can you encrypt the password in the confluence.cfg.xml file?

[Daniel Wester]

You can configure the db connection in tomcat's jndi binding.

[Adrien Ragot 2]

That would put the password in clear text in the server.xml file.

[Paul Pasler _Seibert_]

Could you be a bit more specific what the problem is? Maybe there is an other / easier way to achieve what you want

[Dan Campbell]

Clear text storing of password in application is prohibitted. Current condition would enable unaudited access to the high privilge Oracle account.

[Adrien Ragot 2]

The application needs access to the database, so the password has to be located somewhere on the disk. Since you have access to the security policy of your company, is there a place where they recommend storing the password? Besides, some DBMS (PostgreSQL for instance) allows OS-user-authenticated connections. It means if an application runs as the user "confluence", then it has access to the "confluence" database on the same machine. Is that the kind of feature that would make you satisfied?