Message-ID: <f56d0f7b22cd540533793e1e2e6fd6df1b91ff02.camel@cybertec.at>
Subject: Re: Password encryption in oracle_fdw extention
From: Laurenz Albe <laurenz.albe@cybertec.at>
To: Mukesh Rajpurohit <vivasvan1902@gmail.com>, pgsql-admin@postgresql.org
Date: Sat, 27 Mar 2021 11:17:32 +0100
In-Reply-To: 
 <CAL+ptABnykzMvAev=GzxK4kNkRERGQ6ZqhiGS89ROKQCBCqDFg@mail.gmail.com>
References: 
	<CAL+ptABnykzMvAev=GzxK4kNkRERGQ6ZqhiGS89ROKQCBCqDFg@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"
User-Agent: Evolution 3.36.5 (3.36.5-2.fc32) 
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Archived-At: 
 <https://www.postgresql.org/message-id/f56d0f7b22cd540533793e1e2e6fd6df1b91ff02.camel%40cybertec.at>
Precedence: bulk

On Fri, 2021-03-26 at 22:46 +0530, Mukesh Rajpurohit wrote:
> I want to use encrypted oracle password in oracle_ fdw extention to connect to oracle.
>  But seems this option is not available in oracle_fdw. I know we can use oracle wallet
>  but in that too we have to configure plain text oracle password which we do not want to do.
>  Please suggest if any other alternate.

I don't think you can use encrypted passwords with Oracle. Can you point me to
documentation if that is not true?

Anyway, if you don't want a password in the user mapping, the way to go is
external authentication.  You could use the "secure" external password store,
which stores the encrypted password in a wallet, or you could use SSL
certificate authentication.

To use an external authentication method with oracle_fdw, specify an empty
user name.  Also, watch out: I am not an expert with Oracle's licencing policies
(that would be a full time job), but you may need to pay extra if you want good
security.

Yours,
Laurenz Albe
-- 
Cybertec | https://www.cybertec-postgresql.com