Password in hibernate.cfg.xml file

LaurentC · **Joined:** Fri Sep 30, 2005 5:40 am **Posts:** 3

Hi all,

I would like to know if it's possible to hide (crypt) the password in the hibernate.cfg.xml file?

Thanks.

Laurent

christian · **Posted:** Fri Sep 30, 2005 7:58 am

What would be the benefit of that?

LaurentC · **Joined:** Fri Sep 30, 2005 5:40 am **Posts:** 3

The database's password only appears in that file. I am developping an application for a customer who doesn't want the password to be shown to other developpers.

pksiv · **Posted:** Fri Sep 30, 2005 8:49 am

LaurentC wrote:

The database's password only appears in that file. I am developping an application for a customer who doesn't want the password to be shown to other developpers.

Config hibernate with a DataSource and then you won't have the userid or password in that file.

christian · **Posted:** Fri Sep 30, 2005 8:51 am

But it will be in a different file then, to configure the datasource. Folks, if you can connect to a database you have to have the connection credentials. Any obscurity technique you are trying to deploy here doesn't work.

pksiv · **Posted:** Fri Sep 30, 2005 8:55 am

christian wrote:

But it will be in a different file then, to configure the datasource. Folks, if you can connect to a database you have to have the connection credentials. Any obscurity technique you are trying to deploy here doesn't work.

Yes but if you're using a datasource, the hibernate file doesn't need to be changed by the developers as the application is moved from development to QA to Production etc... Production database passwords are usually kept away from developers and by using a standard datasource name, the developer doesn't need to know this information outside of the development environment.