Minnu's Blog on Informatica & Data warehouse concepts

Archives

Monday, June 9, 2008

Encryption of Password for pmcmd & pmrep

To encrypt the PowerCenter repository user password when using a command line tool (pmcmd or pmrep) do the following:

Windows
Create an environment variable for the PowerCenter Repository user (in this example "PMUSER"):

Go to Start > Settings > Control Panel > System.
Click the Advanced tab.
Click Environment Variables .
Under System variables click New .
Enter PMUSER for the Variable Name.
Enter Administrator for the Variable Value .
Click OK on each screen to exit.

Create the encrypted password for the user:

pmpasswd Administrator
This command will convert the string 'Administrator' to an encrypted value (example: ae456=GHY&3f7 ).

Create an environment variable for the PowerCenter Repository user password:

Go to Start > Settings > Control Panel > System.
Click the Advanced tab.
Click Environment Variables .
Under System variables click New .
Enter PMPASS for the Variable Name.
Enter encrypted_password for the Variable Value.
Click OK on each screen to exit.


UNIX

Create an environment variable for the PowerCenter Repository user:
setenv PMUSER Administrator
Create the encrypted password for the PowerCenter Repository user:
pmpasswd Administrator
Create an environment variable for the PowerCenter Repository user password.
In a UNIX C shell environment, type:
setenv PMPASS encrypted password
In a UNIX Bourne shell environment, type:
PMPASS = encrypted password
export PMPASS
Confirm the variable settings by typing the following:
env

The environment setting should have the following variables set:
PMUSER=Administrator
PMPASS= encrypted_password


Using the Encrypted Password with PMCMD
To start a workflow using pmcmd with these environment variables type the following:

pmcmd startworkflow -sv service -uv PMUSER -pv PMPASS workflow
NOTE:
Do NOT use a percent sign ('%') to denote the environment variables in the command.

Using the encrypted password with PMREP
To connect to a repository using pmrep with these environment variables type the following:

pmrep connect -r repository_name -d domain_name -n Administrator -X PMPASS
NOTE:
Do NOT use a dollar sign ('$') to denote the environment variables in the command.


Problem Description

When using the pmpasswd utility to encrypt a password, a different value is returned each time it is run. Does it matter which output value is used?

Solution


It does not matter which output value is used.
Any of the encrypted values will work.


The encrypted value represents the literal password that has been supplied during the encryption process. In the example below, all 3 encrypted values still represent the character string password .

Example:
./pmpasswd password
...
Encrypted string -->JA83KpIIEDJs<-- Will decrypt to -->password<-- ./pmpasswd password ... Encrypted string -->k%46&K$$~}%N<-- Will decrypt to -->password<-- ./pmpasswd password ... Encrypted string -->OF90RwPPLKQz<-- Will decrypt to -->password<-- Problem Description When using the pmpasswd utility to encrypt a password, a different value is returned each time it is run. Does it matter which output value is used? Solution It does not matter which output value is used. Any of the encrypted values will work. Applies To PowerCenter More Information The encrypted value represents the literal password that has been supplied during the encryption process. In the example below, all 3 encrypted values still represent the character string password . Example: ./pmpasswd password ... Encrypted string -->JA83KpIIEDJs<-- Will decrypt to -->password<-- ./pmpasswd password ... Encrypted string -->k%46&K$$~}%N<-- Will decrypt to -->password<-- ./pmpasswd password ... Encrypted string -->OF90RwPPLKQz<-- Will decrypt to -->password<-- HOW TO: Use PowerCenter infacmd with an encrypted password Solution To use an encrypted password, you have to set the variable INFA_DEFAULT_DOMAIN_PASSWORD with the encryption string generated by pmpasswd . Example You can encrypt the following default Administrator password: Informatica PowerMart Password Encryption Utility, 32-bit Copyright (c) Informatica Corporation 1996-2006 All Rights Reserved. Encrypted string -->0BN8DPRsu6ZSopP3SSm+Zf3fg8o8GkyG0IrjWjHIFLY=<-- Will decrypt to -->Administrator<--export variable to INFA_DEFAULT_DOMAIN_PASSWORD=0BN8DPRsu6ZSopP3SSm+Zf3fg8o8GkyG0IrjWjHIFLY=

You can the use this string by giving the following command:

infacmd.sh CreateFolder -dn Domain_nlsuse1 -un admin -fn newfolder -fp /

Where, instead of specifying the password, you omit the password.
The infacmd takes the INFA_DEFAULT_DOMAIN_PASSWORD by default if no password is specified.

