ADSM-L

[no subject]

2015-10-04 17:35:06
                                                                   Subject:
                                                  Regular output of figures
                                                  from ADSM
                                                             Attachment(s):
                                                  <font size=-1></font>
Steven,

On Unix, I use the following technique to prevent passwords from being seen
in my scripts.

1) Create a file whose sole contents is a single record containing the
password.  (Let's call the file "passfile").
2) Protect the password file from being seen by anybody but you or the user
under which your script will run. (e.g., chmod 600 passfile).
3) Have the ADSM commands in your script dynamically pull the password
value from the password file as neeed.  See next line for sample command.
dsmadmc  -id=YourAdsmID  -pa=$(cat passfile)  'query process'

You could even extend this technique to the id value thereby adding an
additional level of protection by hiding the ids you have defined in ADSM.
And to take it even further, you could have several such password files,
each with a different id and password combo to represent the various levels
of ADSM security within your organization.  The only critical factor here
is how tight or loose you code the permissions on the password file(s).  By
the way, an added benefit of the technique is to allow you to easily change
passwords.  Hope this helps.

Bob Brazner
Johnson Controls, Inc.
(Embedded image moved to file: pic07790.pcx)


<Prev in Thread] Current Thread [Next in Thread>
  • [no subject], Unknown <=