| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Usenet -> c.d.o.server -> Re: OWS 3.0 - need help with Database Authorization method
J. C. Kelly wrote:
>
> I am evaluating OWS 3.0. (beta version 3) I want to use the database
> authorization method, where the OWS agent solicits a database username
> and password.
...
> I have tried editing the DAD descriptor portion of the wrb.app file
> (which is created by the Web-based administrator interface). If I erase
> the username and password lines, I get a cartridge authentication error
> when I try to connect. If I leave the lines intact, but erase the
> values of username and password, I get the same error (that is:
> username =
> password =
> )
>
> As an aside, the wrb.app is supposed to store the passwords as encrypted
> information, but it is, in fact, storing them as clear text that most
> anyone with a unix account on the OWS server could read.
To fix the problem with your DAD descriptor, completely remove the lines for 'username=' and 'password='. It should then prompt you for user/passwd as expected.
To create a new DAD without storing the user/passwd in the config file, you must put a username/password in the DAD form, but leave the box for 'Store the user name and password in the DAD' unchecked.
Not sure about your encryptoin question, but I don't recall seeing anything about storing encrypted passwords in the config files.
 |
 |