Unlock a world of possibilities! Login now and discover the exclusive benefits awaiting you.
Hi, I have a question. My understand is Talend stored password and such as encrypted data. However, what is there to prevent a person from creating another job without credentials, and copying over the folders that contains the encrypted password to another job? Is this an issue if they only have access to the exported standalone job where they only run the bat files?
Set the password filed with a context variable (password type), the default value will be stored as an encrypted data. eg:
password=enc\:routine.encryption.key.v1\:5cBz7N96rJ180ZT6tHREHAPg6d1/FU75sW69/+/1NmZdRg\=\=
When you export the job bat file, uncheck the 'Item' box, it will not contain the job items.
Without the the item files, others can only run the job and cannot import the job.
Hello,
Passwords in Talend Jobs and Context Variables are encrypted using a two way symmetrical approach. This means it can be decrypted. Also, the password are encrypted if the context variable is of type password. If the context variable is of type text, then it is stored as plain text. In context variables, we can leave password field blank, and design our jobs to load the password from a DB table or a properties file. The logic in Talend job can be implemented explicitly or implicitly through the project projects for jobs.
You can use any Vault or other systems to store passwords.
Best regards
Sabrina