I prefer (if you start httpd as root)... create httpd-private.conf as root, add the more confidental directives, and in httpd.conf, simply Include httpd-private.conf Finally $ chmod 600 httpd-private.conf and all is well. Mark Harrison wrote: > I've got an oracle connect string that I need to pass to a > mod_python module. Currently I'm storing in httpd.conf, but > I'm not crazy about that coz I'm storing the password in the > connect string (format: name/passwd@dbname). > > Is there a general way to hide the password, or another place > to put it besides httpd.conf? This is a non-financial app > behind a firewall, so absolute security is not needed, but I > would prefer something better than the plaintext passwd in > httpd.conf. > > A pointer to an oracle-specific solution would be fine as well. > > Many TIA! > Mark > --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|