Möller Ulf wrote: > Do the passwords in tomcat_users.xml have to be stored in plain text, or is > there any way of using hashed passwords?
You can use digested passwords. Of course, you have to tell Tomcat that the passwords are digested by setting the "digest"-attribute of the corresponding "Realm". BTW: you can use <Tomcat dir>/bin/digest.sh to create digested passwords. http://tomcat.apache.org/tomcat-5.5-doc/config/realm.html Regards mks --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]