| Summary | This article clarifies if the password in clear text for principal_sponsor:auth_method_data can be hidden. |
|---|---|
| Article Number | 36242 |
| Environment | Orbix 6.3 All Supported Operating Systems |
| Question/Problem Description |
Is there a way in Orbix 6.3 to hide the password in clear text provided to principal_sponsor:auth_method_data?
|
| Clarifying Information | The password for principal_sponsor:auth_method_data can be set directly in the Orbix configuration file through: principal_sponsor:auth_method_data = ["filename=C:\\xxx\\Orbix_6.3.5\\asp\\6.3\\etc\\tls\\x509\\certs\\services\\administrator.p12" , "password=administratorpass"];
The password can also be specified in a password file (e.g called administrator.pwf) containing the password in clear test and specified through: principal_sponsor:auth_method_data = ["filename=C:\\xxx\\Orbix_6.3.5\\asp\\6.3\\etc\\tls\\x509\\certs\\services\\administrator.p12" , "password_file=C:\\xxx\\Orbix_6.3.5\\asp\\6.3\\etc\\tls\\x509\\certs\\service\\administrator.pwf"];
Further the principal_sponsor:auth_method_data can be passed to an Orbix process through a -ORB parameter, e.g: server.exe -ORBprincipal_sponsor:auth_method_data ["filename=C:\\xxx\\Orbix_6.3.5_vc9_32bit\\asp\\6.3\\etc\\tls\\x509\\certs\\services\\administrator.p12" , "password=administratorpass"]
In all cases the password is in clear text. |
| Error Message | |
| Defect/Enhancement Number | |
| Cause | |
| Resolution | Currently it is not possible in Orbix 6.3 to hide a clear text password for the principal_sponsor:auth_method_data. Orbix 6.3.6 will introduce a feature through which a password can be provided to the Orbix runtime through a custom shared library. This will enable customers to hide the clear text password from any configuration files or command line parameters. |
| Workaround | |
| Notes |
See Orbix 6.3.6 Product Documentation: http://supportline.microfocus.com/productdoc.aspx (Select CORBA Middleware from Product Family, Orbix 6 Product and Orbix 6.3.6 from Release) |
| Attachment |
| Created date: | 15 November 2012 |
|---|---|
| Last Modified: | 12 February 2013 |
| Last Published: | 15 November 2012 |
| First Published date: | 15 November 2012 |
#Orbix
#KnowledgeDocs
