PH35564: ADD SUPPORT FOR ENCODING THE PASSWORDS INSIDE OF THE CUSTOMER DATASOURCE PROPERTY "CONNECTIONPROPERTIES"

APAR status

• Closed as program error.

Error description

• add support for encoding the passwords inside of the customer
  datasource property "connectionProperties", as well as making
  sure the admin console hides the passwords as a string of
  asterisks (******).
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server                                      *
  *                  using Oracle database and including         *
  *                  Oracle's                                    *
  *                  datasource property                         *
  *                  "connectionProperties".                     *
  ****************************************************************
  * PROBLEM DESCRIPTION: The user would like to have passwords   *
  *                      in                                      *
  *                      their Oracle datasource                 *
  *                      "connectionProperties" property be      *
  *                      encoded.                                *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Oracle datasources support a customer property named
  "connectionProperties". This vendor specific datasource property
  is actually a list of many different properties to be applied to
  the datasource and as such can include things such as keystore
  and truststore passwords. These passwords should be hidden from
  view in the admin console and encoded in the profile
  configuration.
  

Problem conclusion

• The code has been updated to hide passwords that are a part of
  Oracle's datasource property "connectionProperties" as asterisks
  in the admin console and encoded in the profile configuration.
  
  The fix for this APAR is targeted for inclusion in fix packs
  8.5.5.21 and 9.0.5.11. For more information, see 'Recommended
  Updates for WebSphere Application Server':
  https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels