From: Laurenz Albe <laurenz.albe@cybertec.at>
To: Mukesh Rajpurohit <vivasvan1902@gmail.com>
To: pgsql-admin@postgresql.org
Subject: Re: Password encryption in oracle_fdw extention
Date: Sat, 27 Mar 2021 11:17:32 +0100
Message-ID: <f56d0f7b22cd540533793e1e2e6fd6df1b91ff02.camel@cybertec.at> (raw)
In-Reply-To: <CAL+ptABnykzMvAev=GzxK4kNkRERGQ6ZqhiGS89ROKQCBCqDFg@mail.gmail.com>
References: <CAL+ptABnykzMvAev=GzxK4kNkRERGQ6ZqhiGS89ROKQCBCqDFg@mail.gmail.com>
On Fri, 2021-03-26 at 22:46 +0530, Mukesh Rajpurohit wrote:
> I want to use encrypted oracle password in oracle_ fdw extention to connect to oracle.
> But seems this option is not available in oracle_fdw. I know we can use oracle wallet
> but in that too we have to configure plain text oracle password which we do not want to do.
> Please suggest if any other alternate.
I don't think you can use encrypted passwords with Oracle. Can you point me to
documentation if that is not true?
Anyway, if you don't want a password in the user mapping, the way to go is
external authentication. You could use the "secure" external password store,
which stores the encrypted password in a wallet, or you could use SSL
certificate authentication.
To use an external authentication method with oracle_fdw, specify an empty
user name. Also, watch out: I am not an expert with Oracle's licencing policies
(that would be a full time job), but you may need to pay extra if you want good
security.
Yours,
Laurenz Albe
--
Cybertec | https://www.cybertec-postgresql.com
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: laurenz.albe@cybertec.at, vivasvan1902@gmail.com
Subject: Re: Password encryption in oracle_fdw extention
In-Reply-To: <f56d0f7b22cd540533793e1e2e6fd6df1b91ff02.camel@cybertec.at>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox