Beefy Boxes and Bandwidth Generously Provided by pair Networks
Do you know where your variables are?
 
PerlMonks  

Re: Hide DBI password in scripts

by Anonymous Monk
on Jan 14, 2018 at 22:21 UTC ( [id://1207238]=note: print w/replies, xml ) Need Help??


in reply to Hide DBI password in scripts

A few specific examples:

MySQL 5.5 Reference 6.5.1.4:

As of MySQL 5.5.16, MySQL Enterprise Edition supports an authentication method that enables MySQL Server to use PAM (Pluggable Authentication Modules) to authenticate MySQL users. PAM enables a system to use a standard interface to access various kinds of authentication methods, such as Unix passwords or an LDAP directory. (...) PAM authentication enables MySQL Server to accept connections from users defined outside the MySQL grant tables and that authenticate using methods supported by PAM. (...) PAM authentication can return to MySQL a user name different from the login user, based on the groups the external user is in and the authentication string provided. This means that the plugin can return the MySQL user that defines the privileges the external PAM-authenticated user should have. For example, a user named joe can connect and have the privileges of the user named developer.

Microsoft: Authentication Methods to SQL Server ....

Oracle authentication services for operating systems

When you are developing applications that are meant to face the internet, you typically have to roll-your-own authentication and authorization infrastructure.   But, in an intranet environment, as I said previously, these practices are usually not allowed.   Developers often develop applications that will run against production databases which they don’t have any access to.   These databases are not secured using user-names and passwords:   they are secured with rules that are centrally managed.   Best-practices and an increasing body of laws throughout the world mandate these requirements.   The enterprise centrally manages the dual concerns of authentication and authorization, and does not permit any installed application or subsystem to use alternate means.

Replies are listed 'Best First'.
Re^2: Hide DBI password in scripts
by Anonymous Monk on Jan 15, 2018 at 12:44 UTC
    as I said previously

    who are you and why should we trust you?

Log In?
Username:
Password:

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://1207238]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this?Last hourOther CB clients
Other Users?
Others romping around the Monastery: (2)
As of 2024-04-20 03:30 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    No recent polls found