Is the dbconfig.xml file used to configure JIRA Service Desk and/or Confluence secured (i.e. User ID password encrypted).

Question

Georges Moubarak · Answer

Hi @Michael Brady,

You are correct, the username and password are stored in plain text and not encrypted.

The Atlassian logic is that if you already have access to that file you are probably an admin and you already have access to the DB.

unknown · Answer

Is the password encrypted in the dbconfig.xml file or is it clear text? Anyone with access to the client file has database administration authorization on the database.

Boris Georgiev [Appfire] · Answer

dbconfig.xml contains the information required to connect JIRA to a database - JDBC URL, connection settings, etc..

I'm not really sure what your question is. Would you provide some more details ?