Encrypted password is decrypted in the log

satish_valavala · Post by **satish_valavala** » Fri Feb 11, 2011 5:36 pm

We have an environment variable encrypted password defined at DS Administrator tool. When we call that in a job/paramset it is working fine and not showing the password value in the log. We have provided password value as $PROJDEF in the paramset and job. But, when we pass this encrypted password, as a param to external shell script (in a sequencer job activity or Before/After-job subroutine in a parallel job) it is showing the real password in the job lob.

ray.wurlod · Post by **ray.wurlod** » Fri Feb 11, 2011 10:31 pm

Yes. It does.

Probably not best practice. But that's how it works at the moment. Take it up with IBM.

PaulVL · Post by **PaulVL** » Sat Feb 12, 2011 3:15 am

Ya, that's not really a feature that should be broadcast as it is a security concern. Could the site admins blank out portions of that statement please?