processes the model in batch mode. The signon
sal_log
includes the Oracle user
ID
corpadm
and the password
my_pass
. The command to process the .mdl file for
model Xyzsales.mdl is as follows:
cogtr -c -s -mXyzsales.mdl -ksal_log=corpadm/my_pass
When you use this command, the User ID and password appear in plain text. See
the following topic for information about how to avoid plain text passwords.
Recommendation - Take Steps to Avoid a Plain Text Password
When Using the -k Option
If you use the -k option to pass user IDs and passwords to the Cognos
Transformer command line, you must take precautions to avoid a plain text
password.
Breaches can occur if unauthorized users are able to invoke the
ps
command or
can gain access to the detailed processing information in the log file.
To avoid plain text passwords, we recommend that you adopt one of the following
strategies:
v
Create a text file containing the
-k
option and one or more user IDs and
passwords. Store the file in a secure directory, and ensure that your command
line script can easily invoke it.
For example, you can create the Sal_iqd.txt file to contain two user IDs and
passwords:
-ksal_log=corpadm/my_pass -ksal_cube=corpis/bld_cube
You can then call this secured file from the command line. The following is a
UNIX example:
cogtr -c -s -mXyzsales.mdl ’cat Sal_id.txt’
v
Add MDL statements to the end of the .mdl model file that embed the user ID
and password information and update the signon information needed to log on
to the database. Then, run cogtr on UNIX using the
-m
option, specifying your
modified .mdl file.
For example, embed the authentication information using the following MDL
statements:
SignonUpdate "sal_cube" PromptForPassword False UserID "corpis" Password
"bld_cube"
v
Create a secured but temporary MDL script on the server to update the model
signon. Then, run cogtr on UNIX using the
-m
option, specifying your modified
.mdl file.
For example, create the following MDL script, for batch processing using the
-m
option:
OpenPY "Xyzsales.pyj"SignonUpdate "sal_cube" PromptForPassword False Password
"bld_cube"SavePY "Xyzsales.pyj"
For more information about security, see the
Administration and Security Guide
.
-l option
This option specifies the user authentication information for IBM Cognos. It
supplies the signon information needed to authenticate users in one or more
security namespaces.
The
-l
option provides an alternative to storing the information in the
Signons
list.
228
IBM Cognos Transformer Version 10.1.1: User Guide
Содержание Cognos
Страница 1: ...IBM Cognos Transformer Version 10 1 1 User Guide ...
Страница 106: ...92 IBM Cognos Transformer Version 10 1 1 User Guide ...
Страница 136: ...122 IBM Cognos Transformer Version 10 1 1 User Guide ...
Страница 160: ...146 IBM Cognos Transformer Version 10 1 1 User Guide ...
Страница 174: ...160 IBM Cognos Transformer Version 10 1 1 User Guide ...
Страница 326: ...312 IBM Cognos Transformer Version 10 1 1 User Guide ...
Страница 352: ...338 IBM Cognos Transformer Version 10 1 1 User Guide ...
Страница 394: ...380 IBM Cognos Transformer Version 10 1 1 User Guide ...
Страница 398: ...384 IBM Cognos Transformer Version 10 1 1 User Guide ...
Страница 411: ...Y year function 362 years between function 362 Index 397 ...