How to hide data passwords in Tomcat JMX Beans

Question

Tomcat provides extensive information on its internal components through JMX. You can see the data source, the use of connectors, the thread pools that you name.

However, it also provides a JDBC data source password (Catalina-> DataSource-> javax.sql.DataSource → ...). Is there any way to hide this information from publication?

We found a way to manage the JMX information displayed by modifying the mbeans-descriptors.xml files contained in the Tomcat distribution jar files, however we are looking for a way to do this without changing the distribution,

So, how can we hide the password field of the JDBC connection in Tomcat affected by JMX beans?

Regards, Bulent Erdemir

Answer 1

Just restrict access at the JMX level to those who are allowed.

Answer 2

we use encrypted passwords. the password is "there", but not applicable for casual users.