What's new in Kettle 5 WebEx

[Matt Casters]

Just FYI, I'll be doing a "What's new in Kettle 5" web presentation on Wednesday.

http://wiki.pentaho.com/display/COM/Community+Technical+WebEx

Feel free to drop in if you want to get the half-hour quick update to everything that's been going on.

All the best,
Matt
--
Matt Casters <mcas...@pentaho.org>
Chief Data Integration, Kettle founder, Author of Pentaho Kettle Solutions (Wiley)
Fonteinstraat 70 - 9400 OKEGEM - Belgium - Cell : +32 486 97 29 37

Pentaho  -  Powerful Analytics Made Easy

[Rutger Deterd Oude Weme]

Hi,

In most kettle transformation and jobs there are passwords used.

password for db connections are masked in the ktr, kjb and kettle.properties

but this is not encryption.

In our organization we have therefor choosen for project property files that are
maintained by system administrators so they can care for security.

(user access, encryption until runtime, no unencrypted persistance etc.)

In this case of project property files I make use of the job and transformation
parameters and also the get and set variables steps and entries. All of values
that are set will be logged. I think there is no option in pdi for blanking or
masking these values(as also password are clear in log when set to variable)

How are you guys dealing with this kind of security.

Regards,
Rutger

--
You received this message because you are subscribed to the Google Groups "kettle-developers" group.
To post to this group, send email to kettle-d...@googlegroups.com.
To unsubscribe from this group, send email to kettle-develop...@googlegroups.com.
Visit this group at http://groups.google.com/group/kettle-developers?hl=en-US.
 
 

[Matthew Burgess]

In Pentaho Data Integration 5.1, we added the ability to have plugins provide the password encryption:

http://jira.pentaho.com/browse/PDI-6168

For the Enterprise Edition, we created a plugin that provides AES encryption:

http://wiki.pentaho.com/display/EAI/Password+encoding+options

I think we only apply encryption/decryption to PDI passwords, not variables or parameters.  However with Extension Point plugins (http://wiki.pentaho.com/display/EAI/PDI+Extension+Point+Plugins), you could perform your own encryption/decryption of pretty much any value.

Regards,

Matt

To unsubscribe from this group and stop receiving emails from it, send an email to kettle-develop...@googlegroups.com.

To post to this group, send email to kettle-d...@googlegroups.com.

Visit this group at http://groups.google.com/group/kettle-developers.
For more options, visit https://groups.google.com/d/optout.

[Rutger Deterd Oude Weme]

tnx Matt!

[Matt Casters]

Just to be clear on Matt's typo, we have a plugin for two-way password encoding (and encryption):

http://wiki.pentaho.com/display/EAI/PDI+Two-Way+Password+Encoding+plugins

Despite the AES plugin being EE it should be clear to all that this is a very simple and straightforward interface to implement.

Cheers,
Matt

--

Matt Casters <mcas...@pentaho.org>
Chief Data Integration, Kettle founder, Author of Pentaho Kettle Solutions (Wiley)
Fonteinstraat 70 - 9400 OKEGEM - Belgium - Cell : +32 486 97 29 37

Pentaho  -  Powerful Analytics Made Easy

2014-12-11 15:01 GMT+01:00 Matthew Burgess <matt...@gmail.com>: