Re: [Wrapper-user] Password - exposed when service installed

[Leif M. <le...@ta...>]

Ewan,
    How are you installing the service?

    I am guessing that you specified the wrapper.ntservice.password 
property on the
command line when you installed the Wrapper as a service:

    Wrapper.exe -i ../conf/wrapper.conf wrapper.ntservice.password=xxxx

    Any properties that you specify on the command line will be included 
in the path to
executable field.   This is because the Wrapper needs to be able to 
reconstruct all
properties again when the service is run.   In the case of the account 
password, the
property is not actually needed when the service is run.  But the 
Wrapper treats all
command line properties equally.

    If you specify the property in the wrapper.conf file rather than 
from the command line
then it will not show up on the command line.  I am not sure how you are 
obtaining the
password.  There may be a reason why it needs to be placed onto the 
command line.
    If you only want the password property to be set when the service is 
installed, a
possible workaround would be to create a simple one line text file 
called password.conf
that contains the wrapper.ntservice.password property.   Place that file 
into the same
directory as the wrapper.conf file.   Then add the following line to the 
end of the
wrapper.conf file: (the path is relative to the location of the 
Wrapper.exe file)
#include ../conf/password.conf

    The password.conf file will be loaded when you install the service.  
Once it is installed
the file can be deleted.   When the Wrapper is run later as a service, 
it will ignore any
include statements which attempt to include files that no longer exist.

Cheers,
Leif

Ewan Carr wrote:

>Hi,
>
>Version 3.0.0 introduces
>"Add the ability to specify an account name and
>password when installing an NT service."
>
>Ive noticed that when you then look at the proerties
>of the service once you have installed it the password
>appears on the "path to executable" field in the
>clear.
>This seems a bit of a security problem. Is there a
>switch available so that the passowrd is removed once
>the service is installed
>
>Thanks for any info
>Ewan
>
>ps please reply to me as well as the list - Ta !
>  
>