Subject | Re: isql client and passwords |
---|---|
Author | rcrfb |
Post date | 2004-08-16T06:20:01Z |
--- In firebird-support@yahoogroups.com, Ian Barwick <barwick@g...> wrote:
on Linux, with the command 'ps -e e' the environment of each process
will be displayed. So it is possible for another user on the same host
to 'read' these environment variables while the 'isql' command is running
(or another process is running in the shell where the environment
variables have been specified).
Roger
> On Saturday 14 August 2004 11:00, Martijn Tonies wrote:command line
> > Hi,
> >
> > > (Using FB 1.5.1 under Linux) - when connecting to the isql
> > > client, is there any way of providing the password eitherinteractively
> > > or using an environment variable or file? (It seems I can eitherprovide
> > > the entire connection string as command line options and riskhaving the
> >statement
> > password
> >
> > > visibile to all users on the local system, or enter the CONNECT
> > > manually, which is inconvenient).1.5.1
> >
> > As far as I know, the following would work:
> >
> > ISC_USER=username
> > ISC_PASSWORD=password
> >
> > That is, if it didn't change to something Firebird specific yet.
>
> Seems to work, thanks.
>
> Now for a silly question: I am working with a fresh RPM install of
> superserver and have only changed the SYSDBA password.providing
> However I can connect to the database, create databases etc. without
> any username / password (either as command line options or asenvironment
> variables). How can I prevent this?But remember:
>
> Ian Barwick
on Linux, with the command 'ps -e e' the environment of each process
will be displayed. So it is possible for another user on the same host
to 'read' these environment variables while the 'isql' command is running
(or another process is running in the shell where the environment
variables have been specified).
Roger