Home Page for the TeradataForum
 

Archives of the TeradataForum

Message Posted: Fri, 27 Oct 2006 @ 08:20:42 GMT


     
  <Prev Next>   <<First <Prev
Next>
Last>>
 


Subj:   Re: Password masking
 
From:   McCall, Glenn David

  We have to pass user and pasword for Bteq logons. How do I mask my password? I need to store it in common location and all jobs requiring a particular password should be able to source it from there but not visible to any one?  


I assume you are not using any single sign on technologies, otherwise this would not be a problem.

One approach I have used on Unix is to put the bteq logon script in a file which is readable only by the owner (and system administrator).

Thus I might have a file "logon.txt" that contains the following:

     .logon uid,pwd;

The unix permissions would be 600 or in ls -l

     -rw-------   ... logon.txt
     400 or -r-------- also can work.

For this to work, the bteq jobs must run as the same userID as the owner of the file.

To use this file in bteq, you use the .run command as in:

     .run file=logon.txt

You could probably do something similar on windows using windows security attributes.

Obviously this does not "mask" the password which is still in clear text but it restricts access to the password based upon operating system access controls.


I hope this helps.

Glenn Mc



     
  <Prev Next>   <<First <Prev
Next>
Last>>
 
 
 
 
 
 
 
 
 
  
  Top Home Privacy Feedback  
 
 
Copyright for the TeradataForum (TDATA-L), Manta BlueSky    
Copyright 2016 - All Rights Reserved    
Last Modified: 15 Jun 2023