Re: [SECURITY] Can one secure an ODBC DSN on Windows ?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Is there any way you can pass credentials to the app without using a
DSN? If not, one hack might be to create one at runtime, use it, then
delete it. I'd ask around on one of the Windows newsgroups for a safe
way to do this so you wouldn't end up corrupting the registry or have
other unintended consequences.

--Mary

On Thu, 07 Feb 2008 20:32:19 +0100, Jacques <tux7513@xxxxxxxxx> wrote:

Hi there,

What are the possibilities to make a DSN more secure than it is? For
instance, all connection information is in clear in the registry (login,
password, etc.), so any user can pick this information up and connect to
the database accross the network and run queries.

This issue concerns an app which we do not have access to the source
code (or I'd not be here to ask for help ;-) ).

Help and pointers would be greatly appreciated.

Jacques

(the email is functional).
.

Relevant Pages

  • Re: [SECURITY] Can one secure an ODBC DSN on Windows ?
    ... the app uses a DSN. ... I wrote four driver programs that create all the necessary registry keys, then run the *real* modules, but I still face a problem with one of them since when it returns the main program gets confused because it has lost the DB connection. ... For instance, all connection information is in clear in the registry, so any user can pick this information up and connect to the database accross the network and run queries. ... This issue concerns an app which we do not have access to the source code ). ...
    (microsoft.public.data.odbc)
  • Re: [SECURITY] Can one secure an ODBC DSN on Windows ?
    ... I think that we will not store username and password in registry for DSN. ... instance, all connection information is in clear in the registry (login, ...
    (microsoft.public.data.odbc)
  • Re: Mobile Service & Auto Start
    ... The RegRestoreFile API is only supported by the object store-based registry. ... have never needed to write an app like this and I just figured ... So I have an exe that I start 5 min after I push a button. ...
    (microsoft.public.dotnet.framework.compactframework)
  • Re: opening an Access 2000 DB using ODBC...
    ... > app directly as opposed to referenceing the DSN of say an ODBC driver and ... Database connectivity has been a changing ... DSN files allows your app to not have to know much about 'how' ...
    (microsoft.public.vb.database)
  • Re: Ini File vs Registry
    ... How do you manage the settings? ... dollars in hacking the OS to introduce the concept of registry ... Hard to migrate app ... but increasingly desktop developers are fighting it out ...
    (microsoft.public.vc.mfc)