Encryption of passwords in teamserver.properties
Accepted answer
4 other answers
Hi all
The teamserver.properties file contains a database user password. What technique/method is used to encrypt this password? The security team at my customer wants to know.
thanks
anthony
Can someone answer this: We don't necessarily need to know the encryption/encoding method because it would be unsafe to publish that information; however,
This would be extremely helpful because we have to change passwords every 90 days. It is easier to edit the teamserver.properties file rather than change passwords in the UI. After editing passwords (in the clear) in the teamserver.properties file, we would like to run a command line tool to encode the passwords.
Thanks.
If you install the Jazz build engine toolkit, then the jbe executable can be used to encode a password. The jbe uses the same encoding which is valid for the teamserver.properties file.
From RTC Help:
Then...
Works for me!
From RTC Help:
- 1. From a command line, navigate to installdir/buildsystem/buildengine/eclipse, where installdir is the Build System Toolkit installation directory.
2. Type j
3. When prompted, type the password. The password is encrypted and stored in a pass.txt file that is located in the Build System Toolkit installation directory.
Then...
- 1. Copy the contents of the pass.txt file and assign it to the password property in the teamserver.properties file.
2. Enclose the value in square brackets .
3. And finally add an escape (backward slash) before each trailing =. For example == becomes \=\=.
Works for me!
Comments
Approach 2 to change the userid/password after expiry:
1. Try opening publicURI/jts/setup & publicURI/ccm/setup and skip to the step number by overtyping the step number on URL and give the userid and password > Test connection > Next to save the setting.
2. Logon to publicURI/jts/admin & publicURI/ccm/admin > Server > Advanced properties > edit userid and password for dataWareHouse and save the settings.
Note: when we try the URL we might get 400, refresh a couple of times and we landed on the login page.
I am attempting to script the silent installation of Jazz with DB2 and I need a scriptable way to store the proper password string into the teamserver.properties files. The jbe utility isn't available and running the Setup UI to collect its generated teamserver.properties files isn't an option.
Because those DB2 passwords should match the Unix login passwords for the selected DB2 user accounts, these teamserver.properties SHOULD store strings constructed using the MD5 algorithm. The values could be generated using the openssl tool:
> openssl passwd -1 db2inst1
$1$EkV/dJFe$WtUzB9wboZm2R8WbQJ4Ho1
>
(Windows servers would need values generated according to however Windows encrypts its passwords.)
Comments
