Search code examples
weblogicweblogic11gwlst

wlst startServer show credential in plain text


I'm running my AdminServer off-line via startServer() command. The server seems to start just fine, but when i check the proccess shows the credentials in plain text. Like this calling jps -v:


24575 Server -Xms1024m -Xmx1024m -Dweblogic.management password=secretpass<<<<---not good

I'm running the command this way.:


startServer('AdminServer','Domain','t3://url:6101','user','secretpass','/u01/home/app/welogicuser/domains/Domain','true',60000,'false', jvmArgs='-Xms1024m -Xmx1024m -XX:PermSize=512m -XX:MaxPermSize=1024m -Dweblogic.security.SSL.trustedCAKeyStore='+os.environ["WL_HOME"]+'/server/lib/cacerts -Xverify:none -da -Dplatform.home='+os.environ["WL_HOME"]+' -Dweblogic.system.BootIdentityFile='+os.environ["WL_HOME"]+'/servers/AdminServer/security/boot.properties -Djava.security.policy='+os.environ["WL_HOME"]+'/server/lib/weblogic.policy')

and without the user and pass


startServer('AdminServer','Domain','t3://url:6101',domainDir='/u01/home/app/user/domains/Domain', block='true',timeout=60000, serverLog='false', jvmArgs='-Xms1024m -Xmx1024m -Dweblogic.system.BootIdentityFile='+os.environ["DOMAIN_HOME"]+'/servers/AdminServer/security/boot.properties')

The only way i can run the AdminServer without showing the credentials is running the script ./startWebLogic.sh, but in my currently situation it is not very practical. ¿Can anyone help me please? Thanks in advance.


Solution

  • You can set up a boot.properties file in your admin server security directory, and specify the user name and password in there as:

    username=<username>
    password=<password>
    

    This is described in more detail at https://getsomeoracle.wordpress.com/2013/12/13/how-to-configure-weblogic-username-password-in-boot-properties/