The Daily WTF: Curious Perversions in Information Technology
Welcome to TDWTF Forums Sign in | Join | Help
in Search

Configuring configurations

Last post 07-01-2009 11:05 AM by derula. 2 replies.
Page 1 of 1 (3 items)
Sort Posts: Previous Next
  • 06-30-2009 4:42 PM

    Configuring configurations

    I am working on the source tree of several other folks. While some key folks were away on vacation, it became necessary to change the db login password. No biggie; just find the environment file and change it. Right?

    Not quite. Each application under the main tree has its own config directory with Spring, Hibernate and properties files, all with their own copy of the login information. Of course, the same set of files appears in every branch as well. After a few trial and error you-gotta-be-kidding-me's, I finally would up grepping, checking out, editing, checking in many dozens of property, Hibernate, Spring and shell script files to get it done in time for an overdue delivery.

    Then I went about creating a central environment file, and by some slight-of-hand coding, calls to sqlplus, Hibernate and Spring would implicitly get rerouted to something that went to the central file to grab the password.

    Aside: it turns out that the only thing we use Hibernate for is to implicitly convert between objects and db-rows, and the only thing we use Spring for is to specify which classes to load. And, this is the kicker, all the code that uses it is auto-generated. In other words, they dragged in the overhead of both the Spring and Hibernate frameworks, and got absolutely none of the potential benefits (all the db un/marshalling could have been auto-generated from our dictionary as well, and specifying which class to load could have been a simple environment variable).

    If you must burn our flag, please wrap yourself in it first!
  • 07-01-2009 7:16 AM In reply to

    Re: Configuring configurations

     PHP is calling you.  I sense a strong future in the maintenance of various software poorly coded.

     Nah, but really... 

  • 07-01-2009 11:05 AM In reply to

    • derula
    • Top 25 Contributor
    • Joined on 06-15-2007
    • Germany
    • Posts 865

    Re: Configuring configurations

    snoofle:
    Then I went about creating a central environment file, and by some slight-of-hand coding, calls to sqlplus, Hibernate and Spring would implicitly get rerouted to something that went to the central file to grab the password.
    Are you crazy? Storing the password in multiple places is obviously a security measure! Like, if a hacker hacked into any of the configuration directories, he only knew the db password... for this application! He would then think "of course, they're smart enough to make the other applications use a different database with a different password. I'm giving up, I'll never hack this thing."
    You can now help me balance the tag cloud.
Page 1 of 1 (3 items)
Powered by Community Server (Non-Commercial Edition), by Telligent Systems