Re: OS authenticated vs. Known passwords

On 03-Feb-99 23:03:24 David Lane wrote:

>In article <1425.697T1601T12623996_at_rheingau.netsurf.de>,
>lothar.armbruester_at_rheingau.netsurf.de (Lothar Armbrüster) wrote:

[...]

>Lothar .... We are planning on doing the same but we want to avoid
>hard-coding the password into the applications but don't want to leave
>any unencrypted password hanging around in the NT registry or ini
>files. Have you managed to do this? .... Dave Lane

>Dave Lane (dlane_at_pt.lu)

Well we did not manage to aviod this. We actually hardcoded the password for the role into the application. This works for us because our database is accessed only by our own inhouse application. As no one needs to remember the password, it can be quite unrememberable (nice word isn't it? ;-)
You could use something like 'rt6jg5tb'. You also should separate the password string from the 'set role db_user identified by' statement.

Hope that helps,
Lothar

--

Lothar Armbrüster       | lothar.armbruester_at_rheingau.netsurf.de
Schulstr. 12            | lothar.armbruester_at_t-online.de
D-65375 Oestrich-Winkel |