[JDEV] Plain text passwords being stored in xdb file

kavita kavita at worldgatein.net
Fri Apr 5 07:37:06 CST 2002


I am using jabber version 1.4.1  locally.
While testing (prior to deployment), I noticed that passwords for
various services for users were
being stored in plain text in the user.xml xdb files.
Is this a known bug, and has it been fixed in 1.4.2?

Plain text passwords should ideally not be easily available to the
jabber server administrator
even.

Thanks in advance.
With Regards,

--
Kavita Modi
Software Engineer
Worldgate Networks Pvt Ltd.
206,Trividh,
Ring Road,
SURAT -395002.
Email: kavita at worldgatein.net






More information about the JDev mailing list