nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

jmsconfignew.xml and database login information

SethHickel

Can anyone share how they have provided TeamSite with secure access to the password normally provided in the DatabaseConfiguration section of this configuration file?

I need to be able to have my data security group place a password in an area/file not accessible to any developer/user and have TeamSite read that file to gain the password.

Not sure:
How this could occur
When this would occur

Thanks.

Find more posts tagged with

Comments

nipper

I *think* you need to be at 7.1 to do that.

[php]

[/php]

Adam Stoller

For pre-7.1 - The password could be stored [plain-text] in ODHOME/etc/database.xml and you might be able to restrict read-access to that file to the OD / DD process owner.

I have not tried this - it is only a suggestion for an approach to try, but you'll need to test it out thoroughly before determining if it works.

SethHickel

The password could be stored [plain-text] in ODHOME/etc/database.xml ...

So let me talk this out ...

Interesting. That file is intended for DataDeploy and included by default in the DataDeploy configruation template which is an xml file.

[php] [/php]

Ghoti: So is your suggestion to include this (or some other databaseStuff.xml) file in my jmsconfignew.xml file? I could include a file restricted for access only to my sys admins and TeamSite and therefore make data security happy. In that file I could put the entire DatabaseConfiguration section of jmsconfignew.xml. Do you think that might work?

I *think* you need to be at 7.1 to do that.

Nipper: In your example from 7.1 where does the value for password come from? is it passed or included?

[php][/php]

Thanks guys.

Adam Stoller

So let me talk this out ...

Interesting. That file is intended for DataDeploy and included by default in the DataDeploy configruation template which is an xml file.

[php] [/php]

Ghotti: So is your suggestion to include this (or some other databaseStuff.xml) file in my jmsconfignew.xml file? I could include a file restricted for access only to my sys admins and TeamSite and therefore make data security happy. In that file I could put the entire DatabaseConfiguration section of jmsconfignew.xml. Do you think that might work?

It would be nicer if you didn't mis-spell my "name" Settttth ;-)
Unfortunately, I misread the original post / didn't look at the subject line - so my initial response was probably "wrong" - however you still might be able to restrict access to the jmsconfignew.xml file to the process owner such that even though the password is in there, most folks would not be able to access it.

I had filed a number of FRs about this kind of issue, which is how [in part] I believe it finally got included in much of the 7.1 release.

SethHickel

I suppose I'm just a "tttttt" fan. :-) Sorry.

I'll experiment and see what solution I can come up with.

Thanks for the help Ghottttttti and Nipper. ;-)

nipper

Nipper: In your example from 7.1 where does the value for password come from? is it passed or included?

[php] [/php]

That is from one of the working config files on 7.1, it is not jmsconfignew.xml anymore.

I am not certain how the password gets passed into that field (or changed), it is entered in the install screen. I assume there is a CLT to allow you to change it.