question Re: Does Knox allow LDAP Password to be stored outside the the topology xml file? in Archives of Support Questions (Read Only)

Does Knox allow LDAP Password to be stored outside the the topology xml file?

wfloyd — Tue, 27 Oct 2015 23:31:25 GMT

Is there a way the LDAP password can be stored somewhere other than "main.ldapRealm.contextFactory.systemPassword" in the topology XML config file? Customer would like to store this password elsewhere for added security.

Thanks!

Re: Does Knox allow LDAP Password to be stored outside the the topology xml file?

amiller — Tue, 27 Oct 2015 23:36:56 GMT

You may use an alias that points to a credential store, which contains the actual systemPassword. Refer to the Knox User Guide, section Special note on parameter main.ldapRealm.contextFactory.systemPassword

Re: Does Knox allow LDAP Password to be stored outside the the topology xml file?

kevin_minder — Wed, 28 Oct 2015 00:00:47 GMT

To add to @Alex Miller's answer here is the doc section for creating the password alias. http://knox.apache.org/books/knox-0-6-0/user-guide.html#Alias+creation

Re: Does Knox allow LDAP Password to be stored outside the the topology xml file?

aervits — Wed, 03 Feb 2016 01:23:31 GMT

@Wes Floyd has this been resolved? Can you accept the best answer or provide your own solution?