Re: ConnectionPoolMBean should not expose plain-text DB password

2012-10-05 Thread Te Li
particular MBeans that you need? > >Thanks. > -Shanti > >On Thu, Oct 4, 2012 at 3:06 PM, Christopher Schultz < >ch...@christopherschultz.net> wrote: > >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> Te, >> >> On 10/4/12 1:56 P

ConnectionPoolMBean should not expose plain-text DB password

2012-10-04 Thread Te Li
Hello, DB password is secret information and should not be exposed via JMX. The tomcat ConnectionPool class implements ConnectionPoolMBean interface. This interface exposes connection pool configuration and statistics. However, because this interface extends PoolConfiguration which has "getDbPr