Hiding passwords in scripts?

usao · 05-23-2017, 01:16 PM

Root is not the same as DBA, and root cannot login to the database without a user ID and password.

BW-userx · 05-23-2017, 01:26 PM

Quote:

Originally Posted by usao

Root is not the same as DBA, and root cannot login to the database without a user ID and password.

what color crayon did you use?

hydrurga · 05-23-2017, 01:42 PM

Quote:

Originally Posted by BW-userx

what color crayon did you use?

Not a helpful comment, BW, I'm sorry to say. If you disagree with something the previous poster said, can you counter their arguments or post a critique rather than this? Many thanks.

BW-userx · 05-23-2017, 02:00 PM

Quote:

Originally Posted by hydrurga

Not a helpful comment, BW, I'm sorry to say. If you disagree with something the previous poster said, can you counter their arguments or post a critique rather than this? Many thanks.

oh gezzz you cannot figure it out so you just assumed it was I trying to start an argument? I said color ME stupid, .... then I was informed that it is for some data base thing ... read his post, then ALL I said what what color crayon did you (he) use.

can you not understand the course of events that took place? no arguments out of me whatsoever. I am now removing that email me link to this post. have a informed day.

joe_2000 · 05-23-2017, 02:05 PM

Quote:

Originally Posted by BW-userx

I said color ME stupid

Ha! That one had escaped my attention as well! Luckily hydrurga asked so BW could explain ;-)

hydrurga · 05-23-2017, 02:06 PM

Quote:

Originally Posted by BW-userx

oh gezzz you cannot figure it out so you just assumed it was I trying to start an argument? I said color ME stupid, .... then I was informed that it is for some data base thing ... read his post, then ALL I said what what color crayon did you (he) use.

can you not understand the course of events that took place? no arguments out of me whatsoever. I am now removing that email me link to this post. have a informed day.

Ah, humour - not quite international yet. No, I still don't understand your chain of thoughts but ok, fair enough.

Onwards and upwards...

chrism01 · 05-25-2017, 01:22 AM

One possible method is to have the 'front machine' use ssh keys to connect to the db box and run a script there that has the user/passwd reqd.
A variation (on front box) is to use ssh-agent to get the key into memory and leave the process running as a daemon that can then run other scripts on the db box.

syg00 · 05-25-2017, 01:38 AM

Quote:

Originally Posted by usao

That's the rub. Ive heard of some type of key server type of thing, but don't know anything about them.
Supposedly you can checkout the password dynamically, in memory, but I don't know what they are called or anything else.

That would probably be keyrings - gnome has an implementation that allows users to store secret data. There are even python bindings for it.

I have no personal experience coding for it, but your favourite search engine should be of use.

jefro · 05-25-2017, 03:18 PM

Keyrings may work.

I'd be tempted to look at a similar differnt authentication method that doesn't rely on trying to hide a password. Use of a self signed certificate may work unless you wish to purchase one.

justmy2cents · 05-25-2017, 03:46 PM

I apologize if this not helpful as I may not understand the the question

Code:

read -p 'Username: ' uservar
read -sp 'password: ' passvar
echo
echo "Thank you $uservar we now have your login details"

The s In read -sp makes the password silent

usao · 05-25-2017, 03:56 PM

Quote:

Originally Posted by justmy2cents

I apologize if this not helpful as I may not understand the the question

Code:

read -p 'Username: ' uservar
read -sp 'password: ' passvar
echo
echo "Thank you $uservar we now have your login details"

The s In read -sp makes the password silent

Where does it read it from?
The whole point of an automation is that it's a background or batch job, no one is there to answer the questions.

justmy2cents · 05-25-2017, 04:22 PM

Yeah It prompts the user to type in password so I believe it reads from the terminal.. I don't think this would be of help then, since no one would be there to type it in.. Im actually trying to solve the same problem (I think) in the thread I just made today in programming (to automate the creation of passwords for my automated creation of users).. You can request to have your thread moved to the programming section aswell where it may get more responses..

ondoho · 05-27-2017, 01:09 AM

but read can also be used in scripts without user input.