Thread: Password encryption in oracle_fdw extention

Password encryption in oracle_fdw extention

From
Mukesh Rajpurohit
Date:
Hi,
         I want to use encrypted oracle password in oracle_ fdw extention to connect to oracle. But seems this option is not available in oracle_fdw. I know we can use oracle wallet but in that too we have to configure plain text oracle password which we do not want to do. Please suggest if any other alternate.

Thanks
Mukesh

Re: Password encryption in oracle_fdw extention

From
legrand legrand
Date:
Hello Mukesh,
Oracle_fdw is not maintained by this group, but by Laurenz Albe / Cybertec
at https://github.com/laurenz/oracle_fdw.
You will get a better feedback after posting there :0)
Regards
PAscal



--
Sent from: https://www.postgresql-archive.org/PostgreSQL-admin-f2076596.html



Re: Password encryption in oracle_fdw extention

From
Mukesh Rajpurohit
Date:
Thanks PAscal.

Thanks,
Mukesh


On Sat, Mar 27, 2021, 1:20 PM legrand legrand <legrand_legrand@hotmail.com> wrote:
Hello Mukesh,
Oracle_fdw is not maintained by this group, but by Laurenz Albe / Cybertec
at https://github.com/laurenz/oracle_fdw.
You will get a better feedback after posting there :0)
Regards
PAscal



--
Sent from: https://www.postgresql-archive.org/PostgreSQL-admin-f2076596.html


Re: Password encryption in oracle_fdw extention

From
Laurenz Albe
Date:
On Fri, 2021-03-26 at 22:46 +0530, Mukesh Rajpurohit wrote:
> I want to use encrypted oracle password in oracle_ fdw extention to connect to oracle.
>  But seems this option is not available in oracle_fdw. I know we can use oracle wallet
>  but in that too we have to configure plain text oracle password which we do not want to do.
>  Please suggest if any other alternate.

I don't think you can use encrypted passwords with Oracle. Can you point me to
documentation if that is not true?

Anyway, if you don't want a password in the user mapping, the way to go is
external authentication.  You could use the "secure" external password store,
which stores the encrypted password in a wallet, or you could use SSL
certificate authentication.

To use an external authentication method with oracle_fdw, specify an empty
user name.  Also, watch out: I am not an expert with Oracle's licencing policies
(that would be a full time job), but you may need to pay extra if you want good
security.

Yours,
Laurenz Albe
-- 
Cybertec | https://www.cybertec-postgresql.com




Re: Password encryption in oracle_fdw extention

From
Mukesh Rajpurohit
Date:
Thanks Laurenz.

Thanks,
Mukesh


On Sat, Mar 27, 2021, 3:47 PM Laurenz Albe <laurenz.albe@cybertec.at> wrote:
On Fri, 2021-03-26 at 22:46 +0530, Mukesh Rajpurohit wrote:
> I want to use encrypted oracle password in oracle_ fdw extention to connect to oracle.
>  But seems this option is not available in oracle_fdw. I know we can use oracle wallet
>  but in that too we have to configure plain text oracle password which we do not want to do.
>  Please suggest if any other alternate.

I don't think you can use encrypted passwords with Oracle. Can you point me to
documentation if that is not true?

Anyway, if you don't want a password in the user mapping, the way to go is
external authentication.  You could use the "secure" external password store,
which stores the encrypted password in a wallet, or you could use SSL
certificate authentication.

To use an external authentication method with oracle_fdw, specify an empty
user name.  Also, watch out: I am not an expert with Oracle's licencing policies
(that would be a full time job), but you may need to pay extra if you want good
security.

Yours,
Laurenz Albe
--
Cybertec | https://www.cybertec-postgresql.com