How can we keep sybase login passwords encrypted for scheduled job
runnning from autosys or crontab. The jobs are unix shell scripts and
these need to connect to sybase instance. Is there a way so we don't
write the password in clear text in a file or hard code it in the
script.
Thanks
bret@sybase.com - 10 Jun 2008 17:32 GMT
On Jun 9, 2:16 am, humayun.man...@gmail.com wrote:
> How can we keep sybase login passwords encrypted for scheduled job
> runnning from autosys or crontab. The jobs are unix shell scripts and
> these need to connect to sybase instance. Is there a way so we don't
> write the password in clear text in a file or hard code it in the
> script.
> Thanks
Although geared to the older problem of avoiding the password showing
up in "ps"
output, some of the techniques documented at http://www.isug.com/Sybase_FAQ/ASE/section4.html#4.1
are probably applicable.
There is also the approach of using the integrated login features of
network-based
security options (kerberos, etc.) - see the SA Guide chapter on
network-based
security.
Cheers,
bret
Sybaseguru - 10 Jun 2008 18:59 GMT
Without using kerberos etc the best you can do is limit access to a select
group of people. These guys would have to own the scripts be in their own
group and organise the execution of scripts. These guys are usually called
dbas.
> How can we keep sybase login passwords encrypted for scheduled job
> runnning from autosys or crontab. The jobs are unix shell scripts and
> these need to connect to sybase instance. Is there a way so we don't
> write the password in clear text in a file or hard code it in the
> script.
> Thanks
dsf.inp@gmail.com - 18 Jul 2008 14:59 GMT
You can change the approach (as we did) and use this way:
http://www.sypron.nl/grant_sa.html
Of course, the password must be still in clear text but the logins
will be limited just to specific action.
humayun.man...@gmail.com wrote:
> How can we keep sybase login passwords encrypted for scheduled job
> runnning from autosys or crontab. The jobs are unix shell scripts and
> these need to connect to sybase instance. Is there a way so we don't
> write the password in clear text in a file or hard code it in the
> script.
> Thanks