19 comments:

Anonymous said...

Thanks. This helped me a lot

Anonymous said...

Hello Dear, are you genuinely visiting this website daily, if so then you will absolutely take fastidious knowledge.


Here is my weblog - Email Console

Anonymous said...

That is really interesting, You are an excessively professional blogger.
I've joined your rss feed and look forward to looking for more of your excellent post. Also, I have shared your site in my social networks

Here is my site visit website

Anonymous said...

I am extremely impressed along with your writing talents as neatly as with the structure to your blog.
Is this a paid theme or did you modify it your self?
Anyway stay up the nice high quality writing, it is uncommon to see a great weblog like this one today.
.

Feel free to visit my website HTTP://video3D.es/GeriLovel

Anonymous said...

Heya! I just wanted to ask if you ever have any issues with hackers?
My last blog (wordpress) was hacked and I ended up losing a
few months of hard work due to no backup. Do you have any methods
to stop hackers?

My web page http://pornharvest.com/index.php?q=Porn+Couple+Hot&f=a&p=a

Anonymous said...

What's up, I check your blog on a regular basis. Your story-telling style is witty, keep it up!

Visit my site http://pornharvest.Com/Index.php?M=2139371

Anonymous said...

I got this website from my pal who told me concerning this site and at the moment this time I
am browsing this site and reading very informative articles here.


Feel free to surf to my web-site Visit Website

Anonymous said...

I loved as much as you'll receive carried out right here. The sketch is attractive, your authored material stylish. nonetheless, you command get got an nervousness over that you wish be delivering the following. unwell unquestionably come further formerly again since exactly the same nearly very often inside case you shield this hike.

My page; http://premology.com/modules.php?name=Your_Account&op=userinfo&username=FranklinS

Anonymous said...

What's up, this weekend is fastidious designed for me, because this moment i am reading this impressive informative paragraph here at my home.

Look at my weblog: more

Anonymous said...

I feel that is one of the most vital information
for me. And i'm glad reading your article. But want to statement on few normal issues, The website style is ideal, the articles is in point of fact nice : D. Excellent activity, cheers

Here is my blog post ... click here

Anonymous said...

We're a group of volunteers and opening a new scheme in our community. Your web site offered us with valuable information to work on. You have done an impressive job and our whole community will be thankful to you.

My webpage ... http://trenonline.altervista.org/html/modules.php?name=Your_Account&op=userinfo&username=BelenSwen

Anonymous said...

Hi! Someone in my Facebook group shared this website with
us so I came to check it out. I'm definitely loving the information. I'm bookmarking
and will be tweeting this to my followers! Superb blog and terrific design.



My web blog - over here

Anonymous said...

Appreciate this post. Let me try it out.

my webpage; just click the following internet site

Anonymous said...

Having read this I believed it was extremely enlightening.
I appreciate you finding the time and energy to put this article
together. I once again find myself personally spending a lot of time
both reading and commenting. But so what, it was still worth it!


Also visit my blog post Home Page

Anonymous said...

Link exchange is nothing else but it is simply placing the other person's website link on your page at proper place and other person will also do same in support of you.

Feel free to visit my website - http://mydocshare.net/members/profile/23825/Andre6472

Anonymous said...

whoah this weblog is wonderful i really like reading
your posts. Keep up the good work! You understand,
many persons are hunting round for this info, you could aid them greatly.


Feel free to surf to my homepage planet live chat ()

Anonymous said...

I visit each day some websites and blogs to read articles,
however this weblog gives feature based articles.

Here is my web blog ... More Support []

Anonymous said...

electronic cigarettes, e cigarette, electronic cigarettes, electronic cigarette, e cigarette, smokeless cigarettes

Anonymous said...

A genuine word of thanks for your blog which helped me set up a command line option this morning.

And look, no link to some other spurious website!