Page 1 of 1

How to keep password out of the log?

Posted: Mon Jan 09, 2012 12:35 am
by bicap
If a unix script is called from an execute command activity, is there any way to not display the password in the director log?

My script is
sh /data/basel2dev/integration/scripts/displaysysdate.sh #Integration.$PrmDBIntgUser# "File Validation Script" "E004" "Unmatched file count with trailer record" "testfile" #Integration.$PrmDBIntgPwd# #Integration.$PrmDBIntgSchema#

the value of #Integration.$PrmDBIntgPwd# should not be displayed as clear text in the director log

Posted: Mon Jan 09, 2012 7:41 am
by chulett
Note: split from this topic.

Posted: Mon Jan 09, 2012 7:44 am
by chulett
You'd have to write your own routine, as noted in the linked post, that did not log that information. Note, however, that since you are passing the password to the script on the command line, it will still be visible to anything looking at the running process.

Posted: Mon Jan 09, 2012 10:21 am
by eph
Hi,

Is the content of the command line (except passwords) mandatory in the log?

If not, you can use the /NOLOG/ option in the EC activity.

Regards,
Eric

Posted: Tue Jan 10, 2012 12:03 am
by bicap
Thanks Eric, this is helpful for my requirement

Posted: Tue Jan 10, 2012 7:34 am
by chulett
Ah yes, did this actually get documented anywhere? It goes at the beginning of the Parameter property according to the 3 posts here that mention that little secret. :wink:

Posted: Wed Jan 11, 2012 10:39 am
by eph
The first time I saw it was on dsxchange :)

Then I found it in a pdf, but I can't recall its name (one about job sequence).

You can find more info on IBM' website

Regards,
Eric

Posted: Sat Jan 21, 2012 10:00 pm
by qt_ky
Interesting feature. New to me!

The PDF is noted at the bottom of the web page on the link you provided:

IBM InfoSphere DataStage and QualityStage Designer Client Guide

Posted: Sat Jan 21, 2012 11:07 pm
by pandeesh
Good learning!! :D