Обсуждение: Password encryption in oracle_fdw extention

Поиск
Список
Период
Сортировка

Password encryption in oracle_fdw extention

От
Mukesh Rajpurohit
Дата:
Hi,
         I want to use encrypted oracle password in oracle_ fdw extention to connect to oracle. But seems this option is not available in oracle_fdw. I know we can use oracle wallet but in that too we have to configure plain text oracle password which we do not want to do. Please suggest if any other alternate.

Thanks
Mukesh

Re: Password encryption in oracle_fdw extention

От
legrand legrand
Дата:
Hello Mukesh,
Oracle_fdw is not maintained by this group, but by Laurenz Albe / Cybertec
at https://github.com/laurenz/oracle_fdw.
You will get a better feedback after posting there :0)
Regards
PAscal



--
Sent from: https://www.postgresql-archive.org/PostgreSQL-admin-f2076596.html



Re: Password encryption in oracle_fdw extention

От
Mukesh Rajpurohit
Дата:
Thanks PAscal.

Thanks,
Mukesh


On Sat, Mar 27, 2021, 1:20 PM legrand legrand <legrand_legrand@hotmail.com> wrote:
Hello Mukesh,
Oracle_fdw is not maintained by this group, but by Laurenz Albe / Cybertec
at https://github.com/laurenz/oracle_fdw.
You will get a better feedback after posting there :0)
Regards
PAscal



--
Sent from: https://www.postgresql-archive.org/PostgreSQL-admin-f2076596.html


Re: Password encryption in oracle_fdw extention

От
Laurenz Albe
Дата:
On Fri, 2021-03-26 at 22:46 +0530, Mukesh Rajpurohit wrote:
> I want to use encrypted oracle password in oracle_ fdw extention to connect to oracle.
>  But seems this option is not available in oracle_fdw. I know we can use oracle wallet
>  but in that too we have to configure plain text oracle password which we do not want to do.
>  Please suggest if any other alternate.

I don't think you can use encrypted passwords with Oracle. Can you point me to
documentation if that is not true?

Anyway, if you don't want a password in the user mapping, the way to go is
external authentication.  You could use the "secure" external password store,
which stores the encrypted password in a wallet, or you could use SSL
certificate authentication.

To use an external authentication method with oracle_fdw, specify an empty
user name.  Also, watch out: I am not an expert with Oracle's licencing policies
(that would be a full time job), but you may need to pay extra if you want good
security.

Yours,
Laurenz Albe
-- 
Cybertec | https://www.cybertec-postgresql.com




Re: Password encryption in oracle_fdw extention

От
Mukesh Rajpurohit
Дата:
Thanks Laurenz.

Thanks,
Mukesh


On Sat, Mar 27, 2021, 3:47 PM Laurenz Albe <laurenz.albe@cybertec.at> wrote:
On Fri, 2021-03-26 at 22:46 +0530, Mukesh Rajpurohit wrote:
> I want to use encrypted oracle password in oracle_ fdw extention to connect to oracle.
>  But seems this option is not available in oracle_fdw. I know we can use oracle wallet
>  but in that too we have to configure plain text oracle password which we do not want to do.
>  Please suggest if any other alternate.

I don't think you can use encrypted passwords with Oracle. Can you point me to
documentation if that is not true?

Anyway, if you don't want a password in the user mapping, the way to go is
external authentication.  You could use the "secure" external password store,
which stores the encrypted password in a wallet, or you could use SSL
certificate authentication.

To use an external authentication method with oracle_fdw, specify an empty
user name.  Also, watch out: I am not an expert with Oracle's licencing policies
(that would be a full time job), but you may need to pay extra if you want good
security.

Yours,
Laurenz Albe
--
Cybertec | https://www.cybertec-postgresql.com