quality@glassfish.java.net

Re: Password in plain text.

From: Judy Tang <Judy.J.Tang_at_Sun.COM>
Date: Wed, 16 Sep 2009 23:48:30 -0700

Hi Vinod,

In the dibug mode, you see the following lines print out, right ? The
password you used is netscape, right ?
Let's wait to hear from others.

InputLine ->admin<-
InputLine ->netscape<-
InputLine ->netscape<-

Thanks,
Judy
vinod wrote:
>
> Folks,
>
> I am running GlassFish v2.1 Patch02 in Solaris Sparc.
> When I start the domain with --debug flag enabled, the passwords gets
> displayed in plaintext.
> Is this known?
>
> ---Snippet--- ( passwords marked in red
> )-----------------------------------------------------
>
> /space/SUNWappserver/bin/asadmin start-domain --debug
> Starting Domain domain1, please wait.
> Default Log location is
> /space/SUNWappserver/domains/domain1/logs/server.log.
> Please enter the admin user name>admin
> Please enter the admin password>
> Please enter the master password>
> ASLauncher Building command ..
> LOGFILE = /space/SUNWappserver/domains/domain1/logs/server.log
> Logfile set to /space/SUNWappserver/domains/domain1/logs/server.log
> addJvmOptions: OUT Property -server
> addJvmOptions: OUT Property
> -Djavax.management.builder.initial=com.sun.enterprise.ee.admin.AppServerMBeanServerBuilder
> addJvmOptions: OUT Property
> -Dcom.sun.appserv.pluggable.features=com.sun.enterprise.ee.server.pluggable.EEPluggableFeatureImpl
> addJvmOptions: OUT Property
> -Djava.endorsed.dirs=/space/SUNWappserver/lib/endorsed
> addJvmOptions: OUT Property -Djava.security.manager
> addJvmOptions: OUT Property
> -Djava.security.policy=/space/SUNWappserver/domains/domain1/config/server.policy
> addJvmOptions: OUT Property
> -Djava.security.auth.login.config=/space/SUNWappserver/domains/domain1/config/login.conf
> addJvmOptions: OUT Property -Dsun.rmi.dgc.server.gcInterval=3600000
> addJvmOptions: OUT Property -Dsun.rmi.dgc.client.gcInterval=3600000
> addJvmOptions: OUT Property -Xmx512m
> addJvmOptions: OUT Property
> -Djava.ext.dirs=/usr/jdk/instances/jdk1.6.0/lib/ext:/usr/jdk/instances/jdk1.6.0/jre/lib/ext:/space/SUNWappserver/domains/domain1/lib/ext:/space/SUNWappserver/javadb/lib:/space/SUNWappserver/lib/jdbcdrivers
> addJvmOptions: OUT Property
> -Djdbc.drivers=org.apache.derby.jdbc.ClientDriver
> addJvmOptions: OUT Property
> -Dcom.sun.enterprise.config.config_environment_factory_class=com.sun.enterprise.config.serverbeans.AppserverConfigEnvironmentFactory
> addJvmOptions: OUT Property
> -Dcom.sun.enterprise.taglibs=appserv-jstl.jar,jsf-impl.jar
> addJvmOptions: OUT Property -Dcom.sun.enterprise.taglisteners=jsf-impl.jar
> addJvmOptions: OUT Property -XX:NewRatio=2
> addJvmOptions: OUT Property
> -Dcom.sun.appserv.nss.db=/space/SUNWappserver/domains/domain1/config
> addJvmOptions: OUT Property -XX:PermSize=192m
> addJvmOptions: OUT Property -XX:MaxPermSize=192m
> addJvmOptions: OUT Property -XX:LargePageSizeInBytes=256m
> addJvmOptions: OUT Property -Xms2048M
> addJvmOptions: OUT Property -Xmx2048M
> addJvmOptions: OUT Property -XX:+UseParallelGC
> addJvmOptions: OUT Property -Xss256k
> addJvmOptions: OUT Property -XX:+UseParallelOldGC
> addJvmOptions: OUT Property -XX:ParallelGCThreads=16
> addJvmOptions: OUT Property -XX:+AggressiveOpts
> addJvmOptions: OUT Property
> -Xloggc:/space/SUNWappserver/domains/domain1/logs/gc.log
> Final
> classpath=/space/SUNWappserver/lib/jhall.jar:/space/SUNWappserver/lib/appserv-launch.jar
> Current
> java.library.path=/space/SUNWappserver/lib:/space/SUNWappserver/lib:/space/SUNWappserver/lib
>
> Final
> java.library.path=/space/SUNWappserver/lib:/space/SUNWappserver/lib:/space/SUNWappserver/lib
>
> ASLauncher Executing command ..
> InputLine ->admin<-
> InputLine ->netscape<-
> InputLine ->netscape<-
> Redirecting output to /space/SUNWappserver/domains/domain1/logs/server.log
> Listening for transport dt_socket at address: 9009
> Application server is listening at address 9009 for debugger to attach
> using transport dt_socket
> Domain domain1 started.
> Domain [domain1] is running [Sun GlassFish Enterprise Server v2.1
> Patch02 (9.1_02 Patch08) (build b02-p02)] with its configuration and
> logs at: [/space/SUNWappserver/domains].
> Admin Console is available at [https://localhost:4848].
> Use the same port [4848] for "asadmin" commands.
> User web applications are available at these URLs:
> [http://localhost:8080 https://localhost:8181 ].
> Following web-contexts are available:
> [/web1 /__wstx-services /iwc ].
> Standard JMX Clients (like JConsole) can connect to JMXServiceURL:
> [service:jmx:rmi:///jndi/rmi://usg78.india.sun.com:8686/jmxrmi] for
> domain management purposes.
> Domain listens on at least following ports for connections:
> [8080 8181 4848 3700 3820 3920 8686 ].
> Domain supports application server clusters and other standalone
> instances.
> Domain is started in debug mode.
> A debugger can be attached using:
> [-Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=9009].
>
> --------------------------------------------------------------------------------------------------
>
> Appreciate your replies in advance.
>
> Cheers,
> Vinod
>