
  • 5
  • 7
  • If you use a database to store the repository data, then the repository.xml file contains database passwords. If the database supports connecting with the password hash instead of connecting with the plain text password, would that solve the problem? – Thomas Mueller Aug 18 '10 at 18:00

2 Answers2

2

Maybe using JNDI solves the problem: http://wiki.apache.org/jackrabbit/UsingJNDIDataSource

Thomas Mueller
  • 48,905
  • 14
  • 116
  • 132
1

Per Liferay support the version of Jackrabbit in 5.2.x EE (that we use with Oracle backend) has a bug with using JNDI calls.

Vanita
  • 11
  • 1