Chapter 6: Security

Encrypting a password (encode_passwd)

Use the encode_passwd utility to encrypt a property value or a file. If operating on a file, the caller can optionally specify a character set for the file; if it is not specified, the JVM’s default character set is used. You must copy the generated encryption and place it into the configuration file.

Encrypting passwords

Navigate to the directory of the destination file, for example:

Tomcat:

SYBASE\tomcat\webapps\onepage\config

EAServer:

SYBASE\EAServer\Repository\WebApplication\onepage\config
Run the encode_passwd utility; for example, use the following to encrypt the current password:
```
encode_passwd.bat password
```
An encrypted value displays; for example, following is the encrypted password:
```
990990D99ED8DFFDDFFDDFFDDFFDDFFDDFFDDFFD
```
Copy the encrypted value from the command line.
In a text editor, open the destination file, such as global.properties.xml, and paste the encrypted value into the file, replacing the hard-coded value. For example, replace this hard-coded value:
```
password="su"
```
with this value:
```
password="990990D99ED8DFFDDFFDDFFDDFFDDFFDDFFDDFFD"
```
A user looking into the global.properties.xml file, sees the encrypted password rather than the actual value. The login process accepts the actual password and decrypts it.

View this book as PDF