quality@glassfish.java.net

Re: Password in plain text.

From: Byron Nevins <Byron.Nevins_at_Sun.COM>
Date: Fri, 25 Sep 2009 15:47:56 -0700
That is by design.  You have debugging turned on and that is useful debugging information.
vinod wrote:

Folks,

I am running GlassFish v2.1 Patch02 in Solaris Sparc.
When I start the domain with --debug flag enabled, the passwords gets displayed in plaintext.
Is this known?

---Snippet--- ( passwords marked in red )-----------------------------------------------------

/space/SUNWappserver/bin/asadmin start-domain --debug
Starting Domain domain1, please wait.
Default Log location is /space/SUNWappserver/domains/domain1/logs/server.log.
Please enter the admin user name>admin
Please enter the admin password>
Please enter the master password>
ASLauncher Building command ..
LOGFILE = /space/SUNWappserver/domains/domain1/logs/server.log
Logfile set to /space/SUNWappserver/domains/domain1/logs/server.log
addJvmOptions: OUT Property -server
addJvmOptions: OUT Property -Djavax.management.builder.initial=com.sun.enterprise.ee.admin.AppServerMBeanServerBuilder
addJvmOptions: OUT Property -Dcom.sun.appserv.pluggable.features=com.sun.enterprise.ee.server.pluggable.EEPluggableFeatureImpl
addJvmOptions: OUT Property -Djava.endorsed.dirs=/space/SUNWappserver/lib/endorsed
addJvmOptions: OUT Property -Djava.security.manager
addJvmOptions: OUT Property -Djava.security.policy=/space/SUNWappserver/domains/domain1/config/server.policy
addJvmOptions: OUT Property -Djava.security.auth.login.config=/space/SUNWappserver/domains/domain1/config/login.conf
addJvmOptions: OUT Property -Dsun.rmi.dgc.server.gcInterval=3600000
addJvmOptions: OUT Property -Dsun.rmi.dgc.client.gcInterval=3600000
addJvmOptions: OUT Property -Xmx512m
addJvmOptions: OUT Property -Djava.ext.dirs=/usr/jdk/instances/jdk1.6.0/lib/ext:/usr/jdk/instances/jdk1.6.0/jre/lib/ext:/space/SUNWappserver/domains/domain1/lib/ext:/space/SUNWappserver/javadb/lib:/space/SUNWappserver/lib/jdbcdrivers
addJvmOptions: OUT Property -Djdbc.drivers=org.apache.derby.jdbc.ClientDriver
addJvmOptions: OUT Property -Dcom.sun.enterprise.config.config_environment_factory_class=com.sun.enterprise.config.serverbeans.AppserverConfigEnvironmentFactory
addJvmOptions: OUT Property -Dcom.sun.enterprise.taglibs=appserv-jstl.jar,jsf-impl.jar
addJvmOptions: OUT Property -Dcom.sun.enterprise.taglisteners=jsf-impl.jar
addJvmOptions: OUT Property -XX:NewRatio=2
addJvmOptions: OUT Property -Dcom.sun.appserv.nss.db=/space/SUNWappserver/domains/domain1/config
addJvmOptions: OUT Property -XX:PermSize=192m
addJvmOptions: OUT Property -XX:MaxPermSize=192m
addJvmOptions: OUT Property -XX:LargePageSizeInBytes=256m
addJvmOptions: OUT Property -Xms2048M
addJvmOptions: OUT Property -Xmx2048M
addJvmOptions: OUT Property -XX:+UseParallelGC
addJvmOptions: OUT Property -Xss256k
addJvmOptions: OUT Property -XX:+UseParallelOldGC
addJvmOptions: OUT Property -XX:ParallelGCThreads=16
addJvmOptions: OUT Property -XX:+AggressiveOpts
addJvmOptions: OUT Property -Xloggc:/space/SUNWappserver/domains/domain1/logs/gc.log
Final classpath=/space/SUNWappserver/lib/jhall.jar:/space/SUNWappserver/lib/appserv-launch.jar
Current java.library.path=/space/SUNWappserver/lib:/space/SUNWappserver/lib:/space/SUNWappserver/lib

Final java.library.path=/space/SUNWappserver/lib:/space/SUNWappserver/lib:/space/SUNWappserver/lib

ASLauncher Executing command ..
InputLine ->admin<-
InputLine ->netscape<-
InputLine ->netscape<-

Redirecting output to /space/SUNWappserver/domains/domain1/logs/server.log
Listening for transport dt_socket at address: 9009
Application server is listening at address 9009 for debugger to attach using transport dt_socket
Domain domain1 started.
Domain [domain1] is running [Sun GlassFish Enterprise Server v2.1 Patch02 (9.1_02 Patch08) (build b02-p02)] with its configuration and logs at: [/space/SUNWappserver/domains].
Admin Console is available at [https://localhost:4848].
Use the same port [4848] for "asadmin" commands.
User web applications are available at these URLs:
[http://localhost:8080 https://localhost:8181 ].
Following web-contexts are available:
[/web1  /__wstx-services /iwc ].
Standard JMX Clients (like JConsole) can connect to JMXServiceURL:
[service:jmx:rmi:///jndi/rmi://usg78.india.sun.com:8686/jmxrmi] for domain management purposes.
Domain listens on at least following ports for connections:
[8080 8181 4848 3700 3820 3920 8686 ].
Domain supports application server clusters and other standalone instances.
Domain is started in debug mode.
A debugger can be attached using:
[-Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=9009].

--------------------------------------------------------------------------------------------------

Appreciate your replies in advance.

Cheers,
Vinod