Decryption Issue

Nagac · Post by **Nagac** » Fri Feb 13, 2015 10:39 am

Hi

I need to decrypt the source files before processing into database using datastage. For this I have batch script which will decrypt the files and make them ready to process.

I am calling script via Command Execute Activity in Datastage, which giving error "No Secret Key". Same Command is being executed successfully when i run it manually on Server at Command Prompt using the same User ID as Datastage Execution.

For testing purpose i have created separate Sequence with the below command and executed:

Code: Select all

GPG --batch --passphrase-file I:\app\keyphrase\PassPhrase.txt --output J:\dw\out\01_20_200_0000_02012015_003005.csv --decrypt J:\dw\in\01_20_200_0000_02012015_003005.csv.gpg

Output:

Output from command ====>
gpg: encrypted with RSA key, ID 00000000
gpg: decryption failed: No secret key

qt_ky · Post by **qt_ky** » Fri Feb 13, 2015 2:20 pm

It is possible that your job actually executes under some other user account (you could add some sort of whoami command to verify) and/or likely that the run time execution environment has different settings that your command line session. Start doing some comparisons there.

ray.wurlod · Post by **ray.wurlod** » Fri Feb 13, 2015 2:38 pm

Do you get a different result when running the job from dsjob versus running the job from a DataStage client?

Nagac · Post by **Nagac** » Fri Feb 13, 2015 4:39 pm

Hi Ray

I don't see any difference in result of dsjob and client tool execution.

Hi qt_ky
I have checked the user id by using (id) in before routine and found the actual user and Command level the given command works fine.

What kind of comparisons we can do here??

PaulVL · Post by **PaulVL** » Fri Feb 13, 2015 5:14 pm

Does the command line version work when your current working directory is the project directory (as would it would be in a command execute activity)?

Echo your env settings before doing that GBG call. Compare that with your shell settings when running manually. Maybe $PATH or some other odd setting is messing with you.

Is HOME environment variable the same for both runs?

Nagac · Post by **Nagac** » Fri Feb 13, 2015 7:07 pm

Yes Paul, Command worked from the Project home directory.

I could see some differences in Environment settings
Job Env:

TEMP=C:\Windows\system32\config\systemprofile\AppData\Local\Temp
TERM=nutc
TERMCAP=C:\PROGRA~2\MKSTOO~1\etc\termcap
TERMINFO=C:\PROGRA~2\MKSTOO~1\usr\lib\terminfo
TMP=C:\Windows\system32\config\systemprofile\AppData\Local\Temp
UNIVERSE_CONTROLLING_TERM=1
UNIVERSE_PARENT_PROCESS=11192
USERDOMAIN=GLOBALEXT
USERNAME=<SERVERNAME>$
USERPROFILE=C:\Windows\system32\config\systemprofile

Command Line Env:

TEMP=C:\Users\DWDATA~1.SV\AppData\Local\Temp
TERM=nutc
TERMCAP=C:\PROGRA~2\MKSTOO~1\etc\termcap
TERMINFO=C:\PROGRA~2\MKSTOO~1\usr\lib\terminfo
TMP=C:\Users\DWDATA~1.SV\AppData\Local\Temp
USERDNSDOMAIN=GLOBAL.COMP.NET
USERDOMAIN=GLOBAL
USERNAME=dsuser
USERPROFILE=C:\Users\dsuser

Where do we change the domain in Datastage??

Nagac · Post by **Nagac** » Mon Feb 16, 2015 6:14 am

Thanks Guys,

I've fixed this issue by changing the User ID which runs the dsrpcd Service.

Thanks

chulett · Post by **chulett** » Mon Feb 16, 2015 8:55 am

Can you explain what exactly that means? Changed it from what to what?

Nagac · Post by **Nagac** » Thu Feb 19, 2015 4:15 pm

dsrpc was running by using local system account, i have changed to specific user id which have full access and i have configured gpg keys for that user.

It worked fine when i manually run a datastage Jobs. But it throws same error when i schedule datastage Job. i have configured same user in administrator schedule tab.

Do i need to configure any other place for schedule?