Dbserver.xml when ist the Password used?

[Enrico Stöbe]

Hi, i know its a terrible topic name. My question is, when is the XML File (which contains the db-pw) used? (Jira and Confluence) Only at the start or also while the software is running? I ask, because my passwords are stored in password-store and i want to hide the passwords in the xml after the software is started. I've seen an encryption feature, but haven't looked into it further at the moment

[Pramodh M · Accepted solution]

Hi @Enrico Stöbe 

Welcome to the community 🙂

The password in the dbconfig.xml is used every time the software starts.

Say you have stopped the application and when you start Jira, it has to connect to db and this is when the password is used from dbconfig.xml file.

Since your db server is specific to jira, I would suggest not to have an encryption for db password, rather have the limited the access to server.

If you still need to go with this approach make sure even when you encrypt the password, it will be stored as environment variable (your enryption tool can resolve the password) in the same Linux server where your application is running so that it can resolve the password and connect to Jira.

Or have an approach to resolve the password whenever your Jira application starts.

Here's a reference on how manages to have an enryption of password for db

https://confluence.atlassian.com/jiracore/encrypting-database-password-975040997.html

Thanks,

Pramodh

---

[Enrico Stöbe]

Thanks for this explanation. This is enough for me to handle the readable passwords.

[Daniel]

Ola @Enrico Stöbe 

Correct me, so you need to encrypt your password-store in jira server, correct ? Have you follow this article https://confluence.atlassian.com/jiracore/encrypting-database-password-975040997.html 

[Enrico Stöbe]

Ah, no not really. I only saw the option to encrypt passwords, But i will read your link. ;)

So ive created my own little .sh-"library" to orchestrate the software I use.  (ansible is not an opinion, i dont like it), setup vhosts etc. automatically and get passwords from .password-store via pass 

Now when I use pass to store my passwords and write them to an XML file, the password manager is useless. :D

And for that, maybe i'm a bit paranoid, i want to change the password in the xml after startup. I have already used this procedure for other projects such as jitsi or mailcow. This is not my favorite approach but my passwords are safe.

Okay this approach breaks some of my automated backups because it requires the gpg key, but this is a problem for an older version of me. ;)