Alter Credentialstore Add User Puts Password in Clear Text in the Ggserr.log
Last updated on JANUARY 25, 2017
Applies to:
Oracle GoldenGate - Version 12.1.2.0.0 and laterInformation in this document applies to any platform.
Symptoms
When adding users to CREDENTIALSTORE and the password is added as part of the ADD command then the password is displayed in clear text in the ggserr.log.
If the password is entered at the command prompt then it is not displayed in the ggserr.log.
Enter the command as -
ALTER CREDENTIALSTORE ADD USER test, password test
Credential store in ./dircrd/ altered.
Credential store in ./dircrd/ altered.
and this shows in the ggserr.log as -
2014-12-03 07:19:37 INFO OGG-00987 Oracle GoldenGate Command Interpreter
for Oracle: GGSCI command (test): ALTER CREDENTIALSTORE ADD USER test, password test.
for Oracle: GGSCI command (test): ALTER CREDENTIALSTORE ADD USER test, password test.
If the password option is omitted and entered at the prompt -
GGSCI (slc03qht) 3> ALTER CREDENTIALSTORE ADD USER test1
Password:
- enter password at prompt
Credential store in ./dircrd/ altered.
GGSCI (xxxx) 4>
Password:
- enter password at prompt
Credential store in ./dircrd/ altered.
GGSCI (xxxx) 4>
- password is entered at the prompt and is not displayed and this shows in ggserr.log as -
2014-12-03 07:20:04 INFO OGG-00987 Oracle GoldenGate Command Interpreter
for Oracle: GGSCI command (test): ALTER CREDENTIALSTORE ADD USER test1.
for Oracle: GGSCI command (test): ALTER CREDENTIALSTORE ADD USER test1.
- and there is no reference to the password in the ggserr.log.
Cause
Sign In with your My Oracle Support account |
|
Don't have a My Oracle Support account? Click to get started |
My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms