Justin Bleistein <justin.bleistein AT sungard DOT com> wrote:

>any alternatives to running: "dsmserv" via batch mode with the:
>
>dsmadmc -id=login -pass=password syntax...
>
>I mean it's passwords in clear text so all someone has to do is cat that
>file and your exposed... Any ideas on how to automate the client-server
>interface (dsmadmc) without displaying the password anywhere?. Thanks!.

A slight improvement on security would be something like:

 dsmadmc -id=login -pass=`cat /private/tsm/password.txt`

where /private/tsm/password.txt is readable only by the user/process that
invokes dsmadmc.  You could do this in combination with a setuid script
if necessary.

 - seb