Menu

#80 Need to keep the password safe

Feature_Request
closed
arrah
password (1)
2
2020-06-05
2019-10-24
Bart Jonk
No

Hi,

I edited the DBConnections.xml to add two Postgress connections. This 'kind
of' works, since I can now select them in the Connection Dialog Window and
connections will work effectively.

However, the selected values do not appear in the fields. I would have
hoped they did, since it would allow me to leave the passowrd te be filled
in in the window, in stead of leaving it in the config file.

If I just leave the password empty in the DBConnections.xml, osDQ will fail to connect. Another option would be to show a password dialogue asking for a password in case the pw is empty in the config file.

Can this be fixed? Or is there another way to keep my password safe?

Related

Feature Requests: #80

Discussion

  • arrah

    arrah - 2019-11-12
    • status: open --> pending
    • assigned_to: arrah
    • Group: V5.6.0 --> Feature_Request
    • Priority: 8 --> 2
     
    • Bart Jonk

      Bart Jonk - 2019-11-13

      Hi Arrah,

      four observations & a new question:
      When starting from configfile.txt

      1) when starting the program from configfile.txt, osDQ will prompt for a
      password, but there's no hint for which user:
      [image: image.png]
      (I tried a different dsn that possibly solves that, see 3 below)

      2) When copying the password from my password manager, the password is
      printed in plaintext (instead of being masked ****):
      [image: afbeelding.png]

      3) with following config nothing happens (no proper connection) (Note: I
      think this has nothing to do with the change - I probably did not configure
      it correctly before either) :
      Postgres Native JConnector DRIVER
      Database_Type="POSTGRES"
      Database_Driver="org.postgresql.Driver"
      Database_Protocol="jdbc:postgresql"
      Database_DSN="//
      profiling@xxxx:5432/yyyy

      Database_User=“profiling”
      Database_Passwd=""
      Database_Catalog=“zzzz”
      Database_SchemaPattern=“\"zzzz\"”
      Database_TablePattern=""
      Database_ColumnPattern=""
      Database_TableType="TABLE"

      using the DBconnections.xml
      4) using the DBconnections.xml I removed the password reference s from the
      "entry/value" and "entry/databasePasswd" then I could connect and all
      works perfect
      !
      <connection>
      <entry>
      <value databasecatalog="zzzz" databasecolumnpattern="" databaseconnectionname="zzzz" databasedsn="// xxxx/yyyy" databasedriver="org.postgresql.Driver" databasejdbc="" databaseprotocol="jdbc:postgresql" databaseschemapattern=""zzzz"" databasetablepattern="" databasetabletype="TABLE" databasetype="POSTGRES" databaseuser="profiling">
      <database_connectionname>zzzz</database_connectionname>
      <database_columnpattern>
      <database_dsn>//
      xxxx/yyyy
      </database_dsn>
      <database_driver>org.postgresql.Driver</database_driver>
      <database_jdbc>
      <database_passwd></database_passwd>
      <database_protocol>jdbc:postgresql</database_protocol>
      <database_schemapattern>"zzzz"</database_schemapattern>
      <database_tablepattern>
      <database_tabletype>TABLE</database_tabletype>
      <database_type>POSTGRES</database_type>
      <database_catalog>warehouse</database_catalog>
      <database_user>profiling</database_user>
      </database_tablepattern></database_jdbc></database_columnpattern></value></entry>
      </connection>

      New question:
      Is it possible to add parameters to the JDBC connection?

      https://jdbc.postgresql.org/documentation/head/connect.html#connection-parameters

      especially I'd like to set "sslmode=prefer"

      tell me if you prefer a ticket on sourcefourge for this.

      cheers,
      Bart.

      On Tue, 12 Nov 2019 at 19:16, arrah arrah@users.sourceforge.net wrote:

      • status: open --> pending
      • assigned_to: arrah
      • Group: V5.6.0 --> Feature_Request
      • Priority: 8 --> 2
      • Comment:

      This feature has been added in 6.2.9 . If password is empty, null or
      "****" it would prompt for password from confileFile and DBConnections.xml.

      Please confirm.

      Status: pending
      Group: Feature_Request
      Labels: password
      Created: Thu Oct 24, 2019 02:04 PM UTC by Bart Jonk
      Last Updated: Thu Oct 24, 2019 02:04 PM UTC
      Owner: arrah

      Hi,

      I edited the DBConnections.xml to add two Postgress connections. This 'kind
      of' works, since I can now select them in the Connection Dialog Window and
      connections will work effectively.

