[MCOL-1175] CrossEngineSupport stores pw in free text Created: 2018-01-22  Updated: 2022-02-25  Resolved: 2021-07-14

Status: Closed
Project: MariaDB ColumnStore
Component/s: None
Affects Version/s: 1.1.2
Fix Version/s: 6.1.1

Type: New Feature Priority: Major
Reporter: Andy Allaway Assignee: Daniel Lee (Inactive)
Resolution: Fixed Votes: 0
Labels: Security

Issue Links:
Duplicate
is duplicated by MCOL-3963 Remove cross-engine user password as ... Closed
is duplicated by MCOL-4714 Columnstore cross_engine user can be ... Closed
Relates
relates to MCOL-4946 CEJ with encrypted password fails dec... Closed
Epic Link: ColumnStore Security Improvements
Sprint: 2021-1, 2021-2, 2021-3, 2021-4, 2021-5, 2021-6, 2021-7, 2021-8, 2021-9

 Description   

As per MCS KB one must store a free text pw in the Columnstore.xml:

<CrossEngineSupport>
<Host>127.0.0.1</Host>
<Port>3306</Port>
<User>mydbuser</User>
<Password>pwd</Password>
</CrossEngineSupport>

Please determine how to hash or otherwise.
Thanks!
Andy



 Comments   
Comment by Zdravelina Sokolovska (Inactive) [ 2018-01-24 ]

You may try with
sudo ${COLUMNSTORE_INSTALL_DIR}/mariadb/columnstore/bin/setConfig CrossEngineSupport User Your_User_Name
sudo ${COLUMNSTORE_INSTALL_DIR}l/mariadb/columnstore/bin/setConfig CrossEngineSupport Password "Your_Password"

Comment by Andy Allaway [ 2018-01-24 ]

Hi @winstone, that worked great, although, I still dont like entering free text into cmd prompt, is there some kind of way to make ./setConfig do something like:
./setConfig CrossEngineSupport Password -p
$please enter your password:
$******

Thanks,
Andy

Comment by Roman [ 2020-11-11 ]

I am curios if certificates could help with this issue?
There is a possibility to authenticate oneself against MDB using certificates not loging/password pair.

Comment by David Hall (Inactive) [ 2021-07-13 ]

QA: See the link https://mariadb.com/kb/en/mariadb-maxscale-25-encrypting-passwords/ for how to set up encryption.

Comment by Daniel Lee (Inactive) [ 2021-07-14 ]

Build verified: 6.1.1 (#2796)

Generated at Thu Feb 08 02:26:46 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.