[GERONIMO-5401] Geronimo encrypts empty passwords

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1.5
• Fix Version/s: 2.1.7, 2.2.1, 3.0.0
• Component/s: databases
• Security Level: public (Regular issues)

Environment

Geronimo tomcat assembly.

• Assignee: Ashish Jain
• Reporter: Ashish Jain
• Created: 24/Jun/10 09:22
• Updated: 02/Nov/10 03:10
• Resolved: 14/Oct/10 02:38

Description

This can be observed as follows
1) Create a test db pool with empty passwords. I had used derby embedded xa.
2) Deploy it.
3) Check the config.ser. You can see a password string encrypted with

{Simple}

or

{Configured}

.

The same behavior can be seen for SystemDatasource.

This behavior is misleading.