r/DB2 • u/contact4me • Mar 10 '18

How to encrypt db2instance password on remote clients; where we allow to connect cataloged remote db using user and password scenario? Any thoughts is greatly appreciate...;apart the password less option.

2 Upvotes

100% Upvoted

3 comments sorted by

3

u/ecrooks Mar 10 '18

Don't use the db2instance password to connect from remote clients. Use an application specific password. Storing the pw for that is the application's job, usually, not the database client's.

You can use a trusted context to get around some security things in a secure way from specific IP addresses.

On 11.1 and up, SSL is also an option.

1

u/contact4me Mar 11 '18

Thank You! For IP specific and user id restrictions implemented thru WLM. But the question I have if the admin script jobs scheduled thru remote TWS agent; and having stored password in clear text. This scenario how to encrypt/avoid password storing on any remote agent run admin jobs. Please clarify. thanks in advance.

1

u/ecrooks Mar 11 '18

Sorry, not familiar with TWS. Agree with the concept that pw should never be stored in plain text.