Re: username/password@database visible reportserver 6

drop me a line, but this this is pretty screwed at this time.

You can ostensibly solve this problem by through a cgicmd.dat (or some such) that will allow you to hide
all of the information.

However, Oracle has provided a neat little utility that will expose the file and all of your passwords to anybody with a clue, to the best of my recollection
http://report-server-name/dev60cgi/rwcgi60.exe/showmap?server=REPORTSERVER will expose all of this information to the world.

We got around this by writing an http proxy. This was fewer than 100 lines of java.

"rcoo" <rcoo_at_capgemini.nl> wrote in message news:3A0026DC.28454A56_at_capgemini.nl...
> Hello,
>
> We have the following problem:
>
> To connect to the reportserver 6 we used the command
>
> http://example:8000/repsrv60/runrep?server=repsrv60+report=test.rdf+
> userid=c1/scott_at_test
>
> We don't want that the customer see our username/password_at_database.
>
> Can we solve this problem?
>
> Thanks for your attention.
>
> Regards,
> Ron
Received on Thu Nov 02 2000 - 23:51:36 CST