DB_DBA_PASSWORD security [WAS: Re: Autoconfiscation (Was Re: [rt-devel] 2.1.39: Makefile notes)]

[Jim Meyer]

Howdy!

I'm separating these two threads as I think they may go two very
different places.

On Fri, 2002-10-11 at 09:41, Jesse Vincent wrote:
> > In addition, DB_DBA and DB_DBA_PASSWORD are taken from config file, 
> > though I believe it's not the proper place to keep that data. 
> 
> To make the installation reasonably not painful, the DBA and
> DBA_Password need to be somewhere we can get to them as perl variables
> (rather than environment variables. we want to avoid passing them on the
> comandline)

How about at least using an encrypted PW? That's always bothered me,
too, just not so much I'd done anything about it.

Cheers!

--j
-- 
Jim Meyer, Geek At Large                                    purp at acm.org