Datadeploy passwords in OpenDeploy 7.1

Since OpenDeploy 7.1 the database passwords inside the database.xml must be either encoded or encrypted. A crucial fact the Autonomy has, well to put it nicely, forgotten to put in any documentation.

Strangely, the type of encoding/encryption is determined by the ‘strictAuthentication’ setting in odbase.xml (I really, really don’t see how these setting could ever be related. The strictAuthentication has to do with whether 2 opendeploy servers should do a strict or loose ip check to authenticate themselves.)

So if strictAuthentication is set to:
- no: then ENCODE your password using the clt iwodpasscoder (simple base64 encoding, no security whatsoever!)
- yes: then ENCRYPT your password using the clt iwodpassencrypter
(PBEWithMD5AndDES encryption with a password equal to the fq hostname, by default; not secure in any way!)
and enter the result of the clt in database.xml.

[And don't forget, if you ever change this setting to update this file again]

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Connecting to %s