How can I hide passwords for vsql in shell scripts?

[bud]

I usually place the username and password on the vsql command line in scripts. However, the "ps" command will show the command line of the process to other users, thus revealing the username and password for the account! Is it possible to hide the password from other users when they invoke "ps"?

[JimKnicely]

Check out the VSQL_PASSWORD environment variable. You can set it to the password to use for the connection.

On page 279:

https://my.vertica.com/docs/6.1.x/PDF/H ... sGuide.pdf

[bud]

Hey, thanks, Jim. VSQL_PASSWORD works!

Code: Select all

[dbadmin@v01 ~]$ cat ladies.sh
export VSQL_PASSWORD=man
vsql -U ladies -c "select count(*) from dual;"

[dbadmin@v01 ~]$ ./ladies.sh
 count
-------
     1
(1 row)

[dbmsuser7]

-w vs using VSQL_PASSWORD: I'm looking at my process list after using "-w", and the password isn't there. Does Vertica somehow prevent the system from seeing the password?

[NorbertKrupa]

Showing the password seems not secure to me.

[JimKnicely]

Hi dbmsuser7,

I think that the password showing in a ps command was an issue in older versions of vsql. It does not seem to be an issue now (i.e. Version 7).

Code: Select all

[dbadmin@vertica01 ~]$ cat cow.sh
vsql -U cow -w patty -c "select sleep(30);"
[dbadmin@vertica01 ~]$ ./cow.sh &
[1] 14458
[dbadmin@vertica01 ~]$ ps -ef | grep -i vsql
dbadmin  14459 14458  0 11:38 pts/0    00:00:00 vsql -U cow -w       -c select sleep(30);
dbadmin  14475  9246  0 11:38 pts/0    00:00:00 grep -i vsql
[dbadmin@vertica01 ~]$  sleep
-------
     0
(1 row)


[1]+  Done                    ./cow.sh
[dbadmin@vertica01 ~]$

[id10t]

Hi!

[DELETED]