      However, the selected values do not appear in the fields. I would have
      hoped they did, since it would allow me to leave the passowrd te be filled
      in in the window, in stead of leaving it in the config file.

      If I just leave the password empty in the DBConnections.xml, osDQ will
      fail to connect. Another option would be to show a password dialogue asking
      for a password in case the pw is empty in the config file.

      Can this be fixed? Or is there another way to keep my password safe?

      Sent from sourceforge.net because you indicated interest in
      https://sourceforge.net/p/dataquality/feature-requests/80/

      To unsubscribe from further messages, please visit
      https://sourceforge.net/auth/subscriptions/

      --
      Bart Jonk
      www.wearespindle.com

       

      Related

      Feature Requests: #80


      Last edit: Bart Jonk 2019-11-13
      • arrah

        arrah - 2019-11-13

        thanks for your comments.
        1.) It shows DSN name for now. Future releases it will show user name also.
        2.) In future release, both option will be given - show password or *

        1. ) How to uncomment connection parameter in configFile.txt

        original

        /* Postgres Native JConnector DRIVER

        Database_Type="POSTGRES"

        Database_Driver="org.postgresql.Driver"

        Database_Protocol="jdbc:postgresql"

        Database_DSN="//???/????"

        Database_User="????"

        Database_Passwd="????"

        Database_Catalog="\"?????\""

        Database_SchemaPattern="????"

        Database_TablePattern=""

        Database_ColumnPattern=""

        Database_TableType="TABLE"

        */

        edited

        / Postgres Native JConnector DRIVER /

        Database_Type="POSTGRES"

        Database_Driver="org.postgresql.Driver"

        Database_Protocol="jdbc:postgresql"

        Database_DSN="//hostname/DBName"

        Database_User="user"

        Database_Passwd="***"

        Database_Catalog="\"cat\""

        Database_SchemaPattern="schema"

        Database_TablePattern=""

        Database_ColumnPattern=""

        Database_TableType="TABLE"

        if you face any issues you can search discussion board for postgres . Many
        people in past have connected and profiled successfully.

        4.) Yes, You select other (JDBC) driver and JDBC URL and Driver Manager
        give the parameters. It will take from there.

        JDBC URL
        "jdbc:postgresql://localhost/test?user=fred&password=secret&ssl=true";

        • Driver Manager name - *org.postgresql.Driver

        hope it works for you

        regards,

        On Wed, Nov 13, 2019 at 4:30 AM Bart Jonk bartjonk@users.sourceforge.net
        wrote:

        Hi Arrah,

        four observations & a new question:
        When starting from configfile.txt

        1) when starting the program from configfile.txt, osDQ will prompt for a
        password, but there's no hint for which user:
        [image: image.png]
        (I tried a different dsn that possibly solves that, see 3 below)

        2) When copying the password from my password manager, the password is
        printed in plaintext (instead of being masked ****):
        [image: afbeelding.png]

        3) with following config nothing happens (no proper connection) (Note: I
        think this has nothing to do with the change - I probably did not configure
        it correctly before either) :
        Postgres Native JConnector DRIVER
        Database_Type="POSTGRES"
        Database_Driver="org.postgresql.Driver"
        Database_Protocol="jdbc:postgresql"
        Database_DSN="//

        profiling@pgwarehouse.cmtxbnegdswm.eu-central-1.rds.amazonaws.com:5432/warehouse

        Database_User=“profiling”
        Database_Passwd=""
        Database_Catalog=“hubspotv”
        Database_SchemaPattern=“\"hubspotv\"”
        Database_TablePattern=""
        Database_ColumnPattern=""
        Database_TableType="TABLE"

