Could you be a bit more specific what the problem is? Maybe there is an other / easier way to achieve what you want
Clear text storing of password in application is prohibitted. Current condition would enable unaudited access to the high privilge Oracle account.
You can configure the db connection in tomcat's jndi binding.
That would put the password in clear text in the server.xml file.
The application needs access to the database, so the password has to be located somewhere on the disk. Since you have access to the security policy of your company, is there a place where they recommend storing the password? Besides, some DBMS (PostgreSQL for instance) allows OS-user-authenticated connections. It means if an application runs as the user "confluence", then it has access to the "confluence" database on the same machine. Is that the kind of feature that would make you satisfied?
It looks like you're new here. Sign in or register to get started.