It's all about the answers!

Ask a question

Is there a way to use an encrypted password for RQMURLUtility?


Pierre Bentkowski (131517) | asked May 05 '21, 10:30 a.m.
I need to call the  RQMURLUtility in a PUB (RPE) template.

When doing the call I need top provide the user id and the password.
I do not want the user to provided them manual.
I can use the following PUB Internal Variable: _sessionInfo.getDatasourceProperty

When I get the password
_sessionInfo.getDatasourceProperty("aDataSource","password", "")
    
I get an encrypted version of the password.

Is there a way to use that encrypted password for the RQMURLUtility?
Or get a clear version of the password from _sessionInfo?

Thank you

2 answers



permanent link
Subhajit Bhuiya (6222) | answered May 07 '21, 9:29 a.m.
JAZZ DEVELOPER

 Please use clear version of the password. it can not accept encrypted version of the password.


Comments
Pierre Bentkowski commented May 18 '21, 10:04 a.m.
That defeat the whole purpose.

Doing this would mean that the user will need enter the password in clear in a PUB template variable.

Is the _sessionInfo.getDatasourceProperty can be set to return the clear password?

What is the purpose of getting a encrypted password? Who can consume it?

permanent link
Pierre Bentkowski (131517) | answered May 18 '21, 11:23 a.m.
Currently there is no way to use an encrypted password for RQMURLUtility.

I have created en enhancement.

Comments
Jackie Albert commented May 18 '21, 11:37 a.m.

Could you provide the link to the enhancement?


Luca Sentimenti commented Aug 26, 9:49 a.m.

Hi Pierre

I've exactly the same problem
any news about encrypting the password with RQMURLUtility?
Can you pls provide the link for the enhancement request?
Thank You
Luca


Pierre Bentkowski commented Aug 27, 10:49 a.m.
I cannot find it anymore.
We could created a new one.
Because of security concern, I think it will be rejected.
(Like having the password in plain text in PUB template is a better option ...)


Ralph Schoon commented Aug 27, 11:08 a.m.
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER

You can not encrypt the password. You could only obfuscate it. The same with the build engines or the SCM command line. 

You could use AES or something, but then you would have to know a common password, and that would have to be in the code or the script. If it was in the RQM code, it would easy enough to find it and un-obfuscate the passwords. 

Both ends need to know at least some key to use encryption and that does not go away..  

Your answer


Register or to post your answer.


Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.