Hiding password on the connection string

Hi,
Am trying to see if it is possible to hide password on the connection string when connecting from the application server. I can see one way of doing this, that is to use Oracle's OS Authentication. But because my Oracle is installed on Unix and my application server is on Windows 2000. I am not sure if this is possible?
Has any done something similar before?
Thanks

The problem with using a single sign-in product like Kerberos is I believe the Advanced Security Option is required. The ASO is an additional license fee.
Having the password in a file does not have to be a major security problem. Have a set of common logon modules created, one for each language in use, and have the module contain the logic to fetch the key.
This way the file name and path to the key is not obvious. Then have the premissions set so that only the ID that runs the production batch can read the file. Neither the customers or the developers should have access to that ID.
Unfortunately while this works for works batch ran out of products like Unicenter and application server based applications this technique does not work very well for cleint server applications. Client server based applications really need every user to have to sign-in with their own id.
If every user does not have their own id and it is undesirable to hard code the userid/password into the application then you are back to getting the password from an unsecured external source. Having the common module to do the fetching at least makes someone work to find the ID/password. Any Id used in this manner should have limited access in the database which means you might have two, three, or more such ID's setup but with each having access to the tables behind only specific applications.
HTH -- Mark D Powell --

Similar Messages

I run Dev 6i on Windows 2008 R2 64-bit,the forms are working fine after connection to the database but the reports continue to request for username, password and database connection string every time i try to open a report.

I receive REP-0501: Unable to connect to specified database. I run developer 6i application on windows 2008 r2. I have applied the nn60.dll and nnb60.dll files to the \BIN directory. The forms are working fine. The reports will only display after the correct user id (username, password and database connection string) is supplied. This is happening to all attempts to open already complied form. Pls, help.

If you are connecting to an Oracle 11g database, remember that by default the passwords are case sensitive. To disable that, run
ALTER SYSTEM SET SEC_CASE_SENSITIVE_LOGON = FALSE;

How to determine the connection string to a SQLite database, in C# code

Hello. I'm trying to figure out how to specify the connection string to a SQLite database, I would like to access using the following code:
string connectionString = null;
SqlConnection connection;
SqlCommand command;
SqlDataAdapter adapter = new SqlDataAdapter();
DataSet ds1 = new DataSet();
string sql = "SELECT DataName, Data, Id, UserId, DateLastUpdated FROM MainTable";
connectionString = "Data Source=C:\\SQLITEDATABASES\\SQLITEDB1.sqlite;Version=3;";
connection = new SqlConnection(connectionString);
try
connection.Open();
command = new SqlCommand(sql, connection);
catch
The value I assigned to the variable connectionString, in the code above, I obtained somewhere from the Internet. It does not work. I'm using Visual Studio 2013, against the file sqlite-netFx451-setup-bundle-x86-2013-1.0.96.0.exe, which
I installed, and got from
here.
My application's App.config file looks as follows:
<?xml version="1.0" encoding="utf-8"?>
<configuration>
<configSections>
</configSections>
<connectionStrings>
<add name="DC_Password_Saver.Properties.Settings.DC_Password_SaverConnectionString" connectionString="data source="C:\Users\patmo_000\Documents\Visual Studio 2013\Projects\DC Password Saver\DC Password Saver\DC Password Saver.db"" providerName="System.Data.SQLite.EF6"/>
</connectionStrings>
<startup>
<supportedRuntime version="v4.0" sku=".NETFramework,Version=v4.5.1"/>
</startup>
</configuration>
I tried to use the value assigned to connectionString in the XML settings above, replacing single backslash characters with double backslash characters, because the Visual Studio editor flagged them as unrecognizable, and wound up with the
following.
SqlDataAdapter adapter = new SqlDataAdapter();
DataSet ds1 = new DataSet();
string sql = "SELECT DataName, Data, Id, UserId, DateLastUpdated FROM MainTable";
connectionString = "data source="C:\\Users\\patmo_000\\Documents\\Visual Studio 2013\\Projects\\DC Password Saver\\DC Password Saver\\DC Password Saver.db"";
connection = new SqlConnection(connectionString);
The above code however does not work either. So again, does anyone know how I can specify in C# code, a connection string to access my SQLite database? Thanks in advance for your reply.

