Dsjob syntax for windows 2008 - without user and password

bono2 · Post by **bono2** » Sun Feb 19, 2012 7:58 am

Hi all,
because of Information security considerations, I should run DataStage jobs ,on windows 2008, with DSJOB command without user and password.
What is the DSJOB command syntax for that?

Thanks.

chulett · Post by **chulett** » Sun Feb 19, 2012 8:41 am

Look into the -f option to read the credential information from a file and thus not expose them on the command line.

bono2 · Post by **bono2** » Sun Feb 19, 2012 8:57 am

I've already thought about it.
This means that I need to expose the username and the password into a file, and that is forbidden by Information security policy.
more ideas?

Thanks!

chulett · Post by **chulett** » Sun Feb 19, 2012 9:34 am

There is no other way... and you shouldn't need to 'expose' the file at all, you should be able to lock it down in a manner that your security people approve. Have you specifically ask them?

ray.wurlod · Post by **ray.wurlod** » Sun Feb 19, 2012 11:39 am

When you get to version 8.7 you can strongly encrypt the password whether it's on the command line or in an authentication file.

chulett · Post by **chulett** » Sun Feb 19, 2012 3:34 pm

Good... that's how we are handling it with Informatica and the DoD at DISA.

ray.wurlod · Post by **ray.wurlod** » Sun Feb 19, 2012 11:42 pm

... and you can specify your own encryption algorithm/software. The default (AES-128) is sufficient for my needs, even within Defence.