Does Knox allow LDAP Password to be stored outside the the topology xml file?

[#1]

Is there a way the LDAP password can be stored somewhere other than "main.ldapRealm.contextFactory.systemPassword" in the topology XML config file? Customer would like to store this password elsewhere for added security.

Thanks!

[#2 · Accepted solution]

You may use an alias that points to a credential store, which contains the actual systemPassword. Refer to the Knox User Guide, section Special note on parameter main.ldapRealm.contextFactory.systemPassword

[#3]

To add to @Alex Miller's answer here is the doc section for creating the password alias. http://knox.apache.org/books/knox-0-6-0/user-guide.html#Alias+creation

[#4]

@Wes Floyd has this been resolved? Can you accept the best answer or provide your own solution?