        using the DBconnections.xml
        4) using the DBconnections.xml I removed the password reference s from the
        "entry/value" and "entry/databasePasswd" then
        * I could connect and all works perfect *!
        <connection>
        <entry>
        <value databaseuser="profiling" databasetabletype="TABLE" databasecatalog="hubspotv" databasecolumnpattern="" databaseschemapattern="" hubspotv""="" databasedriver="org.postgresql.Driver" databaseconnectionname="hubspotv" databasetablepattern="" databasetype="POSTGRES" databasejdbc="" databasedsn="// pgwarehouse.cmtxbnegdswm.eu-central-1.rds.amazonaws.com/warehouse" databaseprotocol="jdbc:postgresql">
        <database_connectionname>hubspotv</database_connectionname>
        <database_columnpattern>
        <database_dsn>//
        pgwarehouse.cmtxbnegdswm.eu-central-1.rds.amazonaws.com/warehouse
        </database_dsn>
        <database_driver>org.postgresql.Driver</database_driver>
        <database_jdbc>
        <database_passwd></database_passwd>
        <database_protocol>jdbc:postgresql</database_protocol>
        <database_schemapattern>"hubspotv"</database_schemapattern>
        <database_tablepattern>
        <database_tabletype>TABLE</database_tabletype>
        <database_type>POSTGRES</database_type>
        <database_catalog>warehouse</database_catalog>
        <database_user>profiling</database_user></database_tablepattern></database_jdbc></database_columnpattern></value></entry></connection>


        New question:
        Is it possible to add parameters to the JDBC connection?

        https://jdbc.postgresql.org/documentation/head/connect.html#connection-parameters

        especially I'd like to set "sslmode=prefer"

        tell me if you prefer a ticket on sourcefourge for this.

        cheers,
        Bart.

        On Tue, 12 Nov 2019 at 19:16, arrah arrah@users.sourceforge.net wrote:

        • status: open --> pending
        • assigned_to: arrah
        • Group: V5.6.0 --> Feature_Request
        • Priority: 8 --> 2
        • Comment:

        This feature has been added in 6.2.9 . If password is empty, null or
        "****" it would prompt for password from confileFile and DBConnections.xml.
        Please confirm.

        Status: pending
        Group: Feature_Request
        Labels: password
        Created: Thu Oct 24, 2019 02:04 PM UTC by Bart Jonk
        Last Updated: Thu Oct 24, 2019 02:04 PM UTC
        Owner: arrah

        Hi,

        I edited the DBConnections.xml to add two Postgress connections. This 'kind
        of' works, since I can now select them in the Connection Dialog Window and
        connections will work effectively.

        However, the selected values do not appear in the fields. I would have
        hoped they did, since it would allow me to leave the passowrd te be filled
        in in the window, in stead of leaving it in the config file.

        If I just leave the password empty in the DBConnections.xml, osDQ will
        fail to connect. Another option would be to show a password dialogue asking
        for a password in case the pw is empty in the config file.
        Can this be fixed? Or is there another way to keep my password safe?

        Sent from sourceforge.net because you indicated interest in
        https://sourceforge.net/p/dataquality/feature-requests/80/

        To unsubscribe from further messages, please visit
        https://sourceforge.net/auth/subscriptions/

        --
        Bart Jonk

        Lübeckweg 2
        9723 HE Groningen

        Phone: +31 50 800 9008
        Direct: +31 50 800 9026
        Mail: bart.jonk@wearespindle.com
        www.wearespindle.com


        Status: pending
        Group: Feature_Request
        Labels: password
        Created: Thu Oct 24, 2019 02:04 PM UTC by Bart Jonk
        Last Updated: Tue Nov 12, 2019 06:16 PM UTC
        Owner: arrah

        Hi,

        I edited the DBConnections.xml to add two Postgress connections. This 'kind
        of' works, since I can now select them in the Connection Dialog Window and
        connections will work effectively.

        However, the selected values do not appear in the fields. I would have
        hoped they did, since it would allow me to leave the passowrd te be filled
        in in the window, in stead of leaving it in the config file.

        If I just leave the password empty in the DBConnections.xml, osDQ will
        fail to connect. Another option would be to show a password dialogue asking
        for a password in case the pw is empty in the config file.

        Can this be fixed? Or is there another way to keep my password safe?

        Sent from sourceforge.net because you indicated interest in
        https://sourceforge.net/p/dataquality/feature-requests/80/

        To unsubscribe from further messages, please visit
        https://sourceforge.net/auth/subscriptions/

        --
        regards,
        Vivek Singh

        Author of "The Reverse Journey" from Frogbooks

         

        Related

        Feature Requests: #80

  • arrah

    arrah - 2019-11-12

    This feature has been added in 6.2.9 . If password is empty, null or "****" it would prompt for password from confileFile and DBConnections.xml.

    Please confirm.

     
  • arrah

    arrah - 2020-06-05

    in release 6.3.1 password is masked with *

     
  • arrah

    arrah - 2020-06-05
    • status: pending --> closed
     
  • arrah

    arrah - 2020-06-05

    closing it

     

Log in to post a comment.

MongoDB Logo MongoDB