What does SQLite connection strings has to do with WPF?
You will find some valid connection strings here:
https://www.connectionstrings.com/sqlite/
But you cannot use the SqlConnection class to connect to a SQLite database. You will need to download and add a reference to the System.Data.SQLite library and then use the SQLiteConnection class:
connection = new System.Data.SQLite.SQLiteConnection(connectionString);
try
connection.Open();
command = new System.Data.SQLite.SQLiteCommand(sql, connection);
catch
Please refer to the following article for more information and an example of how to connect and read and write data from an SQLite database using C#:
http://blog.tigrangasparian.com/2012/02/09/getting-started-with-sqlite-in-c-part-one/.
There is contains a link where you can download the required assemblies.
Hope that helps.
Please remember to mark helpful posts as answer to close your threads and then start a new thread in an approproate forum if you have a new question.

Can't change the connection string of SSIS package with derived columns?

We upgraded SQL server 2008 to 2012, copied and converted all SSIS packages from Visual Studio 2008 to 2010. When I opened a package in VS 2010 and tried to change the connection string, in the local connection managers, if the data source is another
SSIS package B(.dtsx file) with derived columns, I can't change the connection string of package B. When I opened the file connection manager editor for package B and tried to locate a dtsx file in another location, saved the change, reopened the project.
Package B still pointed to previous file. Other packages without derived columns work fine. Any thoughts?

We are using the package deployment model and refer to other packages in the same project. If
we changed the path of package B (with derived columns) to "D:\Visual Studio 2010\xxxx", and refer it in package A, in the A's connection manager, the connection string of package B is still its previous location "D:\Visual
Studio 2008\xxxx". When we ran the package A in the SQL server agent, the data source is still
"D:\Visual
Studio 2008\xxxx", so how can I change it to "D:\Visual
Studio 2010\xxxx"? Why has the package C (without derived columns) no such problem? thanks.

Replace the connection string in Excel MDS file

I had MDS solution from one SQL Server 2012 to another - SQL Server 2014. I have configured Excel file with connection to MDS. How can I safely to replace the connection string in my Excel MDS file and the tables is not broken?
from Moscow with money

Hi,
Excel is just used to manage data and create new entities and attributes. Why not first publish and close your excel before MDS upgraded to 2014? After the upgrade, reconnect new solution in your excel.
thanks,
Jerry

The Connection String for the Query Log table is automatically encrypted.

When I try to use the Usage Based Optimization to apply Aggregation Design to my measure group, it shows me the following
error message.
The connection string cannot be found. Open Microsoft SQL Server Management Studio and, in the Analysis Server Properties
page, check the value of the Log\QueryLog\QueryLogConnectionString
property.
I encountered this error like two weeks ago. At that time I just reset the connection string and every things seem
to be fine. A week ago, I successfully applied the Usage Based Optimization for one of my cubes. However when I tried to apply UBO for my other cubes today, I encountered the same issue again! I believe no one has changed the property of
the connection string.
Also if I query the Query Log table, I can see those latest queries made by the users. I'm sure the queries are still
logging into this table.
This is really strange. Anyone else has encountered the same issue? Thanks.

Hello Thomas,
I encounterd this issue. And I am struggling trying to solve this problem. If you have resolved this issue and I guess you must've, because this post is two years old, could you kindly post how you resolved this issue?
Thanks in advance
Best Regards,
Neeraja

Specify wallet location in the connect string

Hi!
Can anyone tell me is there any way how an application can use autologin wallet to connect to database without wallet location specified in sqlnet.ora file? For example can you specify a wallet location in the connect string like hostname and a port number?
The reason I need this is to let our customers use Oracle autologin wallet to connect the application to DB. They would only need to specify the wallet location in the application's configuration file without editing the sqlnet.ora file.
Thanks in advance for answers or alternative ideas.

