Thread: Password encryption in oracle_fdw extention
Hi,
I want to use encrypted oracle password in oracle_ fdw extention to connect to oracle. But seems this option is not available in oracle_fdw. I know we can use oracle wallet but in that too we have to configure plain text oracle password which we do not want to do. Please suggest if any other alternate.
Thanks
Mukesh
Hello Mukesh, Oracle_fdw is not maintained by this group, but by Laurenz Albe / Cybertec at https://github.com/laurenz/oracle_fdw. You will get a better feedback after posting there :0) Regards PAscal -- Sent from: https://www.postgresql-archive.org/PostgreSQL-admin-f2076596.html
Thanks PAscal.
Thanks,
Mukesh
On Sat, Mar 27, 2021, 1:20 PM legrand legrand <legrand_legrand@hotmail.com> wrote:
Hello Mukesh,
Oracle_fdw is not maintained by this group, but by Laurenz Albe / Cybertec
at https://github.com/laurenz/oracle_fdw.
You will get a better feedback after posting there :0)
Regards
PAscal
--
Sent from: https://www.postgresql-archive.org/PostgreSQL-admin-f2076596.html
On Fri, 2021-03-26 at 22:46 +0530, Mukesh Rajpurohit wrote: > I want to use encrypted oracle password in oracle_ fdw extention to connect to oracle. > But seems this option is not available in oracle_fdw. I know we can use oracle wallet > but in that too we have to configure plain text oracle password which we do not want to do. > Please suggest if any other alternate. I don't think you can use encrypted passwords with Oracle. Can you point me to documentation if that is not true? Anyway, if you don't want a password in the user mapping, the way to go is external authentication. You could use the "secure" external password store, which stores the encrypted password in a wallet, or you could use SSL certificate authentication. To use an external authentication method with oracle_fdw, specify an empty user name. Also, watch out: I am not an expert with Oracle's licencing policies (that would be a full time job), but you may need to pay extra if you want good security. Yours, Laurenz Albe -- Cybertec | https://www.cybertec-postgresql.com
Thanks Laurenz.
Thanks,
Mukesh
On Sat, Mar 27, 2021, 3:47 PM Laurenz Albe <laurenz.albe@cybertec.at> wrote:
On Fri, 2021-03-26 at 22:46 +0530, Mukesh Rajpurohit wrote:
> I want to use encrypted oracle password in oracle_ fdw extention to connect to oracle.
> But seems this option is not available in oracle_fdw. I know we can use oracle wallet
> but in that too we have to configure plain text oracle password which we do not want to do.
> Please suggest if any other alternate.
I don't think you can use encrypted passwords with Oracle. Can you point me to
documentation if that is not true?
Anyway, if you don't want a password in the user mapping, the way to go is
external authentication. You could use the "secure" external password store,
which stores the encrypted password in a wallet, or you could use SSL
certificate authentication.
To use an external authentication method with oracle_fdw, specify an empty
user name. Also, watch out: I am not an expert with Oracle's licencing policies
(that would be a full time job), but you may need to pay extra if you want good
security.
Yours,
Laurenz Albe
--
Cybertec | https://www.cybertec-postgresql.com