topic alfresco-global.properties file encrypting in Alfresco Forum

alfresco-global.properties file encrypting

darius — Tue, 02 May 2017 13:52:25 GMT

Hello, I am using Alfresco Community 201605. In configuration file alfresco-global.properties are my LDAP username and password visible for other. In Alfresco documentation i have found how to encrypt properties in this filehttp://docs.alfresco.com/5.0/tasks/encryption-process-flow.htmlBut this is f

Re: alfresco-global.properties file encrypting

afaust — Wed, 03 May 2017 07:49:36 GMT

There is no support for encrypted properties in default Alfresco Community. I am not aware of any addons that might provide the same functionality but there is no reason why it should not be possible for someone to develop this if necessary / required.

Re: alfresco-global.properties file encrypting

cesarista — Wed, 03 May 2017 16:01:50 GMT

Hi:

And even in Alfresco Enterprise, there are some limitations on what properties, and what type of properties you can encrypt. Check this:

Encrypting configuration properties | Alfresco Documentation

In the list for example, they don't include any ldap property. Regarding the other users of the OS that may read the files that contain passwords (excluding the user who runs the alfresco process), the security considerations say that you should "chmod 600" on that files. The same should apply on files in contentstore for example.

Regards.

--C.

Re: alfresco-global.properties file encrypting

cesarista — Wed, 03 May 2017 16:05:52 GMT

I answer myself. In 5.2. EE it appears ldap.synchronization.java.naming.security.credentials, but not in previous versions.

Encrypting properties | Alfresco Documentation (5.2)

--C.