Hi,
You can go through with the metalink ID
The Impact of the Sqlnet Settings on Database Security (sqlnet.ora Security Parameters and Wallet Location) [ID 1240824.1]

C How to Set Isolation Level in the Connection String

How to Set Isolation Level in the Connection String using the "Microsoft OLE DB Provider for DB2 Version 4.0"?
We are trying to move from Crystal Reporting that run against a IBM DB2 database on a mainfram to SSRS reporting and we have downloaded the "Microsoft OLE DB Provider for DB2 Version 4.0" and then worked with the DB2 Administrator to create the
Packages. We only have access to use the "Read Uncommitted ("MSUR001") package. We were able to connect and pull data before he removed access to the other packages, but after setting access the Connection keeps trying to use
the 'Cursor Stability (MSCS001)" package. How do we change the Default to the "Read Uncommitted ("MSUR001") package??? Since it is keeps defaulting to the the other package
we can't connect to do it in the T-SQL query, it has to be set at the Connection String level.

Hi Dannyboy1263,
According to your description, you want to set the Transaction Isolation Level in Connection String. Right?
In Reporting Services, the Connection String for OLE DB Connection can only contains Provider, Data Source and Initial Catalog. There's no property for setting Transaction Isolation Level in the Connection String. Based on my knowledge, we can
only set the Transaction Isolation Level at Query level or set it by using code (C#, VB, Java...) to call the property of Connection. So unfortunately your requirement can't be achieved currently.
Reference:
OLE DB Connection Type (SSRS)
Data Connections, Data Sources, and Connection Strings in Reporting Services
If you have any question, please feel free to ask.
Best Regards,
Simon Hou

Where to Hard Code the Connection String.....

Hi,
We just give the url to the user and when the user clik it.
The Application form login will appear and user should login before they
can use the system.
When our DBA setup in the production they give us the url and
when I click it the Database login screen appear before it goes to
the Application form login.
My problem is how to bypass that Database Login Screen and where to hardcode
the connection string in which file in the server.
Thanks.
Regards,
Jun

We are hardcoding the userId (Connection) details in the formsweb.cfg, wil it create any issues to our security system.
From the application link, i couldnt get the userid details, as all the other
details like
serverArgs="escapeParams=true module=frm_login.fmx userid= sso_userid=%20 sso_formsid=%25OID_FORMSID%25 sso_subDN= sso_usrDN= debug=no host= port= buffer_records=no debug_messages=no array=no obr=no query_only=no quiet=yes render=no record= tracegroup= log= term=D:\Applns\OracleForms\forms\fmrweb_.res"
separateFrame="true"
splashScreen="no"
background="no"
lookAndFeel="Oracle"
colorScheme="blue"
serverApp="default"
logo="false"
imageBase="codebase"
formsMessageListener=""
recordFileName=""
EndUserMonitoringEnabled=""
EndUserMonitoringURL=""
heartBeat=""
were visible (view Source) but userid= sso_userid=%20, i think this points to
basejini.htm, which doesnt contain the userid details ..
am i correct .. please render your thoughts over this.
Many Thanks
Deepa
Message was edited by:
Deepa.ibs

How to find the CONNECTION STRING

how to find the connection string through SQL Statement?
salahuddin/salahuddin@CONNECTION_STRING
Below is all about my sql version:
DEFINE SQLPLUSRELEASE = "800060000" (CHAR)
DEFINE _EDITOR = "Notepad" (CHAR)
DEFINE OVERSION = "Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Production
With the Partitioning, OLAP and Data Mining options" (CHAR)
DEFINE ORELEASE = "1002000100" (CHAR)

In windows XP plateform your can find from the ServicesHow can you do that using SQL statement? Plus connect strings are not available in Services. In post 9i SQL*Plus we can do it in SQL statement like this
SELECT '&&_CONNECT_IDENTIFIER'
FROM dual;
Note: This will work only in SQL*Plus.

Hiding password in the script

Hi
Is there a way of hiding password text in the script? If possible please provide different ways of doing it and with examples. Thanks!

