search

postgresql-interfaces / psqlodbc

Other
16 stars 15 forks source link

encryption of password #74

Open benjaminpochat opened 4 days ago

benjaminpochat commented 4 days ago

When you click SAVE the password is stored as clear text in HKEY_CURRENT_USER\Software\ODBC\ODBC.INI\postgres\Password

Would it be possible to store the password encrypted ?

In my company, the use of postgre odbc client is compromised because passwords are stored as clear text in Windows registry. Our use case consists in individual authentication to postgre databases, thanks to ldap2pg tool, for BI purposes. As a consequence, individual passwords are used in odbc clients. Then, the fact that postgre odbc client stores these personnal passwords as clear text is a real security issue.

PS. : This issue follows this discussion on psql-odbc mailing list

davecramer commented 4 days ago

Don't see why not. Someone will have to write the code though. PR's are welcome