What's new in Kettle 5 WebEx

111 views
Skip to first unread message

Matt Casters

unread,
Jan 7, 2013, 6:19:23 AM1/7/13
to Kettle Developers mailing list
Just FYI, I'll be doing a "What's new in Kettle 5" web presentation on Wednesday.

http://wiki.pentaho.com/display/COM/Community+Technical+WebEx

Feel free to drop in if you want to get the half-hour quick update to everything that's been going on.

All the best,
Matt
--
Matt Casters <mcas...@pentaho.org>
Chief Data Integration, Kettle founder, Author of Pentaho Kettle Solutions (Wiley)
Fonteinstraat 70 - 9400 OKEGEM - Belgium - Cell : +32 486 97 29 37
Pentaho  -  Powerful Analytics Made Easy

Rutger Deterd Oude Weme

unread,
Dec 11, 2014, 8:32:58 AM12/11/14
to kettle-d...@googlegroups.com
Hi,

In most kettle transformation and jobs there are passwords used.
password for db connections are masked in the ktr, kjb and kettle.properties
but this is not encryption.
In our organization we have therefor choosen for project property files that are
maintained by system administrators so they can care for security.
(user access, encryption until runtime, no unencrypted persistance etc.)

In this case of project property files I make use of the job and transformation
parameters and also the get and set variables steps and entries. All of values
that are set will be logged. I think there is no option in pdi for blanking or
masking these values(as also password are clear in log when set to variable)

How are you guys dealing with this kind of security.

Regards,
Rutger

--
You received this message because you are subscribed to the Google Groups "kettle-developers" group.
To post to this group, send email to kettle-d...@googlegroups.com.
To unsubscribe from this group, send email to kettle-develop...@googlegroups.com.
Visit this group at http://groups.google.com/group/kettle-developers?hl=en-US.
 
 

Matthew Burgess

unread,
Dec 11, 2014, 9:02:04 AM12/11/14
to kettle-d...@googlegroups.com
In Pentaho Data Integration 5.1, we added the ability to have plugins provide the password encryption:


For the Enterprise Edition, we created a plugin that provides AES encryption:


I think we only apply encryption/decryption to PDI passwords, not variables or parameters.  However with Extension Point plugins (http://wiki.pentaho.com/display/EAI/PDI+Extension+Point+Plugins), you could perform your own encryption/decryption of pretty much any value.

Regards,
Matt



To unsubscribe from this group and stop receiving emails from it, send an email to kettle-develop...@googlegroups.com.

To post to this group, send email to kettle-d...@googlegroups.com.

Rutger Deterd Oude Weme

unread,
Dec 11, 2014, 9:43:40 AM12/11/14
to kettle-d...@googlegroups.com
tnx Matt!

Matt Casters

unread,
Dec 11, 2014, 11:43:23 AM12/11/14
to Kettle Developers mailing list
Just to be clear on Matt's typo, we have a plugin for two-way password encoding (and encryption):


Despite the AES plugin being EE it should be clear to all that this is a very simple and straightforward interface to implement.

Cheers,
Matt

--
Matt Casters <mcas...@pentaho.org>
Chief Data Integration, Kettle founder, Author of Pentaho Kettle Solutions (Wiley)
Fonteinstraat 70 - 9400 OKEGEM - Belgium - Cell : +32 486 97 29 37
Pentaho  -  Powerful Analytics Made Easy


2014-12-11 15:01 GMT+01:00 Matthew Burgess <matt...@gmail.com>:
Reply all
Reply to author
Forward
0 new messages