You can save encrypted data wherever you like, including within your script file (though there are certainly advantages to having it separate from the code.) One easy example of this is with the ConvertFrom-SecureString and ConvertTo-SecureString cmdlets:
# At your console:
$secret = Read-Host -AsSecureString "Enter password"
$secret | ConvertFrom-SecureString
# copy and paste the data that this command produces, and
# place it into your script file (or a data file, whatever)
# In your script:
$encryptedData = '<copied from ConvertFrom-SecureString output>'
$secureString = $encryptedData | ConvertTo-SecureString
When you call ConvertFrom-SecureString the way I did in this example, PowerShell uses the Windows Data Protection API (DPAPI) to perform the encryption. That's the scenario you described, where you're the only person who can decrypt the data, and only
on your own computer. In the examples code I linked to earlier, I show some alternatives using RSA certificates to encrypt data in a way that is just as secure, but can be shared across multiple users / computers.
wow.. a cool trick.. :) Thanks David for sharing this idea.
so for secure string it will only work on the machine where it was generated?
Every second counts..make use of it. Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
IT Stuff Quick Bytes

The connection string for coded UI Data driven test using excel data source is not working

Hello,
I am using the visual studio 2012 coded UI test, i added the following connection strings to connect to an excel data source:
[DataSource("System.Data.Odbc", "Dsn=Excel Files;Driver={Microsoft Excel Driver (*.xls)};dbq=C:\\Users\\shaza.said.ITWORX\\Desktop\\Automation\\On-track Automation Framework\\On-track_Automation\\Automation data file.xls;defaultdir=.;driverid=790;maxbuffersize=2048;pagetimeout=5;readonly=true",
"Sheet1$", DataAccessMethod.Sequential), TestMethod]
[DataSource("System.Data.Odbc", "Dsn=Excel Files;dbq=|DataDirectory|\\Automation data file.xls;defaultdir=C:\\Users\\shaza.said.ITWORX\\Desktop\\Automation\\On-track Automation Framework\\On-track_Automation\\Automation data file.xls;driverid=1046;maxbuffersize=2048;pagetimeout=5",
"Sheet1$", DataAccessMethod.Sequential), TestMethod]
But i get the following error:
"The unit test adapter failed to connect to the data source or to read the data. For more information on troubleshooting this error, see "Troubleshooting Data-Driven Unit Tests" (http://go.microsoft.com/fwlink/?LinkId=62412) in the MSDN Library.
Error details: ERROR [IM002] [Microsoft][ODBC Driver Manager] Data source name not found and no default driver specified"
Thanks,
Shaza

Thanks for Adrian's help.
Hi shaza,
From the error message, I suggest you can refer the Adrian's suggestion to check the date source connection string correctly.
In addition, you can refer the following about how to Create a Data-Driven Coded UI Test to check your issue:
http://msdn.microsoft.com/en-us/library/ee624082.aspx
Or you can also try to use a Configuration File to Define a Data Source for coded UI test.
For example:
<?xml
version="1.0"
encoding="utf-8"
?>
<configuration>
<configSections>
<section
name="microsoft.visualstudio.testtools"
type="Microsoft.VisualStudio.TestTools.UnitTesting.TestConfigurationSection,
Microsoft.VisualStudio.QualityTools.UnitTestFramework, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"/>
</configSections>
<connectionStrings>
<add
name="ExcelConn"
connectionString="Dsn=Excel Files;dbq=E:\Unit Test\AddClass\AddUnitTest\add.xlsx;defaultdir=.;
driverid=790; maxbuffersize=2048; pagetimeout=60;"
providerName="System.Data.Odbc"/>
<add
name="ExcelConn1"
connectionString="Dsn=Excel Files;dbq=E:\Unit Test\AddClass\AddUnitTest\sum.xlsx;defaultdir=.;
driverid=790;maxbuffersize=2048;pagetimeout=60"
providerName="System.Data.Odbc"/>
</connectionStrings>
<microsoft.visualstudio.testtools>
<dataSources>
<add
name="ExcelDS_Addition"
connectionString="ExcelConn"
dataTableName="Addition$"
dataAccessMethod="Sequential"/>
<add
name="ExcelDS_Multiply"
connectionString="ExcelConn1"
dataTableName="Multiply$"
dataAccessMethod="Sequential"/>
</dataSources>
</microsoft.visualstudio.testtools>
</configuration>
For more information, please see:https://msdn.microsoft.com/en-us/library/ms243192.aspx
Best Regards,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

