Subject Re: isql client and passwords
Author rcrfb
--- In firebird-support@yahoogroups.com, Ian Barwick <barwick@g...> wrote:
> On Saturday 14 August 2004 11:00, Martijn Tonies wrote:
> > Hi,
> >
> > > (Using FB 1.5.1 under Linux) - when connecting to the isql
command line
> > > client, is there any way of providing the password either
interactively
> > > or using an environment variable or file? (It seems I can either
provide
> > > the entire connection string as command line options and risk
having the
> >
> > password
> >
> > > visibile to all users on the local system, or enter the CONNECT
statement
> > > manually, which is inconvenient).
> >
> > As far as I know, the following would work:
> >
> > ISC_USER=username
> > ISC_PASSWORD=password
> >
> > That is, if it didn't change to something Firebird specific yet.
>
> Seems to work, thanks.
>
> Now for a silly question: I am working with a fresh RPM install of
1.5.1
> superserver and have only changed the SYSDBA password.
> However I can connect to the database, create databases etc. without
providing
> any username / password (either as command line options or as
environment
> variables). How can I prevent this?
>
> Ian Barwick

But remember:
on Linux, with the command 'ps -e e' the environment of each process
will be displayed. So it is possible for another user on the same host
to 'read' these environment variables while the 'isql' command is running
(or another process is running in the shell where the environment
variables have been specified).

Roger