Is there a way in Orbix 6.3 to hide the password in clear text provided for principal_sponsor:auth_method_data?

Dominique Sacre · 2013-05-17T17:45:00+00:00

Summary This article clarifies if the password in clear text for principal_sponsor:auth_method_data can be hidden. Article Number 36242 Environment Orbix 6.3 All Supported Operating Systems Question/Problem Description Is there a way in Orbix 6.3 to hide the password in clear text provided to principal_sponsor:auth_method_data? Clarifying Information The password for principal_sponsor:auth_method_data can be set directly in the Orbix configuration file through: principal_sponsor:auth_method_data = ["filename=C:\\xxx\\Orbix_6.3.5\\asp\\6.3\\etc\\tls\\x509\\certs\\services\\administrator.p12" , "password=administratorpass"]; The password can also be specified in a password file (e.g called administrator.pwf) containing the password in clear test and specified through: principal_sponsor:auth_method_data = ["filename=C:\\xxx\\Orbix_6.3.5\\asp\\6.3\\etc\\tls\\x509\\certs\\services\\administrator.p12" , "password_file=C:\\xxx\\Orbix_6.3.5\\asp\\6.3\\etc\\tls\\x509\\certs\\service\\administrator.pwf"]; Further the principal_sponsor:auth_method_data can be passed to an Orbix process through a -ORB parameter, e.g: server.exe -ORBprincipal_sponsor:auth_method_data ["filename=C:\\xxx\\Orbix_6.3.5_vc9_32bit\\asp\\6.3\\etc\\tls\\x509\\certs\\services\\administrator.p12" , "password=administratorpass"] In all cases the password is in clear text. Error Message Defect/Enhancement Number Cause Resolution Currently it is not possible in Orbix 6.3 to hide a clear text password for the principal_sponsor:auth_method_data.Orbix 6.3.6 will introduce a feature through which a password can be provided to the Orbix runtime through a custom shared library. This will enable customers to hide the clear text password from any configuration files or command line parameters. Workaround Notes See Orbix 6.3.6 Product Documentation: http://supportline.microfocus.com/productdoc.aspx (Select CORBA Middleware from Product Family, Orbix 6 Product and Orbix 6.3.6 from Release) Attachment Created date: 15 November 2012 Last Modified: 12 February 2013 Last Published: 15 November 2012 First Published date: 15 November 2012 #Orbix#KnowledgeDocs

Forum|Forum|12 years ago
May 17, 2013
0 replies
0 views

D

Dominique Sacre
Rocketeer

Summary	This article clarifies if the password in clear text for principal_sponsor:auth_method_data can be hidden.
Article Number	36242
Environment	Orbix 6.3 All Supported Operating Systems
Question/Problem Description	Is there a way in Orbix 6.3 to hide the password in clear text provided to principal_sponsor:auth_method_data?
Clarifying Information	The password for principal_sponsor:auth_method_data can be set directly in the Orbix configuration file through: principal_sponsor:auth_method_data = ["filename=C:\\xxx\\Orbix_6.3.5\\asp\\6.3\\etc\\tls\\x509\\certs\\services\\administrator.p12" , "password=administratorpass"]; The password can also be specified in a password file (e.g called administrator.pwf) containing the password in clear test and specified through: principal_sponsor:auth_method_data = ["filename=C:\\xxx\\Orbix_6.3.5\\asp\\6.3\\etc\\tls\\x509\\certs\\services\\administrator.p12" , "password_file=C:\\xxx\\Orbix_6.3.5\\asp\\6.3\\etc\\tls\\x509\\certs\\service\\administrator.pwf"]; Further the principal_sponsor:auth_method_data can be passed to an Orbix process through a -ORB parameter, e.g: server.exe -ORBprincipal_sponsor:auth_method_data ["filename=C:\\xxx\\Orbix_6.3.5_vc9_32bit\\asp\\6.3\\etc\\tls\\x509\\certs\\services\\administrator.p12" , "password=administratorpass"] In all cases the password is in clear text.
Error Message
Defect/Enhancement Number
Cause
Resolution	Currently it is not possible in Orbix 6.3 to hide a clear text password for the principal_sponsor:auth_method_data. Orbix 6.3.6 will introduce a feature through which a password can be provided to the Orbix runtime through a custom shared library. This will enable customers to hide the clear text password from any configuration files or command line parameters.
Workaround
Notes	See Orbix 6.3.6 Product Documentation: http://supportline.microfocus.com/productdoc.aspx (Select CORBA Middleware from Product Family, Orbix 6 Product and Orbix 6.3.6 from Release)
Attachment