How to get the connection string at runtime

Hi,
I'm using Forms6i.
I'm using EXEC_SQL to execute a dynamic sql in my form.
I need connection string for that . But i cannot give it hardcodingly.
Is there any form's properties to get the database connection string, to which the form is connected ?
Thanks

Hi,
I've the user i/p columns
EmpNo, Dept ,Holicode and , From and To Date.
In which From and To Date is mandatory.
In one table, emp_cal_header, i have all the holidays defined for each of the employees for a year.
The records like
EmpNo    Holicode     Holidt
001        Frioff         02/07/2011
001        Satoff        03/07/2011
001        Frioff         08/07/2011
.....So i want the final o/p in Excel like
If user i/p is from Date: 01/07/2011 ,ToDate:09/07/2011, EmpNo :001
EmpNo   Dept     Total 01/07/2011   02/07/2011 ..... 08/07/2011 09/07/2011
001        IT        3               FriOff           Frioff            For this i'm constructing a dynamic sql like this
     qry := '(Select ech_emp_code cal_emp_code,emp_name CAL_EMP_NAME,emp_dept CAL_EMP_DEPT,count(ech_date) CAL_TOTAL'||date_cols||'
                         from (Select ech_emp_code,em.emp_name||'' ''||em.emp_middle_name||'' ''||em.emp_last_name emp_name,em.emp_dept emp_dept,ech_code,ech_desc,ech_date
                                        from emp_cal_header ,employee_master em
                            where emp_cal_header.ech_emp_code = em.emp_code
                            and ech_emp_code = '||nvl(:emp_code,'ech_emp_code')
                            ||' and em.emp_status IN (''P'',''C'')'
                            ||' and em.emp_dept = '||dep
                            ||' and ech_date between '''||to_date(to_char(:From_dt,'DD-MON-YYYY'))
                            ||''' and ''' ||to_date(to_char(:To_dt,'DD-MON-YYYY'))
                            ||''' and ech_code = '||holi
                            ||' order by ech_Date)
             group by ech_emp_code,emp_name,emp_dept)';
and date_cols is constructed as
     todt := :from_dt ;
     i := 0;
     loop
          i := i+1;
          dt := to_char(todt,'dd-MON-YYYY');
          date_cols     := date_cols||','||'max(decode(to_char(ech_date,''dd-MON-YYYY''),'''||dt||''',ech_CODE)) DT'||i;
          todt := todt + 1;
          Exit when todt > :to_dt ;
     End loop;This query i'm executing using EXEC_SQL.
Since date_cols can be constructed only based on user i/p , i'm not able to do just a normal query
Any help

BC4J HOW Can I GET the CONNECTION String

hi everyone
I'm using Jdev 3.2. In my BC4J prooject I want to get the current connection String used by the application module to connect to database.
can some one help me please.
Ghassen

I don't know what's really the problem, but I recomplie the same code and I receive the same error.
I added also the import statement: import oracle.dacf.dataset.connections.NamedConnection.
and I receive the same error message.
can that be a mising library problem?
ghassen
null

Not all the connect strings are shown from tnsnames.ora

Hi Guys,
I am having a very strange problem. While trying to create a new connection in SQL Developer (I am using Version 1.1.2.25), and choosing " TNS " as connection type, I am just able to see 15-20 database entries, where my tnsnsames.ora contains more than 100 entries. And these 15-20 connect strings seem to have been picked randomly. So its like I am seeing the 1st entry, 4-8th entry, 20-24th entry from the tnsnames.ora.
Any idea what needs to be done?
Thanksm

Hi there,
I found what was wrong and would like to update it for the benefit of others. The tnsnames.ora was read upto all the entries which was in correct format. All the entries after the first incorrect entry was being ignored.
E.g. if you tnsnames.ora is having 100 entries and entry number 50 is in wrong format, then SQLDEVELOPER will only show entries upto 49. Entry 50th onwards will not be shown.
Hope this helps.
Ashish

Hiding password on the connection string

Similar Messages

Maybe you are looking for