Re: [SECURITY] Can one secure an ODBC DSN on Windows ?



Mary,

Thanks for your reply.

Actually, the app uses a DSN. It has several modules (exe files) that are called from the main program, which passes them information through parameters.

I wrote four driver programs that create all the necessary registry keys, then run the *real* modules, but I still face a problem with one of them since when it returns the main program gets confused because it has lost the DB connection.

Still hacking, seem to be close to solution

Thanks

Jacques


Mary Chipman [MSFT] a écrit :
Is there any way you can pass credentials to the app without using a
DSN? If not, one hack might be to create one at runtime, use it, then
delete it. I'd ask around on one of the Windows newsgroups for a safe
way to do this so you wouldn't end up corrupting the registry or have
other unintended consequences.

--Mary

On Thu, 07 Feb 2008 20:32:19 +0100, Jacques <tux7513@xxxxxxxxx> wrote:

Hi there,

What are the possibilities to make a DSN more secure than it is? For instance, all connection information is in clear in the registry (login, password, etc.), so any user can pick this information up and connect to the database accross the network and run queries.

This issue concerns an app which we do not have access to the source code (or I'd not be here to ask for help ;-) ).

Help and pointers would be greatly appreciated.

Jacques

(the email is functional).

.



Relevant Pages

  • Re: [SECURITY] Can one secure an ODBC DSN on Windows ?
    ... What are the possibilities to make a DSN more secure than it is? ... instance, all connection information is in clear in the registry (login, ... This issue concerns an app which we do not have access to the source ...
    (microsoft.public.data.odbc)
  • Re: [SECURITY] Can one secure an ODBC DSN on Windows ?
    ... I think that we will not store username and password in registry for DSN. ... instance, all connection information is in clear in the registry (login, ...
    (microsoft.public.data.odbc)
  • Re: opening an Access 2000 DB using ODBC...
    ... > app directly as opposed to referenceing the DSN of say an ODBC driver and ... Database connectivity has been a changing ... DSN files allows your app to not have to know much about 'how' ...
    (microsoft.public.vb.database)
  • Create a DSN programmatically with network options
    ... I would like to create a brand new system DSN, programmatically, ... Relying on this single registry entry is not enough since it only ... least for SQL Server). ... networking options cannot be set ...
    (microsoft.public.sqlserver.odbc)
  • Re: creating odbc dsn with c#
    ... add the appropiate registry entries for the DSN. ... Create a new DSN with your desired properties via the control panel ... uses ODBC DSNs to connect to multiple access databases. ...
    (microsoft.public.dotnet.languages.csharp)