How to hide datasource passwords in in Tomcat JMX Beans

Question

Hi, Tomcat exposes a good wealth of information about its internals via JMX. You can see data source, connector usage, thread pools, you name it.

However, it also exposes the password of the JDBC datasource (Catalina->DataSource->javax.sql.DataSource->...). Is there any way to hide this information from being published ?

We've found a way to manage the exposed JMX information via modifying the mbeans-descriptors.xml files contained within the jar files of the Tomcat distribution, however, we're looking for a way to do this without modifying the distribution.

So, how can we hide the password field of a JDBC connection in Tomcat exposed JMX beans ?

Regards, Bulent Erdemir

Answer 1

we use encrypted passwords. the password is "there" but unusable for casual users.

Answer 2

Hello,

Can you let me know how do you encrypt the passwords.

Thanks in advance

Answer 3

Just restrict access at JMX level to ones who are authorized.