Security of DBS file

[mdachi]

Hello all,

I have been testing and evaluation the dataservices server for a while
and it is a great product. There is one catch that I have not been
able to figure out. For T24 connection, one needs to define username
and password in the configuration file. While this is fine for testing
and evaluation, it is not secure in a production, since anyone who
gains access to the server will see these credentials as they are
stored in plain text.

Is there a way to supply the connection username and password from an
external source at runtime as a parameter? If someone has a better
idea how to protect these credentials, please help.

Thanks,

Hamisi
----------

[Dmitry.]

In DS 2.5.1 you can define a data source.
Menu "Configure - Data sources"

Then in your configuration you can reference the datasource name.
For example you have created datasource named DS_T24

Then in dbs file you can reference it like this:

<data ...>
<config id="t24">
<property name="carbon_datasource_name">DS_T24</property>
</config>

<query id="modifyCustomer" useConfig="t24">
...
</query>
...
</data>

[mdachi]

Hello Dmitry

Thanks very much for the explanation. Let me give it a try and will
let you know the results.

Thanks,

Hamisi
-------