topic Re: Scramble User Credentials in QlikView

Scramble User Credentials

Tue, 29 Dec 2015 21:17:39 GMT

Hi,

I have an existing Qlikview application in which Scramble User Credentials are used. The ODBC connection string is present with XUserId and XPassword like below:-

ODBC CONNECT TO XYZ (XUserId is ABcdeFGhIJk , XPassword is cfeabnajkguyaEaGcKAD);

I have lost the actual/real User ID and Password.

And now I need to change the credentials for which I need initial User ID and Password. Is it possible to extract them somehow?

Re: Scramble User Credentials

MarcoWedel — Tue, 29 Dec 2015 23:11:17 GMT

Hi,

you could ask the data base owner

regards

Marco

Re: Scramble User Credentials

Peter_Cammaert — Tue, 29 Dec 2015 23:31:49 GMT

If you need to use changed/new credentials, just generate a new CONNECT statement.

Otherwise, this sounds like a rather dubious question. To create a new login to a DBMS, you need sa access, not your old credentials.

Re: Scramble User Credentials

Siva_Sankar — Wed, 30 Dec 2015 05:38:03 GMT

As mentioned above, if you want to change the username and password, you should be the admin or owner of the db.

The encryption is not done by qlikview but odbc.

Re: Scramble User Credentials

Wed, 30 Dec 2015 05:50:12 GMT

Thanks Gentlemen for the quick response.

Allow me to put my question again. I need to change password and I don't know the UserID. Once I get to know the UserID, then I will contact DB Admin and they will provide me new password. So Is it possible to find the UserID somehow?

ODBC CONNECT TO [DSN;DBQ=SERVER_NAME] (XUserId is MQdPZXVMfKdGXSJOLE, XPassword is BXGPUVVMUbbcWUBOQLdETZYA);

Re: Scramble User Credentials

Siva_Sankar — Wed, 30 Dec 2015 09:43:43 GMT

Once I get to know the UserID, then I will contact DB Admin and they will provide me new password. So Is it possible to find the UserID somehow?

Not sure what you mean.. once you get to know the userID...then you will contact the DB Admin for the password..you can create the connection string.

From the scrambled or encrypted connection string..you can't get the user id and password.

Re: Scramble User Credentials

Peter_Cammaert — Wed, 30 Dec 2015 09:46:10 GMT

No idea. Information about this "scrambling" won't be easy to come by, as it would allow everyone to gain access to databases by simply reversing the process. It would defeat the purpose for which it was chosen: security (albeit not very strong).

Is the database used by many accounts? Can you still execute a reload using the old credentials? A database admin can log access to databases, and this trace includes account names.

Re: Scramble User Credentials

Clever_Anjos — Wed, 30 Dec 2015 11:13:35 GMT

You can contact your DB Admin while connecting with your application and ask him/her which user is beeing used to connect (sp_who if you´re using SQL Server)

Re: Scramble User Credentials

Wed, 30 Dec 2015 13:38:14 GMT

Thanks Again for the Ideas!!

I reload the application and at the same time I asked DBA to check queries from Qlikview. DBA caught the query and UserID too. Now I know the actual UserID from which connection was created.I have asked DBA to change the password.

After this I will create a new connection string and yes it will be scrambled again.

So there is no easy way to get original UserID if it is scrambled. Only DBA can help you.

Thanks Again!!