freetds AT lists.ibiblio.org
Subject: FreeTDS Development Group
List archive
Re: [freetds] Hiding passwords (was patch for freebcp: take password from stdin instead of command line)
- From: "James K. Lowden" <jklowden AT freetds.org>
- To: FreeTDS Development Group <freetds AT lists.ibiblio.org>
- Subject: Re: [freetds] Hiding passwords (was patch for freebcp: take password from stdin instead of command line)
- Date: Tue, 6 May 2008 21:14:47 -0400
Wood, David wrote:
>
> Have you ever considered a generic solution for hiding freebcp, tsql,
> etc passwords from prying eyes (eg, ps -ef)? Sybase SDK does this with
> all of their utilities. Michael Peppler implemented a similar solution
> in sqsh
I'm unpersuaded of the efficacy of "quickly" hiding the password. There
are other, better options:
1. reading from ~/.netrc, as most ftp clients do.
2. kerberos.
3. a wrapper script that uses any other password-fetching mechanism.
cf.
http://infocenter.sybase.com/help/index.jsp?topic=/com.sybase.dc00212_1254/html/nfg1254/nfg125413.htm
for an example of how Sybase's isql can use kerberos.
The first option is easily done. The second is not but would permit
integration with single signon regimes. I'd accept patches for either
one, but don't plan to work on them myself.
--jkl
-
[freetds] Hiding passwords (was patch for freebcp: take password from stdin instead of command line),
Wood, David, 05/06/2008
- Re: [freetds] Hiding passwords (was patch for freebcp: take password from stdin instead of command line), James K. Lowden, 05/06/2008
Archive powered by MHonArc 2.6.24.