Re: [Wrapper-user] Windows use password is available in the service properties

[Leif M. <le...@ta...>]

Peter,
    Thanks for pointing this out.  It is a problem that I have already 
fixed.  It has been in
CVS for a few months and will be in the 3.2.0 release.  There are 
actually a few ways
to do this in the new version.

    One option for now is to set the password in an environment 
variable.   Then place
the following in your wrapper.conf file
wrapper.ntservice.password=%PASSWORD%
The script that runs the Wrapper to install the service would set this 
environment variable
for the current environment but it would not be there later on when the 
service is actually
run.

    Another option is to create a temporary file password.conf 
containing the password
property.  Then include that from the wrapper.conf file:
#include ../conf/password.conf
Once the service has been installed, the file can be deleted.

Cheers,
Leif


Peter Fen wrote:
> Hi ,
>
> I'm new to this tool and I have the following security issue. When I  
> install the service , I specify Windows account name and password, and 
> then this info is available in the service properties in the field 
> 'Path to executable' , like
>
> D:\Server\build\service\Wrapper.exe -s 
> D:\Server\build\service\conf\wrapper.conf 
> "wrapper.ntservice.name=Report Server" 
> "wrapper.ntservice.displayname=Report Server" 
> "wrapper.ntservice.description=Report Server" 
> wrapper.ntservice.account=dom01\ReportAdmin 
> wrapper.ntservice.password=ReportPass 
> wrapper.app.parameter.5=_run_rserver 
> wrapper.app.parameter.11=_shutdown_rserver
>
> The issue that command line argument ' 
> wrapper.ntservice.password=ReportPass '  is stored  to this field.
> Keeping the account name and password in non-encrypted way in the 
> configuration file doesn't work for me as well.
>
> Is there any way to hide the password ?
>
> -- 
>
> ----------------------------------------------------
> Peter Fen    pe...@gm... <mailto:pe...@gm...>