Alter Credentialstore Add User Puts Password in Clear Text in the Ggserr.log (Doc ID 2054382.1)

Last updated on JANUARY 25, 2017

Applies to:

Oracle GoldenGate - Version 12.1.2.0.0 and later
Information in this document applies to any platform.

Symptoms

When adding users to CREDENTIALSTORE and the password is added as part of the ADD command then the password is displayed in clear text in the ggserr.log.
If the password is entered at the command prompt then it is not displayed in the ggserr.log.

Enter the command as -
  

ALTER CREDENTIALSTORE ADD USER test, password test

Credential store in ./dircrd/ altered.



and this shows in the ggserr.log as -

2014-12-03 07:19:37  INFO    OGG-00987  Oracle GoldenGate Command Interpreter
for Oracle:  GGSCI command (test): ALTER CREDENTIALSTORE ADD USER test, password test.

  
If the password option is omitted and entered at the prompt -

GGSCI (slc03qht) 3> ALTER CREDENTIALSTORE ADD USER test1
Password:
- enter password at prompt
Credential store in ./dircrd/ altered.

GGSCI (xxxx) 4>



- password is entered at the prompt and is not displayed and this shows in ggserr.log as -

2014-12-03 07:20:04  INFO    OGG-00987  Oracle GoldenGate Command Interpreter
for Oracle:  GGSCI command (test): ALTER CREDENTIALSTORE ADD USER test1.

  

- and there is no reference to the password in the ggserr.log.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms